Persistant problem :(

[Vince]

Something is not right...

I am running without the mentioned applications at start up. The process are still very high. 100+ when I have xammp running.

I also noticed that over a prolonged period my iexplorer*32 is still abnormally large.

I link my paranoia got the better of me and I have started to prepared myself for a reinstall. Its just such a pain as the servers are on this machine... trying to migrate to another PC beforehand is taking a while.

I did not try creating a new account. Ill give that a try before I put the windows disc in.

Thanks again

Vince

 

[Juliet]

Once more, let's try

Farbar Recovery Scan Tool (FRST) Scan

• Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
• Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
• Right-Click FRST.exe / FRST64.exe and select [img=http://i.imgur.com/AVOiBNU.jpg] Run as administrator to run the programme.
• Click Yes to the disclaimer.
• Ensure the Addition.txt box is checked.
• Click the Scan button and let the programme run.
• Upon completion, click OK, then OK on the Addition.txt pop up screen.
• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.
  

 

[Vince]

Thanks Juliet for looking again, and Happy new year to you

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2015 03
Ran by Vince and Mel (administrator) on MUP-PC on 03-01-2015 23:15:25
Running from C:\Users\Vince and Mel\Desktop
Loaded Profile: Vince and Mel (Available profiles: Vince and Mel)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() Z:\Program Files (x86)\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
(Samsung) C:\Program Files\SAMSUNG\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
(Samsung) C:\Program Files\SAMSUNG\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Copyright 2013 SAMSUNG) Z:\Program Files\samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) Z:\Program Files\samsung\Samsung Link\Samsung Link.exe
(TomTom) Z:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(VIA Technologies, Inc.) C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
(Copyright 2013 SAMSUNG) Z:\Program Files\samsung\Samsung Link\Samsung Link Tray Agent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Logitech Inc.) Z:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Apple Inc.) Z:\Program Files (x86)\iTunes\iTunesHelper.exe
() Z:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(Adobe Systems Incorporated) Z:\Program Files (x86)\Adobe\Photoshop Elements 4.0\apdproxy.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() Z:\xampp\xampp-control.exe
(Apache Software Foundation) Z:\xampp\apache\bin\httpd.exe
() Z:\xampp\mysql\bin\mysqld.exe
(Apache Software Foundation) Z:\xampp\apache\bin\httpd.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Xfire Inc.) C:\Program Files (x86)\Xfire\Xfire.exe
(Xfire Inc.) C:\Program Files (x86)\Xfire\Xfire.exe
() C:\Program Files (x86)\Xfire\xfire64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monito
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Samsung Link] => Z:\Program Files\samsung\Samsung Link\Samsung Link Tray Agent.exe [607584 2014-12-16] (Copyright 2013 SAMSUNG)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2465088 2014-11-17] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-12] (AVAST Software)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [MobileBroadband] => C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [69632 2012-07-31] (Vodafone)
HKLM-x32\...\Run: [LWS] => Z:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.)
HKLM-x32\...\Run: [iTunesHelper] => Z:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Photo Downloader] => Z:\Program Files (x86)\Adobe\Photoshop Elements 4.0\apdproxy.exe [57344 2005-09-09] (Adobe Systems Incorporated)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-11-13] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2733246317-1088891699-182487046-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2733246317-1088891699-182487046-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
HKU\S-1-5-21-2733246317-1088891699-182487046-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKU\S-1-5-21-2733246317-1088891699-182487046-1000 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{7796727F-F0FD-46AE-8DB4-48D883925147}: [NameServer] 10.203.128.1 10.203.128.1

FireFox:
========
FF ProfilePath: C:\Users\Vince and Mel\AppData\Roaming\Mozilla\Firefox\Profiles\6a4e2qpg.default
FF Homepage: hxxp://www.google.co.uk/
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> Z:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> Z:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2733246317-1088891699-182487046-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Vince and Mel\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-11-17]
FF StartMenuInternet: FIREFOX.EXE - z:\Program Files (x86)\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor4.0; Z:\Program Files (x86)\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe [102400 2005-09-09] () [File not signed]
R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-27] (Avast Software)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16384 2014-04-16] () [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-11-17] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-04-11] (Intel Corporation)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2008-12-06] (Hewlett-Packard Company) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-11-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19821376 2014-11-17] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-01] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2014-06-01] ()
R2 Samsung Link Service; Z:\Program Files\samsung\Samsung Link\Samsung Link.exe [616288 2014-12-16] (Copyright 2013 SAMSUNG)
R2 TomTomHOMEService; Z:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [93040 2014-06-05] (TomTom)
R2 VmbService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2012-07-31] (Vodafone) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21584 2013-02-19] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-27] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-27] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-27] ()
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96256 2013-07-05] (Advanced Micro Devices) [File not signed]
S3 etocdrv; C:\Windows\etocdrv.sys [14928 2013-04-16] (Giga-Byte Technology CO., LTD.)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2012-07-27] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-04-30] (Intel Corporation)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20800 2014-11-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [27136 2014-08-08] (The OpenVPN Project)
S3 ssudobex; C:\Windows\System32\DRIVERS\ssudobex.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [21584 2013-05-06] ()
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-27] (Avast Software)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2013-12-11] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [297984 2013-12-11] (VIA Technologies, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 GPU-Z; \??\C:\Users\VINCEA~1\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-03 23:15 - 2015-01-03 23:15 - 00018731 _____ () C:\Users\Vince and Mel\Desktop\FRST.txt
2015-01-03 23:11 - 2015-01-03 23:11 - 02123776 _____ (Farbar) C:\Users\Vince and Mel\Downloads\FRST64 (1).exe
2015-01-03 15:55 - 2015-01-03 15:55 - 67172832 _____ () C:\Users\Vince and Mel\Downloads\Ralink_PCIPCIe_RTxxxx.zip
2015-01-02 19:21 - 2015-01-02 19:22 - 00015872 ___SH () C:\Users\Public\Downloads\Thumbs.db
2015-01-01 13:34 - 2015-01-01 13:34 - 00000000 ____D () C:\Users\Vince and Mel\Documents\Updater
2014-12-28 22:33 - 2014-12-28 22:33 - 03053438 _____ () C:\Users\Vince and Mel\Downloads\firmware_update_vertex_plus_v3.55.zip
2014-12-28 22:33 - 2014-12-28 22:33 - 00000000 ____D () C:\Users\Vince and Mel\Downloads\firmware_update_vertex_plus_v3.55
2014-12-28 20:45 - 2014-12-28 20:45 - 05517627 _____ () C:\Users\Vince and Mel\Downloads\OCZToolbox_v4.9.0.634_win32.zip
2014-12-28 20:45 - 2014-12-28 20:45 - 00000000 ____D () C:\Users\Vince and Mel\Downloads\OCZToolbox_v4.9.0.634_win32
2014-12-28 20:43 - 2014-12-28 20:43 - 00000197 _____ () C:\Windows\system32\2014-12-28-20-43-25.003-AvastVBoxSVC.exe-4924.log
2014-12-26 23:46 - 2014-12-26 23:46 - 00000197 _____ () C:\Windows\system32\2014-12-26-23-46-01.000-AvastVBoxSVC.exe-5068.log
2014-12-26 23:44 - 2014-12-26 23:44 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-23 12:59 - 2014-12-23 12:59 - 00000000 ____D () C:\Users\Vince and Mel\Desktop\upto 19-12-14
2014-12-22 22:17 - 2014-12-22 22:17 - 00000197 _____ () C:\Windows\system32\2014-12-22-22-17-02.075-AvastVBoxSVC.exe-4544.log
2014-12-22 22:13 - 2014-12-22 22:13 - 00003204 _____ () C:\Windows\System32\Tasks\{9A59EF06-A305-4FD8-82F1-319A42A262F4}
2014-12-22 22:12 - 2014-12-22 22:12 - 00204496 _____ (Malwarebytes) C:\Users\Vince and Mel\Downloads\startuplite-setup-1.07.exe
2014-12-22 13:24 - 2014-12-22 13:24 - 00000197 _____ () C:\Windows\system32\2014-12-22-13-24-48.079-AvastVBoxSVC.exe-4516.log
2014-12-22 13:19 - 2014-12-22 13:20 - 00000197 _____ () C:\Windows\system32\2014-12-22-13-19-59.015-AvastVBoxSVC.exe-4524.log
2014-12-22 13:13 - 2014-12-22 13:13 - 00000197 _____ () C:\Windows\system32\2014-12-22-13-13-41.013-AvastVBoxSVC.exe-4132.log
2014-12-22 12:58 - 2014-12-22 12:58 - 00000197 _____ () C:\Windows\system32\2014-12-22-12-58-12.035-AvastVBoxSVC.exe-3740.log
2014-12-22 12:53 - 2014-12-22 12:53 - 00000197 _____ () C:\Windows\system32\2014-12-22-12-53-24.022-AvastVBoxSVC.exe-3240.log
2014-12-21 20:26 - 2014-12-21 20:26 - 00000197 _____ () C:\Windows\system32\2014-12-21-20-26-11.011-AvastVBoxSVC.exe-5116.log
2014-12-21 20:17 - 2014-12-21 20:17 - 00031200 _____ () C:\ComboFix.txt
2014-12-21 19:35 - 2014-12-21 20:17 - 00000000 ____D () C:\Qoobox
2014-12-21 19:35 - 2014-12-21 20:12 - 00000000 ____D () C:\Windows\erdnt
2014-12-21 19:35 - 2011-06-26 06:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-21 19:35 - 2010-11-07 17:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-21 19:35 - 2009-04-20 04:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-21 19:35 - 2000-08-31 00:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-21 19:35 - 2000-08-31 00:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-21 19:35 - 2000-08-31 00:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-21 19:35 - 2000-08-31 00:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-21 19:35 - 2000-08-31 00:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-21 19:33 - 2014-12-21 19:33 - 05601641 ____R (Swearware) C:\Users\Vince and Mel\Desktop\ComboFix.exe
2014-12-21 19:33 - 2014-12-21 19:33 - 05601641 _____ (Swearware) C:\Users\Vince and Mel\Downloads\ComboFix.exe
2014-12-20 19:07 - 2014-12-20 19:08 - 00000197 _____ () C:\Windows\system32\2014-12-20-19-07-58.061-AvastVBoxSVC.exe-4308.log
2014-12-20 19:06 - 2015-01-03 23:15 - 00000000 ____D () C:\FRST
2014-12-20 19:05 - 2015-01-03 23:11 - 02123776 _____ (Farbar) C:\Users\Vince and Mel\Desktop\FRST64.exe
2014-12-20 19:05 - 2014-12-20 19:05 - 02122240 _____ (Farbar) C:\Users\Vince and Mel\Downloads\FRST64.exe
2014-12-20 18:05 - 2014-12-20 18:05 - 00002733 _____ () C:\Users\Vince and Mel\Desktop\eset.txt
2014-12-20 14:03 - 2014-12-20 14:02 - 844474569 _____ () C:\Users\Public\Downloads\Frozen.mp4
2014-12-20 13:34 - 2014-12-20 13:09 - 1462391641 _____ () C:\Users\Public\Downloads\Disneys Frozen Sing Along Edition.mp4
2014-12-20 13:16 - 2014-12-20 13:16 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-19 21:48 - 2014-12-19 21:48 - 00000337 _____ () C:\Users\Vince and Mel\Desktop\office crack instructions.txt
2014-12-19 21:48 - 2014-12-19 21:47 - 37493716 _____ () C:\Users\Vince and Mel\Desktop\office Crack.zip
2014-12-19 21:47 - 2014-12-19 21:47 - 37493716 _____ () C:\Users\Vince and Mel\Downloads\office Crack.zip
2014-12-19 01:51 - 2014-12-19 01:51 - 00002713 _____ () C:\Users\Vince and Mel\Downloads\vincesvapes.sql
2014-12-18 23:58 - 2014-12-18 23:58 - 00000197 _____ () C:\Windows\system32\2014-12-18-23-58-25.091-AvastVBoxSVC.exe-4820.log
2014-12-18 23:02 - 2014-12-18 23:02 - 00000197 _____ () C:\Windows\system32\2014-12-18-23-02-19.010-AvastVBoxSVC.exe-4100.log
2014-12-18 22:56 - 2014-12-18 22:56 - 00017013 _____ () C:\Users\Vince and Mel\AppData\Local\09CDBAC5E16344d49C9B4E37DD5AF0D4.customer 62mmnew.lbx
2014-12-18 22:52 - 2014-12-18 22:52 - 00002159 _____ () C:\Users\Vince and Mel\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-12-18 22:52 - 2014-12-18 22:52 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-12-18 22:51 - 2014-12-18 22:51 - 09817304 _____ () C:\Users\Vince and Mel\Downloads\tweaking.com_windows_repair_aio_setup.exe
2014-12-18 22:51 - 2014-12-18 22:51 - 09817304 _____ () C:\Users\Vince and Mel\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-12-18 22:00 - 2014-12-18 22:00 - 04187592 _____ (Kaspersky Lab ZAO) C:\Users\Vince and Mel\Downloads\tdsskiller.exe
2014-12-18 22:00 - 2014-12-18 22:00 - 04187592 _____ (Kaspersky Lab ZAO) C:\Users\Vince and Mel\Desktop\tdsskiller.exe
2014-12-18 21:56 - 2014-12-18 21:57 - 00048335 _____ () C:\Users\Vince and Mel\Desktop\Result.txt
2014-12-18 21:56 - 2014-12-18 21:55 - 00401920 _____ (Farbar) C:\Users\Vince and Mel\Desktop\MiniToolBox.exe
2014-12-18 21:55 - 2014-12-18 21:55 - 00401920 _____ (Farbar) C:\Users\Vince and Mel\Downloads\MiniToolBox.exe
2014-12-18 21:54 - 2014-12-18 21:54 - 00002040 _____ () C:\Users\Vince and Mel\Desktop\Rkill.txt
2014-12-18 21:53 - 2014-12-18 21:52 - 01940728 _____ (Bleeping Computer, LLC) C:\Users\Vince and Mel\Desktop\rkill.exe
2014-12-18 21:52 - 2014-12-18 21:52 - 01940728 _____ (Bleeping Computer, LLC) C:\Users\Vince and Mel\Downloads\rkill.exe
2014-12-18 18:27 - 2014-12-18 18:27 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Local\pangu
2014-12-18 18:11 - 2014-12-18 18:11 - 44435904 _____ () C:\Users\Vince and Mel\Downloads\Pangu8_v1.2.1.exe
2014-12-17 19:41 - 2014-12-17 19:41 - 00000197 _____ () C:\Windows\system32\2014-12-17-19-41-14.097-AvastVBoxSVC.exe-4828.log
2014-12-17 18:08 - 2014-12-13 05:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-17 18:08 - 2014-12-13 03:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-17 00:03 - 2014-12-17 00:03 - 00000197 _____ () C:\Windows\system32\2014-12-17-00-03-43.015-AvastVBoxSVC.exe-3716.log
2014-12-16 23:59 - 2014-12-16 23:59 - 00000197 _____ () C:\Windows\system32\2014-12-16-23-59-31.014-AvastVBoxSVC.exe-3360.log
2014-12-16 23:47 - 2014-12-16 23:47 - 00000197 _____ () C:\Windows\system32\2014-12-16-23-47-13.010-AvastVBoxSVC.exe-2900.log
2014-12-16 18:28 - 2014-12-16 18:28 - 25690992 _____ (Microsoft Corporation) C:\Users\Vince and Mel\Downloads\Encoder_en.exe
2014-12-16 16:05 - 2014-12-16 16:05 - 00001319 _____ () C:\DelFix.txt
2014-12-16 16:04 - 2014-12-16 16:04 - 00709564 _____ () C:\Users\Vince and Mel\Downloads\delfix_10.8.exe
2014-12-15 22:57 - 2014-12-15 22:57 - 22428317 _____ () C:\Users\Vince and Mel\Downloads\EditedComputerArithmetic1.wma
2014-12-15 18:16 - 2014-12-15 18:16 - 00001576 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-12-15 18:16 - 2014-12-15 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-12-15 18:16 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-12-15 18:15 - 2014-12-15 18:16 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-12-15 18:15 - 2014-12-15 18:16 - 00000000 ____D () C:\Program Files\iTunes
2014-12-15 18:15 - 2014-12-15 18:15 - 00000000 ____D () C:\Program Files\iPod
2014-12-15 18:15 - 2014-12-15 18:15 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-12-15 18:14 - 2014-12-15 18:14 - 00000000 ____D () C:\Program Files\Bonjour
2014-12-15 18:14 - 2014-12-15 18:14 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-12-15 18:13 - 2014-12-15 18:14 - 122418480 _____ (Apple Inc.) C:\Users\Vince and Mel\Downloads\iTunes64Setup.exe
2014-12-14 10:41 - 2014-12-14 10:41 - 00256512 _____ () C:\Users\Vince and Mel\Downloads\co322-18.ppt
2014-12-14 10:41 - 2014-12-14 10:41 - 00199680 _____ () C:\Users\Vince and Mel\Downloads\co322-16.ppt
2014-12-14 10:41 - 2014-12-14 10:41 - 00159232 _____ () C:\Users\Vince and Mel\Downloads\co322-17.ppt
2014-12-14 10:40 - 2014-12-14 10:40 - 10994052 _____ () C:\Users\Vince and Mel\Downloads\set-theory-2.wma
2014-12-14 10:40 - 2014-12-14 10:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-12-14 10:39 - 2014-12-14 10:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-12-14 10:39 - 2014-12-14 10:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-12-13 16:26 - 2014-12-13 16:26 - 25870493 _____ () C:\Users\Vince and Mel\Downloads\Computer Arithmetic 2.wma
2014-12-13 15:32 - 2014-12-13 15:32 - 01761792 _____ () C:\Users\Vince and Mel\Downloads\co322-05.ppt
2014-12-13 15:32 - 2014-12-13 15:32 - 00736256 _____ () C:\Users\Vince and Mel\Downloads\co322-06.ppt
2014-12-11 16:50 - 2014-12-11 16:50 - 00000197 _____ () C:\Windows\system32\2014-12-11-16-50-50.099-AvastVBoxSVC.exe-4788.log
2014-12-11 03:24 - 2014-12-11 03:24 - 00000197 _____ () C:\Windows\system32\2014-12-11-03-24-18.068-AvastVBoxSVC.exe-4068.log
2014-12-11 03:15 - 2014-12-11 03:15 - 00017020 _____ () C:\Users\Vince and Mel\AppData\Local\DF1698E91ECF4238960C82433993773A.customer 62mmnew.lbx
2014-12-11 03:01 - 2014-10-18 02:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-11 03:01 - 2014-10-18 01:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 12:23 - 2014-12-10 12:23 - 00000000 ____D () C:\Users\Vince and Mel\Downloads\crib-sheet
2014-12-10 07:56 - 2014-11-27 01:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 07:56 - 2014-11-27 01:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 07:56 - 2014-11-22 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 07:56 - 2014-11-22 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 07:56 - 2014-11-22 02:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 07:56 - 2014-11-22 02:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 07:56 - 2014-11-22 02:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 07:56 - 2014-11-22 02:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 07:56 - 2014-11-22 02:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 07:56 - 2014-11-22 02:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 07:56 - 2014-11-22 02:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 07:56 - 2014-11-22 02:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 07:56 - 2014-11-22 02:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 07:56 - 2014-11-22 02:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 07:56 - 2014-11-22 02:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 07:56 - 2014-11-22 02:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 07:56 - 2014-11-22 02:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 07:56 - 2014-11-22 02:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 07:56 - 2014-11-22 02:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 07:56 - 2014-11-22 02:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 07:56 - 2014-11-22 02:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 07:56 - 2014-11-22 02:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 07:56 - 2014-11-22 01:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 07:56 - 2014-11-22 01:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 07:56 - 2014-11-22 01:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 07:56 - 2014-11-22 01:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 07:56 - 2014-11-22 01:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 07:56 - 2014-11-22 01:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 07:56 - 2014-11-22 01:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 07:56 - 2014-11-22 01:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 07:56 - 2014-11-22 01:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 07:56 - 2014-11-22 01:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 07:56 - 2014-11-22 01:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 07:56 - 2014-11-22 01:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 07:56 - 2014-11-22 01:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 07:56 - 2014-11-22 01:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 07:56 - 2014-11-22 01:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 07:56 - 2014-11-22 01:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 07:56 - 2014-11-22 01:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 07:56 - 2014-11-22 01:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 07:56 - 2014-11-22 01:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 07:56 - 2014-11-22 01:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 07:56 - 2014-11-22 01:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 07:56 - 2014-11-22 00:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 07:56 - 2014-11-22 00:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 07:56 - 2014-11-11 03:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 07:56 - 2014-11-11 02:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 07:56 - 2014-11-11 01:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 07:55 - 2014-11-22 03:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 07:55 - 2014-11-22 02:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 07:55 - 2014-11-22 02:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 07:55 - 2014-11-22 02:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 07:55 - 2014-11-22 02:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 07:55 - 2014-11-22 02:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 07:55 - 2014-11-22 02:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 07:55 - 2014-11-22 01:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 07:55 - 2014-11-22 01:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 07:55 - 2014-11-08 03:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 07:55 - 2014-11-08 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 07:55 - 2014-10-30 02:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 07:55 - 2014-10-30 01:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 07:55 - 2014-10-03 02:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 07:55 - 2014-10-03 02:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 07:55 - 2014-10-03 02:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 07:55 - 2014-10-03 02:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 07:55 - 2014-10-03 02:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 07:55 - 2014-10-03 01:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 07:55 - 2014-10-03 01:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 07:55 - 2014-10-03 01:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 07:55 - 2014-10-03 01:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 07:55 - 2014-10-03 01:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 07:55 - 2013-04-09 23:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-12-10 07:55 - 2013-04-02 22:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-12-10 01:10 - 2014-12-10 01:10 - 00000247 _____ () C:\Windows\system32\2014-12-10-01-10-21.031-aswFe.exe-10676.log
2014-12-10 01:08 - 2014-12-10 01:10 - 00000247 _____ () C:\Windows\system32\2014-12-10-01-08-26.087-aswFe.exe-19124.log
2014-12-10 01:08 - 2014-12-10 01:08 - 00000197 _____ () C:\Windows\system32\2014-12-10-01-08-24.051-AvastVBoxSVC.exe-18256.log
2014-12-10 00:25 - 2014-12-10 00:26 - 00000897 _____ () C:\Users\Vince and Mel\Desktop\[000608].jpg - Shortcut.lnk
2014-12-10 00:09 - 2014-12-10 00:09 - 00000197 _____ () C:\Windows\system32\2014-12-10-00-09-07.013-AvastVBoxSVC.exe-5112.log
2014-12-09 23:43 - 2014-12-09 23:43 - 01718947 _____ () C:\Users\Vince and Mel\Downloads\emailed Final Presentation.zip
2014-12-09 16:35 - 2014-07-29 10:31 - 00017014 _____ () C:\Users\Public\Downloads\customer 62mmnew.lbx
2014-12-09 16:19 - 2014-12-09 16:19 - 00000197 _____ () C:\Windows\system32\2014-12-09-16-19-15.045-AvastVBoxSVC.exe-4836.log
2014-12-09 16:01 - 2014-12-09 16:01 - 00017028 _____ () C:\Users\Vince and Mel\AppData\Local\8746ADC3ACC2441cA14472B19534556B.customer 62mmnew.lbx
2014-12-07 23:37 - 2014-12-07 23:37 - 00000197 _____ () C:\Windows\system32\2014-12-07-23-37-53.073-AvastVBoxSVC.exe-3000.log
2014-12-07 23:28 - 2014-12-07 23:28 - 00000197 _____ () C:\Windows\system32\2014-12-07-23-28-57.028-AvastVBoxSVC.exe-4744.log
2014-12-06 17:19 - 2014-12-06 17:19 - 00000197 _____ () C:\Windows\system32\2014-12-06-17-19-34.021-AvastVBoxSVC.exe-4568.log
2014-12-05 22:10 - 2014-12-05 22:10 - 00000197 _____ () C:\Windows\system32\2014-12-05-22-10-21.069-AvastVBoxSVC.exe-4276.log
2014-12-05 22:02 - 2014-12-05 22:03 - 00000197 _____ () C:\Windows\system32\2014-12-05-22-02-56.063-AvastVBoxSVC.exe-4496.log
2014-12-04 18:13 - 2014-12-04 18:13 - 00000197 _____ () C:\Windows\system32\2014-12-04-18-13-08.056-AvastVBoxSVC.exe-5100.log
2014-12-04 17:39 - 2014-12-04 17:40 - 00000197 _____ () C:\Windows\system32\2014-12-04-17-39-39.039-AvastVBoxSVC.exe-5124.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-03 22:48 - 2013-11-17 10:40 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\Skype
2015-01-03 22:40 - 2014-11-25 20:54 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-03 22:22 - 2014-10-06 16:05 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-03 22:19 - 2014-11-23 15:14 - 02082536 _____ () C:\Windows\WindowsUpdate.log
2015-01-03 19:17 - 2014-06-11 21:59 - 00000000 ____D () C:\Users\Vince and Mel\Desktop\temp
2015-01-03 18:54 - 2013-11-17 10:49 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\Xfire
2015-01-03 17:35 - 2014-10-06 16:05 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-03 16:19 - 2009-07-14 04:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-03 16:19 - 2009-07-14 04:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-03 12:54 - 2014-04-29 23:11 - 00000600 _____ () C:\Users\Vince and Mel\AppData\Roaming\winscp.rnd
2015-01-03 11:34 - 2014-04-20 08:09 - 02238464 ___SH () C:\Users\Vince and Mel\Desktop\Thumbs.db
2015-01-02 21:55 - 2014-10-06 16:07 - 00000000 ___RD () C:\Users\Vince and Mel\Google Drive
2015-01-01 20:14 - 2009-07-14 05:13 - 00787758 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-01 20:13 - 2014-11-23 15:12 - 00010386 _____ () C:\Windows\setupact.log
2015-01-01 13:54 - 2013-11-17 11:15 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\vlc
2014-12-28 20:41 - 2014-11-07 16:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-28 20:41 - 2013-11-17 03:55 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-12-28 20:41 - 2009-07-14 05:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-26 23:48 - 2013-11-25 10:35 - 00000000 ____D () C:\Users\Vince and Mel\Desktop\internet protection
2014-12-22 22:13 - 2013-11-19 00:05 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\uTorrent
2014-12-22 18:37 - 2014-04-27 18:42 - 00000600 _____ () C:\Users\Vince and Mel\AppData\Local\PUTTY.RND
2014-12-22 13:22 - 2013-11-17 10:55 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-21 20:29 - 2014-06-09 15:25 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-12-21 20:23 - 2014-11-27 19:11 - 00011080 _____ () C:\Windows\PFRO.log
2014-12-21 20:02 - 2009-07-14 02:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-20 13:49 - 2014-01-31 19:02 - 00000000 ___RD () C:\Users\Vince and Mel\Virtual Machines
2014-12-18 23:56 - 2013-11-17 03:12 - 00126976 _____ () C:\Users\Vince and Mel\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-18 23:56 - 2011-04-12 08:28 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-12-18 23:56 - 2009-07-14 04:45 - 00590592 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-18 23:55 - 2011-04-12 08:28 - 00000000 ____D () C:\Windows\CSC
2014-12-18 23:51 - 2009-07-14 02:34 - 00000514 _____ () C:\Windows\win.ini
2014-12-18 22:52 - 2014-11-29 00:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-12-18 18:11 - 2014-06-14 01:12 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-18 16:30 - 2014-06-09 15:50 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\Apple Computer
2014-12-18 14:07 - 2014-07-11 21:11 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-12-18 14:07 - 2014-07-11 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-12-17 19:45 - 2014-06-09 15:25 - 00003826 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1402327553
2014-12-16 23:50 - 2013-11-17 03:55 - 00167077 _____ () C:\Windows\SysWOW64\bios.ini
2014-12-16 23:50 - 2013-11-17 03:55 - 00000000 ____D () C:\Windows\SysWOW64\GBT_DL_OBJ
2014-12-16 18:25 - 2014-01-13 07:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte
2014-12-16 18:25 - 2013-11-17 03:19 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE
2014-12-16 16:05 - 2014-11-30 16:42 - 00000000 ____D () C:\Windows\ERUNT
2014-12-15 21:46 - 2014-10-10 20:42 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-15 21:46 - 2013-11-17 10:40 - 00000000 ____D () C:\ProgramData\Skype
2014-12-15 18:16 - 2014-06-09 15:50 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Local\Apple Computer
2014-12-15 18:15 - 2014-06-09 15:28 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-12-15 18:15 - 2014-06-09 15:27 - 00000000 ____D () C:\ProgramData\Apple
2014-12-13 19:44 - 2013-11-17 22:50 - 00001334 _____ () C:\Users\Vince and Mel\Desktop\ebay text.txt
2014-12-13 17:16 - 2014-06-14 01:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-13 09:42 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-13 03:00 - 2014-02-09 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-13 03:00 - 2013-11-18 16:14 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-11 03:48 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\rescache
2014-12-11 03:25 - 2013-11-17 23:20 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-11 03:20 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-11 03:04 - 2013-12-17 00:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-11 03:02 - 2013-12-17 00:06 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 12:40 - 2014-11-25 20:54 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-10 12:40 - 2014-03-06 17:48 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-10 12:40 - 2014-03-06 17:48 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-10 00:22 - 2013-12-20 21:22 - 00000000 ____D () C:\Users\Vince and Mel\Documents\My Karaoke
2014-12-10 00:18 - 2013-11-17 02:50 - 00000000 ____D () C:\Users\Vince and Mel
2014-12-10 00:17 - 2014-02-21 20:40 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Local\Citrix
2014-12-10 00:05 - 2013-12-02 17:53 - 00000000 ___RD () C:\Users\Vince and Mel\Dropbox
2014-12-09 20:33 - 2013-12-02 17:53 - 00001039 _____ () C:\Users\Vince and Mel\Desktop\Dropbox.lnk
2014-12-09 20:33 - 2013-12-02 17:50 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-09 20:33 - 2013-12-02 17:49 - 00000000 ____D () C:\Users\Vince and Mel\AppData\Roaming\Dropbox
2014-12-09 18:38 - 2014-01-18 21:54 - 00007633 _____ () C:\Users\Vince and Mel\AppData\Local\Resmon.ResmonCfg
2014-12-09 16:22 - 2014-08-19 14:18 - 00000000 ____D () C:\Users\Public\Downloads\Camera
2014-12-05 08:42 - 2009-07-14 03:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-25 00:21

==================== End Of Log ============================


Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2015 03
Ran by Vince and Mel at 2015-01-03 23:15:44
Running from C:\Users\Vince and Mel\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS B13.0910.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)
@BIOS B13.0910.1 (x32 Version: 3.00.0000 - GIGABYTE) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Photoshop Elements 4.0 (HKLM-x32\...\Adobe Photoshop Elements 4) (Version: 4.0 - Adobe Systems Inc.)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung)
APP Center (HKLM-x32\...\InstallShield_{F3D47276-0E35-42CF-A677-B45118470E21}) (Version: 1.14.1205 - Gigabyte)
APP Center (x32 Version: 1.14.1205 - Gigabyte) Hidden
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
BlueJ (HKLM-x32\...\{7D66971C-652B-4065-A6B1-B3EE313C254B}) (Version: 3.1.0 - BlueJ Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother P-touch Address Book 1.1 (HKLM-x32\...\{B2023017-DEE4-44F7-8A71-CA6084BF534C}) (Version: 1.1.2201 - Brother Industries, Ltd.)
Brother P-touch Editor 5.1 (HKLM-x32\...\{39270390-A851-4E4B-94A9-D5C468216ED3}) (Version: 5.1.0120 - Brother Industries, Ltd.)
Brother P-touch Update Software (HKLM-x32\...\{34A9C5A8-9BB6-4C57-A0D9-1DAAE175009E}) (Version: 1.0.0070 - Brother Industries, Ltd.)
Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.7 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.3.6.0 - Canon Inc.)
Canon MG3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3100_series) (Version: - Canon Inc.)
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)
Combined Community Codec Pack 2014-04-20 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2014.04.20.0 - CCCP Project)
ConvertXtoDVD 3.1.0.18 (HKLM-x32\...\{76C24F39-B161-498F-BD8B-C64789812D13}_is1) (Version: 3.1.0.18 - )
CPUID CPU-Z 1.68 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Crystal Reports Basic Runtime for Visual Studio 2008 (x64) (HKLM\...\{2BFA9B05-7418-4EDE-A6FC-620427BAAAA3}) (Version: 10.5.0.0 - Business Objects)
Dropbox (HKU\S-1-5-21-2733246317-1088891699-182487046-1000\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
DVD Decrypter (Remove Only) (HKLM-x32\...\DVD Decrypter) (Version: - )
DVDFab 9.1.1.5 (07/12/2013) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.)
EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.00.0002 - GIGABYTE)
EasyTune (x32 Version: 1.00.0002 - GIGABYTE) Hidden
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - )
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
EVGA Precision X 4.2.0 (HKLM-x32\...\PrecisionX) (Version: 4.2.0 - EVGA Corporation)
EZSetupN B13.0628.1 (HKLM-x32\...\InstallShield_{9EAB60B6-70FE-4EC7-8DF4-54773E4EAC05}) (Version: 1.00.0000 - GIGABYTE)
EZSetupN B13.0628.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Greenfoot (HKLM-x32\...\{8C838B70-3A71-41E8-91A6-4ADCF2E483D0}) (Version: 2.3.0 - Greenfoot Team)
Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version: - Valve)
Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve)
HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - )
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3186 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
Karaoke Builder Player 3.0 (HKLM-x32\...\Karaoke Builder Player 3.0) (Version: - )
K-Lite Codec Pack 10.6.0 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.0 - )
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Left 4 Dead 2 Beta (HKLM-x32\...\Steam App 223530) (Version: - )
LightScribe System Software 1.17.90.1 (HKLM-x32\...\{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}) (Version: 1.17.90.1 - LightScribe)
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
MakeMKV v1.8.8 (HKLM-x32\...\MakeMKV) (Version: v1.8.8 - GuinpinSoft inc)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Expression Encoder 4 (HKLM-x32\...\Encoder_4.0.3205.0) (Version: 4.0.3205.0 - Microsoft Corporation)
Microsoft Expression Encoder 4 Screen Capture Codec (HKLM-x32\...\{F9EC30D1-F688-4708-9850-CB5120074AAA}) (Version: 4.0.3205.0 - Microsoft Corporation)
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server Management Objects Collection (HKLM\...\{5677B005-B609-4B5B-9F3C-132BB085D3CF}) (Version: 9.00.1399.06 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{79BF7CB8-1E09-489F-9547-DB3EE8EA3F16}) (Version: 9.00.4035.00 - Microsoft Corporation)
Microsoft Visio Professional 2013 (HKLM-x32\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 en-GB)) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyDriveConnect 3.3.0.1502 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1502 - TomTom)
NetBeans IDE 7.4 (HKLM\...\nbi-nb-base-7.4.0.0.201310111528) (Version: 7.4 - NetBeans.org)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.2 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.75 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.75 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.4.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4.1 - NVIDIA Corporation)
NVIDIA Graphics Driver 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.75 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
ON_OFF Charge 2 B13.0506.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)
ON_OFF Charge 2 B13.0506.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Opera Stable 26.0.1656.60 (HKLM-x32\...\Opera 26.0.1656.60) (Version: 26.0.1656.60 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Plants vs. Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Platform (x32 Version: 1.40 - VIA Technologies, Inc.) Hidden
Power CD+G Burner (HKLM-x32\...\{BC21E1FA-BD9C-4351-8EA3-4EC377B1E439}_is1) (Version: - Doblon)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
PuTTY version 0.63 (HKLM-x32\...\PuTTY_is1) (Version: 0.63 - Simon Tatham)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6849 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
RivaTuner Statistics Server 5.1.1 (HKLM-x32\...\RTSS) (Version: 5.1.1 - Unwinder)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Link 2.0.0.1412161531 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1412161531 - Copyright 2013 SAMSUNG)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.15.0 - SAMSUNG Electronics Co., Ltd.)
Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{8D2E04ED-3350-4ECE-9D6E-3BC9A9A93A47}) (Version: - Microsoft)
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.69 - NVIDIA Corporation) Hidden
Sid Meier's Railroads! (HKLM-x32\...\{EE3FBD3C-782E-4A90-9507-0ECFE1FECCE4}) (Version: 1.10 - Firaxis Games)
Sid Meier's Railroads! (x32 Version: 1.00 - Firaxis Games) Hidden
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion)
Source SDK (HKLM-x32\...\Steam App 211) (Version: - Valve)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version: - Valve)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 1.10.1 - Tweaking.com)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.10.2 - Tweaking.com)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.40 - VIA Technologies, Inc.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 2.1.1 (HKLM-x32\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Vodafone Mobile Broadband (HKLM-x32\...\{6C29152D-3FF9-43B2-84E4-9B35FC0BF5C2}) (Version: 10.3.209.40724 - Vodafone)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )
WinSCP 5.5.3 (HKLM-x32\...\winscp3_is1) (Version: 5.5.3 - Martin Prikryl)
XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-4 - Bitnami)
Xfire (HKLM-x32\...\Xfire) (Version: - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2733246317-1088891699-182487046-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Vince and Mel\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

16-12-2014 16:05:24 End of disinfection
16-12-2014 18:25:26 Removed APP Center
17-12-2014 19:10:01 Windows Update
17-12-2014 19:38:56 Windows Update
18-12-2014 22:53:14 Tweaking.com - Windows Repair
20-12-2014 13:09:21 Installed Microsoft Fix it 50195
24-12-2014 03:00:48 Windows Update
31-12-2014 00:08:17 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 02:34 - 2014-12-21 20:02 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1147C0B8-A893-4F52-9DFC-9B132A50073C} - System32\Tasks\Opera scheduled Autoupdate 1402327553 => C:\Program Files (x86)\Opera\launcher.exe [2014-12-17] (Opera Software)
Task: {2EC483CA-C91D-4EA3-AE82-43234445A0B1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {45192D5B-903B-416F-A0B0-6B8CDDF1CD2C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {5FBD3219-801B-4573-A748-B42F46F74190} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {61CD3F6F-83DD-4CDC-89EF-A9261EC74E44} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {6BD3B797-EE60-4632-BD9A-B053B040D2B4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {9491727D-5D95-4FAC-94E1-00D9E3DAC5E1} - System32\Tasks\{7F945BF6-B532-4131-A52B-5B321F910A7F} => pcalua.exe -a "Z:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "Z:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2" -c /register
Task: {974CCBDD-8A98-48CF-B708-A59F29A0A1F6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-06] (Google Inc.)
Task: {B4F44501-AF88-49BF-AFE3-681962AC2FD3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-06] (Google Inc.)
Task: {B7C3B0AF-15AC-43CB-A381-2F95846B74D1} - System32\Tasks\{1F3DDEC8-FCB5-4CFF-8EF7-1E3908F6EBFA} => Z:\Program Files (x86)\odbg110\OLLYDBG.EXE [2004-05-23] ()
Task: {C0E97ABA-2FE6-407E-89B2-8A7D4BDCAEA3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {C6F25EBD-F2C6-4B21-8A28-43A9927BBFE5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-11-27] (AVAST Software)
Task: {F71B6C08-54C0-4C87-9221-440486C548B0} - System32\Tasks\{9A59EF06-A305-4FD8-82F1-319A42A262F4} => pcalua.exe -a "C:\Users\Vince and Mel\Downloads\startuplite-setup-1.07.exe" -d "C:\Users\Vince and Mel\Downloads"
Task: {F77B9417-F56D-42B7-BD90-7397A3069391} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-11-07 16:38 - 2014-11-12 21:56 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-10-14 23:27 - 2014-10-14 23:27 - 08897696 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2012-06-18 15:24 - 2012-06-18 15:24 - 00222720 _____ () z:\Program Files (x86)\Notepad++\NppShell_05.dll
2005-09-09 03:24 - 2005-09-09 03:24 - 00102400 _____ () Z:\Program Files (x86)\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
2014-04-16 16:09 - 2014-04-16 16:09 - 00016384 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
2013-11-17 14:31 - 2014-06-01 18:55 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-11-17 14:31 - 2014-06-01 18:55 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-11 21:10 - 2014-12-16 15:31 - 00025088 _____ () Z:\Program Files\samsung\Samsung Link\JniSys.dll
2014-07-11 21:10 - 2014-12-16 15:31 - 02633728 _____ () Z:\Program Files\samsung\Samsung Link\scone_proxy.dll
2014-07-11 21:10 - 2014-12-16 15:31 - 02540544 _____ () Z:\Program Files\samsung\Samsung Link\scone_stub.dll
2013-12-21 10:25 - 2013-12-21 10:25 - 00036864 _____ () C:\Program Files\SAMSUNG\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll
2013-12-21 10:26 - 2013-12-21 10:26 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll
2013-12-21 10:27 - 2013-12-21 10:27 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll
2013-10-22 08:52 - 2013-10-22 08:52 - 00030720 _____ () C:\Windows\system32\MediaDB64.dll
2013-10-22 08:52 - 2013-10-22 08:52 - 00908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
2013-12-21 10:27 - 2013-12-21 10:27 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll
2013-07-23 18:19 - 2013-07-23 18:19 - 00049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 18:19 - 2013-07-23 18:19 - 00016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-07-23 18:19 - 2013-07-23 18:19 - 00058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-07-23 18:19 - 2013-07-23 18:19 - 00299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2014-07-11 21:10 - 2014-12-16 15:31 - 00049664 _____ () Z:\Program Files\samsung\Samsung Link\JniIO.dll
2014-12-20 19:08 - 2014-12-20 19:08 - 00669696 _____ () C:\Windows\Temp\sqlite-3.7.151-amd64-sqlitejdbc.dll
2014-11-27 19:09 - 2014-11-27 19:09 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-11-27 19:09 - 2014-11-27 19:09 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-11-20 17:27 - 2014-11-20 17:27 - 01243968 _____ () C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
2013-11-17 03:04 - 2013-04-11 22:50 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 00264040 _____ () Z:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2014-06-13 21:02 - 2013-06-17 09:42 - 02569216 _____ () Z:\xampp\xampp-control.exe
2014-06-13 21:02 - 2014-01-14 15:54 - 10966528 _____ () z:\xampp\mysql\bin\mysqld.exe
2013-03-21 04:10 - 2013-03-21 04:10 - 00258944 _____ () C:\Program Files (x86)\Xfire\xfire64.exe
2014-12-28 19:46 - 2014-12-28 19:46 - 02908160 _____ () C:\Program Files\AVAST Software\Avast\defs\14122801\algo.dll
2014-11-27 19:09 - 2014-11-27 19:09 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2015-01-03 16:55 - 2015-01-03 16:55 - 02909696 _____ () C:\Program Files\AVAST Software\Avast\defs\15010301\algo.dll
2013-12-11 15:46 - 2013-12-11 15:46 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll
2013-10-22 08:48 - 2013-10-22 08:48 - 00707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll
2013-10-24 15:53 - 2013-10-24 15:53 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll
2013-12-11 15:46 - 2013-12-11 15:46 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll
2013-12-11 15:46 - 2013-12-11 15:46 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll
2013-10-25 18:49 - 2013-10-25 18:49 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll
2013-12-11 15:45 - 2013-12-11 15:45 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll
2013-10-25 18:53 - 2013-10-25 18:53 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll
2013-10-25 18:53 - 2013-10-25 18:53 - 01033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll
2013-12-11 15:45 - 2013-12-11 15:45 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll
2013-10-25 18:53 - 2013-10-25 18:53 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll
2013-10-25 18:48 - 2013-10-25 18:48 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll
2013-10-24 15:53 - 2013-10-24 15:53 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll
2013-04-19 15:38 - 2013-04-19 15:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll
2013-07-23 18:18 - 2013-07-23 18:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll
2013-07-23 18:18 - 2013-07-23 18:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll
2013-07-23 18:18 - 2013-07-23 18:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll
2013-07-23 18:18 - 2013-07-23 18:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll
2013-02-14 18:42 - 2013-02-14 18:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-11-27 08:03 - 2012-11-27 08:03 - 00102400 _____ () C:\Program Files (x86)\Gigabyte\AppCenter\ycc.DLL
2014-01-22 13:53 - 2014-01-22 13:53 - 01607680 _____ () C:\Program Files (x86)\GIGABYTE\AppCenter\BDR_info.dll
2012-11-27 08:03 - 2012-11-27 08:03 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\AppCenter\ycc.dll
2014-11-27 19:09 - 2014-11-27 19:09 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 02144104 _____ () Z:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 07955304 _____ () Z:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 00341352 _____ () Z:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 00028008 _____ () Z:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 00127336 _____ () Z:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2012-09-12 23:39 - 2012-09-12 23:39 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2014-06-13 21:02 - 2014-03-11 20:01 - 00217600 _____ () z:\xampp\apache\bin\pcre.dll
2014-06-13 21:02 - 2014-04-08 23:21 - 00128512 _____ () Z:\xampp\php\libpq.dll
2014-06-13 21:02 - 2014-03-11 20:01 - 00217600 _____ () Z:\xampp\apache\bin\pcre.dll
2013-11-17 03:01 - 2013-04-11 15:30 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-01-02 19:52 - 2015-01-02 19:52 - 00098816 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32api.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00110080 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\pywintypes27.dll
2015-01-02 19:52 - 2015-01-02 19:52 - 00364544 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\pythoncom27.dll
2015-01-02 19:52 - 2015-01-02 19:52 - 00045568 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\_socket.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 01160704 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\_ssl.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00320512 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32com.shell.shell.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00713216 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\_hashlib.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 01175040 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._core_.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00805888 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._gdi_.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00811008 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._windows_.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 01062400 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._controls_.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00735232 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._misc_.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00128512 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\_elementtree.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00127488 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\pyexpat.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00557056 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\pysqlite2._sqlite.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00087552 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\_ctypes.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00119808 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32file.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00108544 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32security.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00007168 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\hashobjs_ext.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00167936 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32gui.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00018432 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32event.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00038912 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32inet.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00011264 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32crypt.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00070656 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._html2.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00027136 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\_multiprocessing.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00035840 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32process.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00686080 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\unicodedata.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00122368 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._wizard.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00024064 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32pipe.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00025600 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32pdh.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00525640 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\windows._lib_cacheinvalidation.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00010240 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\select.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00017408 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32profile.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00022528 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\win32ts.pyd
2015-01-02 19:52 - 2015-01-02 19:52 - 00078336 _____ () C:\Users\Vince and Mel\AppData\Local\Temp\_MEI375282\wx._animate.pyd
2013-11-11 18:48 - 2013-11-11 18:48 - 00113664 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 02342912 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00246784 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00047616 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00050688 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00079360 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 02029568 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00100352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00258560 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00076288 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00046592 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00061440 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libsmooth_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00465920 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libhttplive_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00719872 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libdash_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00114688 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00039936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00136704 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 01449472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00300032 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 01283584 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00056320 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00048128 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00350720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00144896 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 01723904 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00037888 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00044032 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00044032 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 11749888 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00049152 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00043008 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00066048 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00057856 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00042496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00049664 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00047104 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00085504 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00192512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00091136 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00068096 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
2013-11-11 18:48 - 2013-11-11 18:48 - 00077824 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00292864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00040448 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 01297920 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00359424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00209408 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00049152 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libg711_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 01385472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00130560 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00183808 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00073728 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 01518592 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
2013-11-11 18:49 - 2013-11-11 18:49 - 00046080 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: !SASCORE => 2

========================= Accounts: ==========================

Administrator (S-1-5-21-2733246317-1088891699-182487046-500 - Administrator - Disabled)
Guest (S-1-5-21-2733246317-1088891699-182487046-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-2733246317-1088891699-182487046-1006 - Limited - Enabled)
Vince and Mel (S-1-5-21-2733246317-1088891699-182487046-1000 - Administrator - Enabled) => C:\Users\Vince and Mel

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/03/2015 07:20:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: PhotoshopElementsEditor.exe, version: 4.0.0.0, time stamp: 0x43215edf
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7
Exception code: 0xc0000005
Fault offset: 0x000332b0
Faulting process id: 0x9074
Faulting application start time: 0xPhotoshopElementsEditor.exe0
Faulting application path: PhotoshopElementsEditor.exe1
Faulting module path: PhotoshopElementsEditor.exe2
Report Id: PhotoshopElementsEditor.exe3

Error: (01/02/2015 02:05:19 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/31/2014 00:12:57 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/29/2014 11:51:56 PM) (Source: gadjservice) (EventID: 0) (User: )
Description: gadjservice Get time form NTP server fail.

Error: (12/29/2014 01:19:32 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/28/2014 11:41:35 PM) (Source: gadjservice) (EventID: 0) (User: )
Description: gadjservice Get time form NTP server fail.

Error: (12/28/2014 10:20:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program OCZToolbox.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 25a8

Start Time: 01d022df401110f1

Termination Time: 4678

Application Path: C:\Users\Vince and Mel\Downloads\OCZToolbox_v4.9.0.634_win32\OCZToolbox_v4.9.0.634_win32\OCZToolbox.exe

Report Id: c0d8d32a-8edf-11e4-ba75-94de80c6bd4b

Error: (12/27/2014 01:26:18 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/24/2014 11:51:16 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (12/23/2014 03:49:58 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (01/03/2015 08:02:33 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (01/03/2015 08:02:33 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (01/03/2015 08:02:33 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (01/03/2015 08:02:33 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (01/03/2015 08:02:33 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (01/03/2015 08:02:33 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (01/03/2015 07:49:11 PM) (Source: DCOM) (EventID: 10016) (User: Mup-PC)
Description: application-specificLocalActivation{B77C4C36-0154-4C52-AB49-FAA03837E47F}{EA022610-0748-4C24-B229-6C507EBDFDBB}Mup-PCVince and MelS-1-5-21-2733246317-1088891699-182487046-1000LocalHost (Using LRPC)

Error: (01/03/2015 07:46:56 PM) (Source: DCOM) (EventID: 10016) (User: Mup-PC)
Description: application-specificLocalActivation{B77C4C36-0154-4C52-AB49-FAA03837E47F}{EA022610-0748-4C24-B229-6C507EBDFDBB}Mup-PCVince and MelS-1-5-21-2733246317-1088891699-182487046-1000LocalHost (Using LRPC)

Error: (01/03/2015 07:46:30 PM) (Source: DCOM) (EventID: 10016) (User: Mup-PC)
Description: application-specificLocalActivation{B77C4C36-0154-4C52-AB49-FAA03837E47F}{EA022610-0748-4C24-B229-6C507EBDFDBB}Mup-PCVince and MelS-1-5-21-2733246317-1088891699-182487046-1000LocalHost (Using LRPC)

Error: (01/03/2015 07:45:52 PM) (Source: DCOM) (EventID: 10016) (User: Mup-PC)
Description: application-specificLocalActivation{B77C4C36-0154-4C52-AB49-FAA03837E47F}{EA022610-0748-4C24-B229-6C507EBDFDBB}Mup-PCVince and MelS-1-5-21-2733246317-1088891699-182487046-1000LocalHost (Using LRPC)


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2014-12-21 19:58:22.032
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-12-21 19:58:22.017
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Percentage of memory in use: 32%
Total physical RAM: 16269.49 MB
Available physical RAM: 11008.87 MB
Total Pagefile: 20363.67 MB
Available Pagefile: 14405.57 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:15.58 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (Pictures and Films) (Fixed) (Total:292.97 GB) (Free:37.77 GB) NTFS
Drive g: (Software) (Fixed) (Total:390.62 GB) (Free:201.06 GB) NTFS
Drive z: (Installs) (Fixed) (Total:488.28 GB) (Free:282.6 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 336F127B)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 3D937C41)

Partition: GPT Partition Type.

==================== End Of Log ============================

 

[Juliet]

Thanks Juliet for looking again, and Happy new year to you

Thank you!

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2733246317-1088891699-182487046-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKU\S-1-5-21-2733246317-1088891699-182487046-1000 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
EmptyTemp:
End

Open FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

~~~~~~~~~~~~~~

Download CKScanner by askey127 from HERE
Important - Save it to your desktop.
Doubleclick CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify the file saved.
Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

 

[Vince]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-01-2015 03
Ran by Vince and Mel at 2015-01-04 09:30:11 Run:2
Running from C:\Users\Vince and Mel\Desktop
Loaded Profile: Vince and Mel (Available profiles: Vince and Mel)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2733246317-1088891699-182487046-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKU\S-1-5-21-2733246317-1088891699-182487046-1000 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-2733246317-1088891699-182487046-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully.
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key not found.
HKU\S-1-5-21-2733246317-1088891699-182487046-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} => value deleted successfully.
HKCR\CLSID\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{7530BFB8-7293-4D34-9923-61A11451AFC5}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{7530BFB8-7293-4D34-9923-61A11451AFC5}" => Key deleted successfully.
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) => Error: No automatic fix found for this entry.
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle) => Error: No automatic fix found for this entry.
EmptyTemp: => Removed 2.3 GB temporary data.


The system needed a reboot.

==== End of Fixlog 09:30:22 ====

 

[Vince]

CKScanner 2.4 - Additional Security Risks - These are not necessarily bad
c:\program files (x86)\activision\call of duty 4 - modern warfare\raw\fx\smoke\jeepride_crack_smoke.efx
c:\program files (x86)\activision\call of duty 4 - modern warfare\raw\materials\ch_asphaltcracks01
c:\program files (x86)\activision\call of duty 4 - modern warfare\raw\materials\ch_asphaltcracks01_dec
c:\program files (x86)\activision\call of duty 4 - modern warfare\raw\materials\me_decal_cracks_01
c:\program files (x86)\activision\call of duty 4 - modern warfare\raw\material_properties\ch_asphaltcracks01
c:\program files (x86)\activision\call of duty 4 - modern warfare\raw\material_properties\ch_asphaltcracks01_dec
c:\program files (x86)\activision\call of duty 4 - modern warfare\raw\material_properties\me_decal_cracks_01
scanner sequence 3.FA.11.KMAAM0
----- EOF -----

 

[Juliet]

I had an error here, the below outdated Java updates need to be removed through add/remove programs list.
Java 7 Update 71
Java SE Development Kit 7 Update 45

Almost afraid to ask but, how's the computer now?

 

[Vince]

thought I would leave it a few hours to see what the Iexplorer does.

It crept up to 300,000+ with 3 tabs. I closed them all (except this one) and its currently 200,000+ with 97 processes.

I have already got the servers working on the other PC (albeit slow), and have just backed what I hope to be all essential data.

I made use of and offer at... dare I say it... PC world on another SSD.
http://www.pcworld.co.uk/gbuk/compo...ies-2-5-internal-ssd-240-gb-10100705-pdt.html

Ill use the 120 in this one to upgrade the slower PC downstairs.

Ill report back when I'm back up again.

 

[Juliet]

:bigthumb:

 

[Juliet]

still need help?

 

[Juliet]

Glad we could help.

Since this issue appears resolved ... this Topic is closed.

 

[tashi]

Thank you Juliet.