No biggee there.
I honestly haven't been able to get a handle on what is happening. I suspect something is scrambled rather than any kind of malware. You said that MBAM hung on DeliveryInformatin.osm. Osm stands for Open Street Map. These are xml files to run on GIS systems. I don't see any GIS programs on your system so I don't know why you'd have an .osm file. You have a multitude of Tasks running. Dozens which are related to Starcon II. A bunch of things have been modified in Msconfig.
Let's step back and go back to the beginning again. Please rerun FRST and be sure to check addition.txt so that you will get both logs.
Post both logs back here.
Addition.txt was highlighted but it did not output addition.txt this time.
Starcon II? Thats suprising, I installed Starcon 2 to run on dosbox about 5 years ago and havent touched it in just as long - you way theres processes related to it running? Thats really strange. Heres the result of the log - the only one I got.
Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Administrator (2016-03-17 00:12:58) Run:2
Running from C:\Users\Administrator\Desktop
Loaded Profiles: Administrator (Available Profiles: brentorama & kaoru & Administrator)
Boot Mode: Normal
==============================================
fixlist content:
*****************
start
CreateRestorePoint:
HKLM\...\Run: [] => [X]
SearchScopes: HKLM-x32 -> DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =
BHO-x32: —niftyƒc[ƒ‹ƒo[ BHO -> {B37B14B8-699F-4002-9254-D1AB00FD07B5} -> C:\Program Files (x86)\@nifty toolbar\nbho.dll => No File
Toolbar: HKLM-x32 - —niftyƒc[ƒ‹ƒo[ - {3DB1C21B-A7E0-4C3F-B39E-E00DD8792D90} - C:\Program Files (x86)\@nifty toolbar\ntoolbar.dll No File
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
S2 s24ctrl; C:\Program Files (x86)\Nifty\Security24\s24ctrl.exe [290704 2013-02-22] (NIFTY Corporation)
S2 S24VpnSvc; C:\Program Files (x86)\Common Files\Nifty Shared\S24Vpn\S24VpnSvc.exe [153520 2012-02-01] (Nifty Corporation)
U4 Mcfirdrpvbgw; no ImagePath
S3 Tosrfcom; no ImagePath
S0 clxe; System32\drivers\gxuhcjg.sys [X]
U3 aswMBR; \??\C:\Users\ADMINI~1\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\ADMINI~1\AppData\Local\Temp\aswVmm.sys [X]
CMD: ipconfig /flushdns
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
end
*****************
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B37B14B8-699F-4002-9254-D1AB00FD07B5} => key not found.
HKCR\Wow6432Node\CLSID\{B37B14B8-699F-4002-9254-D1AB00FD07B5} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{3DB1C21B-A7E0-4C3F-B39E-E00DD8792D90} => value not found.
HKCR\Wow6432Node\CLSID\{3DB1C21B-A7E0-4C3F-B39E-E00DD8792D90} => key not found.
HKCR\PROTOCOLS\Handler\livecall => key not found.
HKCR\CLSID\{828030A1-22C1-4009-854F-8E305202313F} => key not found.
HKCR\PROTOCOLS\Handler\msnim => key not found.
HKCR\CLSID\{828030A1-22C1-4009-854F-8E305202313F} => key not found.
s24ctrl => service not found.
S24VpnSvc => service not found.
Mcfirdrpvbgw => service not found.
Tosrfcom => service not found.
clxe => service not found.
aswMBR => service not found.
aswVmm => service not found.
========= ipconfig /flushdns =========
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========= End of CMD: =========
========= netsh int ipv4 reset =========
Reseting Global, OK!
Reseting Interface, OK!
Restart the computer to complete this action.
========= End of CMD: =========
========= netsh int ipv6 reset =========
There's no user specified settings to be reset.
========= End of CMD: =========
EmptyTemp: => 25.8 MB temporary data Removed.
The system needed a reboot.
==== End of Fixlog 00:13:54 ====
Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
This topic is locked
