What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Downloaded backup files from corrupted computer// Failed to load user

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by [removed] at 4:57:10.54 on 03/03/2013
Internet Explorer: 9.10.9200.16521 BrowserJavaVersion: 10.9.2
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4010.1396 [GMT -8:00]
.
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe
C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe
C:\windows\system32\conhost.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\system32\svchost.exe -k apphost
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Avatron\Air Display\AVTHelper.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\windows\system32\CISVC.EXE
C:\Users\Nic.Bird\x86\ekrn.exe
C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
C:\windows\system32\svchost.exe -k ftpsvc
C:\windows\System32\svchost.exe -k LPDService
C:\Program Files\CyberLink\Shared files\RichVideo64.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
C:\windows\System32\svchost.exe -k secsvcs
C:\windows\system32\printfilterpipelinesvc.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Users\Nic.Bird\egui.exe
C:\Program Files (x86)\Stronghold Online Backup\ClientMessenger.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe
C:\Program Files (x86)\iTunesHelper.exe
C:\windows\system32\SearchIndexer.exe
C:\Users\Birdie admin2\AppData\Local\Stronghold Online Backup\SMessaging.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\windows\system32\DllHost.exe
C:\windows\system32\svchost.exe -k SDRSVC
C:\Program Files\Microsoft Security Client\msseces.exe
C:\windows\system32\wuauclt.exe
C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
C:\Users\Birdie admin2\AppData\Local\Stronghold Online Backup\sosuploadagent.exe
C:\Users\Birdie admin2\AppData\Local\Stronghold Online Backup\vsscopy.exe
C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
C:\windows\system32\taskhost.exe
C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe
C:\windows\system32\UI0Detect.exe
C:\windows\System32\svchost.exe -k swprv
C:\windows\system32\msiexec.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\explorer.exe
C:\windows\system32\prevhost.exe
C:\Users\Birdie admin2\Downloads\tdsskiller.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\windows\explorer.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Birdie admin2\Downloads\dds.scr
C:\windows\system32\conhost.exe
C:\windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com
uSearch Bar = Preserve
uStart Page = https://www.google.com/
uInternet Settings,ProxyOverride = 192.168.*.*;*.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: EgisPBIE Class: {7b51ccbe-4af9-44a6-bdab-d7f7e4c4e6f9} - C:\Program Files (x86)\EgisTec BioExcess\EgisPBIE.dll
BHO: {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - No File
TB: {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
uRun: [AdobeBridge]
mRun: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
mRun: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
mRun: [PLTSR] "C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe"
mRun: [VitaKeyTSR] C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe /run
mRun: [SMessaging] C:\Users\Birdie admin2\AppData\Local\Stronghold Online Backup\SMessaging.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: NoResolveTrack = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} - hxxp://support.lenovo.com/Resources/Lenovo/AutoDetect/Lenovo_AutoDetect2.cab
DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} - hxxps://www.icloud.com/system/iCloud.cab
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} -
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: C:\PROGRA~2\DEFEND~1\DEFEND~1.0\adialhk.dll,C:\PROGRA~2\DEFEND~1\DEFEND~1.0\r3hook.dll
LSA: Notification Packages = scecli EgisPwdFilter EgisDSPwdFilter EgisPLPwdFilter EgisPwdFilter EgisDSPwdFilter EgisPwdFilter EgisDSPwdFilter
mASetup: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level –multi-install –chrome
BHO-X64: EgisPBIE Class: {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} - C:\Program Files (x86)\EgisTec BioExcess\x64\EgisPBIE.dll
BHO-X64: EgisPBIE - No File
TB-X64: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
TB-X64: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
TB-X64: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
mRun-x64: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
mRun-x64: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
mRun-x64: [egui] "C:\Users\Nic.Bird\egui.exe" /hide /waitservice
AppInit_DLLs-X64: C:\PROGRA~2\DEFEND~1\DEFEND~1.0\x64\adialhk.dll,C:\PROGRA~2\DEFEND~1\DEFEND~1.0\x64\r3hook.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\BIRDIE~2\AppData\Roaming\Mozilla\Firefox\Profiles\ncbiyoia.default\
FF - prefs.js: browser.startup.homepage - hxxp://howtogeek.com/
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
FF - plugin: C:\Program Files (x86)\Mozilla Plugins\npitunes.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll
FF - plugin: C:\windows\SysWOW64\npDeployJava1.dll
FF - plugin: C:\windows\SysWOW64\npmproxy.dll
FF - plugin: C:\windows\SysWOW64\npwmsdrm.dll
.
—- FIREFOX POLICIES —-
FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2012-10-15 63328]
R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2012-9-21 225120]
R0 epfwwfp;epfwwfp;C:\Windows\System32\drivers\epfwwfp.sys [2012-12-21 57904]
R0 fbfmon;fbfmon;C:\Windows\System32\drivers\fbfmon.sys [2012-2-24 57952]
R0 LHDmgr;LHDmgr;C:\Windows\System32\drivers\LhdX64.sys [2012-2-24 39008]
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2012-8-30 228768]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2012-12-4 53488]
R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2012-9-21 200032]
R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2013-1-5 39768]
R1 BPntDrv;BPntDrv;C:\Windows\System32\drivers\BPntDrv.sys [2012-2-24 13408]
R1 eamonm;eamonm;C:\Windows\System32\drivers\eamonm.sys [2012-12-21 213416]
R1 EgisTecFF;EgisTecFF;C:\Windows\System32\drivers\EgisTecFF.sys [2012-2-24 55880]
R1 EpfwLWF;Epfw NDIS LightWeight Filter;C:\Windows\System32\drivers\EpfwLWF.sys [2012-12-21 59440]
R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys [2012-2-24 22912]
R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys [2012-2-24 20328]
R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys [2012-2-24 62584]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 EgisTec Service Help;EgisTec Service Help;C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe [2010-10-22 327024]
R2 EgisTec Service;EgisTec Service;C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe [2010-12-13 703856]
R2 EgisTec Ticket Service;EgisTec Ticket Service;C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2010-12-13 650096]
R2 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-10-25 57856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\Windows\System32\drivers\LMIRfsDriver.sys [2012-10-29 72216]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver;C:\Windows\System32\drivers\AcpiVpc.sys [2010-10-25 29792]
R3 AirDisplay;Air Display Support;C:\Windows\System32\drivers\AVVideoCard.sys [2012-9-24 15808]
R3 AirDisplayMirror;Air Display Mirror Support;C:\Windows\System32\drivers\AVVideoCardMirror.sys [2012-9-24 15808]
R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\System32\drivers\clwvd.sys [2012-11-10 40432]
R3 FPSensor;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys);C:\Windows\System32\drivers\FPSensor.sys [2011-9-15 36656]
R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2011-4-14 317440]
R3 MEIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2011-1-10 56344]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\rtsuvstor.sys [2012-2-24 307304]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-6-10 539240]
R3 S6000KNT;S6000KNT_WebCam Driver;C:\Windows\System32\drivers\S6000KNT.sys [2012-2-24 3293272]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
R4 AVTHelper;AVTHelper;C:\Program Files\Avatron\Air Display\AVTHelper.exe [2012-9-24 216000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-1-6 251248]
S3 Arctosa;Arctosa Keyboard;C:\Windows\System32\drivers\Arctosa.sys [2012-11-23 19840]
S3 cphs;Intel® Content Protection HECI Service;C:\Windows\SysWOW64\IntelCpHeciSvc.exe [2012-12-14 277616]
S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\System32\drivers\netaapl64.sys [2012-3-26 22528]
S3 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-3-20 128456]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-10-27 19456]
S3 Revoflt;Revoflt;C:\Windows\System32\drivers\revoflt.sys [2013-3-3 31800]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-10-27 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2012-10-27 30208]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-9-28 53760]
S3 WinRing0_1_2_0;WinRing0_1_2_0;C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [2012-11-13 14544]
S3 WSDPrintDevice;WSD Print Support via UMB;C:\Windows\System32\drivers\WSDPrint.sys [2009-7-13 23040]
S3 WSDScan;WSD Scan Support via UMB;C:\Windows\System32\drivers\WSDScan.sys [2009-7-13 25088]
S3 wsvd;wsvd;C:\Windows\System32\drivers\wsvd.sys [2009-7-21 121840]
S4 ADExchange;ArcSoft Exchange Service;C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [2011-9-16 39528]
S4 avgwd;AVG WatchDog;"C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe" –> C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [?]
S4 BingDesktopUpdate;Bing Desktop Update service;C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [2012-11-22 166424]
.
=============== Created Last 30 ================
.
2013-03-03 11:41:45 76232 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{E13C2272-CB40-42C6-840C-54BB9D8E5059}\offreg.dll
2013-03-03 10:18:06 31800 —-a-w- C:\windows\System32\drivers\revoflt.sys
2013-03-03 10:18:06 ——– d—–w- C:\PROGRA~3\VS Revo Group
2013-03-03 06:14:54 ——– d—–w- C:\Program Files (x86)\ESET
2013-03-03 04:38:26 ——– d—–w- C:\windows\TempCC549D54-1F11-60C7-9C29-9DB2210BB584-Signatures
2013-03-03 04:36:37 ——– d—–w- C:\windows\TempEAA06877-29B0-711F-AEE6-4E5E42587155-Signatures
2013-03-03 04:36:27 ——– dc—-w- C:\097a14aa5f2440b4bdbe
2013-03-03 04:12:50 ——– d—–w- C:\windows\Temp0DC166B0-3CA9-1D2B-C050-EF06B8D4C3B7-Signatures
2013-03-02 01:54:17 9162192 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{E13C2272-CB40-42C6-840C-54BB9D8E5059}\mpengine.dll
2013-03-01 19:41:17 ——– d—–w- C:\Program Files\CCleaner
2013-03-01 05:35:12 ——– d—–w- C:\Program Files (x86)\Common Files\MSSoap
2013-03-01 05:35:09 ——– d—–w- C:\Users\BIRDIE~2\AppData\Local\Stronghold Online Backup
2013-03-01 05:34:55 ——– d-sh–w- C:\windows\SysWow64\AI_RecycleBin
2013-03-01 05:34:53 ——– d—–w- C:\PROGRA~3\Stronghold Online Backup
2013-03-01 05:34:52 ——– d—–w- C:\Program Files (x86)\Stronghold Online Backup
2013-03-01 05:34:44 ——– dcsh–w- C:\AI_RecycleBin
2013-02-28 03:27:56 ——– d—–w- C:\Program Files\Microsoft Games
2013-02-27 20:31:49 ——– d—–w- C:\windows\Temp67669FE4-7C81-C8C4-F5F5-14D7377232F8-Signatures
2013-02-27 12:22:38 ——– d—–w- C:\windows\TempDDB28F23-88B8-96DE-7F64-9C775AF02A2C-Signatures
2013-02-27 12:19:57 ——– d—–w- C:\windows\Temp1328DAA5-70E5-2D92-291F-58EC148C82C9-Signatures
2013-02-27 12:11:17 ——– d—–w- C:\windows\Temp60587645-FDAB-7E96-D127-86FEA122BE9D-Signatures
2013-02-27 11:02:58 2776576 —-a-w- C:\windows\System32\msmpeg2vdec.dll
2013-02-21 19:38:51 ——– d—–w- C:\Users\BIRDIE~2\AppData\Roaming\ESET
2013-02-21 19:38:51 ——– d—–w- C:\Users\BIRDIE~2\AppData\Local\ESET
2013-02-21 18:49:41 ——– d—–w- C:\Program Files (x86)\plugins
2013-02-21 00:57:37 ——– d—–w- C:\PROGRA~3\avg8
2013-02-19 23:39:56 ——– d—–w- C:\Program Files (x86)\Mozilla Maintenance Service
2013-02-18 18:28:22 ——– d—–w- C:\Program Files (x86)\Mozilla Plugins
2013-02-18 18:28:22 ——– d—–w- C:\Program Files (x86)\iTunesHelper.Resources
2013-02-18 18:27:45 ——– d—–w- C:\Program Files\iTunes
2013-02-18 18:27:45 ——– d—–w- C:\Program Files\iPod
2013-02-18 18:27:45 ——– d—–w- C:\Program Files (x86)\iTunes.Resources
2013-02-18 18:27:45 ——– d—–w- C:\Program Files (x86)\CD Configuration
2013-02-18 18:27:45 ——– d—–w- C:\PROGRA~3\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-02-18 16:41:07 ——– d—–w- C:\windows\TempC3C0A661-4D9C-00B2-D00E-3A0E9DE85086-Signatures
2013-02-18 16:37:28 ——– d—–w- C:\windows\TempE9067CC2-DA49-0E71-CA24-6F3F3FBC50C4-Signatures
2013-02-18 15:12:01 ——– d—–w- C:\PROGRA~3\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2013-02-18 15:09:01 ——– d—–w- C:\Users\Birdie admin2\ContactsKit
2013-02-18 14:31:39 ——– d—–r- C:\Users\Birdie admin2\Dropbox
2013-02-18 12:52:14 ——– dc—-w- C:\adobeTemp
2013-02-15 04:29:48 ——– d—–w- C:\windows\Downloaded Program Files
2013-02-15 03:27:43 ——– d—–w- C:\windows\Temp3FF42FEC-73CE-7694-417A-11DDD81E7D48-Signatures
2013-02-15 03:18:14 ——– d—–w- C:\windows\TempF1E3B6D7-A7CE-D992-C872-A53ADB4C5D52-Signatures
2013-02-15 03:13:49 ——– d—–w- C:\Program Files (x86)\NortonInstaller
2013-02-15 03:13:49 ——– d—–w- C:\PROGRA~3\NortonInstaller
2013-02-15 03:07:03 ——– d—–w- C:\PROGRA~3\IObit
2013-02-15 03:01:37 ——– d—–w- C:\windows\TempE7F9EEF1-4659-EFB9-BD6E-7730CB15B233-Signatures
2013-02-15 02:59:44 ——– d—–w- C:\windows\Temp2BD5414D-4963-7583-C161-E6FB8BF08589-Signatures
2013-02-15 02:58:48 ——– d—–w- C:\PROGRA~3\MFAData
2013-02-15 02:58:36 ——– d-sh–w- C:\windows\Installer
2013-02-13 12:18:31 ——– d–h–w- C:\Program Files (x86)\Common Files\EAInstaller
2013-02-13 12:16:57 2475352 —-a-w- C:\windows\System32\D3DX9_42.dll
2013-02-13 12:15:59 403304 —-a-w- C:\windows\System32\xactengine2_7.dll
2013-02-13 01:24:14 5553512 —-a-w- C:\windows\System32\ntoskrnl.exe
2013-02-13 01:24:13 3967848 —-a-w- C:\windows\SysWow64\ntkrnlpa.exe
2013-02-13 01:24:12 3913064 —-a-w- C:\windows\SysWow64\ntoskrnl.exe
2013-02-13 01:23:57 3153408 —-a-w- C:\windows\System32\win32k.sys
2013-02-13 01:23:55 7680 —-a-w- C:\windows\SysWow64\instnm.exe
2013-02-13 01:23:55 5120 —-a-w- C:\windows\SysWow64\wow32.dll
2013-02-13 01:23:55 25600 —-a-w- C:\windows\SysWow64\setup16.exe
2013-02-13 01:23:55 215040 —-a-w- C:\windows\System32\winsrv.dll
2013-02-13 01:23:55 2048 —-a-w- C:\windows\SysWow64\user.exe
2013-02-13 01:23:55 14336 —-a-w- C:\windows\SysWow64\ntvdm64.dll
2013-02-13 01:23:53 1913192 —-a-w- C:\windows\System32\drivers\tcpip.sys
2013-02-13 01:23:52 288088 —-a-w- C:\windows\System32\drivers\FWPKCLNT.SYS
2013-02-11 09:50:06 ——– d—–w- C:\Program Files\Bonjour
2013-02-11 09:50:06 ——– d—–w- C:\Program Files (x86)\Bonjour
.
==================== Find3M ====================
.
2013-02-28 03:26:22 71024 —-a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-28 03:26:22 691568 —-a-w- C:\windows\SysWow64\FlashPlayerApp.exe
2013-02-27 08:49:10 16473456 —-a-w- C:\windows\SysWow64\FlashPlayerInstaller.exe
2013-02-15 02:23:33 39768 —-a-w- C:\windows\System32\drivers\avgtpx64.sys
2013-01-24 14:36:04 2647432 —-a-w- C:\Program Files (x86)\Setup.exe
2013-01-24 14:36:04 1900544 —-a-w- C:\Program Files (x86)\WinBootstrapper.msi
2013-01-17 09:28:58 273840 ——w- C:\windows\System32\MpSigStub.exe
2013-01-13 21:17:03 9728 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 21:17:02 2560 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 21:16:42 10752 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 21:12:46 3584 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 21:11:21 4096 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 21:11:08 5632 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 21:11:07 5632 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 21:11:07 3072 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 21:11:07 3072 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:35:31 9728 —ha-w- C:\windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 20:35:31 2560 —ha-w- C:\windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 20:35:18 10752 —ha-w- C:\windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 20:32:07 3584 —ha-w- C:\windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 20:31:48 4096 —ha-w- C:\windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 20:31:41 5632 —ha-w- C:\windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 20:31:40 5632 —ha-w- C:\windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 20:31:40 3072 —ha-w- C:\windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 20:31:40 3072 —ha-w- C:\windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:31:00 1247744 —-a-w- C:\windows\SysWow64\DWrite.dll
2013-01-13 20:22:22 1988096 —-a-w- C:\windows\SysWow64\d3d10warp.dll
2013-01-13 20:20:31 293376 —-a-w- C:\windows\SysWow64\dxgi.dll
2013-01-13 20:09:00 249856 —-a-w- C:\windows\SysWow64\d3d10_1core.dll
2013-01-13 20:08:43 220160 —-a-w- C:\windows\SysWow64\d3d10core.dll
2013-01-13 20:08:35 1504768 —-a-w- C:\windows\SysWow64\d3d11.dll
2013-01-13 19:59:04 1643520 —-a-w- C:\windows\System32\DWrite.dll
2013-01-13 19:58:28 1175552 —-a-w- C:\windows\System32\FntCache.dll
2013-01-13 19:54:01 604160 —-a-w- C:\windows\SysWow64\d3d10level9.dll
2013-01-13 19:53:58 207872 —-a-w- C:\windows\SysWow64\WindowsCodecsExt.dll
2013-01-13 19:53:14 187392 —-a-w- C:\windows\SysWow64\UIAnimation.dll
2013-01-13 19:51:30 2565120 —-a-w- C:\windows\System32\d3d10warp.dll
2013-01-13 19:49:17 363008 —-a-w- C:\windows\System32\dxgi.dll
2013-01-13 19:48:47 161792 —-a-w- C:\windows\SysWow64\d3d10_1.dll
2013-01-13 19:46:25 1080832 —-a-w- C:\windows\SysWow64\d3d10.dll
2013-01-13 19:43:21 1230336 —-a-w- C:\windows\SysWow64\WindowsCodecs.dll
2013-01-13 19:38:39 333312 —-a-w- C:\windows\System32\d3d10_1core.dll
2013-01-13 19:38:32 1887232 —-a-w- C:\windows\System32\d3d11.dll
2013-01-13 19:38:21 296960 —-a-w- C:\windows\System32\d3d10core.dll
2013-01-13 19:37:57 3419136 —-a-w- C:\windows\SysWow64\d2d1.dll
2013-01-13 19:25:04 245248 —-a-w- C:\windows\System32\WindowsCodecsExt.dll
2013-01-13 19:24:33 648192 —-a-w- C:\windows\System32\d3d10level9.dll
2013-01-13 19:24:30 221184 —-a-w- C:\windows\System32\UIAnimation.dll
2013-01-13 19:20:42 194560 —-a-w- C:\windows\System32\d3d10_1.dll
2013-01-13 19:20:04 1238528 —-a-w- C:\windows\System32\d3d10.dll
2013-01-13 19:15:40 1424384 —-a-w- C:\windows\System32\WindowsCodecs.dll
2013-01-13 19:10:36 3928064 —-a-w- C:\windows\System32\d2d1.dll
2013-01-13 19:02:06 417792 —-a-w- C:\windows\SysWow64\WMPhoto.dll
2013-01-13 18:34:58 364544 —-a-w- C:\windows\SysWow64\XpsGdiConverter.dll
2013-01-13 18:32:43 465920 —-a-w- C:\windows\System32\WMPhoto.dll
2013-01-13 18:09:52 522752 —-a-w- C:\windows\System32\XpsGdiConverter.dll
2013-01-13 17:26:42 1158144 —-a-w- C:\windows\SysWow64\XpsPrint.dll
2013-01-13 17:05:09 1682432 —-a-w- C:\windows\System32\XpsPrint.dll
2013-01-04 06:11:21 2284544 —-a-w- C:\windows\SysWow64\msmpeg2vdec.dll
2013-01-04 04:43:21 44032 —-a-w- C:\windows\apppatch\acwow64.dll
2013-01-02 12:18:00 33808 —-a-w- C:\Users\Birdie admin2\cc_20130102_041756.reg
2013-01-02 12:17:07 90014 —-a-w- C:\Users\Birdie admin2\cc_20130102_041700.reg
2012-12-26 08:46:29 18960 —-a-w- C:\windows\System32\drivers\LNonPnP.sys
2012-12-21 21:09:28 57904 —-a-w- C:\windows\System32\drivers\epfwwfp.sys
2012-12-21 21:09:24 59440 —-a-w- C:\windows\System32\drivers\EpfwLWF.sys
2012-12-21 21:09:24 190232 —-a-w- C:\windows\System32\drivers\epfw.sys
2012-12-21 21:08:54 150616 —-a-w- C:\windows\System32\drivers\ehdrv.sys
2012-12-21 21:08:18 213416 —-a-w- C:\windows\System32\drivers\eamonm.sys
2012-12-16 17:11:22 46080 —-a-w- C:\windows\System32\atmlib.dll
2012-12-16 14:45:03 367616 —-a-w- C:\windows\System32\atmfd.dll
2012-12-16 14:13:28 295424 —-a-w- C:\windows\SysWow64\atmfd.dll
2012-12-16 14:13:20 34304 —-a-w- C:\windows\SysWow64\atmlib.dll
2012-12-13 04:31:03 2560 —-a-w- C:\windows\_MSRSTRT.EXE
2012-12-12 21:57:12 293344 —-a-w- C:\Program Files (x86)\iTunesOutlookAddIn.dll
2012-12-12 21:57:10 405472 —-a-w- C:\Program Files (x86)\iTunesAdmin.dll
2012-12-12 21:57:10 152544 —-a-w- C:\Program Files (x86)\iTunesHelper.exe
2012-12-12 21:57:10 148960 —-a-w- C:\Program Files (x86)\iTunesHelper.dll
2012-12-12 21:57:08 9789408 —-a-w- C:\Program Files (x86)\iTunes.exe
2012-12-12 21:57:02 782840 —-a-w- C:\Program Files (x86)\gnsdk_sdkmanager.dll
2012-12-12 21:57:02 3015160 —-a-w- C:\Program Files (x86)\gnsdk_dsp.dll
2012-12-12 21:57:02 269304 —-a-w- C:\Program Files (x86)\gnsdk_submit.dll
2012-12-12 21:57:02 22747616 —-a-w- C:\Program Files (x86)\iTunes.dll
2012-12-12 21:57:02 226296 —-a-w- C:\Program Files (x86)\gnsdk_musicid.dll
2012-12-12 21:37:56 4472832 —-a-w- C:\windows\SysWow64\GPhotos.scr
2012-12-07 23:54:59 57344 —-a-w- C:\windows\WNMHINDR.EXE
2012-12-07 23:54:59 24576 —-a-w- C:\windows\SysWow64\NMH040A.DLL
2012-12-07 23:51:11 724992 —-a-w- C:\windows\iun6002.exe
2012-12-07 13:20:16 441856 —-a-w- C:\windows\System32\Wpc.dll
2012-12-07 13:15:31 2746368 —-a-w- C:\windows\System32\gameux.dll
2012-12-07 12:26:17 308736 —-a-w- C:\windows\SysWow64\Wpc.dll
2012-12-07 12:20:43 2576384 —-a-w- C:\windows\SysWow64\gameux.dll
2012-12-07 11:20:04 30720 —-a-w- C:\windows\System32\usk.rs
2012-12-07 11:20:03 43520 —-a-w- C:\windows\System32\csrr.rs
2012-12-07 11:20:03 23552 —-a-w- C:\windows\System32\oflc.rs
2012-12-07 11:20:01 45568 —-a-w- C:\windows\System32\oflc-nz.rs
2012-12-07 11:20:01 44544 —-a-w- C:\windows\System32\pegibbfc.rs
2012-12-07 11:20:01 20480 —-a-w- C:\windows\System32\pegi-fi.rs
2012-12-07 11:20:00 20480 —-a-w- C:\windows\System32\pegi-pt.rs
2012-12-07 11:19:59 20480 —-a-w- C:\windows\System32\pegi.rs
2012-12-07 11:19:58 46592 —-a-w- C:\windows\System32\fpb.rs
.
============= FINISH: 4:59:38.49 ===============




Hi,

I hope this in in the right place.


First, thank you for any response, information or help you may offer, it is nice to find a site with genuine help offered with REAL results. :thumbup:

With that being said, I had used a similar site and they failed to give me any sort of useful information. :rant2: What they did do is miss vital information, as well as give me several corrupt files to download. Which caused my entire system to crash. :pullhair: To this day I am unable to use the computer I had the issue on. So, when I noticed my less than 6 month old laptop acting odd after I foolishly decided to download some backup files :smack: from my old pc onto this one I decided to look for another helpful site. And now I am here with my fingers crossed hoping that I am not destined to use my iPad for everything.

The main issues are this:I have several user profiles and for some reason I am unable to access any of them but the one I am using now. I have gone into registry done everything right (that I know of) Yet, Every time I go to log in it loads as usual then a pop up says unable to load profile/profile settings. More recently programs are failing to uninstall. Sometimes a window pops up asking me to "input disc" , other times it just freezes. :thumbdown: The last few days, my browser will lock and my screen will flash black, or, as if it is turning on and off (I have a laptop.) Then there are other small idiosyncrasies. I am hoping if I begin chronologically it will somehow domino and fix some of the random annoyances as well!!'
Post #2
Still need help?

Hello and :welcome:

I am currently assessing your situation and will be back with a fix for your problem as soon as possible.
Please subscribe to this thread to get immediate notification of replies as soon as they are posted.

To do this, click Options, then click Subscribe to this Thread. Under the Forum Subscription: Virus, Spyware & Malware Removal: title, make sure it is set to Immediate email Notification, then click Proceed.
Please be patient with me during this time.

Please reply to this post
Post #4
Due to inactivity this topic will be closed.
If you need help please start a new thread

New members follow the instructions here and start a new topic

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI