61 replies to this topic

[FreyjaGoddess]

I can paste this though:

 

Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

[FreyjaGoddess]

No luck with the scan. Crash-y.

[jeffce]

Let's get a look with a different tool and see what we can find.  
 

• Download OTL to your desktop.
• Right-click and Run as Administrator on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top change it to Minimal Output.
• Check the boxes beside LOP Check and Purity Check.
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
    Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

----------

[FreyjaGoddess]

OTL logfile created on: 07/12/2013 3:43:33 PM - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Karri\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy
 
7.93 Gb Total Physical Memory | 5.95 Gb Available Physical Memory | 75.00% Memory free
16.02 Gb Paging File | 13.13 Gb Available in Paging File | 81.96% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 232.59 Gb Total Space | 58.79 Gb Free Space | 25.28% Space Free | Partition Type: NTFS
Drive D: | 348.93 Gb Total Space | 88.23 Gb Free Space | 25.29% Space Free | Partition Type: NTFS
Drive H: | 3.80 Gb Total Space | 3.37 Gb Free Space | 88.72% Space Free | Partition Type: FAT32
Drive J: | 295.02 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF
Drive N: | 3.79 Gb Total Space | 3.79 Gb Free Space | 100.00% Space Free | Partition Type: FAT32
Drive O: | 930.95 Gb Total Space | 813.57 Gb Free Space | 87.39% Space Free | Partition Type: FAT32
 
Computer Name: KARRI-PC | User Name: Karri | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Capture.exe ()
PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
PRC - C:\Users\Karri\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.EXE (Microsoft Corporation.)
PRC - C:\Users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe (SanDisk Corporation)
PRC - C:\Users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe ()
PRC - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
PRC - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe (Egis inc.)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\Intel\AMT\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Steam\bin\chromehtml.dll ()
MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\Program Files (x86)\Steam\bin\libcef.dll ()
MOD - C:\Program Files (x86)\Steam\SDL2.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Program Files (x86)\Steam\bin\avcodec-53.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avformat-53.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avutil-51.dll ()
MOD - C:\Users\Karri\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Users\Karri\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\Common Files\LogiShrd\SharedBin\LvApi11.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTXml4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTGui4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTCore4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\vpxmd.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\SDL.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtNetwork4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtCore4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qico4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qgif4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtWebKit4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtXml4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtSql4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtOpenGL4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtGui4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\phonon4.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
MOD - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTrayLOC.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQDEVCL.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMDLL.DLL ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (c2wts) -- C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe (Microsoft Corporation)
SRV:64bit: - (ME Services Manager) -- C:\Program Files\Intel\inteldh\msm\MSM.exe (Intel® Corporation)
SRV:64bit: - (Software Services Manager) -- C:\Program Files\Intel\inteldh\common\IntelDHSvcMgr.exe (Intel® Corporation)
SRV:64bit: - (LMS) -- C:\Program Files\Intel\AMT\LMS.exe (Intel Corporation)
SRV:64bit: - (ETService) -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe ()
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (BBUpdate) -- C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.EXE (Microsoft Corporation.)
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.EXE (Microsoft Corporation.)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (M4-Service) -- C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe ()
SRV - (UMVPFSrv) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (eDataSecurity Service) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
SRV - (IAANTMON) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (Acer HomeMedia Connect Service) -- C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (aswVmm) -- C:\Windows\SysNative\drivers\aswVmm.sys ()
DRV:64bit: - (aswRvrt) -- C:\Windows\SysNative\drivers\aswRvrt.sys ()
DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (cbfs3) -- C:\Windows\SysNative\drivers\cbfs3.sys (EldoS Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (LVUVC64) -- C:\Windows\SysNative\DRIVERS\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\DRIVERS\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (tap0901) -- C:\Windows\SysNative\DRIVERS\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (WpdUsb) -- C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\Drivers\sptd.sys ()
DRV:64bit: - (NuidFltr) -- C:\Windows\SysNative\DRIVERS\NuidFltr.sys (Microsoft Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\DRIVERS\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (psdvdisk) -- C:\Windows\SysNative\DRIVERS\PSDVdisk.sys (Egis Incorporated)
DRV:64bit: - (PSDNServ) -- C:\Windows\SysNative\DRIVERS\PSDNServ.sys (Egis Incorporated)
DRV:64bit: - (PSDFilter) -- C:\Windows\SysNative\DRIVERS\psdfilter.sys (Egis Incorporated)
DRV:64bit: - (LVUSBS64) -- C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV:64bit: - (PID_PEPI) -- C:\Windows\SysNative\DRIVERS\LV302V64.SYS (Logitech Inc.)
DRV:64bit: - (e1yexpress) -- C:\Windows\SysNative\DRIVERS\e1y60x64.sys (Intel Corporation)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\DRIVERS\iaStor.sys (Intel Corporation)
DRV:64bit: - (IntcHdmiAddService) -- C:\Windows\SysNative\drivers\IntcHdmi.sys (Intel® Corporation)
DRV:64bit: - (HECIx64) -- C:\Windows\SysNative\DRIVERS\HECIx64.sys (Intel Corporation)
DRV:64bit: - (NTIDrvr) -- C:\Windows\SysNative\Drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV:64bit: - (UBHelper) -- C:\Windows\SysNative\drivers\UBHelper.sys (NewTech Infosystems Corporation)
DRV - (int15) -- C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer...&m=aspire_m5700
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer...&m=aspire_m5700
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer...&m=aspire_m5700
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7ACAW
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer...&m=aspire_m5700
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7ACAW
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "http://www.theweathe...ather/caon0532"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll (Oberon-Media )
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Karri\AppData\Local\Citrix\Plugins\79\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Karri\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Karri\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/11/27 15:12:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/11/21 20:32:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/11/21 20:32:48 | 000,000,000 | ---D | M]
 
[2009/10/29 12:03:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Karri\AppData\Roaming\Mozilla\Extensions
[2009/10/29 12:03:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Karri\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org
[2013/11/05 11:42:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions
[2011/10/15 13:35:37 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2013/11/05 11:42:58 | 000,915,554 | ---- | M] () (No name found) -- C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013/11/21 20:32:47 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/11/21 20:32:47 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/11/21 20:32:47 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013/11/21 20:32:47 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013/11/21 20:32:47 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013/11/21 20:32:47 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}
[2013/11/21 20:32:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/11/21 20:32:46 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/11/21 20:32:51 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\31.0.1650.57\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager  (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npCouponPrinter.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: Microsoft Lync 2010 Meeting Join Plug-in (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager  (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npMozCouponPrinter.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npo1d.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Oberon com adapter (Enabled) = C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Citrix Online Web Deployment Plugin 1.0.0.79 (Enabled) = C:\Users\Karri\AppData\Local\Citrix\Plugins\79\npappdetector.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Karri\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: Entanglement Web App = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\3.4.9_0\
CHR - Extension: AT_JamesWhite = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkeidgmehkdjmpjodpjkepolokanalkm\3\
CHR - Extension: AdBlock = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0\
CHR - Extension: Skype Click to Call = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0\
CHR - Extension: Poppit = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\2.2_0\
CHR - Extension: Google Wallet = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\
 
O1 HOSTS File: ([2013/12/07 12:06:10 | 000,000,855 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\ActiveToolBand.dll (Egis)
O2 - BHO: (Bing Bar Helper) - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Bing Bar) - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O4:64bit: - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe ()
O4:64bit: - HKLM..\Run: [eDataSecurity Loader] C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe (Egis Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelSWUpdateClient] C:\Program Files\Intel\inteldh\common\SWUpdateClient.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [MSCRM] C:\Program Files\Microsoft Dynamics CRM\Client\ConfigWizard\CrmForOutlookInstaller.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Acer Assist Launcher] C:\Program Files (x86)\Acer\Acer Assist\launcher.exe ()
O4 - HKLM..\Run: [Acer Product Registration] C:\Program Files (x86)\Acer\Acer Registration\ACE1.exe (Leader Technologies)
O4 - HKLM..\Run: [ACQTMOUSE] C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [PCMMediaSharing] C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [SansaDispatch] C:\Users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe (SanDisk Corporation)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - Startup: C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} http://www.shockwave...nx.1.0.0.86.cab (CPlayFirstTriJinxControl Object)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab (OnlineScanner Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3DF7249C-DC40-4434-8123-8375B94A51F0}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)
O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
O22:64bit: - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)
O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img16.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img16.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/24 10:26:00 | 000,000,740 | R--- | M] () - J:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2010/06/03 10:45:28 | 000,000,055 | ---- | M] () - N:\autorun.inf -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/12/06 12:50:40 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013/12/06 12:47:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\catroot2
[2013/12/06 12:14:14 | 000,181,064 | ---- | C] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2013/12/06 12:11:34 | 000,000,000 | ---D | C] -- C:\RegBackup
[2013/12/06 12:08:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
[2013/12/06 12:08:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tweaking.com
[2013/12/05 15:53:57 | 000,000,000 | ---D | C] -- C:\Users\Karri\Desktop\Pictures December 2013
[2013/12/04 16:14:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2013/12/04 16:14:20 | 002,347,384 | ---- | C] (ESET) -- C:\Users\Karri\Desktop\esetsmartinstaller_enu.exe
[2013/12/04 16:02:31 | 000,000,000 | ---D | C] -- C:\Users\Karri\AppData\Roaming\Oracle
[2013/12/04 14:53:59 | 000,000,000 | ---D | C] -- C:\Users\Karri\AppData\Local\CyberLink Live
[2013/12/03 22:18:02 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2013/12/03 22:14:02 | 000,000,000 | ---D | C] -- C:\Users\Karri\AppData\Local\temp
[2013/12/03 22:00:41 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013/12/03 22:00:41 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013/12/03 22:00:41 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013/12/03 21:56:03 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013/12/03 21:55:00 | 005,151,572 | R--- | C] (Swearware) -- C:\Users\Karri\Desktop\ComboFix.exe
[2013/12/03 14:37:53 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Karri\Desktop\tdsskiller.exe
[2013/12/03 14:33:10 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\Karri\Desktop\dds.com
[2013/12/03 09:42:56 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Karri\Desktop\OTL.exe
[2013/12/02 13:31:49 | 000,000,000 | ---D | C] -- C:\Users\Karri\Desktop\Videos
[2013/12/01 13:28:47 | 000,000,000 | ---D | C] -- C:\Users\Karri\Desktop\MOIST
[2013/11/27 16:23:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
[2013/11/27 16:21:57 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant
[2013/11/27 16:17:28 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2013/11/27 15:13:28 | 000,000,000 | ---D | C] -- C:\Users\Karri\AppData\Roaming\AVAST Software
[2013/11/27 15:13:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
[2013/11/27 15:12:53 | 001,032,416 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2013/11/27 15:12:53 | 000,065,264 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2013/11/27 15:12:52 | 000,409,832 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2013/11/27 15:12:52 | 000,084,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2013/11/27 15:12:52 | 000,064,752 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2013/11/27 15:12:52 | 000,038,984 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2013/11/27 15:12:50 | 000,334,648 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2013/11/27 15:12:47 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2013/11/27 15:09:52 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2013/11/27 15:09:19 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2013/11/27 13:52:46 | 000,000,000 | ---D | C] -- C:\Users\Karri\AppData\Roaming\TuneUp Software
[2013/11/27 13:48:02 | 000,000,000 | ---D | C] -- C:\Users\Karri\AppData\Local\MFAData
[2013/11/27 13:48:02 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2013/11/27 13:48:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Common Files
[2013/11/21 20:32:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
 
========== Files - Modified Within 30 Days ==========
 
[2013/12/07 15:28:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/12/07 15:13:59 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA.job
[2013/12/07 14:05:45 | 000,003,344 | ---- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/12/07 14:05:45 | 000,003,344 | ---- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/12/07 12:10:45 | 000,769,882 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/12/07 12:10:45 | 000,639,068 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/12/07 12:10:45 | 000,119,306 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/12/07 12:06:10 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013/12/07 12:06:09 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2013/12/07 12:05:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/12/06 21:13:59 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core.job
[2013/12/06 16:41:34 | 000,063,607 | ---- | M] () -- C:\Users\Karri\Desktop\72305_10151320891761049_1509551801_n.jpg
[2013/12/06 15:46:29 | 513,089,907 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013/12/06 12:50:06 | 000,393,832 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/12/06 12:47:50 | 000,181,064 | ---- | M] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2013/12/06 12:12:12 | 000,000,207 | ---- | M] () -- C:\Windows\tweaking.com-regbackup-KARRI-PC-Microsoft®-Windows-Vista™-Home-Premium-(64-bit).dat
[2013/12/06 12:08:54 | 000,001,998 | ---- | M] () -- C:\Users\Karri\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2013/12/06 12:06:25 | 005,045,639 | ---- | M] () -- C:\Users\Karri\Desktop\tweaking.com_windows_repair_aio_setup.exe
[2013/12/06 11:03:17 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts_bak_343
[2013/12/05 18:37:02 | 000,001,356 | ---- | M] () -- C:\Users\Karri\AppData\Local\d3d9caps.dat
[2013/12/05 16:09:43 | 000,002,048 | ---- | M] () -- C:\Users\Karri\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/12/05 16:09:43 | 000,002,046 | ---- | M] () -- C:\Users\Karri\Desktop\Google Chrome.lnk
[2013/12/05 08:37:42 | 000,754,636 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/12/04 16:14:25 | 002,347,384 | ---- | M] (ESET) -- C:\Users\Karri\Desktop\esetsmartinstaller_enu.exe
[2013/12/03 21:55:08 | 005,151,572 | R--- | M] (Swearware) -- C:\Users\Karri\Desktop\ComboFix.exe
[2013/12/03 16:25:19 | 001,110,034 | ---- | M] () -- C:\Users\Karri\Desktop\AdwCleaner.exe
[2013/12/03 14:37:53 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Karri\Desktop\tdsskiller.exe
[2013/12/03 14:33:10 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\Karri\Desktop\dds.com
[2013/12/03 09:42:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Karri\Desktop\OTL.exe
[2013/12/03 09:19:50 | 000,041,472 | ---- | M] () -- C:\Users\Karri\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/12/02 22:07:22 | 000,000,905 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013/12/02 15:35:02 | 000,000,222 | ---- | M] () -- C:\Users\Karri\Desktop\The Walking Dead.url
[2013/12/01 18:54:28 | 004,882,675 | ---- | M] () -- C:\Users\Karri\Desktop\DSC01777.JPG
[2013/12/01 18:53:18 | 005,864,612 | ---- | M] () -- C:\Users\Karri\Desktop\DSC01763.JPG
[2013/11/30 22:29:10 | 006,420,598 | ---- | M] () -- C:\Users\Karri\Desktop\DSC01825.JPG
[2013/11/30 22:27:18 | 006,639,470 | ---- | M] () -- C:\Users\Karri\Desktop\DSC01819.JPG
[2013/11/30 22:26:36 | 005,806,312 | ---- | M] () -- C:\Users\Karri\Desktop\DSC01815.JPG
[2013/11/30 22:17:10 | 005,491,467 | ---- | M] () -- C:\Users\Karri\Desktop\DSC01807.JPG
[2013/11/30 16:22:08 | 081,913,955 | ---- | M] () -- C:\Users\Karri\Desktop\video-2013-11-30-16-18-58.mp4
[2013/11/27 19:39:32 | 000,001,839 | ---- | M] () -- C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
[2013/11/27 19:37:21 | 000,150,223 | ---- | M] () -- C:\Windows\hpwins05.dat.temp
[2013/11/27 19:36:11 | 000,002,073 | ---- | M] () -- C:\Users\Karri\HP Photosmart Essential.lnk
[2013/11/27 18:59:15 | 003,045,848 | ---- | M] () -- C:\Users\Karri\Desktop\OJProL7X00_Scrubber_14.exe
[2013/11/27 17:07:25 | 000,000,000 | ---- | M] () -- C:\Users\Karri\Documents\Default.rdp
[2013/11/27 16:03:29 | 403,965,704 | ---- | M] () -- C:\Users\Karri\Desktop\OJProL7X00_Full_14.exe
[2013/11/27 15:38:05 | 000,006,711 | -HS- | M] () -- C:\Users\Karri\Desktop\Folder.jpg
[2013/11/27 15:38:05 | 000,001,751 | -HS- | M] () -- C:\Users\Karri\Desktop\AlbumArtSmall.jpg
[2013/11/27 15:15:35 | 009,267,598 | ---- | M] () -- C:\Users\Karri\Desktop\Kodaline_All_I_Want(Instrumental_version_(With_backing_vocals))_168418.mp3
[2013/11/27 15:13:20 | 000,001,833 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013/11/27 15:13:00 | 000,000,350 | ---- | M] () -- C:\Windows\tasks\avast! Emergency Update.job
[2013/11/27 15:12:48 | 000,205,320 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2013/11/27 15:12:48 | 000,065,776 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2013/11/27 15:12:48 | 000,065,264 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2013/11/27 15:12:47 | 001,032,416 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2013/11/27 15:12:47 | 000,409,832 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2013/11/27 15:12:47 | 000,334,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2013/11/27 15:12:47 | 000,084,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2013/11/27 15:12:47 | 000,064,752 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2013/11/27 15:12:47 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2013/11/27 15:12:47 | 000,038,984 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2013/11/22 14:14:47 | 000,048,940 | ---- | M] () -- C:\Users\Karri\Desktop\Karri medical approval.pdf
[2013/11/20 17:20:05 | 010,578,277 | ---- | M] () -- C:\Users\Karri\Desktop\Robin Thicke Feat T.I. & Pharrell - Blurred Lines.mp3
[2013/11/20 17:17:41 | 000,009,533 | -HS- | M] () -- C:\Users\Karri\Desktop\AlbumArt_{A331ADFC-ABF7-4B45-A34A-D33C7843D5EC}_Large.jpg
[2013/11/20 17:17:41 | 000,002,919 | -HS- | M] () -- C:\Users\Karri\Desktop\AlbumArt_{A331ADFC-ABF7-4B45-A34A-D33C7843D5EC}_Small.jpg
[2013/11/19 16:21:20 | 000,000,012 | ---- | M] () -- C:\Windows\SysNative\mapisvc.inf
[2013/11/19 03:03:41 | 000,001,566 | ---- | M] () -- C:\Windows\CrmClient.mif
 
========== Files Created - No Company Name ==========
 
[2013/12/06 16:41:34 | 000,063,607 | ---- | C] () -- C:\Users\Karri\Desktop\72305_10151320891761049_1509551801_n.jpg
[2013/12/06 12:12:12 | 000,000,207 | ---- | C] () -- C:\Windows\tweaking.com-regbackup-KARRI-PC-Microsoft®-Windows-Vista™-Home-Premium-(64-bit).dat
[2013/12/06 12:08:54 | 000,001,998 | ---- | C] () -- C:\Users\Karri\Desktop\Tweaking.com - Windows Repair (All in One).lnk
[2013/12/06 12:06:25 | 005,045,639 | ---- | C] () -- C:\Users\Karri\Desktop\tweaking.com_windows_repair_aio_setup.exe
[2013/12/03 22:00:41 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/12/03 22:00:41 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/12/03 22:00:41 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/12/03 22:00:41 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/12/03 22:00:41 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013/12/03 16:25:19 | 001,110,034 | ---- | C] () -- C:\Users\Karri\Desktop\AdwCleaner.exe
[2013/12/03 10:33:43 | 006,420,598 | ---- | C] () -- C:\Users\Karri\Desktop\DSC01825.JPG
[2013/12/03 10:33:35 | 005,806,312 | ---- | C] () -- C:\Users\Karri\Desktop\DSC01815.JPG
[2013/12/03 10:33:23 | 005,491,467 | ---- | C] () -- C:\Users\Karri\Desktop\DSC01807.JPG
[2013/12/03 10:33:09 | 004,882,675 | ---- | C] () -- C:\Users\Karri\Desktop\DSC01777.JPG
[2013/12/03 10:32:29 | 006,639,470 | ---- | C] () -- C:\Users\Karri\Desktop\DSC01819.JPG
[2013/12/03 10:32:04 | 005,864,612 | ---- | C] () -- C:\Users\Karri\Desktop\DSC01763.JPG
[2013/12/02 15:35:02 | 000,000,222 | ---- | C] () -- C:\Users\Karri\Desktop\The Walking Dead.url
[2013/12/01 12:35:04 | 081,913,955 | ---- | C] () -- C:\Users\Karri\Desktop\video-2013-11-30-16-18-58.mp4
[2013/11/27 19:36:11 | 000,002,073 | ---- | C] () -- C:\Users\Karri\HP Photosmart Essential.lnk
[2013/11/27 18:59:09 | 003,045,848 | ---- | C] () -- C:\Users\Karri\Desktop\OJProL7X00_Scrubber_14.exe
[2013/11/27 17:07:25 | 000,000,000 | ---- | C] () -- C:\Users\Karri\Documents\Default.rdp
[2013/11/27 16:11:37 | 000,150,223 | ---- | C] () -- C:\Windows\hpwins05.dat.temp
[2013/11/27 16:11:37 | 000,004,785 | ---- | C] () -- C:\Windows\hpwmdl05.dat.temp
[2013/11/27 15:31:16 | 403,965,704 | ---- | C] () -- C:\Users\Karri\Desktop\OJProL7X00_Full_14.exe
[2013/11/27 15:29:31 | 000,001,839 | ---- | C] () -- C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
[2013/11/27 15:15:16 | 009,267,598 | ---- | C] () -- C:\Users\Karri\Desktop\Kodaline_All_I_Want(Instrumental_version_(With_backing_vocals))_168418.mp3
[2013/11/27 15:13:20 | 000,001,833 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2013/11/27 15:13:00 | 000,000,350 | ---- | C] () -- C:\Windows\tasks\avast! Emergency Update.job
[2013/11/27 15:12:53 | 000,205,320 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2013/11/27 15:12:53 | 000,065,776 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2013/11/22 14:14:45 | 000,048,940 | ---- | C] () -- C:\Users\Karri\Desktop\Karri medical approval.pdf
[2013/11/20 17:17:41 | 000,009,533 | -HS- | C] () -- C:\Users\Karri\Desktop\AlbumArt_{A331ADFC-ABF7-4B45-A34A-D33C7843D5EC}_Large.jpg
[2013/11/20 17:17:41 | 000,002,919 | -HS- | C] () -- C:\Users\Karri\Desktop\AlbumArt_{A331ADFC-ABF7-4B45-A34A-D33C7843D5EC}_Small.jpg
[2013/11/16 13:42:21 | 000,002,046 | ---- | C] () -- C:\Users\Karri\Desktop\Google Chrome.lnk
[2013/11/12 19:02:58 | 000,000,908 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA.job
[2013/11/12 19:02:58 | 000,000,856 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core.job
[2013/11/12 18:12:13 | 000,217,074 | ---- | C] () -- C:\Windows\SysNative\WFP.TMF
[2012/07/22 17:32:00 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2012/02/01 17:18:15 | 000,000,552 | ---- | C] () -- C:\Users\Karri\AppData\Local\d3d8caps.dat
[2012/01/18 05:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012/01/18 05:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012/01/18 05:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2011/12/30 21:49:42 | 000,001,356 | ---- | C] () -- C:\Users\Karri\AppData\Local\d3d9caps.dat
[2011/09/02 13:28:57 | 000,041,472 | ---- | C] () -- C:\Users\Karri\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/12 21:00:58 | 000,000,760 | ---- | C] () -- C:\Users\Karri\AppData\Roaming\setup_ldm.iss
[2009/09/21 11:30:38 | 000,000,029 | ---- | C] () -- C:\Users\Karri\AppData\Roaming\default.rss
[2009/09/15 11:40:54 | 000,000,056 | ---- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/06/28 10:50:52 | 000,048,127 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009/06/28 10:50:52 | 000,048,127 | ---- | C] () -- C:\ProgramData\nvModes.001
 
========== ZeroAccess Check ==========
 
[2006/11/02 10:30:40 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/08 12:59:03 | 012,899,840 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 12:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/04/11 02:11:14 | 000,891,392 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = c:\windows\syswow64\wbem\fastprox.dll -- [2009/04/11 01:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2008/01/20 21:50:58 | 000,513,024 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\SysWow64\wbem\wbemess.dll
 
========== LOP Check ==========
 
[2010/12/18 11:49:09 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\.minecraft
[2012/11/19 11:51:06 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\1morebee
[2012/07/07 21:02:22 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\8floor
[2009/03/29 19:30:38 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Acer
[2008/10/28 08:17:30 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Acer GameZone Console
[2011/04/16 20:08:14 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\aliasworlds
[2012/07/14 15:40:16 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Anino Games
[2010/09/25 19:05:35 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Atlus
[2013/09/19 13:34:36 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Audacity
[2013/11/27 15:13:28 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\AVAST Software
[2011/12/12 21:07:00 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\blg
[2009/08/06 12:12:47 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\DAEMON Tools Lite
[2012/09/17 19:00:26 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\DivoGames
[2013/12/07 12:07:48 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Dropbox
[2009/03/30 19:40:22 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\eSobi
[2009/04/06 06:42:54 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\FloodLightGames
[2012/11/20 07:53:50 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\GamesCafe
[2012/08/10 19:09:27 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\HipSoft
[2013/11/27 14:30:25 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Image Zone Express
[2012/01/03 19:40:28 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Islands2
[2012/07/22 17:32:17 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Jumb-O-Fun Games
[2009/03/29 19:30:38 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Leadertech
[2012/12/14 08:14:34 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\LimeWire
[2011/03/04 11:36:00 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\MumboJumbo
[2012/11/19 08:47:11 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\northern_tale_bfg_en
[2011/02/13 20:55:28 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Oberon Media
[2013/01/02 15:50:23 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\ooVoo Details
[2013/12/04 16:02:31 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Oracle
[2013/01/28 08:36:20 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Origin
[2012/01/20 19:35:58 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\PetRush
[2011/11/27 13:02:08 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Ph03nixNewMedia
[2012/04/07 15:11:40 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\PlayFirst
[2011/12/21 18:50:08 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Playrix Entertainment
[2012/09/13 18:58:22 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Princess Isabella CE
[2009/10/28 14:05:06 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Printer Info Cache
[2013/08/18 18:39:18 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\Rainbow
[2010/06/04 21:03:13 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\runic games
[2012/07/17 17:45:03 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\SanDisk
[2013/06/18 07:36:08 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\TeamViewer
[2013/11/27 13:52:46 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\TuneUp Software
[2013/10/07 21:27:50 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\uTorrent
[2011/12/18 18:18:25 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\ValuSoft
[2012/09/12 18:41:41 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\VC 2 Paradise Resort
[2012/09/16 18:51:24 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\ViquaSoft
[2012/01/02 12:34:19 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\WendigoStudios
[2012/07/14 15:18:47 | 000,000,000 | ---D | M] -- C:\Users\Karri\AppData\Roaming\YoudaGames
 
========== Purity Check ==========
 
 
 
========== Files - Unicode (All) ==========
[2013/11/17 17:10:51 | 104,760,117 | ---- | M] ()(C:\Windows\SysWow64\???Ë) -- C:\Windows\SysWow64\嚴亞Ë
[2013/11/17 17:10:51 | 104,760,117 | ---- | C] ()(C:\Windows\SysWow64\???Ë) -- C:\Windows\SysWow64\嚴亞Ë
[2013/11/12 18:03:44 | 103,974,937 | ---- | M] ()(C:\Windows\SysWow64\???Â) -- C:\Windows\SysWow64\듺໲Â
[2013/11/12 18:03:44 | 103,974,937 | ---- | C] ()(C:\Windows\SysWow64\???Â) -- C:\Windows\SysWow64\듺໲Â
[2013/11/04 08:06:02 | 104,867,914 | ---- | M] ()(C:\Windows\SysWow64\???8) -- C:\Windows\SysWow64\릧㖷8
[2013/11/04 08:06:02 | 104,867,914 | ---- | C] ()(C:\Windows\SysWow64\???8) -- C:\Windows\SysWow64\릧㖷8
[2013/11/01 12:44:06 | 104,569,497 | ---- | M] ()(C:\Windows\SysWow64\???Í) -- C:\Windows\SysWow64\퍎梑Í
[2013/11/01 12:44:06 | 104,569,497 | ---- | C] ()(C:\Windows\SysWow64\???Í) -- C:\Windows\SysWow64\퍎梑Í
[2013/11/01 06:44:53 | 104,500,486 | ---- | M] ()(C:\Windows\SysWow64\???±) -- C:\Windows\SysWow64\兯换±
[2013/11/01 06:44:53 | 104,500,486 | ---- | C] ()(C:\Windows\SysWow64\???±) -- C:\Windows\SysWow64\兯换±
[2013/10/06 12:32:59 | 099,477,982 | ---- | M] ()(C:\Windows\SysWow64\???¹) -- C:\Windows\SysWow64\钳崩¹
[2013/10/06 06:33:02 | 099,477,982 | ---- | C] ()(C:\Windows\SysWow64\???¹) -- C:\Windows\SysWow64\钳崩¹
[2013/09/29 12:33:39 | 098,466,785 | ---- | M] ()(C:\Windows\SysWow64\???ã) -- C:\Windows\SysWow64\菶䭛ã
[2013/09/29 06:33:51 | 098,466,785 | ---- | C] ()(C:\Windows\SysWow64\???ã) -- C:\Windows\SysWow64\菶䭛ã
[2013/09/15 13:57:16 | 097,671,483 | ---- | M] ()(C:\Windows\SysWow64\???Ó) -- C:\Windows\SysWow64\肢Ó
[2013/09/15 13:57:16 | 097,671,483 | ---- | C] ()(C:\Windows\SysWow64\???Ó) -- C:\Windows\SysWow64\肢Ó
[2013/09/09 07:24:11 | 096,665,497 | ---- | M] ()(C:\Windows\SysWow64\???¿) -- C:\Windows\SysWow64\噮ᆎ¿
[2013/09/09 07:24:11 | 096,665,497 | ---- | C] ()(C:\Windows\SysWow64\???¿) -- C:\Windows\SysWow64\噮ᆎ¿
[2013/09/08 12:33:36 | 096,566,691 | ---- | M] ()(C:\Windows\SysWow64\???¥) -- C:\Windows\SysWow64\䇢¥
[2013/09/08 12:33:36 | 096,566,691 | ---- | C] ()(C:\Windows\SysWow64\???¥) -- C:\Windows\SysWow64\䇢¥
[2013/09/02 15:07:34 | 095,286,781 | ---- | M] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\ᷟ舶
[2013/09/02 15:07:34 | 095,286,781 | ---- | C] ()(C:\Windows\SysWow64\????) -- C:\Windows\SysWow64\ᷟ舶
[2013/09/01 13:25:15 | 095,199,041 | ---- | M] ()(C:\Windows\SysWow64\???L) -- C:\Windows\SysWow64\득왲L
[2013/09/01 07:25:29 | 095,199,041 | ---- | C] ()(C:\Windows\SysWow64\???L) -- C:\Windows\SysWow64\득왲L

< End of report >
 

[FreyjaGoddess]

It did not post an Extras text file.

[jeffce]

Hi there,  

 

Not seeing too much there either.  Run a Full Scan with Malwarebytes and see if anything is detected.  Please post the log that is made.  

[FreyjaGoddess]

Ok, no luck with any scan attempts. It keeps locking up at the same place, some Acer Arcade thingee (which I never use). It locks up at this spot for both Avast! and Malwarebytes.

 

Do you think I should attempt to install my printer drivers again?

[jeffce]

Hi,

 

Yes you can try to reinstall the printer drivers at this point.  

 

Ok...so all the scans are stopping at an Acer Arcade thingy?    Is it this >> Acer Arcade Live Main Page

[FreyjaGoddess]

Hi Jeff,

 

Yes. All the scans stop at Acer Arcade Live. So I tried to uninstall it because in all the time I've owned this computer...I have NEVER used it! However, when I try to uninstall it, my computer CRASHES! GRRRRR!!!

 

Then chkdsk runs and does a bunch of repairs and stuff.

 

This time I tried doing a scan to see the exact file name of where it stalls out, but at the Acer Arcade Live...it blue screened! RAR!

 

I will do the printer drivers sometime this afternoon and let you know.

[jeffce]

RAR!?!    Sorry you are having to go through all of this.  

 

Ok....work with the printer drivers and let me know how that goes.  

[FreyjaGoddess]

These are the details from my printer install which didn't work.

 

I had to attach the file because I wasn't sure how to c and p it. Also tried snipping tool but it wouldn't let me post an image in this box.

 

Attached Thumbnails

• 

[FreyjaGoddess]

I did: chkdsk /f /r C: and here is the event log. My computer is booting MUCH faster now.

 

Checking file system on C:
The type of the file system is NTFS.
Volume label is ACER.

A disk check has been scheduled.
Windows will now check the disk.                         
  352256 file records processed.                                     1740 large file records processed.                               0 bad file records processed.                                 0 EA records processed.                                       92 reparse records processed.                                  450390 index entries processed.                                    0 unindexed files processed.                                  352256 security descriptors processed.                           Cleaning up 22 unused index entries from index $SII of file 0x9.
Cleaning up 22 unused index entries from index $SDH of file 0x9.
Cleaning up 22 unused security descriptors.
  49068 data files processed.                                     CHKDSK is verifying Usn Journal...
  11084664 USN bytes processed.                                      Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc0000185 at offset 0x13f431000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f435000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f436000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f436000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f437000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f437000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f438000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f438000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f439000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f439000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43a000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43a000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43b000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43b000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43c000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43c000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43d000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13f43d000 for 0x1000 bytes.
Windows replaced bad clusters in file 14179
of name \PROGRA~2\ACERAR~1\ACERHO~1\msvcp71.dll.
Read failure with status 0xc0000185 at offset 0x13f71f000 for 0x6000 bytes.
Read failure with status 0xc0000185 at offset 0x13f71f000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f720000 for 0x5000 bytes.
Read failure with status 0xc0000185 at offset 0x13f720000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f721000 for 0x4000 bytes.
Read failure with status 0xc0000185 at offset 0x13f721000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f722000 for 0x3000 bytes.
Read failure with status 0xc0000185 at offset 0x13f722000 for 0x1000 bytes.
Read failure with status 0xc0000185 at offset 0x13f723000 for 0x2000 bytes.
Windows replaced bad clusters in file 14437
of name \PROGRA~2\ACERAR~1\ACERHO~2\atl71.dll.
Read failure with status 0xc0000185 at offset 0x20c3130000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x20c313d000 for 0x1000 bytes.
Windows replaced bad clusters in file 231590
of name \PROGRA~2\ELECTR~1\THESIM~3\GameData\Shared\NONPAC~1\Library\KEYSTO~1.PAC.
  352240 files processed.                                          File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  15635229 free clusters processed.                                  Free space verification is complete.
Adding 14 bad clusters to the Bad Clusters File.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

 243886079 KB total disk space.
 180763876 KB in 249555 files.
    143628 KB in 49069 indexes.
        56 KB in bad sectors.
    437603 KB in use by the system.
     65536 KB occupied by the log file.
  62540916 KB available on disk.

      4096 bytes in each allocation unit.
  60971519 total allocation units on disk.
  15635229 allocation units available on disk.

Internal Info:
00 60 05 00 8c 8e 04 00 2c 05 08 00 00 00 00 00  .`......,.......
52 6f 00 00 5c 00 00 00 00 00 00 00 00 00 00 00  Ro..\...........
90 c7 48 77 00 00 00 00 50 23 83 ff 00 00 00 00  ..Hw....P#......

Windows has finished checking your disk.
Please wait while your computer restarts.
 

[jeffce]

So your system is booting faster?  Good!    You might try uninstalling all products related to your printer and then once complete with that, boot to Safe Mode and try to install the printer from there. 

[FreyjaGoddess]

No luck with installing printer drivers in safe mode. It tells me that the print spooler isn't working which is the existing issue that I mentioned in the first post of this epic computer tragedy!

 

*shakes fist at the sky*

 

Unfortunately none of the stuff we have done has fixed that issue.

[FreyjaGoddess]

It always breaks down at the same spot. It seems to have no issues installing all of the drivers but it can't get past the final stage which is "Configuring Your Product."