20 replies to this topic

[zrski1]

Ken545:

 

Here they are:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:24-08-2014 03
Ran by Gary (administrator) on BEDROOM on 27-08-2014 08:48:07
Running from C:\Documents and Settings\Gary\Desktop
Platform: Microsoft Windows XP Service Pack 3 (X86) OS Language: English (United States)
Internet Explorer Version 8
Boot Mode: Safe Mode (with Networking)

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingc...can-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingc...can-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\WINDOWS.2\system32\smss.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\csrss.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\winlogon.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\services.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\lsass.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\svchost.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\svchost.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\svchost.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\svchost.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\svchost.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\svchost.exe
(Microsoft Corporation) C:\WINDOWS.2\explorer.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\WgaTray.exe
(Microsoft Corporation) C:\WINDOWS.2\system32\notepad.exe

------------------------------------------------------------------------------

 

No Additions.txt was generated.

 

I almost failed at running FRST.txt. Running in SAFE Mode has limitations.

 

Thanks,

 

Gary Zeranski

[ken545]

Gary, run FRST in normal windows, not safemode, what you posted is just a very small part of the FRST log, I need to see the entire log.  When you open FRST, if you look for Optional Scans on the bottom, put a checkmark in Additions and it will create an additions log.  The additions log will show me if SpeedMaxPc  is still running that I wanted you to uninstall and we can use FRST to fix it

[zrski1]

Ken545:

 

I FINALLY got Additions.txt to be generated:

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version:24-08-2014 03
Ran by Gary at 2014-08-27 09:00:57
Running from C:\Documents and Settings\Gary\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)


==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

#1 DVD Ripper 8.1.1 (HKLM\...\#1 DVD Ripper) (Version: 8.1.1 - Apollo Multimedia Inc.)
123 Downloader (HKLM\...\123 Downloader) (Version: 1.0 - Bling Software Ltd.)
123CopyDVDPlatinum (HKLM\...\123CopyDVDPlatinum 2012) (Version: 2012 - Bling Software Ltd.)
123CopyDVDPlatinum (HKLM\...\123CopyDVDPlatinum 2013) (Version: 2013 - Bling Software Ltd.)
1Click DVD Copy 4.1 (HKLM\...\1Click DVD Copy 4.1) (Version:  - )
2WIRE Wireless LAN - USB Driver (HKLM\...\{581CE7EA-A30D-0000-1211-088635773309}) (Version:  - )
4Media Video Converter Ultimate (HKLM\...\4Media Video Converter Ultimate) (Version: 5.1.26.0731 - 4Media)
abgx360 v1.0.6 (HKLM\...\abgx360) (Version:  - )
Access Password Recovery 3.0.1.0 (HKLM\...\{ADFCF1E3-8057-4359-B884-5EAA62B06ETK}_is1) (Version:  - Anypasskey Studio)
Active-HDL 6.3 (HKLM\...\Active-HDL 6.3) (Version:  - )
Active-HDL 7.2 (HKLM\...\Active-HDL 7.2) (Version:  - )
Adobe Acrobat XI Pro (HKLM\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.00 - Adobe Systems)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.2.8870 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.2.8870 - Adobe Systems Inc.) Hidden
Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.2.152 - Adobe Systems, Inc.)
aiofw (Version: 4.2.6.0 - Eastman Kodak Company) Hidden
aioprnt (Version: 5.3.1.0 - Eastman Kodak Company) Hidden
aioscnnr (Version: 6.2.3.10 - Your Company Name) Hidden
aioscnnr (Version: 7.6.13.10 - Your Company Name) Hidden
ALLConverter PRO 1.3 (HKLM\...\{9370105C-71BB-4FF9-A85B-36D79B95457A}_is1) (Version:  - ALLCinema, Inc.)
Android SDK Tools (HKLM\...\Android SDK Tools) (Version: 1.16 - Google Inc.)
Aneesoft Video Converter Pro (HKLM\...\{B6E62DFF-2488-4452-BA75-D2B8442AA97C}}_is1) (Version:  - Aneesoft Corporation)
Angel's Vox 1.5 (HKLM\...\Angel's Vox) (Version: 1.5 - SuperUtils.com Software)
ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Any DVD Converter Professional 4.1.8 (HKLM\...\Any DVD Converter Professional_is1) (Version:  - Any-DVD-Converter.com)
Any Video Converter 3.3.0 (HKLM\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Any Video Converter Ultimate 4.5.9 (HKLM\...\Any Video Converter Ultimate_is1) (Version:  - Any-Video-Converter.com)
A-PDF Image to PDF 4.1 (HKLM\...\A-PDF Image to PDF_is1) (Version:  - A-PDF Solution)
Apple Application Support (HKLM\...\{F5266D28-E0B2-4130-BFC5-EE155AD514DC}) (Version: 2.3 - Apple Inc.)
Ashampoo Burning Studio 10 v.10.0.15 (HKLM\...\Ashampoo Burning Studio 10_is1) (Version: 10.0.15 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 11 v.11.0.2 (HKLM\...\Ashampoo Burning Studio 11_is1) (Version: 11.0.2 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 9.21 (HKLM\...\Ashampoo Burning Studio 9_is1) (Version: 9.2.1 - ashampoo GmbH & Co. KG)
Ashampoo MyAutoplay Menu 1.0.3 (HKLM\...\Ashampoo MyAutoplay Menu_is1) (Version: 1.0.3 - ashampoo GmbH & Co. KG)
Aspell English Dictionary-0.50-2 (HKLM\...\Aspell English Dictionary_is1) (Version:  - GNU)
ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.593.100-100210a-095952E-ATI - )
AviSynth 2.5 (HKLM\...\AviSynth) (Version:  - )
AVS Video Converter 8 (HKLM\...\AVS4YOU Video Converter 7_is1) (Version: 8.4.1.540 - Online Media Technologies Ltd.)
AVS Video ReMaker 4.1.4.150 (HKLM\...\AVS Video ReMaker_is1) (Version: 4.1.4.150 - Online Media Technologies Ltd.)
BadCopy Pro (HKLM\...\BadCopy Pro) (Version:  - )
BCM V.92 56K Modem (HKLM\...\BCM V.92 56K Modem) (Version:  - )
BIAS SoundSoap SE 2.2 (HKLM\...\{01287DE9-6EEB-488D-99C7-FE3C707A87AC}) (Version: 2.2 - BIAS Inc)
Bigasoft Total Video Converter 1.7.7.3628 (HKLM\...\{a72ce741-1f32-4d79-bffb-a714375c678d}_is1) (Version:  - Bigasoft Corporation)
Blu-ray to DVD 1.4.0.8 (HKLM\...\Blu-ray to DVD_is1) (Version: 1.4.0.8 - VSO-Software SARL)
Bolt PDF Printer (HKLM\...\BoltPDF) (Version: 1.18 - NCH Software)
BS.Player PRO (HKLM\...\BSPlayerp) (Version: 2.63.1071 - AB Team, d.o.o.)
BurnAware Professional 7.2 (HKLM\...\BurnAware Professional_is1) (Version:  - Burnaware)
BurnOn CD&DVD, Version 3.1.3 ( Build 2009-2-22, Win32, ) (HKLM\...\BurnWorld.Com BurnOn CD&DVD_is1) (Version:  - BurnWorld.Com)
BusinessCards MX (HKLM\...\{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1) (Version: 4.2 - MOJOSOFT)
C4USelfUpdater (Version: 1.00.0000 - Your Company Name) Hidden
calibre (HKLM\...\{59E75C53-7980-45AD-ADAA-733198B4BF7F}) (Version: 2.0.0 - Kovid Goyal)
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
center (Version: 7.7.2.0 - Eastman Kodak Company) Hidden
Cheetah DVD Burner (HKLM\...\{BD01E97F-2A6A-495E-BE38-22C7B80F3CD7}) (Version:  - )
CloneDVD 7 Ultimate 7.0.0.9 (HKLM\...\CloneDVD 7 Ultimate_is1) (Version:  - Copyright © 2003-2013 CloneDVD Studio.)
Codec Checker (HKLM\...\{4855A5DA-B1AB-457F-0001-8901CB48A459}) (Version: 1.08 - SuperEasy Software)
ConvertXtoDVD 2.1.12.214 (HKLM\...\{BB406CEB-6207-4512-9BB2-89950DC9D6B6}_is1) (Version: 2.1.12.214 - VSO-Software SARL)
ConvertXtoDVD 4.1.19.365 (HKLM\...\{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1) (Version: 4.1.19.365 - )
CyberLink InstantBurn (HKLM\...\{19C64880-BBCA-11D4-9EEE-0004ACDDDB3B}) (Version: 5.0.5509a - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
CyberLink Power2Go (Version: 7.0.0.3328b - CyberLink Corp.) Hidden
CyberLink PowerDirector 10 (HKLM\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.)
CyberLink PowerDirector 10 (Version: 10.0.0.2810 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5108.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (Version: 10.0.5108.52 - CyberLink Corp.) Hidden
Daniusoft Media Converter Ultimate(Build 2.5.2.0) (HKLM\...\Daniusoft Media Converter Ultimate_is1) (Version:  - Daniusoft Software)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{6BDEB2BD-7C8B-4734-9E2F-E9EDC9D6C844}) (Version:  - Microsoft)
Dell System Detect (HKCU\...\9204f5692a8faf3b) (Version: 5.3.1.5 - Dell)
Digilent Software (HKLM\...\Digilent Software) (Version: 1.0.198 - Digilent, Inc.)
DjVuLibre+DjView (HKLM\...\DjVuLibre+DjView) (Version: 3.5.25.3+4.9 - DjVuZone)
Doxillion Document Converter (HKLM\...\Doxillion) (Version:  - NCH Software)
Driver Booster (HKLM\...\Driver Booster_is1) (Version: 1.4 - IObit)
DRMBuster 4.1.2 (HKLM\...\DRMBuster_is1) (Version:  - )
DVD Data Rescue 2.1 (HKLM\...\DVD Data Rescue_is1) (Version: 2.1 - )
DVD Shrink 3.2 (HKLM\...\DVD Shrink_is1) (Version:  - DVD Shrink)
DVD-Cloner V10.50 Build 1209 (HKLM\...\DVD-Cloner 2013_is1) (Version: 10.50.0.1209 - OpenCloner Inc.)
DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.2.3.2 (HKLM\...\DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5_is1) (Version:  - Fengtao Software Inc.)
DVDFab 6.0.4.2 (05/08/2009) (HKLM\...\DVDFab 6_is1) (Version:  - Fengtao Software Inc.)
DVDFab 7.0.7.9 Beta (05/07/2010) (HKLM\...\DVDFab 7_is1) (Version:  - Fengtao Software Inc.)
DVDFab 8.0.2.2 (01/10/2010) (HKLM\...\DVDFab 8_is1) (Version:  - Fengtao Software Inc.)
DVDFab 8.1.6.8 (17/03/2012) Qt (HKLM\...\DVDFab 8 Qt_is1) (Version:  - Fengtao Software Inc.)
DVDFab 9.1.2.2 (08/01/2014) (HKLM\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)
DVDneXtCOPY 2 Standard (HKLM\...\DVDneXtCOPY 2 Standard) (Version:  - )
DVDneXtCOPYneXtTech (HKLM\...\DVDneXtCOPYneXtTech) (Version:  - )
DVD-Ranger (HKLM\...\DVD-Ranger) (Version:  - )
Ease Audio Converter 5.01 (HKLM\...\Ease Audio Converter_is1) (Version:  - )
EaseUS Data Recovery Wizard 7.0 (HKLM\...\EaseUS Data Recovery Wizard 7.0_is1) (Version:  - EaseUS)
Easy CD-DA Extractor 2010 (HKLM\...\Easy CD-DA Extractor 2010) (Version: 2010.4 - Poikosoft)
Easy DVD Creator 2.5.7 (HKLM\...\Easy DVD Creator_is1) (Version:  - Ether Software)
Easy Ovi Maps Downloader 5.55 (HKLM\...\Easy Ovi Maps Downloader_is1) (Version:  - getallmaps.com)
eBook Converter (HKLM\...\eBookConverter) (Version: 1.2.1 - eBook Converter)
Elevated Installer (Version: 3.2.4.0 - Garmin Ltd or its subsidiaries) Hidden
erLT (Version: 1.12.0117 - Logitech, Inc.) Hidden
essentials (Version: 7.7.2.0 - Eastman Kodak Company) Hidden
Express Burn Disc Burning Software (HKLM\...\ExpressBurn) (Version:  - NCH Software)
FantasyDVD Player 9 Platinum (HKLM\...\FantasyDVD Platinum_is1) (Version:  - Fantasy Software Studios)
FileASSASSIN (HKLM\...\FileASSASSIN) (Version: 1.06 - Malwarebytes)
Flame Skin (HKLM\...\Flame Skin) (Version:  - )
Free File Viewer 2011 (HKLM\...\FreeFileViewer_is1) (Version:  - Bitberry Software) <==== ATTENTION
Free FLV Converter V 7.5.0 (HKLM\...\Free FLV Converter_is1) (Version: 7.5.0.0 - Koyote Soft)
FYZip 1.00 (HKLM\...\FYZip) (Version: 1.00 - TightRope Interactive)
GameCopyPro273_1 (HKLM\...\{30368B72-4D78-498E-8AE1-7389C51BD57B}) (Version: 2.73 - Game Copy Pro)
Garmin Communicator Plugin (HKLM\...\{13F054F3-0B07-4D15-9E80-C55B496AB557}) (Version: 4.0.3 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM\...\{95fb9355-9884-416e-b377-5339fc7ef31a}) (Version: 3.2.4.0 - Garmin Ltd or its subsidiaries)
Garmin Express (Version: 3.2.4.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (Version: 3.2.4.0 - Garmin Ltd or its subsidiaries) Hidden
GNU Aspell 0.50-3 (HKLM\...\GNU Aspell_is1) (Version:  - GNU)
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Update Helper (Version: 1.3.21.115 - Google Inc.) Hidden
GoToMeeting 5.1.0.880 (HKCU\...\GoToMeeting) (Version: 5.1.0.880 - CitrixOnline)
High-Definition Video Playback 10 (Version: 7.0.11400.29.0 - Nero AG) Hidden
HijackThis 1.99.1 (HKLM\...\HijackThis) (Version: 1.99.1 - Soeperman Enterprises Ltd.)
ImagXpress (Version: 7.0.74.0 - Nero AG) Hidden
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
ImTOO Blu Ray Ripper (HKLM\...\ImTOO Blu Ray Ripper) (Version: 5.2.10.1102 - ImTOO)
ImTOO DVD Copy Express (HKLM\...\ImTOO DVD Copy Express) (Version: 1.1.25.0102 - ImTOO)
InstaCodecs (HKLM\...\InstaCodecs_is1) (Version: 1.0 - )
Intel® IPP Run-Time Installer 5.2 for Windows* on IA-32 (Version: 5.2.0.2 - Intel Corporation) Hidden
IntelliCAD 2001 (HKLM\...\{67A87D78-70B5-4999-85CA-DE4C26100C7A}) (Version:  - )
Java 7 Update 60 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (Version: 2.1.60.19 - Oracle, Inc.) Hidden
Java SE Development Kit 7 Update 11 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170110}) (Version: 1.7.0.110 - Oracle)
Java™ 6 Update 22 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle)
Java™ 6 Update 37 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216032FF}) (Version: 6.0.370 - Oracle)
Karen's WhoIs (HKLM\...\Karen's WhoIs) (Version: 2.6.0.6 - Karen Kenworthy)
KhalInstallWrapper (Version: 4.60.122 - Logitech) Hidden
Kindle DRM Removal (HKLM\...\KindleDRMRemoval) (Version: 1.4.1 - eBook Converter)
Kodak AIO Printer (Version: 7.7.2.0 - Eastman Kodak Company) Hidden
KODAK AiO Software (HKLM\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.7.6.0 - Eastman Kodak Company)
ksDIP (Version: 3.20.0000.0001 - Eastman Kodak Company) Hidden
LG Tool Kit (HKLM\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
LightZone 3.7 (HKLM\...\LightZone 3.7) (Version:  - Light Crafts, Inc.)
Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.60 - Logitech)
Machinist 2 (HKLM\...\Machinist 2) (Version:  - )
MakeMKV v1.8.10 (HKLM\...\MakeMKV) (Version: v1.8.10 - GuinpinSoft inc)
McFunSoft Video Capture Convert Burn Solution 8.2.8.1088 (HKLM\...\McFunSoft Video Capture Convert Burn Solution_is1) (Version:  - )
Media Player Classic - Home Cinema v. 1.3.1249.0 (HKLM\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version:  - ) <==== ATTENTION
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Baseline Security Analyzer 2.3 (HKLM\...\{C3013E88-B772-4446-A0AE-A7F37180B9F1}) (Version: 2.3.2208 - Microsoft Corporation)
Microsoft Easy Assist v2 (HKLM\...\{326957C7-83FD-4550-A59A-849B7B4297DE}) (Version: 8.1.6416.0 - Microsoft Corporation)
Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0 - Microsoft Corporation) Hidden
Microsoft IntelliType Pro 8.2 (HKLM\...\Microsoft IntelliType Pro 8.2) (Version: 8.20.469.0 - Microsoft Corporation)
Microsoft IntelliType Pro 8.2 (Version: 8.20.469.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (HKLM\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Reader (HKLM\...\{B6F7DBE7-2FE2-458F-A738-B10832746036}) (Version:  - )
Microsoft Report Viewer Redistributable 2005 (HKLM\...\Microsoft Report Viewer Redistributable 2005) (Version:  - Microsoft Corporation)
Microsoft Report Viewer Redistributable 2005 (Version: 8.0.56405 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Software Update for Web Folders  (English) 14 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft VC9 runtime libraries (Version: 2.0.0 - AOL Inc.) Hidden
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation)
MiniTool Power Data Recovery (HKLM\...\MiniTool Power Data Recovery_is1) (Version:  - MiniTool Solution Ltd.)
MKVtoolnix 3.3.0 (HKLM\...\MKVtoolnix) (Version: 3.3.0 - Moritz Bunkus)
Movie Collector (HKLM\...\{8EC6EBB4-D899-4C6B-BA17-C21B78988F23}_is1) (Version:  - Collectorz.com)
Mozilla Firefox 13.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 13.0.1 (x86 en-US)) (Version: 13.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
MSN (HKLM\...\MSNINST) (Version:  - )
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 6.0 Parser (HKLM\...\{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}) (Version: 6.10.1129.0 - Microsoft Corporation)
Nero 10 Menu TemplatePack Basic (Version: 10.0.10600.6.0 - Nero AG) Hidden
Nero 10 Movie ThemePack Basic (Version: 10.0.10600.6.0 - Nero AG) Hidden
Nero BackItUp 10 (HKLM\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.4.11800.21.100 - Nero AG)
Nero BackItUp 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG)
Nero BurningROM 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG)
Nero BurnRights 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero Core Components 10 (Version: 2.0.13700.0.1 - Nero AG) Hidden
Nero CoverDesigner 10 (HKLM\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.0.10900.11.100 - Nero AG)
Nero CoverDesigner 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10800.7.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero Dolby Files 10 (Version: 2.0.11000.0.10 - Nero AG) Hidden
Nero Express 10 (HKLM\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.11000.10.100 - Nero AG)
Nero Express 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero InfoTool 10 (HKLM\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10800.8.100 - Nero AG)
Nero InfoTool 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero MediaHub 10 (HKLM\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.0.13400.11.100 - Nero AG)
Nero MediaHub 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero Multimedia Suite 10 (HKLM\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13100 - Nero AG)
Nero Recode 10 (HKLM\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10900.4.100 - Nero AG)
Nero Recode 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero RescueAgent 10 (HKLM\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.0.10900.9.100 - Nero AG)
Nero RescueAgent 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero SoundTrax 10 (HKLM\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.6.10600.2.100 - Nero AG)
Nero SoundTrax 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero StartSmart 10 (HKLM\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.0.11200.12.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (Version: 1.0.10700 - Nero AG) Hidden
Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG)
Nero Vision 10 (HKLM\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.0.11100.8.100 - Nero AG)
Nero Vision 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
Nero WaveEditor 10 (HKLM\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.6.10600.2.100 - Nero AG)
Nero WaveEditor 10 Help (CHM) (Version: 1.0.10600 - Nero AG) Hidden
neroxml (Version: 1.0.0 - Nero AG) Hidden
Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue)
Nitro Pro 7 (HKLM\...\{C3860DD6-64DD-412B-B5F9-10E1D4249767}) (Version: 7.5.0.22 - Nitro PDF Software)
ocr (Version: 6.2.3.50 - Eastman Kodak Company) Hidden
Odin Blu-ray to HD Converter 7.6.3 (HKLM\...\Odin Blu-ray to HD Converter_is1) (Version:  - Odin Share Company)
OneTouchUpgrade 1.8.1.9 (HKLM\...\OTU_is1) (Version:  - )
OpenOffice.org 3.3 (HKLM\...\{3E171899-0175-47CC-84C4-562ACDD4C021}) (Version: 3.3.9567 - OpenOffice.org)
Password Recovery 5.0 (HKLM\...\Password Recovery 5.0) (Version:  - )
Patin-Couffin 36 (HKLM\...\Patin-Couffin Drivers_is1) (Version:  - VSO-software)
PDF ePub DRM Removal (HKLM\...\PDFePubRMRemoval) (Version: 1.4.1 - eBook Converter)
PDFlite 0.7 (HKLM\...\PDFlite) (Version: 0.7 - Amnis Technology Ltd)
PFConfig 1.0.296 (HKLM\...\PFConfig) (Version: 1.0.296 - Portforward.com)
PhotoPad Image Editor (HKLM\...\PhotoPad) (Version:  - NCH Software)
Pixillion Image Converter (HKLM\...\Pixillion) (Version:  - NCH Software)
PlexUTILITIES 1.3.1.0 (HKLM\...\PlexUtil) (Version: 1.3.1.0 - Plextor)
Portforward Static IP Address 1.0.47 (HKLM\...\Portforward Static IP Address) (Version: 1.0.47 - Portforward.com)
PowerISO (HKLM\...\PowerISO) (Version:  - )
PreReq (Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM\...\PrintProjects) (Version: 1.0.0.10712 - RocketLife Inc.)
Prism Video File Converter (HKLM\...\Prism) (Version: 2.10 - NCH Software)
Product Key Explorer 3.2.7 (HKLM\...\Product Key Explorer_is1) (Version:  - Nsasoft, LLC.)
Protected Folder (HKLM\...\Protected Folder_is1) (Version:  - IObit)
Quamm Search Engine (remove only) (HKLM\...\Quamm Search Engine) (Version:  - )
QuickTime 7 (HKLM\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
QuickTime Alternative 1.47 (HKLM\...\QuicktimeAlt_is1) (Version: 1.47 - )
RAR Password Recovery 1.7 (HKLM\...\RAR Password Recovery_is1) (Version:  - Top Password Software, Inc.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
RegCure Pro (HKLM\...\{C547F361-5750-4CD1-9FB6-BC93827CB6C1}) (Version: 3.1.2.0 - ParetoLogic, Inc.)
Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.6.6.6 - Reimage)
Release OrCAD 10.0 (HKLM\...\{F6A3CF9D-A775-41F6-AA22-68EF52893339}) (Version:  - )
Rosetta Stone Version 3 (HKLM\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
Smart Defrag 3 (HKLM\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
Sophos Anti-Rootkit 1.5.20 (HKLM\...\Sophos-AntiRootkit) (Version: 1.5.20 - Sophos Plc)
Sophos Virus Removal Tool (HKLM\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.2 - Sophos Limited)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
SpyHunter (HKLM\...\{CC1F6DA0-21D2-425A-B1B6-5B164A598450}) (Version: 4.9.12.4023 - Enigma Software Group USA, LLC)
Streaming Video Recorder V2.4.1 (HKLM\...\{2CD65167-671F-49A3-B6C7-3B919DF028E2}_is1) (Version: 2.4.1 - Apowersoft)
Super Internet TV v8.0 (Premium Edition) (HKLM\...\Super Internet TV (Premium Edition)_is1) (Version:  - Ahusoft)
Surfing Protection (HKLM\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Complete National Geographic (HKLM\...\com.nationalgeographic.products.cng120.68B1CC4249876152EBE333BD4B7514ADB4D94062.1) (Version: 1.14 build 835 - National Geographic Society)
The Complete National Geographic (HKLM\...\The Complete National Geographic 1.14) (Version: 1.14 - National Geographic)
The Complete National Geographic (Version: 1.14.835 - National Geographic Society) Hidden
TomTom HOME (HKLM\...\{26CE484D-2E8E-40D5-B251-158133114C69}) (Version: 2.9.0 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Ultra Video Converter 5.2.0408 (HKLM\...\Ultra Video Converter_is1) (Version:  - Aone Software)
UltraISO Premium V9.33 (HKLM\...\UltraISO_is1) (Version:  - )
UnLock Root 3.1 (HKLM\...\UnLock Root) (Version: 3.1 - Unlcokroot)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2473228) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)
Video Converter (HKLM\...\{6DA3E438-338A-4568-0001-2F9BDBB695C5}) (Version: 1.045 - SuperEasy Software)
VideoPerformer (HKLM\...\VideoPerformer) (Version:  - PerformerSoft LLC) <==== ATTENTION
VIO Player version 1.2 (HKLM\...\{2A9009E1-122C-4692-B442-A750C0DE7BA1}_is1) (Version: 1.2 - VIO Player)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VSO ConvertXToDVD (HKLM\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.1.0.12 - VSO Software)
VSO CopyToDVD 4 (HKLM\...\{870F1750-BA89-11DA-A94D-0800200C9A66}_is1) (Version: 4.3.1.12 - VSO Software)
VSO Inspector 2.1.0.6 (HKLM\...\VSO Inspector_is1) (Version: 2.1.0.6 - VSO-Software)
WebEx (HKLM\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
WebEx Support Manager for Internet Explorer (HKLM\...\{C34FAEF3-4241-4C4E-9CFF-7BBD8BCEABE7}) (Version: 6.5.47 - WebEx Communications Inc.)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Who Is On My Wifi version 2.2.0 (HKLM\...\{010D45A1-093D-4534-8147-4E10E80F81CC}_is1) (Version: 2.2.0 - IO3O LLC)
WinAVI FLV Converter (HKLM\...\WinAVI FLV Converter 1.0_is1) (Version:  - ZJ Computing,Inc.)
WinAVI Video Converter (HKLM\...\WinAVI Video Converter) (Version: 11.5.1.4360 - ZJMedia Digital Technology Ltd.)
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
Windows Installer Clean Up (HKLM\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation)
Windows Management Framework Core (HKLM\...\KB968930) (Version:  - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Format 11 runtime (Version:  - Microsoft Corporation) Hidden
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
Windows Media Player 11 (Version:  - Microsoft Corporation) Hidden
Windows PowerShell™ 1.0 (HKLM\...\PowerShell) (Version: 1 - Microsoft Corporation)
Windows Resource Kit Tools - SubInAcl.exe (HKLM\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)
Windows Support Tools (HKLM\...\{89B078C4-50B0-453E-BF53-3A7E6A0D85FA}) (Version: 5.1.2600.2180 - Microsoft Corporation)
WinISO 5.3 (HKLM\...\WinISO_is1) (Version:  - WinISO Computing Inc.)
WinPcap 4.1.1 (HKLM\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
WinX DVD Ripper Platinum 5.22.0 (HKLM\...\WinX DVD Ripper Platinum_is1) (Version:  - Digiarty Software, Inc.)
WinZip 11.2 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B6}) (Version: 11.2.8094 - WinZip Computing, S.L. )
Wondershare DVD Converter(Build 4.5.1.1) (HKLM\...\Wondershare DVD Converter_is1) (Version:  - Wondershare Software)
WordPerfect Office 11 (HKLM\...\{54F90B55-BEB3-4F0D-8802-228822FA5921}) (Version: 11.0 - Corel Corporation)
Xbox Commander version 4.1 (HKLM\...\{7D92D3FC-F62A-430D-A0B4-2AF50CFB4F58}) (Version: 4.1.0 - Heitmeijer)
Xilinx ISE 10.1 (HKLM\...\Xilinx ISE 10.1) (Version:  - )
Xilisoft Video Converter Ultimate (HKCU\...\Xilisoft Video Converter Ultimate) (Version: 7.7.2.20130217 - Xilisoft)
Xvid MPEG-4 Video Codec (HKLM\...\Xvid_is1) (Version:  - )
YTD Video Downloader 4.8.3 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.3 - GreenTree Applications SRL)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files\Citrix\GoToMeeting\880\G2MOutlookAddin.dll (Citrix Online, a division of Citrix Systems, Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-484763869-2111687655-1606980848-1003_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\1.3.24.15\psuser.dll (Google Inc.)

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2001-08-23 04:00 - 2008-04-14 14:00 - 00000734 ___RA C:\WINDOWS.2\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS.2\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS.2\Tasks\DoxillionDowngrade.job => C:\Program Files\NCH Software\Doxillion\doxillion.exe
Task: C:\WINDOWS.2\Tasks\DoxillionReminder.job => C:\Program Files\NCH Software\Doxillion\doxillion.exe
Task: C:\WINDOWS.2\Tasks\expressburnShakeIcon.job => C:\Program Files\NCH Swift Sound\ExpressBurn\expressburn.exe
Task: C:\WINDOWS.2\Tasks\Gary Local Autobackup 5 4.job => C:\Program Files\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: C:\WINDOWS.2\Tasks\GoogleUpdateTaskUserS-1-5-21-484763869-2111687655-1606980848-1003Core.job => C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS.2\Tasks\GoogleUpdateTaskUserS-1-5-21-484763869-2111687655-1606980848-1003UA.job => C:\Documents and Settings\Gary\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS.2\Tasks\Microsoft Windows XP End of Service Notification Logon.job => C:\WINDOWS.2\system32\xp_eos.exe
Task: C:\WINDOWS.2\Tasks\Microsoft Windows XP End of Service Notification Monthly.job => C:\WINDOWS.2\system32\xp_eos.exe
Task: C:\WINDOWS.2\Tasks\Microsoft_Hardware_Launch_IPoint_exe.job => C:\Program Files\Microsoft IntelliPoint\ipoint.exe
Task: C:\WINDOWS.2\Tasks\Microsoft_Hardware_Launch_IType_exe.job => C:\Program Files\Microsoft IntelliType Pro\itype.exe
Task: C:\WINDOWS.2\Tasks\ParetoLogic Update Version3 Startup Task.job => C:\Program Files\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe
Task: C:\WINDOWS.2\Tasks\photopadShakeIcon.job => C:\Program Files\NCH Software\PhotoPad\photopad.exe
Task: C:\WINDOWS.2\Tasks\pixillionDowngrade.job => C:\Program Files\NCH Software\Pixillion\pixillion.exe
Task: C:\WINDOWS.2\Tasks\pixillionShakeIcon.job => C:\Program Files\NCH Software\Pixillion\pixillion.exe
Task: C:\WINDOWS.2\Tasks\PrintProjects Communicator.job => C:\Documents and Settings\All Users.WINDOWS.2\Application Data\PrintProjects\Communicator.exe
Task: C:\WINDOWS.2\Tasks\RegCure Pro.job => C:\Program Files\ParetoLogic\RegCure Pro\RegCurePro.exe
Task: C:\WINDOWS.2\Tasks\RegCure Pro_sch_4E1B87AA-27A7-11E4-A739-0007E9E3652D.job => C:\Program Files\ParetoLogic\RegCure Pro\RegCurePro.exe
Task: C:\WINDOWS.2\Tasks\ReimageUpdater.job => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
Task: C:\WINDOWS.2\Tasks\SmartDefrag3_Schedule.job => C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe
Task: C:\WINDOWS.2\Tasks\SmartDefrag3_Startup.job => C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe
Task: C:\WINDOWS.2\Tasks\SmartDefrag3_Update.job => C:\Program Files\IObit\Smart Defrag 3\AutoUpdate.exe
Task: C:\WINDOWS.2\Tasks\SmartDefrag_Schedule.job => C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
Task: C:\WINDOWS.2\Tasks\SpeedMaxPc_sch_30B6103C-DF5D-11E3-A6D9-0007E9E3652D.job => C:\Program Files\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe
Task: C:\WINDOWS.2\Tasks\SpeedMaxPc_sch_349FCC78-BE2F-11E3-8BAF-0007E9E3652D.job => C:\Program Files\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe
Task: C:\WINDOWS.2\Tasks\SpeedMaxPc_sch_37B5F906-DF30-11E3-A6D9-0007E9E3652D.job => C:\Program Files\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe
Task: C:\WINDOWS.2\Tasks\SpeedMaxPc_sch_A760A460-18EA-11E4-A711-0007E9E3652D.job => C:\Program Files\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe
Task: C:\WINDOWS.2\Tasks\SpeedMaxPc_sch_B5A223C6-9D36-11E3-8B9B-0007E9E3652D.job => C:\Program Files\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe
Task: C:\WINDOWS.2\Tasks\SpeedMaxPc_sch_DB739962-28C9-11E4-A741-0007E9E3652D.job => C:\Program Files\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe
Task: C:\WINDOWS.2\Tasks\SpeedMaxPc_sch_FC34B912-27AF-11E4-A73A-0007E9E3652D.job => C:\Program Files\SpeedMaxPc\SpeedMaxPc\SpeedMaxPc.exe
Task: C:\WINDOWS.2\Tasks\User_Feed_Synchronization-{6A02D280-3935-45F3-8EC6-584928C95165}.job => C:\WINDOWS.2\system32\msfeedssync.exe
Task: C:\WINDOWS.2\Tasks\User_Feed_Synchronization-{9CF66ED3-999B-440B-ABD0-2BDFD528737D}.job => C:\WINDOWS.2\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2008-04-14 05:00 - 2008-04-14 05:00 - 00015360 _____ () C:\WINDOWS.2\system32\tsd32.dll
2010-01-09 21:18 - 2010-01-09 21:18 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-21 02:34 - 2010-01-21 02:34 - 08793952 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2012-03-11 09:07 - 2012-03-11 09:07 - 00159744 _____ () C:\Program Files\Mega Codec Pack\Filters\Haali\mmfinfo.dll
2012-03-11 09:07 - 2012-03-11 09:07 - 00023552 _____ () C:\Program Files\Mega Codec Pack\Filters\Haali\mkunicode.dll
2006-03-04 23:01 - 2006-12-03 15:53 - 00126464 _____ () C:\Program Files\WinRAR\rarext.dll
2012-07-25 21:19 - 2012-07-25 21:19 - 00094728 _____ () C:\Program Files\Nitro PDF\Professional 7\NPShellExtension.dll
2014-07-30 11:37 - 2014-07-30 11:37 - 03800688 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-01-01 23:48 - 2013-01-01 23:48 - 01292288 _____ () C:\WINDOWS.2\system32\quartz.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\WINDOWS.2:nlsPreferences
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS.2\Application Data\Temp:BF3D62E7
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS.2\Application Data\Temp:DE406C3E
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS.2\Application Data\Temp:FB1B13D8
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS.2\Application Data\Temp:BF3D62E7
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS.2\Application Data\Temp:DE406C3E
AlternateDataStreams: C:\Documents and Settings\All Users.WINDOWS.2\Application Data\Temp:FB1B13D8
AlternateDataStreams: C:\Documents and Settings\Gary\Local Settings\Application Data\desktop.ini:722b2b1c349a06abf0e866180e5a7e63

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WdfLoadGroup => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)



HKU\S-1-5-21-484763869-2111687655-1606980848-1003\Software\Classes\exefile:  <===== ATTENTION!

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Activate.exe =>
MSCONFIG\startupreg: Adobe ARM => c:\program files\common files\adobe\arm\1.0\adobearm.exe
MSCONFIG\startupreg: BCSSync => "c:\program files\microsoft office\office14\bcssync.exe" /delayservices
MSCONFIG\startupreg: BDRegion => c:\program files\cyberlink\shared files\brs.exe
MSCONFIG\startupreg: Conime =>
MSCONFIG\startupreg: CTFMON.EXE =>
MSCONFIG\startupreg: EKIJ5000StatusMonitor => c:\windows.2\system32\spool\drivers\w32x86\3\ekij5000mui.exe
MSCONFIG\startupreg: GarminExpressTrayApp => c:\program files\garmin\express tray\expresstray.exe
MSCONFIG\startupreg: IntelliPoint =>
MSCONFIG\startupreg: LGODDFU =>
MSCONFIG\startupreg: PDR10.exe =>
MSCONFIG\startupreg: PDVDLaunchPolicy.exe =>
MSCONFIG\startupreg: PhotoDirector4.exe =>
MSCONFIG\startupreg: Power2Go.exe =>
MSCONFIG\startupreg: Power2GoExpress =>
MSCONFIG\startupreg: QuickTime Task => "c:\program files\quicktime\qttask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl10 =>
MSCONFIG\startupreg: SimpleFiles Installer Starter =>
MSCONFIG\startupreg: SunJavaUpdateSched =>
MSCONFIG\startupreg: UACAgent.exe =>
MSCONFIG\startupreg: UserFaultCheck =>
MSCONFIG\startupreg: uTorrent => "c:\documents and settings\gary\application data\utorrent\utorrent.exe"  /minimized

==================== Faulty Device Manager Devices =============

Could not list Devices. Check "winmgmt" service or repair WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/27/2014 09:14:13 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 08:57:17 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 07:21:13 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 07:15:17 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 06:51:05 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 06:50:51 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 02:57:26 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 02:30:15 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 01:02:26 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.

Error: (08/27/2014 00:52:15 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description: Windows couldn't log the RSoP (Resultant Set of Policies) session status. An attempt to connect to WMI failed. No more RSoP logging will be done for this application of policy.


System errors:
=============
Error: (08/27/2014 09:19:55 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 09:16:01 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 09:13:58 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 09:11:56 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 09:02:57 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 08:50:35 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 08:44:43 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 07:32:30 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 07:25:26 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/27/2014 07:23:24 AM) (Source: DCOM) (EventID: 10010) (User: BEDROOM)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.


Microsoft Office Sessions:
=========================
Error: (08/27/2014 09:14:13 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 08:57:17 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 07:21:13 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 07:15:17 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 06:51:05 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 06:50:51 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 02:57:26 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 02:30:15 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 01:02:26 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:

Error: (08/27/2014 00:52:15 AM) (Source: Userenv) (EventID: 1090) (User: NT AUTHORITY)
Description:


==================== Memory info ===========================

Processor:  Intel® Pentium® 4 CPU 3.06GHz
Percentage of memory in use: 51%
Total physical RAM: 1022.98 MB
Available physical RAM: 496.24 MB
Total Pagefile: 4000.73 MB
Available Pagefile: 3654.64 MB
Total Virtual: 2047.88 MB
Available Virtual: 1956.59 MB

==================== Drives ================================

Drive c: (Local Disk) (Fixed) (Total:186.26 GB) (Free:92.74 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:292.69 GB) NTFS
Drive e: (1TB) (Fixed) (Total:931.5 GB) (Free:132.52 GB) NTFS
Drive f: (Local Disk) (Fixed) (Total:47.49 GB) (Free:40.85 GB) NTFS
Drive g: (Local Disk) (Fixed) (Total:231.99 GB) (Free:160.17 GB) NTFS
Drive j: (1TA) (Fixed) (Total:931.5 GB) (Free:789.68 GB) NTFS
Drive k: (Seagate Backup Plus Drive) (Fixed) (Total:1863.01 GB) (Free:974.04 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: A88A2D23)
Partition 1: (Active) - (Size=186.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=279.5 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 5792CED3)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 7BE1EA02)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)

========================================================
Disk: 3 (Size: 931.5 GB) (Disk ID: 12E112E0)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)

========================================================
Disk: 4 (Size: 1863 GB) (Disk ID: 5C3BDC80)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================

[zrski1]

Ken:

 

I cannot run it Normal Mode. The command line and Desktop select function do not work.

 

I've just posted Additions.txt. The malware script "un-checks" Additions and unless I get its toggling sunk-up correctly it just runs and gives the main log.

 

These scripts seem to be designed to kill both FRST and Malwarebytes spicifically.

 

Please be patient with me this whole affair is "on the edge".

 

Thanks,

 

Gary Zeranski

[ken545]

These are my thoughts.

 

Why did you go out and buy a Windows XP installation disk 3 times, you only need to buy it once, its yours, you own it, the product key is assigned to you and your computer, if you wanted, you could reformat your drive and do a clean install of windows once a month without ever having to buy a new CD, during the install you just use the product key on the package

 

You have a few bogus programs on your computer but without running programs successfully to remove them there is nothing else we can do. I believe the problems your having is either a bad windows install catching up to you or if this computer is 11 years old you may be having some sort of hardware issue

 

 

What you should do is to do a complete reformat of your hard drive, this will wipe it down to bare metal, it will remove all those bogus installations, then format your drive and use one of your XP disks to to reinstall Windows XP nice and clean

 

If you need help to do this correctly you can post in our windows forum for help, or  you can take your computer and the windows disk to a local computer shop and have them do it for you

 

http://forums.whatth...p?showforum=119

 

Good luck,

 

Ken

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatth...ed_t106388.html
and start a New Topic.