|
Malware Removal Discussion about Trojans, viruses, hoaxes, firewalls, spyware, and general Security issues. If you suspect your PC is infected with a virus, trojan or spyware app please include any supporting documentation or logs |
|
Topic Tools |
#31
|
||||
|
||||
I have the link to download an .iso file of Windows 7 Ultimate SP1 on a different system, that I will access tomorrow. Then you can burn a DVD that you can use for that in-place upgrade.
|
#32
|
|||
|
|||
Thanks Tom.
|
#34
|
|||
|
|||
Hi Tom.
Downloaded and burned to DVD, ran setup.exe and get an error message: "windows cannot access the installation sources. Verify that the installation sources are accesible, and restart the installation". Regards Jon |
#35
|
||||
|
||||
Best guess bad disk/disk copy or problems with the DVD drive. Have to rethink this one, I guess.
|
#36
|
|||
|
|||
I'll try and burn it to a memory stick. If it still doesn't work, then it probably isn't the hard drive.
|
#37
|
|||
|
|||
I meant did drive.
|
#38
|
||||
|
||||
#39
|
|||
|
|||
Did was suposed to read DVD (predictive text on a mobile - and a beer!). I have managed to do it using a memory stick. Took a while as normal but upgraded ok using the link that you supplied - thanks - The pc still seems sluggish though. Whenever I click on IE, it seems to hang, says "not responding", then eventually starts. Clicking into any program just seems slow.
|
#40
|
|||
|
|||
Hi Tom.
The system seems to be a lot faster now. It was really slow to start with but i have been using it for a while and it seems to have settled down. |
#41
|
||||
|
||||
Post a new OTL log please.
|
#42
|
|||
|
|||
Just got back and the sytem seems to take quite a while to fully boot up. After 5 minutes or so it seems fine though. Here is the OTL log for all users:
OTL logfile created on: 01/09/2014 20:05:21 - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jon\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy 3.25 Gb Total Physical Memory | 1.05 Gb Available Physical Memory | 32.30% Memory free 6.49 Gb Paging File | 3.77 Gb Available in Paging File | 58.06% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 465.75 Gb Total Space | 172.30 Gb Free Space | 36.99% Space Free | Partition Type: NTFS Computer Name: JON-PC | User Name: Jon | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2014/08/22 09:02:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jon\Desktop\OTL.exe PRC - [2014/08/21 16:03:26 | 002,607,384 | ---- | M] (IBM Corp.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe PRC - [2014/08/21 16:03:26 | 001,919,256 | ---- | M] (IBM Corp.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe PRC - [2014/08/07 04:20:57 | 000,860,488 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdate Svc.exe PRC - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe PRC - [2014/06/06 11:27:16 | 000,064,384 | ---- | M] (Google) -- C:\Users\Jon\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe PRC - [2013/12/18 19:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012/07/13 17:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe ========== Modules (No Company Name) ========== MOD - [2014/08/07 04:20:55 | 000,353,096 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ppgo oglenaclpluginchrome.dll MOD - [2014/08/07 04:20:54 | 014,669,128 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\Pepp erFlash\pepflashplayer.dll MOD - [2014/08/07 04:20:53 | 008,537,928 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\pdf. dll MOD - [2014/08/07 04:20:49 | 000,718,152 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libg lesv2.dll MOD - [2014/08/07 04:20:47 | 000,126,280 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libe gl.dll MOD - [2014/08/07 04:20:46 | 001,732,936 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ffmp egsumo.dll MOD - [2014/03/23 17:04:20 | 000,557,056 | ---- | M] () -- C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll MOD - [2014/01/20 14:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2014/01/20 14:16:38 | 001,044,808 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ========== Services (SafeList) ========== SRV:64bit: - [2014/07/25 14:00:25 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:64bit: - [2011/04/20 02:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009/07/14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2014/08/21 16:03:26 | 001,919,256 | ---- | M] (IBM Corp.) [Auto | Running] -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe -- (RapportMgmtService) SRV - [2014/08/07 08:52:52 | 000,438,616 | ---- | M] (Garmin Ltd or its subsidiaries) [Auto | Stopped] -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.e xe -- (Garmin Core Update Service) SRV - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdate Svc.exe -- (c2cautoupdatesvc) SRV - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc) SRV - [2014/07/10 03:22:27 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013/12/18 19:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013/12/16 21:31:34 | 000,443,080 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\GSService.exe -- (GSService) SRV - [2013/10/23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013/09/11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2012/07/13 17:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2014/08/21 16:03:38 | 000,536,984 | ---- | M] (IBM Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\RapportKE64.sys -- (RapportKE64) DRV:64bit: - [2013/02/06 07:25:22 | 000,032,064 | ---- | M] (Jaksta Technologies Pty Ltd) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\jakndis.sys -- (jakndis) DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2011/04/20 02:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:64bit: - [2011/04/20 01:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2010/11/21 04:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2010/11/21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010/11/21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:64bit: - [2010/11/21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:64bit: - [2010/11/21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:64bit: - [2010/11/21 04:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:64bit: - [2010/11/21 04:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2010/11/21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010/11/21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2010/11/21 04:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/07/14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 21:34:18 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009/05/14 09:26:24 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV - [2014/08/31 19:20:41 | 000,768,184 | ---- | M] () [Kernel | System | Running] -- C:\ProgramData\Trusteer\Rapport\store\exts\Rapport Cerberus\baseline\RapportCerberus64_80049.sys -- (RapportCerberus_80049) DRV - [2014/08/21 16:03:38 | 000,563,096 | ---- | M] (IBM Corp.) [Kernel | System | Running] -- C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys -- (RapportPG64) DRV - [2014/08/21 16:03:38 | 000,444,184 | ---- | M] (IBM Corp.) [Kernel | System | Running] -- C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys -- (RapportEI64) DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVer sion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us IE - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 01 29 21 B9 D0 35 CD 01 [binary data] IE - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_ 145.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_ 145.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@doubletwist.com/NPPodcast: C:\Program Files (x86)\Common Files\doubleTwist\NPPodcast.dll File not found FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Jon\AppData\Roaming\Mozilla\plugins\npgoo gletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Jon\AppData\Roaming\Mozilla\plugins\npo1d .dll (Google) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Jon\AppData\Local\Google\Update\1.3.24.15 \npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Jon\AppData\Local\Google\Update\1.3.24.15 \npGoogleUpdate3.dll (Google Inc.) [2014/08/31 15:33:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jon\AppData\Roaming\Mozilla\Firefox\exten sions [2014/08/31 15:33:40 | 000,000,000 | ---D | M] (uTorrentControl_v2) -- C:\Users\Jon\AppData\Roaming\Mozilla\Firefox\exten sions\{7473b6bd-4691-4744-a82b-7854eb3d70b6} [2014/02/13 16:52:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions ========== Chrome ========== CHR - default_search_provider: (Enabled) CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - homepage: http://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\Pepp erFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ppGo ogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\pdf. dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: Garmin Communicator Plug-In (Enabled) = C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U21 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_70 0_224.dll CHR - plugin: Java Deployment Toolkit 7.0.210.11 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\Jon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmn hjmhfn\0.1.1.5023_0\ CHR - Extension: Skype Click to Call = C:\Users\Jon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfg npldfl\7.3.16540.9015_0\ CHR - Extension: Google Wallet = C:\Users\Jon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccm gmieda\0.0.6.1_0\ O1 HOSTS File: ([2013/06/24 08:30:03 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:64bit: - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:64bit: - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found. O3:64bit: - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found. O4 - HKLM..\Run: [] File not found O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3285714031-64123788-3120992467-1001..\Run: [FBEB048EB7CB93125BF492D79DF0C3BC4EB81112._service_ run] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Helen\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Startup\Dropbox.lnk = File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: EnableLinkedConnections = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: DontDisplayLogonHoursWarnings = 1 O7 - HKU\S-1-5-21-3285714031-64123788-3120992467-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: LogonHoursAction = 2 O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found O8:64bit: - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found O9:64bit: - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfac es\{83B65331-1D99-42AF-A739-4AA4B4DC3BC4}: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfac es\{A6C5A978-1B40-4B4A-B30D-0897B717EBF6}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml - No CLSID value found O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011/08/23 18:51:58 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2014/09/01 19:31:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2014/09/01 19:29:48 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2014/09/01 19:29:28 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2014/09/01 19:29:28 | 000,098,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2014/09/01 19:29:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java |
#43
|
|||
|
|||
- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2014/09/01 19:28:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2014/08/31 23:31:26 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2014/08/31 23:00:14 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~Q [2014/08/31 22:45:44 | 000,000,000 | -H-D | C] -- C:\$INPLACE.~TR [2014/08/31 16:43:09 | 001,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll [2014/08/31 16:43:08 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll [2014/08/31 16:43:08 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll [2014/08/31 16:27:25 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2014/08/31 16:27:25 | 000,058,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2014/08/31 16:27:25 | 000,044,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll [2014/08/31 16:27:06 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2014/08/31 16:27:06 | 000,038,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2014/08/31 16:27:05 | 000,700,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2014/08/31 16:27:05 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2014/08/31 16:27:04 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2014/08/31 16:27:04 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2014/08/31 16:26:54 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2014/08/31 16:26:54 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2014/08/31 16:26:53 | 000,198,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2014/08/31 16:26:53 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [2014/08/31 14:42:33 | 000,000,000 | --SD | C] -- C:\Users\Jon\AppData\Roaming\Microsoft [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Videos [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Saved Games [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Pictures [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Music [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Maintenance [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Links [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Favorites [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Downloads [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Documents [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\Desktop [2014/08/31 14:42:33 | 000,000,000 | R--D | C] -- C:\Users\Jon\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Accessories [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\AppData\Local\Temporary Internet Files [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Templates [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Start Menu [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\SendTo [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Recent [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\PrintHood [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\NetHood [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Documents\My Videos [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Documents\My Pictures [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Documents\My Music [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\My Documents [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Local Settings [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\AppData\Local\History [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Cookies [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\Application Data [2014/08/31 14:42:33 | 000,000,000 | -HSD | C] -- C:\Users\Jon\AppData\Local\Application Data [2014/08/31 14:42:33 | 000,000,000 | -H-D | C] -- C:\Users\Jon\AppData [2014/08/31 14:42:33 | 000,000,000 | ---D | C] -- C:\Users\Jon\AppData\Local\Temp [2014/08/31 14:42:33 | 000,000,000 | ---D | C] -- C:\Users\Jon\AppData\Local\Microsoft [2014/08/31 14:42:33 | 000,000,000 | ---D | C] -- C:\Users\Jon\AppData\Roaming\Media Center Programs [2014/08/31 14:35:02 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2014/08/31 09:16:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited [2014/08/31 09:16:40 | 000,000,000 | ---D | C] -- C:\Users\Jon\AppData\Roaming\Canneverbe Limited [2014/08/31 09:16:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CDBurnerXP [2014/08/31 00:33:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB [2014/08/31 00:33:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ISO to USB [2014/08/28 20:54:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2014/08/28 20:53:56 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2014/08/25 13:38:03 | 004,862,664 | ---- | C] (AVAST Software) -- C:\Users\Jon\Desktop\avast_free_antivirus_setup_on line (1).exe [2014/08/25 11:10:00 | 000,426,848 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswsp.sys.14089614507 61 [2014/08/25 08:50:35 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Jon\Desktop\HijackThis.exe [2014/08/24 21:12:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable) [2014/08/24 21:09:41 | 014,349,744 | ---- | C] (Malwarebytes Corp.) -- C:\Users\Jon\Desktop\mbar-1.07.0.1012.exe [2014/08/22 09:02:50 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jon\Desktop\OTL.exe [2014/08/22 08:41:24 | 000,000,000 | ---D | C] -- C:\Users\Jon\AppData\Local\CrashDumps [2014/08/22 08:30:57 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller [2014/08/21 22:47:22 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014/08/21 22:47:19 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014/08/21 22:47:14 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2014/08/21 22:47:13 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014/08/21 22:47:10 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2014/08/21 22:46:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014/08/21 22:46:50 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014/08/21 22:46:34 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2014/08/21 22:46:15 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2014/08/21 22:46:02 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2014/08/21 22:46:00 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014/08/21 22:45:58 | 005,824,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014/08/21 22:45:49 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll [2014/08/21 22:45:42 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2014/08/10 09:03:29 | 000,000,000 | ---D | C] -- C:\Users\Jon\AppData\Local\pangu [2014/08/10 00:08:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2014/08/10 00:05:25 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2014/08/10 00:05:24 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2014/08/10 00:05:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2014/08/10 00:05:24 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2014/09/01 19:34:02 | 000,020,816 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014/09/01 19:34:02 | 000,020,816 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014/09/01 19:31:11 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014/09/01 19:29:55 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3285714031-64123788-3120992467-1001UA.job [2014/09/01 19:29:09 | 000,098,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2014/09/01 19:29:05 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2014/09/01 19:29:05 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2014/09/01 19:29:04 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2014/09/01 19:22:37 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014/09/01 19:22:20 | 000,781,790 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014/09/01 19:22:20 | 000,662,060 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014/09/01 19:22:20 | 000,121,928 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014/09/01 19:16:42 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014/09/01 19:15:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014/09/01 19:15:37 | 2615,812,096 | -HS- | M] () -- C:\hiberfil.sys [2014/08/31 23:31:11 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2014/08/31 19:30:43 | 000,773,912 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014/08/31 19:00:03 | 000,001,437 | ---- | M] () -- C:\Users\Jon\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014/08/31 18:58:18 | 000,000,632 | RHS- | M] () -- C:\Users\Jon\ntuser.pol [2014/08/31 18:55:03 | 000,000,848 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3285714031-64123788-3120992467-1001Core.job [2014/08/31 16:26:33 | 000,116,385 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2014/08/31 16:26:33 | 000,116,385 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2014/08/31 15:55:31 | 000,022,744 | ---- | M] () -- C:\Windows\SysNative\emptyregdb.dat [2014/08/31 15:48:10 | 000,420,232 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2014/08/31 14:38:13 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09 _00.Wdf [2014/08/31 14:35:59 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin [2014/08/31 12:21:18 | 000,003,094 | ---- | M] () -- C:\Users\Jon\Desktop\Windows Compatibility Report.htm [2014/08/31 12:17:00 | 000,001,890 | ---- | M] () -- C:\Windows\diagwrn.xml [2014/08/31 12:17:00 | 000,001,890 | ---- | M] () -- C:\Windows\diagerr.xml [2014/08/31 10:18:29 | 000,001,021 | ---- | M] () -- C:\Users\Public\Desktop\ISO to USB.lnk [2014/08/31 09:56:42 | 000,001,941 | ---- | M] () -- C:\Users\Jon\Desktop\CDBurnerXP.lnk [2014/08/28 20:55:51 | 000,000,776 | ---- | M] () -- C:\Users\Jon\Desktop\7-Zip File Manager.lnk [2014/08/26 21:42:34 | 000,003,876 | ---- | M] () -- C:\Users\Jon\Documents\cc_20140826_214228.reg [2014/08/26 21:41:50 | 000,138,424 | ---- | M] () -- C:\Users\Jon\Documents\cc_20140826_214103.reg [2014/08/25 13:37:38 | 004,862,664 | ---- | M] (AVAST Software) -- C:\Users\Jon\Desktop\avast_free_antivirus_setup_on line (1).exe [2014/08/25 11:08:42 | 000,426,848 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswsp.sys.14089614507 61 [2014/08/25 08:50:30 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Jon\Desktop\HijackThis.exe [2014/08/25 08:40:03 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2014/08/24 21:14:59 | 000,128,728 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2014/08/24 21:14:36 | 000,092,888 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys [2014/08/24 21:09:34 | 014,349,744 | ---- | M] (Malwarebytes Corp.) -- C:\Users\Jon\Desktop\mbar-1.07.0.1012.exe [2014/08/23 11:55:49 | 000,000,261 | ---- | M] () -- C:\Users\Jon\.swfinfo [2014/08/23 09:49:09 | 000,380,416 | ---- | M] () -- C:\Users\Jon\Desktop\r9d45imn.exe [2014/08/22 10:01:05 | 000,033,512 | ---- | M] () -- C:\Windows\SysWow64\drivers\TrueSight.sys [2014/08/22 09:02:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jon\Desktop\OTL.exe [2014/08/22 08:30:02 | 004,851,288 | ---- | M] () -- C:\Users\Jon\Desktop\winlog.exe [2014/08/21 23:03:31 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014/08/21 16:03:38 | 000,536,984 | ---- | M] (IBM Corp.) -- C:\Windows\SysNative\drivers\RapportKE64.sys [2014/08/10 00:08:15 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] ========== Files Created - No Company Name ========== [2014/08/31 19:30:43 | 000,773,912 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014/08/31 19:00:03 | 000,001,409 | ---- | C] () -- C:\Users\Jon\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Internet Explorer (64-bit).lnk [2014/08/31 18:59:52 | 000,001,443 | ---- | C] () -- C:\Users\Jon\AppData\Roaming\Microsoft\Windows\Sta rt Menu\Programs\Internet Explorer.lnk [2014/08/31 18:58:18 | 000,000,632 | RHS- | C] () -- C:\Users\Jon\ntuser.pol [2014/08/31 16:29:50 | 2615,812,096 | -HS- | C] () -- C:\hiberfil.sys [2014/08/31 15:55:32 | 000,022,744 | ---- | C] () -- C:\Windows\SysNative\emptyregdb.dat [2014/08/31 14:42:33 | 000,000,290 | ---- | C] () -- C:\Users\Jon\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2014/08/31 14:42:33 | 000,000,272 | ---- | C] () -- C:\Users\Jon\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2014/08/31 14:41:36 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2014/08/31 14:41:30 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2014/08/31 14:38:13 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09 _00.Wdf [2014/08/31 14:35:59 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2014/08/31 10:18:29 | 000,001,021 | ---- | C] () -- C:\Users\Public\Desktop\ISO to USB.lnk [2014/08/31 09:56:42 | 000,001,941 | ---- | C] () -- C:\Users\Jon\Desktop\CDBurnerXP.lnk [2014/08/31 09:56:41 | 000,001,899 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk [2014/08/31 09:22:42 | 000,003,094 | ---- | C] () -- C:\Users\Jon\Desktop\Windows Compatibility Report.htm [2014/08/28 20:55:51 | 000,000,776 | ---- | C] () -- C:\Users\Jon\Desktop\7-Zip File Manager.lnk [2014/08/28 07:02:00 | 000,001,890 | ---- | C] () -- C:\Windows\diagwrn.xml [2014/08/28 07:02:00 | 000,001,890 | ---- | C] () -- C:\Windows\diagerr.xml [2014/08/26 21:42:31 | 000,003,876 | ---- | C] () -- C:\Users\Jon\Documents\cc_20140826_214228.reg [2014/08/26 21:41:08 | 000,138,424 | ---- | C] () -- C:\Users\Jon\Documents\cc_20140826_214103.reg [2014/08/25 08:40:03 | 000,000,782 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2014/08/23 11:55:48 | 000,000,261 | ---- | C] () -- C:\Users\Jon\.swfinfo [2014/08/23 09:49:39 | 000,380,416 | ---- | C] () -- C:\Users\Jon\Desktop\r9d45imn.exe [2014/08/22 08:30:58 | 000,033,512 | ---- | C] () -- C:\Windows\SysWow64\drivers\TrueSight.sys [2014/08/22 08:30:07 | 004,851,288 | ---- | C] () -- C:\Users\Jon\Desktop\winlog.exe [2014/08/10 00:08:15 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2014/03/18 22:57:55 | 000,000,084 | ---- | C] () -- C:\Windows\wininit.ini [2014/01/30 19:32:13 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys [2014/01/30 19:32:12 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys [2014/01/09 20:30:02 | 000,000,108 | ---- | C] () -- C:\Users\Jon\AppData\Roaming\WB.CFG [2014/01/09 20:30:02 | 000,000,005 | ---- | C] () -- C:\Users\Jon\AppData\Roaming\WBPU-TTL.DAT [2013/12/29 16:06:59 | 000,443,080 | ---- | C] () -- C:\Windows\SysWow64\GSService.exe [2013/11/08 15:18:25 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys [2013/03/29 15:27:03 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat [2013/02/05 18:52:54 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2013/02/05 18:52:50 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll [2013/02/05 18:52:50 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll [2013/02/05 18:52:50 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll [2013/02/05 18:52:50 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll ========== ZeroAccess Check ========== [2009/07/14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\cls id\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\cls id\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc8 7-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2010/11/21 04:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\cl sid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010/11/21 04:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA 9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\cl sid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CD B-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\cl sid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report > |
#44
|
||||
|
||||
Look in Control Panel - Programs - Programs and Features/Uninstall. Is Jaksta Media Player, or anything Jaksta related installed still? An active service from it still showing, and by the looks of the reviews here, it is not good software.
|
#45
|
|||
|
|||
Nothing Jaksta related there. There was 145 importand updates to be installed. The system was on auto update but the vast majority failed. I installed Microsoft Fixit and tried to install the failed ones. Most were successfull but left 20. Ran Fixit an second time and it installed all 20 important updates. I have installed 7 of the optional ones also, IE 11 and a few more.
The system does seem an awfull lot faster now though. It boots quickly and runs stuff faster. I haven't re-installed Avast as yet, just in case you want a scan without it. |
Bookmarks |
«
Previous Topic
|
Next Topic
»
|
|
Similar Topics | ||||
Topic | Topic Starter | Forum | Replies | Last Post |
Windows Ultimate Booster Virus | shirley_b1 | Malware Removal | 2 | February 3rd, 2014 03:26 PM |
Switching from Windows Vista to Windows 7 Ultimate | Nicol | Windows Vista | 2 | March 27th, 2011 01:45 AM |
Upgrade from Vista Ultimate 32 bit to Windows 7 64 bit | airjazz | Windows 7 | 1 | June 10th, 2010 06:13 PM |
Windows 7 Ultimate, which to buy? | IPR512 | Windows 7 | 19 | October 26th, 2009 05:34 AM |
Windows Vista Ultimate Problems | zg56789 | Windows Vista | 6 | July 26th, 2007 01:37 AM |
All times are GMT +1. The time now is 12:34 AM.