Inactive Computer Slowness - program logs

[Inactive] Computer Slowness - program logs

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Database version: v2012.12.13.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
wyeth :: WYETH-PC [administrator]

12/13/2012 10:28:53 PM
mbam-log-2012-12-13 (22-28-53).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 186706
Time elapsed: 3 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

 

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-12-14 03:10:56
-----------------------------
03:10:56.817 OS Version: Windows 6.1.7601 Service Pack 1
03:10:56.817 Number of processors: 4 586 0xF0B
03:10:56.817 ComputerName: WYETH-PC UserName: wyeth
03:10:58.314 Initialize success
03:11:07.425 AVAST engine defs: 12121302
03:11:18.360 Disk 0 \Device\Harddisk0\DR0 -> \Device\00000068
03:11:18.360 Disk 0 Vendor: Hitachi_ V54O Size: 305245MB BusType: 3
03:11:18.360 Disk 1 \Device\Harddisk1\DR1 -> \Device\00000069
03:11:18.376 Disk 1 Vendor: Hitachi_ V54O Size: 305245MB BusType: 3
03:11:18.376 Disk 2 (boot) \Device\Harddisk2\DR2 -> \Device\0000006a
03:11:18.376 Disk 2 Vendor: WDC_WD10 05.0 Size: 953869MB BusType: 3
03:11:18.391 Disk 2 MBR read successfully
03:11:18.391 Disk 2 MBR scan
03:11:18.407 Disk 2 Windows 7 default MBR code
03:11:18.407 Disk 2 Partition 1 00 07 HPFS/NTFS NTFS 953867 MB offset 2048
03:11:18.407 Disk 2 scanning sectors +1953521664
03:11:18.454 Disk 2 scanning C:\Windows\system32\drivers
03:11:25.411 Service scanning
03:11:41.043 Modules scanning
03:11:45.426 Disk 2 trace - called modules:
03:11:45.442 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor.sys
03:11:45.442 1 nt!IofCallDriver -> \Device\Harddisk2\DR2[0x8630ea58]
03:11:45.457 3 CLASSPNP.SYS[896ab59e] -> nt!IofCallDriver -> [0x860ba648]
03:11:45.457 5 ACPI.sys[88e9d3d4] -> nt!IofCallDriver -> \Device\0000006a[0x852d0c68]
03:11:47.267 AVAST engine scan C:\Windows
03:11:51.432 AVAST engine scan C:\Windows\system32
03:14:10.709 AVAST engine scan C:\Windows\system32\drivers
03:14:20.475 AVAST engine scan C:\Users\wyeth
03:15:18.101 Disk 2 MBR has been saved successfully to "C:\Users\wyeth\Desktop\MBR.dat "
03:15:18.117 The log file has been saved successfully to "C:\Users\wyeth\Desktop\aswMBR.txt "
03:16:22.765 AVAST engine scan C:\ProgramData
03:16:33.217 Scan finished successfully
03:16:44.995 Disk 2 MBR has been saved successfully to "C:\Users\wyeth\Desktop\MBR.dat "
03:16:44.995 The log file has been saved successfully to "C:\Users\wyeth\Desktop\aswMBR.txt "

 

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16457
Run by wyeth at 3:17:22 on 2012-12-14
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2047.1180 [GMT -6:00]
.
AV: AVG Anti-Virus Business Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Business Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\atiesrxx.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\AVG\AVG2012\avgwdsvc.exe
C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\PnkBstrB.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2012\avgidsagent.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Users\wyeth\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Belkin\PCI F5D7000\Wireless Utility\Belkinwcui.exe
C:\Windows\System32\WUDFHost.exe
C:\Users\wyeth\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\AVG\AVG2012\avgnsx.exe
C:\Program Files\AVG\AVG2012\avgemcx.exe
C:\Program Files\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
.
============== Pseudo HJT Report ===============
.
uProxyOverride = <local>
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Akamai NetSession Interface] "c:\users\wyeth\appdata\local\akamai\netsession_win.exe "
uRun: [Steam] "c:\program files\steam\Steam.exe" -silent
mRun: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe "
mRun: [SSDMonitor] c:\program files\common files\pc tools\smonitor\SSDMonitor.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\belkin~1.lnk - c:\program files\belkin\pci f5d7000\wireless utility\Belkinwcui.exe
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} - hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
TCP: NameServer = 208.180.42.100 66.76.175.100 1.1.1.1
TCP: Interfaces\{BB6681A2-70EE-4136-8792-B077A885E931} : DHCPNameServer = 208.180.42.100 66.76.175.100 1.1.1.1
SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-4-19 24896]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2012-1-31 31952]
R1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2012-12-5 11448]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2012-7-26 237408]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-12-23 41040]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2012-8-24 301920]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-9-27 217600]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\avgidsagent.exe [2012-8-13 5167736]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2012-2-14 193288]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\common files\pc tools\smonitor\StartManSvc.exe [2012-12-7 583640]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2012-5-14 86656]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2011-12-23 139856]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [2011-12-23 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2011-12-23 17232]
R3 BLKWGD;Belkin Wireless G Desktop Card Service;c:\windows\system32\drivers\BLKWGD.sys [2012-11-5 463872]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-7 22856]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-12-7 399432]
S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-12-7 676936]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2012-11-7 79360]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-12-12 52224]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2012-11-6 1343400]
S3 xsherlock;xsherlock;c:\windows\system32\xsherlock.xem [2012-11-9 666720]
.
=============== Created Last 30 ================
.
2012-12-13 23:39:55 -------- d-sh--w- C:\found.003
2012-12-13 12:53:41 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-12-13 12:53:41 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-12-13 12:51:24 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-12-13 12:51:18 52224 ----a-w- c:\windows\system32\nlaapi.dll
2012-12-13 12:51:18 499712 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-12-13 12:51:18 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-12-13 12:51:18 242176 ----a-w- c:\windows\system32\nlasvc.dll
2012-12-13 12:51:18 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2012-12-13 12:51:18 18944 ----a-w- c:\windows\system32\netevent.dll
2012-12-13 12:51:18 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-12-13 12:51:18 175104 ----a-w- c:\windows\system32\netcorehc.dll
2012-12-13 12:51:18 156672 ----a-w- c:\windows\system32\ncsi.dll
2012-12-13 12:51:18 1293680 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-12-13 12:49:06 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-12-13 12:49:06 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-12-13 12:06:07 -------- d-----w- c:\windows\system32\SPReview
2012-12-13 11:50:04 805376 ----a-w- c:\windows\system32\FntCache.dll
2012-12-13 11:50:04 739840 ----a-w- c:\windows\system32\d2d1.dll
2012-12-13 01:55:59 811520 ----a-w- c:\windows\system32\user32.dll
2012-12-13 01:54:59 61440 ----a-w- c:\windows\system32\PnPUnattend.exe
2012-12-13 01:53:52 189952 ----a-w- c:\windows\system32\sqmapi.dll
2012-12-13 00:46:50 -------- d-----w- c:\program files\Seagate
2012-12-12 22:20:41 -------- d-sh--w- C:\found.002
2012-12-12 12:31:15 -------- d-----w- c:\program files\common files\Wise Installation Wizard
2012-12-12 03:43:35 -------- d-----w- c:\program files\Steam
2012-12-11 22:08:45 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-12-11 22:08:45 2560 ----a-w- c:\windows\system32\dpnaddr.dll
2012-12-11 22:08:18 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-11 22:08:18 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-11 03:51:14 -------- d-----w- c:\users\wyeth\appdata\local\ElevatedDiagnostics
2012-12-10 21:46:54 -------- d-sh--w- C:\found.001
2012-12-10 13:11:42 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-12-10 13:11:42 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-12-10 13:11:42 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-12-10 13:10:05 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-12-10 13:10:05 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-12-10 13:10:04 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-12-10 13:10:04 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-12-10 13:10:04 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-12-10 13:10:04 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-12-10 13:10:04 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-12-10 13:08:44 5120 ----a-w- c:\windows\system32\wmi.dll
2012-12-10 13:08:44 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-12-10 13:08:44 159232 ----a-w- c:\windows\system32\imagehlp.dll
2012-12-10 12:24:55 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-12-10 12:24:53 1159680 ----a-w- c:\windows\system32\crypt32.dll
2012-12-10 12:24:52 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-12-10 12:24:52 103936 ----a-w- c:\windows\system32\cryptnet.dll
2012-12-10 12:24:35 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-12-10 12:24:35 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-12-10 12:20:16 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-12-10 12:20:03 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-12-10 12:20:03 372736 ----a-w- c:\program files\common files\system\ado\msadox.dll
2012-12-10 12:20:03 352256 ----a-w- c:\program files\common files\system\ado\msadomd.dll
2012-12-10 12:20:03 212992 ----a-w- c:\program files\common files\system\msadc\msadco.dll
2012-12-10 12:20:03 1019904 ----a-w- c:\program files\common files\system\ado\msado15.dll
2012-12-10 12:20:02 57344 ----a-w- c:\program files\common files\system\ado\msador15.dll
2012-12-10 12:20:02 143360 ----a-w- c:\program files\common files\system\ado\msjro.dll
2012-12-10 12:18:47 769024 ----a-w- c:\windows\system32\localspl.dll
2012-12-10 12:18:46 30208 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\winprint.dll
2012-12-10 12:18:19 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2012-12-10 12:18:19 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2012-12-10 12:18:19 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2012-12-10 12:18:05 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2012-12-10 12:17:47 1288472 ----a-w- c:\windows\system32\ntdll.dll
2012-12-10 12:17:38 31232 ----a-w- c:\windows\system32\prevhost.exe
2012-12-10 12:17:26 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2012-12-10 12:17:25 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2012-12-10 12:17:22 70656 ----a-w- c:\windows\system32\fontsub.dll
2012-12-10 12:17:18 708608 ----a-w- c:\program files\common files\system\wab32.dll
2012-12-10 12:15:14 75776 ----a-w- c:\windows\system32\psisrndr.ax
2012-12-10 12:15:14 465408 ----a-w- c:\windows\system32\psisdecd.dll
2012-12-10 12:15:13 72704 ----a-w- c:\windows\system32\Mpeg2Data.ax
2012-12-10 12:15:13 59904 ----a-w- c:\windows\system32\MSDvbNP.ax
2012-12-10 12:15:13 204288 ----a-w- c:\windows\system32\MSNP.ax
2012-12-10 12:15:10 478720 ----a-w- c:\windows\system32\timedate.cpl
2012-12-10 12:15:03 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2012-12-10 12:15:03 145920 ----a-w- c:\windows\system32\cfgmgr32.dll
2012-12-10 12:14:22 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2012-12-10 12:14:22 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2012-12-10 12:14:22 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2012-12-10 12:14:16 571904 ----a-w- c:\windows\system32\oleaut32.dll
2012-12-10 12:14:16 233472 ----a-w- c:\windows\system32\oleacc.dll
2012-12-10 12:14:01 989184 ----a-w- c:\program files\windows journal\JNTFiltr.dll
2012-12-10 12:14:01 969216 ----a-w- c:\program files\windows journal\JNWDRV.dll
2012-12-10 12:14:01 936960 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2012-12-10 12:14:01 1785344 ----a-w- c:\program files\windows journal\Journal.exe
2012-12-10 12:14:01 1221632 ----a-w- c:\program files\windows journal\NBDoc.DLL
2012-12-10 12:13:40 741376 ----a-w- c:\windows\system32\inetcomm.dll
2012-12-10 12:11:20 67072 ----a-w- c:\windows\system32\packager.dll
2012-12-10 12:11:18 1549312 ----a-w- c:\windows\system32\tquery.dll
2012-12-10 12:11:18 1401344 ----a-w- c:\windows\system32\mssrch.dll
2012-12-10 12:11:17 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2012-12-10 12:11:17 666624 ----a-w- c:\windows\system32\mssvp.dll
2012-12-10 12:11:17 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2012-12-10 12:11:17 337408 ----a-w- c:\windows\system32\mssph.dll
2012-12-10 12:11:17 197120 ----a-w- c:\windows\system32\mssphtb.dll
2012-12-10 12:11:17 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2012-12-10 12:11:16 59392 ----a-w- c:\windows\system32\msscntrs.dll
2012-12-10 12:10:13 802304 ----a-w- c:\windows\system32\WFS.exe
2012-12-10 12:10:13 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2012-12-10 12:10:04 534528 ----a-w- c:\windows\system32\EncDec.dll
2012-12-10 12:09:58 870912 ----a-w- c:\windows\system32\XpsPrint.dll
2012-12-10 12:09:44 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-12-10 12:09:40 38912 ----a-w- c:\windows\system32\csrsrv.dll
2012-12-10 12:09:33 850944 ----a-w- c:\windows\system32\sbe.dll
2012-12-10 12:09:33 642048 ----a-w- c:\windows\system32\CPFilters.dll
2012-12-10 12:09:33 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2012-12-10 12:09:23 1328128 ----a-w- c:\windows\system32\quartz.dll
2012-12-10 12:09:22 514560 ----a-w- c:\windows\system32\qdvd.dll
2012-12-10 12:09:07 2616320 ----a-w- c:\windows\explorer.exe
2012-12-10 12:08:30 314880 ----a-w- c:\windows\system32\webio.dll
2012-12-10 12:08:20 94208 ----a-w- c:\program files\common files\system\ole db\msdaosp.dll
2012-12-10 12:08:20 86016 ----a-w- c:\windows\system32\odbccu32.dll
2012-12-10 12:08:20 81920 ----a-w- c:\windows\system32\odbccr32.dll
2012-12-10 12:08:20 319488 ----a-w- c:\windows\system32\odbcjt32.dll
2012-12-10 12:08:20 163840 ----a-w- c:\windows\system32\odbctrac.dll
2012-12-10 12:08:20 122880 ----a-w- c:\windows\system32\odbccp32.dll
2012-12-10 12:08:12 219136 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-12-10 12:08:12 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2012-12-10 12:08:09 690688 ----a-w- c:\windows\system32\msvcrt.dll
2012-12-10 12:07:07 442880 ----a-w- c:\windows\system32\ntshrui.dll
2012-12-10 12:06:52 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-12-10 12:06:28 1137664 ----a-w- c:\windows\system32\mfc42.dll
2012-12-10 12:06:27 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2012-12-10 12:06:18 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2012-12-10 12:06:14 123904 ----a-w- c:\windows\system32\poqexec.exe
2012-12-10 12:06:13 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2012-12-10 11:47:47 728448 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2012-12-10 11:47:47 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2012-12-10 11:47:47 107520 ----a-w- c:\windows\system32\cdd.dll
2012-12-10 07:37:24 -------- d-----w- c:\windows\Panther
2012-12-10 07:31:15 -------- d--h--w- C:\$WINDOWS.~Q
2012-12-10 07:29:28 -------- d--h--w- C:\$INPLACE.~TR
2012-12-10 06:25:10 826880 ----a-w- c:\windows\system32\rdpcore.dll
2012-12-10 06:25:10 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-12-10 06:25:10 18432 ----a-w- c:\windows\system32\drivers\tdpipe.sys
2012-12-10 06:21:40 -------- d-----w- c:\users\wyeth\appdata\roaming\Carbon
2012-12-10 06:17:33 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-12-10 06:17:21 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2012-12-10 06:17:21 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2012-12-10 06:16:56 2873820 ------w- c:\windows\system32\Sens_oal.dll
2012-12-10 06:16:27 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-12-10 06:16:19 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-12-10 06:16:19 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-12-10 06:16:18 -------- d-----w- c:\windows\system32\wbem\Performance
2012-12-10 05:41:29 0 ----a-w- c:\windows\ativpsrm.bin
2012-12-10 05:40:43 73728 ----a-w- c:\windows\system32\CmdRtr.DLL
2012-12-10 05:40:43 166912 ----a-w- c:\windows\system32\APOMngr.DLL
2012-12-08 12:06:55 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-08 12:06:55 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-12-08 11:54:41 -------- d-----w- c:\windows\system32\appmgmt
2012-12-08 06:35:48 962612 ----a-w- c:\windows\system32\mfc42d.dll
2012-12-08 06:35:48 434252 ----a-w- c:\windows\system32\MSVCRTD.DLL
2012-12-08 06:34:58 6504 ----a-w- c:\windows\system32\drivers\ASACPI.sys
2012-12-08 04:54:58 -------- d-----w- c:\users\wyeth\appdata\roaming\Malwarebytes
2012-12-08 04:54:46 -------- d-----w- c:\programdata\Malwarebytes
2012-12-08 04:54:45 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-08 04:54:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-08 04:19:31 24064 ----a-w- c:\windows\system32\drivers\SysTool.sys
2012-12-07 19:56:31 -------- d-----w- c:\users\wyeth\appdata\roaming\Registry Mechanic
2012-12-07 19:50:28 880640 ----a-w- c:\windows\system32\UniBox10.ocx
2012-12-07 19:50:28 506368 ----a-w- c:\windows\system32\msxml.dll
2012-12-07 19:50:28 37336 ----a-w- c:\windows\system32\CleanMFT32.exe
2012-12-07 19:50:28 212992 ----a-w- c:\windows\system32\UniBoxVB12.ocx
2012-12-07 19:50:28 1101824 ----a-w- c:\windows\system32\UniBox210.ocx
2012-12-07 19:50:27 658432 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2012-12-07 19:50:27 1081616 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-12-07 19:50:25 -------- d-----w- c:\program files\common files\PC Tools
2012-12-05 19:43:26 -------- d-----w- c:\users\wyeth\appdata\local\FLT
2012-12-05 15:25:31 221 ----a-w- c:\windows\FILE_BUF.BIN
2012-12-05 15:24:08 -------- d-----w- C:\BIOS Backup
2012-12-05 15:21:50 11448 ----a-w- c:\windows\system32\drivers\AsUpIO.sys
2012-12-05 15:21:46 24576 ----a-w- c:\windows\system32\AsIO.dll
2012-12-05 15:21:46 11296 ----a-w- c:\windows\system32\drivers\AsIO.sys
2012-12-05 15:21:42 -------- d-----w- c:\program files\ASUS
2012-12-05 15:21:21 77824 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\ctor.dll
2012-12-05 15:21:21 32768 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\objectps.dll
2012-12-05 15:21:21 225280 ----a-w- c:\program files\common files\installshield\iscript\iscript.dll
2012-12-05 15:21:21 176128 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\iuser.dll
2012-12-05 15:21:20 614532 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\IKernel.exe
2012-12-04 18:52:16 -------- d-----w- c:\users\wyeth\appdata\local\Akamai
2012-12-04 01:55:07 -------- d--h--w- c:\windows\msdownld.tmp
2012-12-03 14:43:25 -------- d-----w- c:\users\wyeth\Heaven
2012-12-03 14:43:03 -------- d-----w- c:\program files\Unigine
2012-12-02 17:01:32 -------- d-sh--w- C:\found.000
2012-12-02 09:53:59 52584 ----a-w- c:\windows\system32\OpenCL.dll
2012-12-02 08:04:23 -------- d-----w- c:\users\wyeth\appdata\roaming\NVIDIA
2012-12-02 07:38:05 -------- d-----w- C:\NVIDIA
2012-12-02 06:52:34 -------- d-----w- c:\users\wyeth\appdata\local\Google
2012-12-02 06:52:04 -------- d-----w- c:\users\wyeth\appdata\local\Apps
2012-12-01 13:50:57 -------- d-----w- c:\program files\SIW 2011 Home Edition
2012-12-01 11:02:33 -------- d-----w- c:\users\wyeth\appdata\local\¹”t*—@GŽÃ¨‚É”›‚ç‚ê‚éS
2012-12-01 11:00:13 -------- d-----w- c:\program files\¹”t*—@GŽÃ¨‚É”›‚ç‚ê‚éS
2012-11-29 19:45:38 -------- d-----w- c:\users\wyeth\appdata\local\CrashRpt
2012-11-29 19:44:26 138056 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-11-29 19:44:26 138056 ----a-w- c:\users\wyeth\appdata\roaming\PnkBstrK.sys
2012-11-29 19:44:17 -------- d-----w- c:\program files\Microsoft Chart Controls
2012-11-29 19:43:54 189248 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-11-29 19:43:54 189248 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-11-29 19:43:52 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-11-26 14:07:31 -------- d-----w- c:\users\wyeth\appdata\local\Adobe
2012-11-22 18:13:32 -------- d-----w- c:\programdata\EA Logs
2012-11-22 05:18:04 -------- d-----w- c:\users\wyeth\appdata\local\ESN
2012-11-22 05:18:03 -------- d-----w- c:\program files\Battlelog Web Plugins
2012-11-22 05:14:23 -------- d-----w- c:\programdata\EA Core
2012-11-22 05:13:44 -------- d--h--w- c:\program files\common files\EAInstaller
2012-11-22 05:09:45 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2012-11-22 05:09:45 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2012-11-22 05:09:45 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2012-11-22 05:09:45 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2012-11-22 05:09:44 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2012-11-22 05:09:44 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2012-11-22 05:09:44 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2012-11-22 05:09:44 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2012-11-22 03:58:35 -------- d-----w- c:\users\wyeth\appdata\roaming\Origin
2012-11-22 03:58:33 -------- d-----w- c:\users\wyeth\appdata\local\Origin
2012-11-22 03:58:24 -------- d-----w- c:\programdata\Origin
2012-11-22 03:58:24 -------- d-----w- c:\programdata\Electronic Arts
2012-11-22 03:58:24 -------- d-----w- c:\program files\Origin Games
2012-11-22 03:58:14 -------- d-----w- c:\program files\Origin
2012-11-22 02:36:23 -------- d-----w- c:\users\wyeth\appdata\roaming\.minecraft
2012-11-20 07:22:42 -------- d-----w- c:\users\wyeth\appdata\roaming\Little Inferno
2012-11-20 07:22:30 -------- d-----w- C:\Games
2012-11-20 04:24:11 90624 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\HPZPPWN7.DLL
.
==================== Find3M ====================
.
2012-12-13 12:30:18 152576 ----a-w- c:\windows\system32\msclmd.dll
2012-11-22 02:56:02 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-11-10 05:18:37 666720 ----a-w- c:\windows\system32\xsherlock.xem
2012-11-09 04:42:49 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-07 01:10:07 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-11-07 01:10:07 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-16 07:39:52 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-04 16:47:18 169984 ----a-w- c:\windows\system32\winsrv.dll
2012-10-04 16:43:05 293376 ----a-w- c:\windows\system32\KernelBase.dll
2012-10-04 14:57:58 271360 ----a-w- c:\windows\system32\conhost.exe
2012-10-04 14:41:50 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-10-04 14:41:50 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-04 14:41:50 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-10-04 14:41:50 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-09-28 23:36:56 180224 ----a-w- c:\windows\system32\clinfo.exe
2012-09-28 23:36:40 65536 ----a-w- c:\windows\system32\OpenVideo.dll
2012-09-28 23:36:34 56320 ----a-w- c:\windows\system32\OVDecode.dll
2012-09-28 23:32:16 27341824 ----a-w- c:\windows\system32\amdocl.dll
2012-09-28 02:22:56 5557928 ----a-w- c:\windows\system32\atiumdag.dll
2012-09-28 02:20:20 9107968 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-09-28 02:05:36 58880 ----a-w- c:\windows\system32\coinst_9.002.dll
2012-09-28 02:03:52 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2012-09-28 02:02:28 46080 ----a-w- c:\windows\system32\aticalrt.dll
2012-09-28 02:02:20 44032 ----a-w- c:\windows\system32\aticalcl.dll
2012-09-28 01:57:20 13703168 ----a-w- c:\windows\system32\aticaldd.dll
2012-09-28 01:43:28 935424 ----a-w- c:\windows\system32\aticfx32.dll
2012-09-28 01:41:14 19624960 ----a-w- c:\windows\system32\atioglxx.dll
2012-09-28 01:39:36 6536192 ----a-w- c:\windows\system32\atidxx32.dll
2012-09-28 01:39:14 442368 ----a-w- c:\windows\system32\atidemgy.dll
2012-09-28 01:38:42 473088 ----a-w- c:\windows\system32\atieclxx.exe
2012-09-28 01:38:02 217600 ----a-w- c:\windows\system32\atiesrxx.exe
2012-09-28 01:36:42 163840 ----a-w- c:\windows\system32\atitmmxx.dll
2012-09-28 01:36:34 20992 ----a-w- c:\windows\system32\atimuixx.dll
2012-09-28 01:36:26 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2012-09-28 01:22:30 2691584 ----a-w- c:\windows\system32\atiumdva.dll
2012-09-28 01:13:28 405504 ----a-w- c:\windows\system32\atiadlxx.dll
2012-09-28 01:13:12 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2012-09-28 01:13:00 33280 ----a-w- c:\windows\system32\atigktxx.dll
2012-09-28 01:12:48 56832 ----a-w- c:\windows\system32\atimpc32.dll
2012-09-28 01:12:48 56832 ----a-w- c:\windows\system32\amdpcom32.dll
2012-09-28 01:12:10 370176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-09-28 01:11:16 109568 ----a-w- c:\windows\system32\atiuxpag.dll
2012-09-28 01:10:58 82944 ----a-w- c:\windows\system32\atiu9pag.dll
2012-09-28 01:09:48 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-09-25 22:47:43 78336 ----a-w- c:\windows\system32\synceng.dll
.
============= FINISH: 3:17:54.11 ===============

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 12/10/2012 12:13:55 AM
System Uptime: 12/13/2012 9:55:46 PM (6 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | P5N-E SLI
Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz | Socket 775 | 2400/266mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 932 GiB total, 855.138 GiB free.
D: is FIXED (NTFS) - 298 GiB total, 47.825 GiB free.
E: is FIXED (NTFS) - 298 GiB total, 292.082 GiB free.
F: is CDROM (UDF)
G: is CDROM ()
H: is Removable
I: is Removable
J: is Removable
K: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: NVIDIA nForce Networking Controller
Device ID: PCI\VEN_10DE&DEV_0269&SUBSYS_82211043&REV_A3\3&2411E6FE&1&A0
Manufacturer: NVIDIA
Name: NVIDIA nForce Networking Controller
PNP Device ID: PCI\VEN_10DE&DEV_0269&SUBSYS_82211043&REV_A3\3&2411E6FE&1&A0
Service: NVENETFD
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: AEGIS Protocol (IEEE 802.1x) v3.2.0.3
Device ID: ROOT\LEGACY_AEGISP\0000
Manufacturer:
Name: AEGIS Protocol (IEEE 802.1x) v3.2.0.3
PNP Device ID: ROOT\LEGACY_AEGISP\0000
Service: AegisP
.
==== System Restore Points ===================
.
RP25: 12/13/2012 10:58:08 PM - Scheduled Checkpoint
.
==== Installed Programs ======================
.
µTorrent
Adobe Flash Player 11 ActiveX
Adobe Reader XI
AirMech
Akamai NetSession Interface
AMD Accelerated Video Transcoding
AMD APP SDK Runtime
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Media Foundation Decoders
ASUSUpdate
AVG 2012
Battlefield 3™
Battlelog Web Plugins
Belkin Wireless Utility
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Creative Audio Control Panel
Creative Software AutoUpdate
Creative Sound Blaster Properties
District 187
ESN Sonar
Google Chrome
Google Update Helper
Heaven DX11 Benchmark version 3.0
Magic ISO Maker v5.5 (build 0281)
Malwarebytes Anti-Malware version 1.65.1.1000
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Origin
Photo Story 3 for Windows
PlanetSide 2
PunkBuster Services
Registry Mechanic 10.0
SeaTools for Windows
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
SIW 2011 Home Edition
Steam
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
WinRAR 4.20 (32-bit)
.
==== Event Viewer Messages From Past Week ========
.
12/9/2012 8:40:14 PM, Error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
12/9/2012 8:33:55 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.
12/9/2012 11:55:18 PM, Error: Microsoft-Windows-WMPNSS-Service [14333] - Service 'WMPNetworkSvc' did not start correctly due to error '0x80070422'. Restart your computer, and then try to restart the service.
12/9/2012 11:51:02 PM, Error: Service Control Manager [7030] - The nProtect GameGuard Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
12/9/2012 10:49:18 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: SysTool
12/8/2012, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft Software Shadow Copy Provider service to connect.
12/8/2012, Error: Service Control Manager [7000] - The Microsoft Software Shadow Copy Provider service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/8/2012 2:09:31 AM, Error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.1.100 with the system having network hardware address 84-29-99-00-9C-51. Network operations on this system may be disrupted as a result.
12/8/2012 12:24:25 AM, Error: Service Control Manager [7031] - The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
12/8/2012 12:23:55 AM, Error: Service Control Manager [7034] - The PC Tools Startup and Shutdown Monitor service service terminated unexpectedly. It has done this 1 time(s).
12/8/2012 1:58:29 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgwd service.
12/8/2012 1:05:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service VSS with arguments " " in order to run the server: {E579AB5F-1CC4-44B4-BED9-DE0991FF0623}
12/7/2012 9:18:53 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007a (0xc0451f78, 0xc000000e, 0x028d6be0, 0x8a3ef000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 120712-40341-01.
12/7/2012 11:59:29 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service swprv with arguments " " in order to run the server: {65EE1DBA-8FF4-4A58-AC1C-3470EE2F376A}
12/14/2012 3:17:40 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolume3.
12/13/2012 9:56:17 PM, Error: Service Control Manager [7000] - The AEGIS Protocol (IEEE 802.1x) v3.2.0.3 service failed to start due to the following error: The system cannot find the file specified.
12/13/2012 6:44:06 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80242016: Update for Windows 7 (KB976422).
12/13/2012 6:38:17 AM, Error: Microsoft-Windows-WMPNSS-Service [14353] - A media delivery engine with ID '0' was not initialized due to error '0x80070005' when adding the URL 'http://+:10243/WMPNSSv4/3720525601/'. Restart your computer, and then restart the WMPNetworkSvc service. If the problem persists, reinstall Windows Media Player if possible.
12/13/2012 6:38:17 AM, Error: Microsoft-Windows-WMPNSS-Service [14349] - A new media server was not initialized because the Windows Media Delivery Engine did not initialize due to error '0x80070005'. Restart your computer, and then restart the WMPNetworkSvc service. If the problem persists, reinstall Windows Media Player if possible.
12/13/2012 6:24:35 AM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
12/13/2012 5:54:56 PM, Error: volsnap [14] - The shadow copies of volume C: were aborted because of an IO failure on volume C:.
12/13/2012 10:58:28 PM, Error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.
12/12/2012 6:38:36 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service TrustedInstaller with arguments " " in order to run the server: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
12/12/2012 6:38:31 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Modules Installer service to connect.
12/12/2012 6:38:31 PM, Error: Service Control Manager [7000] - The Windows Modules Installer service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/12/2012 10:39:12 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Volume Shadow Copy service to connect.
12/12/2012 10:39:12 PM, Error: Service Control Manager [7000] - The Volume Shadow Copy service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/12/2012 10:39:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service VSS with arguments " " in order to run the server: {0B5A2C52-3EB9-470A-96E2-6C6D4570E40F}
12/11/2012 10:08:09 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
12/11/2012 10:08:09 PM, Error: Service Control Manager [7000] - The Steam Client Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/10/2012 5:11:16 PM, Error: NVENETFD [5008] - NVIDIA nForce Networking Controller : Has encountered an invalid network address.
12/10/2012 3:55:31 PM, Error: Service Control Manager [7023] -
12/10/2012 12:17:19 AM, Error: Service Control Manager [7022] - The Windows Search service hung on starting.
12/10/2012 10:28:59 PM, Error: Service Control Manager [7043] - The Windows Update service did not shut down properly after receiving a preshutdown control.
.
==== End Of File ===========================

 

I have a dual boot so 2 of my hard drives may not be recognized properly

 

RogueKiller V8.4.0 [Dec 15 2012] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Normal mode
User : wyeth [Admin rights]
Mode : Remove -- Date : 12/15/2012 11:56:27

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 6 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[RUN][SUSP PATH] [ON_D:wyeth]HKCU[...]\Run : M5T8QL3YW3 (I:\DOCUME~1\wyeth\LOCALS~1\Temp\Hlx.exe) -> DELETED
[RUN][SUSP PATH] [ON_D:wyeth]HKCU[...]\Run : EleFunAnimatedWallpaper ( "I:\Documents and Settings\wyeth\Application Data\elefundesktops\autumntree_wallpaper\wallpaper.exe" "STARTUP ") -> DELETED
[RUN][SUSP PATH] [ON_D:wyeth]HKCU[...]\Run : U36VRSFLG6 (I:\DOCUME~1\wyeth\LOCALS~1\Temp\Hlw.exe) -> DELETED

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ Extern Hives: ¤¤¤
-> D:\windows\system32\config\SOFTWARE
-> D:\Documents and Settings\Administrator\NTUSER.DAT
-> D:\Documents and Settings\Administrator.WYETH-BC9B1B140\NTUSER.DAT
-> D:\Documents and Settings\Default User\NTUSER.DAT
-> D:\Documents and Settings\Default User.WINDOWS\NTUSER.DAT
-> D:\Documents and Settings\LocalService\NTUSER.DAT
-> D:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT
-> D:\Documents and Settings\NetworkService\NTUSER.DAT
-> D:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT
-> D:\Documents and Settings\UpdatusUser\NTUSER.DAT
-> D:\Documents and Settings\wyeth\NTUSER.DAT
-> D:\Documents and Settings\wyeth_2\NTUSER.DAT

¤¤¤ HOSTS File: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDT725032VLA SCSI Disk Device +++++
--- User ---
[MBR] 5850533cb6fc747ca000c72c88eeff55
[BSP] 46732bfa8eba46954c7e7fb8de05db11 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: Hitachi HDT725032VLA SCSI Disk Device +++++
--- User ---
[MBR] 603fadf22c799fda84a2f4b69f4ec45d
[BSP] 2bf5403c775db5fd4588c7ef80e7fd98 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive2: WDC WD10 01FALS-00U9B SCSI Disk Device +++++
--- User ---
[MBR] 197a2576096eb996c2f5bb8809f99a37
[BSP] 1dadfb00b666d06abbc942359bbc2159 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953867 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Finished : << RKreport[2]_D_12152012_02d1156.txt >>
RKreport[1]_S_12152012_02d1156.txt ; RKreport[2]_D_12152012_02d1156.txt

 

RogueKiller V8.4.0 [Dec 15 2012] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Normal mode
User : wyeth [Admin rights]
Mode : Remove -- Date : 12/15/2012 11:56:27

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 6 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[RUN][SUSP PATH] [ON_D:wyeth]HKCU[...]\Run : M5T8QL3YW3 (I:\DOCUME~1\wyeth\LOCALS~1\Temp\Hlx.exe) -> DELETED
[RUN][SUSP PATH] [ON_D:wyeth]HKCU[...]\Run : EleFunAnimatedWallpaper ( "I:\Documents and Settings\wyeth\Application Data\elefundesktops\autumntree_wallpaper\wallpaper.exe" "STARTUP ") -> DELETED
[RUN][SUSP PATH] [ON_D:wyeth]HKCU[...]\Run : U36VRSFLG6 (I:\DOCUME~1\wyeth\LOCALS~1\Temp\Hlw.exe) -> DELETED

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ Extern Hives: ¤¤¤
-> D:\windows\system32\config\SOFTWARE
-> D:\Documents and Settings\Administrator\NTUSER.DAT
-> D:\Documents and Settings\Administrator.WYETH-BC9B1B140\NTUSER.DAT
-> D:\Documents and Settings\Default User\NTUSER.DAT
-> D:\Documents and Settings\Default User.WINDOWS\NTUSER.DAT
-> D:\Documents and Settings\LocalService\NTUSER.DAT
-> D:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT
-> D:\Documents and Settings\NetworkService\NTUSER.DAT
-> D:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT
-> D:\Documents and Settings\UpdatusUser\NTUSER.DAT
-> D:\Documents and Settings\wyeth\NTUSER.DAT
-> D:\Documents and Settings\wyeth_2\NTUSER.DAT

¤¤¤ HOSTS File: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDT725032VLA SCSI Disk Device +++++
--- User ---
[MBR] 5850533cb6fc747ca000c72c88eeff55
[BSP] 46732bfa8eba46954c7e7fb8de05db11 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: Hitachi HDT725032VLA SCSI Disk Device +++++
--- User ---
[MBR] 603fadf22c799fda84a2f4b69f4ec45d
[BSP] 2bf5403c775db5fd4588c7ef80e7fd98 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305234 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

+++++ PhysicalDrive2: WDC WD10 01FALS-00U9B SCSI Disk Device +++++
--- User ---
[MBR] 197a2576096eb996c2f5bb8809f99a37
[BSP] 1dadfb00b666d06abbc942359bbc2159 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953867 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Finished : << RKreport[2]_D_12152012_02d1156.txt >>
RKreport[1]_S_12152012_02d1156.txt ; RKreport[2]_D_12152012_02d1156.txt

 

ComboFix 12-12-14.01 - wyeth 12/15/2012 12:42:33.1.4 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2047.1071 [GMT -6:00]
Running from: c:\users\wyeth\Desktop\ComboFix.exe
AV: AVG Anti-Virus Business Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Business Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
E:\install.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-11-15 to 2012-12-15 )))))))))))))))))))))))))))))))
.
.
2012-12-15 18:54 . 2012-12-15 18:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-13 23:39 . 2012-12-13 23:39 -------- d-----w- C:\found.003
2012-12-13 12:53 . 2012-08-22 17:16 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-12-13 12:53 . 2012-07-04 19:45 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-12-13 12:51 . 2012-08-21 20:12 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-12-13 12:51 . 2012-10-03 16:58 1293680 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-12-13 12:51 . 2012-10-03 16:42 52224 ----a-w- c:\windows\system32\nlaapi.dll
2012-12-13 12:51 . 2012-10-03 16:42 242176 ----a-w- c:\windows\system32\nlasvc.dll
2012-12-13 12:51 . 2012-10-03 16:42 18944 ----a-w- c:\windows\system32\netevent.dll
2012-12-13 12:51 . 2012-10-03 16:42 175104 ----a-w- c:\windows\system32\netcorehc.dll
2012-12-13 12:51 . 2012-10-03 16:42 156672 ----a-w- c:\windows\system32\ncsi.dll
2012-12-13 12:51 . 2012-10-03 16:40 499712 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-12-13 12:51 . 2012-10-03 15:21 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-12-13 12:51 . 2012-08-22 17:16 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2012-12-13 12:51 . 2012-08-22 17:16 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-12-13 12:49 . 2012-10-09 17:40 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-12-13 12:49 . 2012-10-09 17:40 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-12-13 12:06 . 2012-12-13 12:06 -------- d-----w- c:\windows\system32\SPReview
2012-12-13 11:50 . 2011-02-19 06:30 805376 ----a-w- c:\windows\system32\FntCache.dll
2012-12-13 11:50 . 2011-02-19 06:30 739840 ----a-w- c:\windows\system32\d2d1.dll
2012-12-13 01:55 . 2010-11-20 12:21 1010688 ----a-w- c:\windows\system32\WindowsCodecs.dll
2012-12-13 01:54 . 2010-11-20 12:21 507392 ----a-w- c:\windows\system32\wmdrmdev.dll
2012-12-13 01:53 . 2010-11-20 12:21 189952 ----a-w- c:\windows\system32\sqmapi.dll
2012-12-13 00:46 . 2012-12-13 00:46 -------- d-----w- c:\program files\Seagate
2012-12-12 22:20 . 2012-12-12 22:20 -------- d-----w- C:\found.002
2012-12-12 12:31 . 2012-12-12 12:31 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2012-12-12 03:43 . 2012-12-15 17:37 -------- d-----w- c:\program files\Steam
2012-12-11 22:08 . 2012-11-02 05:11 376832 ----a-w- c:\windows\system32\dpnet.dll
2012-12-11 22:08 . 2010-11-20 11:57 2560 ----a-w- c:\windows\system32\dpnaddr.dll
2012-12-11 22:08 . 2012-11-05 20:32 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-11 22:08 . 2012-11-05 20:32 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-10 21:46 . 2012-12-10 21:46 -------- d-----w- C:\found.001
2012-12-10 13:11 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-12-10 13:11 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-12-10 13:11 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-12-10 13:10 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-12-10 13:10 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-12-10 13:10 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-12-10 13:10 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-12-10 13:10 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-12-10 13:10 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-12-10 13:10 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-12-10 13:08 . 2012-03-01 05:46 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-12-10 13:08 . 2012-03-01 05:33 159232 ----a-w- c:\windows\system32\imagehlp.dll
2012-12-10 13:08 . 2012-03-01 05:29 5120 ----a-w- c:\windows\system32\wmi.dll
2012-12-10 12:24 . 2012-08-24 16:57 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-12-10 12:24 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\system32\crypt32.dll
2012-12-10 12:24 . 2012-06-02 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-12-10 12:24 . 2012-06-02 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll
2012-12-10 12:24 . 2012-02-11 05:43 492032 ----a-w- c:\windows\system32\win32spl.dll
2012-12-10 12:24 . 2012-02-11 05:37 317440 ----a-w- c:\windows\system32\spoolsv.exe
2012-12-10 12:20 . 2012-08-31 17:18 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-12-10 12:20 . 2012-06-06 05:05 372736 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2012-12-10 12:20 . 2012-06-06 05:05 352256 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2012-12-10 12:20 . 2012-06-06 05:05 212992 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2012-12-10 12:20 . 2012-06-06 05:05 1019904 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2012-12-10 12:20 . 2012-06-06 05:03 805376 ----a-w- c:\windows\system32\cdosys.dll
2012-12-10 12:20 . 2012-06-06 05:05 143360 ----a-w- c:\program files\Common Files\System\ado\msjro.dll
2012-12-10 12:20 . 2012-06-06 05:05 57344 ----a-w- c:\program files\Common Files\System\ado\msador15.dll
2012-12-10 12:18 . 2012-05-14 04:33 769024 ----a-w- c:\windows\system32\localspl.dll
2012-12-10 12:18 . 2010-11-20 12:21 30208 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\winprint.dll
2012-12-10 12:18 . 2011-04-29 02:46 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2012-12-10 12:18 . 2011-04-29 02:46 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2012-12-10 12:18 . 2011-04-29 02:46 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2012-12-10 12:18 . 2011-04-25 02:18 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2012-12-10 12:17 . 2011-11-17 05:38 1288472 ----a-w- c:\windows\system32\ntdll.dll
2012-12-10 12:17 . 2011-02-18 05:39 31232 ----a-w- c:\windows\system32\prevhost.exe
2012-12-10 12:17 . 2011-03-03 05:38 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2012-12-10 12:17 . 2011-03-03 05:36 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2012-12-10 12:17 . 2010-09-30 06:47 70656 ----a-w- c:\windows\system32\fontsub.dll
2012-12-10 12:17 . 2011-10-01 04:37 708608 ----a-w- c:\program files\Common Files\System\wab32.dll
2012-12-10 12:15 . 2011-08-17 04:24 465408 ----a-w- c:\windows\system32\psisdecd.dll
2012-12-10 12:15 . 2011-08-17 04:19 75776 ----a-w- c:\windows\system32\psisrndr.ax
2012-12-10 12:15 . 2010-11-20 12:16 72704 ----a-w- c:\windows\system32\Mpeg2Data.ax
2012-12-10 12:15 . 2010-11-20 12:16 59904 ----a-w- c:\windows\system32\MSDvbNP.ax
2012-12-10 12:15 . 2010-11-20 12:16 204288 ----a-w- c:\windows\system32\MSNP.ax
2012-12-10 12:15 . 2011-12-30 05:27 478720 ----a-w- c:\windows\system32\timedate.cpl
2012-12-10 12:15 . 2011-05-24 10:44 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2012-12-10 12:15 . 2010-11-20 12:18 145920 ----a-w- c:\windows\system32\cfgmgr32.dll
2012-12-10 12:14 . 2011-07-09 02:30 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2012-12-10 12:14 . 2011-04-27 02:17 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2012-12-10 12:14 . 2011-04-27 02:17 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2012-12-10 12:14 . 2011-08-27 04:26 571904 ----a-w- c:\windows\system32\oleaut32.dll
2012-12-10 12:14 . 2011-08-27 04:26 233472 ----a-w- c:\windows\system32\oleacc.dll
2012-12-10 12:14 . 2012-03-31 04:30 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-12-10 12:14 . 2012-03-31 04:29 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-12-10 12:14 . 2012-03-31 04:29 989184 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2012-12-10 12:14 . 2012-03-31 04:29 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2012-12-10 12:14 . 2010-11-20 12:17 1785344 ----a-w- c:\program files\Windows Journal\Journal.exe
2012-12-10 12:13 . 2011-05-03 04:30 741376 ----a-w- c:\windows\system32\inetcomm.dll
2012-12-10 12:11 . 2011-11-19 14:01 67072 ----a-w- c:\windows\system32\packager.dll
2012-12-10 12:11 . 2011-05-04 04:34 1549312 ----a-w- c:\windows\system32\tquery.dll
2012-12-10 12:11 . 2011-05-04 04:32 1401344 ----a-w- c:\windows\system32\mssrch.dll
2012-12-10 12:11 . 2011-05-04 04:32 666624 ----a-w- c:\windows\system32\mssvp.dll
2012-12-10 12:11 . 2011-05-04 04:32 337408 ----a-w- c:\windows\system32\mssph.dll
2012-12-10 12:11 . 2011-05-04 04:32 197120 ----a-w- c:\windows\system32\mssphtb.dll
2012-12-10 12:11 . 2011-05-04 04:28 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2012-12-10 12:11 . 2011-05-04 04:28 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2012-12-10 12:11 . 2011-05-04 04:28 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2012-12-10 12:11 . 2011-05-04 04:32 59392 ----a-w- c:\windows\system32\msscntrs.dll
2012-12-10 12:10 . 2011-02-12 05:35 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2012-12-10 12:10 . 2010-11-20 12:17 802304 ----a-w- c:\windows\system32\WFS.exe
2012-12-10 12:10 . 2011-10-15 05:38 534528 ----a-w- c:\windows\system32\EncDec.dll
2012-12-10 12:09 . 2011-03-12 11:23 870912 ----a-w- c:\windows\system32\XpsPrint.dll
2012-12-10 12:09 . 2011-02-24 05:38 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-12-10 12:09 . 2011-10-26 04:28 38912 ----a-w- c:\windows\system32\csrsrv.dll
2012-12-10 12:09 . 2010-12-23 05:54 850944 ----a-w- c:\windows\system32\sbe.dll
2012-12-10 12:09 . 2010-12-23 05:54 642048 ----a-w- c:\windows\system32\CPFilters.dll
2012-12-10 12:09 . 2010-12-23 05:50 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2012-12-10 12:09 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\system32\quartz.dll
2012-12-10 12:09 . 2011-10-26 04:32 514560 ----a-w- c:\windows\system32\qdvd.dll
2012-12-10 12:09 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\explorer.exe
2012-12-10 12:08 . 2011-11-17 05:35 314880 ----a-w- c:\windows\system32\webio.dll
2012-12-10 12:08 . 2011-06-15 08:55 86016 ----a-w- c:\windows\system32\odbccu32.dll
2012-12-10 12:08 . 2011-06-15 08:55 81920 ----a-w- c:\windows\system32\odbccr32.dll
2012-12-10 12:08 . 2011-06-15 08:55 319488 ----a-w- c:\windows\system32\odbcjt32.dll
2012-12-10 12:08 . 2011-06-15 08:55 163840 ----a-w- c:\windows\system32\odbctrac.dll
2012-12-10 12:08 . 2011-06-15 08:55 122880 ----a-w- c:\windows\system32\odbccp32.dll
2012-12-10 12:08 . 2011-06-15 08:54 94208 ----a-w- c:\program files\Common Files\System\Ole DB\msdaosp.dll
2012-12-10 12:08 . 2011-01-17 05:47 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2012-12-10 12:08 . 2010-11-20 12:18 219136 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-12-10 12:08 . 2011-12-16 07:52 690688 ----a-w- c:\windows\system32\msvcrt.dll
2012-12-10 12:07 . 2012-01-04 08:58 442880 ----a-w- c:\windows\system32\ntshrui.dll
2012-12-10 12:06 . 2012-03-03 05:31 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-12-10 12:06 . 2011-03-11 05:33 1137664 ----a-w- c:\windows\system32\mfc42.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-13 12:30 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2012-11-10 05:18 . 2012-11-10 05:18 666720 ----a-w- c:\windows\system32\xsherlock.xem
2012-11-07 01:10 . 2012-11-07 01:10 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-11-07 01:10 . 2012-11-07 01:10 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-16 07:39 . 2012-12-10 12:23 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-09-28 23:36 . 2012-09-28 23:36 180224 ----a-w- c:\windows\system32\clinfo.exe
2012-09-28 23:36 . 2012-09-28 23:36 65536 ----a-w- c:\windows\system32\OpenVideo.dll
2012-09-28 23:36 . 2012-09-28 23:36 56320 ----a-w- c:\windows\system32\OVDecode.dll
2012-09-28 23:32 . 2012-09-28 23:32 27341824 ----a-w- c:\windows\system32\amdocl.dll
2012-09-28 02:22 . 2012-09-28 02:22 5557928 ----a-w- c:\windows\system32\atiumdag.dll
2012-09-28 02:20 . 2012-09-28 02:20 9107968 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-09-28 02:05 . 2012-09-28 02:05 58880 ----a-w- c:\windows\system32\coinst_9.002.dll
2012-09-28 02:03 . 2012-09-28 02:03 163840 ----a-w- c:\windows\system32\atiapfxx.exe
2012-09-28 02:02 . 2012-09-28 02:02 46080 ----a-w- c:\windows\system32\aticalrt.dll
2012-09-28 02:02 . 2012-09-28 02:02 44032 ----a-w- c:\windows\system32\aticalcl.dll
2012-09-28 01:57 . 2012-09-28 01:57 13703168 ----a-w- c:\windows\system32\aticaldd.dll
2012-09-28 01:43 . 2012-09-28 01:43 935424 ----a-w- c:\windows\system32\aticfx32.dll
2012-09-28 01:41 . 2012-09-28 01:41 19624960 ----a-w- c:\windows\system32\atioglxx.dll
2012-09-28 01:39 . 2012-09-28 01:39 6536192 ----a-w- c:\windows\system32\atidxx32.dll
2012-09-28 01:39 . 2012-09-28 01:39 442368 ----a-w- c:\windows\system32\atidemgy.dll
2012-09-28 01:38 . 2012-09-28 01:38 473088 ----a-w- c:\windows\system32\atieclxx.exe
2012-09-28 01:38 . 2012-09-28 01:38 217600 ----a-w- c:\windows\system32\atiesrxx.exe
2012-09-28 01:36 . 2012-09-28 01:36 163840 ----a-w- c:\windows\system32\atitmmxx.dll
2012-09-28 01:36 . 2012-09-28 01:36 20992 ----a-w- c:\windows\system32\atimuixx.dll
2012-09-28 01:36 . 2012-09-28 01:36 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2012-09-28 01:22 . 2012-09-28 01:22 2691584 ----a-w- c:\windows\system32\atiumdva.dll
2012-09-28 01:13 . 2012-09-28 01:13 405504 ----a-w- c:\windows\system32\atiadlxx.dll
2012-09-28 01:13 . 2012-09-28 01:13 14848 ----a-w- c:\windows\system32\atiglpxx.dll
2012-09-28 01:13 . 2012-09-28 01:13 33280 ----a-w- c:\windows\system32\atigktxx.dll
2012-09-28 01:12 . 2012-09-28 01:12 56832 ----a-w- c:\windows\system32\atimpc32.dll
2012-09-28 01:12 . 2012-09-28 01:12 56832 ----a-w- c:\windows\system32\amdpcom32.dll
2012-09-28 01:12 . 2012-09-28 01:12 370176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-09-28 01:11 . 2012-09-28 01:11 109568 ----a-w- c:\windows\system32\atiuxpag.dll
2012-09-28 01:10 . 2012-09-28 01:10 82944 ----a-w- c:\windows\system32\atiu9pag.dll
2012-09-28 01:09 . 2012-09-28 01:09 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar "= "c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"Akamai NetSession Interface "= "c:\users\wyeth\AppData\Local\Akamai\netsession_win.exe" [2012-10-09 4441920]
"Steam "= "c:\program files\Steam\Steam.exe" [2012-12-12 1354736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"P17RunE "= "P17RunE.dll" [2008-03-28 14848]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-24 926896]
"AVG_TRAY "= "c:\program files\AVG\AVG2012\avgtray.exe" [2012-07-31 2596984]
"SSDMonitor "= "c:\program files\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2010-08-05 104408]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-09-29 642728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Belkin Wireless Utility.lnk - c:\program files\Belkin\PCI F5D7000\Wireless Utility\Belkinwcui.exe [2005-8-18 1388544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin "= 5 (0x5)
"ConsentPromptBehaviorUser "= 3 (0x3)
"EnableUIADesktopToggle "= 0 (0x0)
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\avgidsagent.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 xsherlock;xsherlock;c:\windows\system32\xsherlock.xem [x]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [x]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [x]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [x]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [x]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [x]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [x]
S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [x]
S3 BLKWGD;Belkin Wireless G Desktop Card Service;c:\windows\system32\DRIVERS\BLKWGD.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - TRUESIGHT
*Deregistered* - TrueSight
.
Contents of the 'Scheduled Tasks' folder
.
2012-12-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-02 06:52]
.
2012-12-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-02 06:52]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = <local>
TCP: DhcpNameServer = 208.180.42.100 66.76.175.100 1.1.1.1
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath "= "c:\windows\system32\GameMon.des -service "
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\xsherlock]
"ImagePath "= "c:\windows\system32\xsherlock.xem "
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled "=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= "c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-12-15 12:57:19
ComboFix-quarantined-files.txt 2012-12-15 18:57
ComboFix2.txt 2010-11-28 04:27
ComboFix3.txt 2010-11-28 04:09
ComboFix4.txt 2010-11-28 02:14
.
Pre-Run: 912,730,054,656 bytes free
Post-Run: 913,413,513,216 bytes free
.
- - End Of File - - 928CA3CBCAC5E5CA28721F504D838490