Solved CHKDSK Each time windows reboot

OscarZ · Apr 26, 2013

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{1D7EA7F0-5862-49A6-9AFF-394C74878D9F}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{2EE26622-D6DB-496D-8F61-1FC24AF41B7D}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{1D7EA7F0-5862-49A6-9AFF-394C74878D9F}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\..\SearchScopes\{1D7EA7F0-5862-49A6-9AFF-394C74878D9F}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 10.226.5.161:80

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "SecureSearch"
FF - prefs.js..browser.startup.homepage: "http://securesearch.lavasoft.com/?s...retb&v=2_5&u=FCA1400CDB1A3B4CAFA6A7516F291831"
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Capa5\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Capa5\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Capa5\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Capa5\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Capa5\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-01-09 20:16:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013-03-07 19:30:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-03-07 19:30:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-04-17 17:59:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-04-17 17:59:35 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012-07-08 21:09:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Capa5\AppData\Roaming\Mozilla\Extensions
[2013-04-25 19:19:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Capa5\AppData\Roaming\Mozilla\Firefox\Profiles\8qzcs4ce.default\extensions
[2013-04-17 17:58:37 | 000,000,000 | ---D | M] (Ad-Aware Security Add-on) -- C:\Users\Capa5\AppData\Roaming\Mozilla\Firefox\Profiles\8qzcs4ce.default\extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
[2013-04-17 17:58:43 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Users\Capa5\AppData\Roaming\Mozilla\Firefox\Profiles\8qzcs4ce.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
[2013-04-11 21:48:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2013-04-11 21:48:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013-04-11 21:48:42 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012-09-05 20:26:22 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2013-02-28 09:29:55 | 000,002,086 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google

riginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://securesearch.lavasoft.com/?s...retb&v=2_5&u=FCA1400CDB1A3B4CAFA6A7516F291831
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Capa5\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: ActiveTouch General Plugin Container (Enabled) = C:\Users\Capa5\AppData\Roaming\Mozilla\plugins\npatgpc.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Capa5\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Capa5\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U32 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.320.5 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: Panda ActiveScan 2.0 (Enabled) = C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Hulu Desktop (Enabled) = C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.7.1\npHDPlg.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: RealDownloader = C:\Users\Capa5\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.0_0\
CHR - Extension: No name found = C:\Users\Capa5\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfffjahnfbocnaooecgijfnbpcfekoik\1.0.0.1_0\

O1 HOSTS File: ([2013-04-25 18:10:44 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O3 - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\..\Toolbar\WebBrowser: (no name) - {00000000-0000-0000-0000-000000000000} - No CLSID value found.
O4:64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe (COMODO)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Ad-Aware Browsing Protection] C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)
O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [NuTCSetupEnviron] C:\Program Files (x86)\MKS Toolkit\bin\ncoeenv.exe (MKS Software Inc.)
O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [vmware-tray] C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe (VMware, Inc.)
O4 - Startup: C:\Users\Capa5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Capa5\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office15\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~4\Office15\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~4\Office15\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Plugin Control)
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} https://www.microsoft.com/resources/virtuallabs/ActiveX/VMRCActiveXClient1.cab (Microsoft Virtual Server VMRC Advanced Control)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect119.cab (GMNRev Class)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.5.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5867CA52-04BE-423A-BC1D-01AF672988DA}: DhcpNameServer = 200.21.200.10 200.21.200.80
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5867CA52-04BE-423A-BC1D-01AF672988DA}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CF955CDB-B6CE-472B-88DA-3786D035951C}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E4AE3FBB-82D5-4FAA-9113-95773DA19939}: DhcpNameServer = 200.75.51.132 200.75.51.133
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30:64bit: - LSA: Security Packages - (msoidssp) - C:\Windows\SysNative\msoidssp.dll (Microsoft Corp.)
O30 - LSA: Security Packages - (msoidssp) - C:\Windows\SysWow64\msoidssp.dll (Microsoft Corp.)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

OscarZ · Apr 26, 2013

========== Files/Folders - Created Within 30 Days ==========

[2013-04-25 19:31:31 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013-04-25 19:31:25 | 000,000,000 | ---D | C] -- C:\JRT
[2013-04-25 18:11:00 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2013-04-25 17:30:45 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013-04-25 17:30:45 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013-04-25 17:30:45 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013-04-25 17:30:29 | 000,000,000 | ---D | C] -- C:\ComboFix
[2013-04-25 17:29:55 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013-04-25 17:28:49 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013-04-25 13:20:56 | 005,059,017 | R--- | C] (Swearware) -- C:\Users\Capa5\Desktop\ComboFix.exe
[2013-04-23 19:09:36 | 000,000,000 | ---D | C] -- C:\Users\Capa5\Desktop\RK_Quarantine
[2013-04-23 09:58:44 | 000,000,000 | ---D | C] -- C:\Users\Capa5\AppData\Roaming\Malwarebytes
[2013-04-23 09:58:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013-04-23 09:58:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013-04-23 09:58:26 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013-04-23 09:58:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013-04-23 09:56:43 | 000,000,000 | ---D | C] -- C:\VTRoot
[2013-04-23 09:52:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
[2013-04-23 09:50:44 | 000,000,000 | --SD | C] -- C:\ProgramData\Shared Space
[2013-04-23 09:50:27 | 000,000,000 | ---D | C] -- C:\Program Files\COMODO
[2013-04-23 09:50:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo
[2013-04-23 09:50:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo Downloader
[2013-04-17 18:03:47 | 000,000,000 | ---D | C] -- C:\Users\Capa5\AppData\Roaming\LavasoftStatistics
[2013-04-17 17:59:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Downloaded Installations
[2013-04-17 17:59:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Ad-Aware Browsing Protection
[2013-04-17 17:58:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Toolbar Cleaner
[2013-04-17 17:56:59 | 000,014,456 | ---- | C] (GFI Software) -- C:\Windows\SysNative\drivers\gfibto.sys
[2013-04-17 14:10:19 | 000,000,000 | ---D | C] -- C:\Users\Capa5\AppData\Roaming\FileZilla
[2013-04-17 14:10:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2013-04-17 14:10:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client
[2013-04-15 18:38:52 | 000,023,168 | ---- | C] (COMODO) -- C:\Windows\SysNative\drivers\cmderd.sys
[2013-04-15 18:38:40 | 000,043,216 | ---- | C] (COMODO) -- C:\Windows\SysNative\cmdcsr.dll
[2013-04-15 18:38:38 | 000,437,176 | ---- | C] (COMODO) -- C:\Windows\SysNative\guard64.dll
[2013-04-15 18:38:38 | 000,348,584 | ---- | C] (COMODO) -- C:\Windows\SysWow64\guard32.dll
[2013-04-15 18:38:30 | 000,343,760 | ---- | C] (COMODO) -- C:\Windows\SysNative\cmdvrt64.dll
[2013-04-15 18:38:30 | 000,045,776 | ---- | C] (COMODO) -- C:\Windows\SysNative\cmdkbd64.dll
[2013-04-15 18:38:26 | 000,276,688 | ---- | C] (COMODO) -- C:\Windows\SysWow64\cmdvrt32.dll
[2013-04-15 18:38:26 | 000,040,656 | ---- | C] (COMODO) -- C:\Windows\SysWow64\cmdkbd32.dll
[2013-04-11 21:48:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013-04-11 07:40:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013-04-26 09:24:17 | 000,026,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-04-26 09:24:17 | 000,026,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-04-26 09:21:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-04-26 09:18:01 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4263040667-3620211937-4277475905-1000UA.job
[2013-04-26 08:52:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-04-26 07:52:00 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-04-25 19:22:25 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Capa5.job
[2013-04-25 19:21:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-04-25 19:21:35 | 1988,509,695 | -HS- | M] () -- C:\hiberfil.sys
[2013-04-25 19:21:07 | 001,474,832 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat
[2013-04-25 18:18:04 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4263040667-3620211937-4277475905-1000Core.job
[2013-04-25 18:10:44 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013-04-25 17:14:48 | 000,000,600 | ---- | M] () -- C:\Users\Capa5\AppData\Local\PUTTY.RND
[2013-04-25 14:08:06 | 000,001,306 | ---- | M] () -- C:\Users\Capa5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de pantalla y Selector de OneNote 2010.lnk
[2013-04-25 13:21:05 | 005,059,017 | R--- | M] (Swearware) -- C:\Users\Capa5\Desktop\ComboFix.exe
[2013-04-25 13:04:01 | 000,000,366 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateXML_Capa5.job
[2013-04-25 12:03:08 | 000,000,370 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Capa5.job
[2013-04-23 10:26:15 | 000,035,534 | ---- | M] () -- C:\Windows\SysNative\drivers\fvstore.dat
[2013-04-23 09:52:08 | 000,001,838 | ---- | M] () -- C:\Users\Public\Desktop\COMODO Internet Security.lnk
[2013-04-23 09:51:59 | 000,000,593 | ---- | M] () -- C:\Users\Public\Desktop\Shared Space.lnk
[2013-04-22 08:18:15 | 000,009,992 | ---- | M] () -- C:\bootsqm.dat
[2013-04-18 08:24:51 | 000,001,046 | ---- | M] () -- C:\Users\Capa5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013-04-17 19:18:42 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\SBRC.dat
[2013-04-17 19:16:19 | 001,259,880 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013-04-17 19:16:19 | 000,345,412 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013-04-17 19:16:19 | 000,010,912 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013-04-17 17:56:59 | 000,014,456 | ---- | M] (GFI Software) -- C:\Windows\SysNative\drivers\gfibto.sys
[2013-04-17 14:06:01 | 000,025,686 | ---- | M] () -- C:\Users\Capa5\Desktop\winscp419.ini
[2013-04-17 14:06:01 | 000,000,600 | ---- | M] () -- C:\Users\Capa5\AppData\Roaming\winscp.rnd
[2013-04-15 18:38:52 | 000,023,168 | ---- | M] (COMODO) -- C:\Windows\SysNative\drivers\cmderd.sys
[2013-04-15 18:38:40 | 000,043,216 | ---- | M] (COMODO) -- C:\Windows\SysNative\cmdcsr.dll
[2013-04-15 18:38:38 | 000,437,176 | ---- | M] (COMODO) -- C:\Windows\SysNative\guard64.dll
[2013-04-15 18:38:38 | 000,348,584 | ---- | M] (COMODO) -- C:\Windows\SysWow64\guard32.dll
[2013-04-15 18:38:30 | 000,343,760 | ---- | M] (COMODO) -- C:\Windows\SysNative\cmdvrt64.dll
[2013-04-15 18:38:30 | 000,045,776 | ---- | M] (COMODO) -- C:\Windows\SysNative\cmdkbd64.dll
[2013-04-15 18:38:26 | 000,276,688 | ---- | M] (COMODO) -- C:\Windows\SysWow64\cmdvrt32.dll
[2013-04-15 18:38:26 | 000,040,656 | ---- | M] (COMODO) -- C:\Windows\SysWow64\cmdkbd32.dll
[2013-04-11 03:35:24 | 000,484,472 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013-04-10 12:53:24 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013-04-04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013-04-03 09:09:38 | 000,001,171 | ---- | M] () -- C:\Users\Capa5\scriptVista.sql
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013-04-25 17:30:45 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013-04-25 17:30:45 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013-04-25 17:30:45 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013-04-25 17:30:45 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013-04-25 17:30:45 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013-04-23 09:56:42 | 000,035,534 | ---- | C] () -- C:\Windows\SysNative\drivers\fvstore.dat
[2013-04-23 09:52:07 | 000,001,838 | ---- | C] () -- C:\Users\Public\Desktop\COMODO Internet Security.lnk
[2013-04-23 09:51:59 | 000,000,593 | ---- | C] () -- C:\Users\Public\Desktop\Shared Space.lnk
[2013-04-23 09:51:52 | 001,474,832 | ---- | C] () -- C:\Windows\SysNative\drivers\sfi.dat
[2013-04-22 08:18:15 | 000,009,992 | ---- | C] () -- C:\bootsqm.dat
[2013-04-17 19:18:42 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\SBRC.dat
[2013-04-03 09:09:37 | 000,001,171 | ---- | C] () -- C:\Users\Capa5\scriptVista.sql
[2013-04-01 09:26:25 | 000,000,376 | ---- | C] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Capa5.job
[2013-04-01 09:26:23 | 000,000,370 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Capa5.job
[2013-04-01 09:26:20 | 000,000,366 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateXML_Capa5.job
[2013-03-05 15:41:08 | 000,042,140 | ---- | C] () -- C:\Users\Capa5\taylor lautner sin ropA.jpg
[2013-01-09 13:35:53 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\thunk.dll
[2013-01-09 13:32:29 | 000,000,056 | ---- | C] () -- C:\Windows\SysWow64\FM20Ecom.dat.dll
[2012-10-26 08:15:32 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2012-08-20 13:23:42 | 000,073,220 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2012-08-20 13:23:42 | 000,021,021 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2012-08-20 13:23:42 | 000,015,670 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2012-08-20 13:23:42 | 000,010,673 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2012-08-20 13:23:42 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2012-08-20 13:23:42 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2012-08-20 13:23:42 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2012-08-20 13:23:42 | 000,001,137 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2012-08-20 13:23:42 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2012-08-20 13:23:42 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2012-08-20 13:23:42 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2012-08-20 13:23:42 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2012-08-20 13:23:41 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2012-08-20 13:23:41 | 000,029,114 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2012-08-20 13:23:41 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2012-08-20 13:23:41 | 000,013,280 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2012-08-20 13:23:11 | 000,000,071 | ---- | C] () -- C:\Windows\EPSTX105.ini
[2012-07-25 08:13:14 | 000,034,308 | ---- | C] () -- C:\Windows\SysWow64\BASSMOD.dll
[2012-07-07 19:41:54 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
[2012-06-27 14:08:14 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2012-06-25 16:09:01 | 000,000,105 | ---- | C] () -- C:\ProgramData\.sdplic
[2012-05-28 10:51:03 | 000,050,840 | ---- | C] () -- C:\Users\Capa5\AppData\Local\tmpFOTO0070.0
[2012-05-28 10:51:03 | 000,039,668 | ---- | C] () -- C:\Users\Capa5\AppData\Local\tmpFOTO0070.JPG
[2012-05-22 10:39:36 | 000,707,354 | ---- | C] () -- C:\Windows\unins000.exe
[2012-05-22 10:39:36 | 000,001,528 | ---- | C] () -- C:\Windows\unins000.dat
[2012-05-08 15:16:00 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\onaudmsg.dll
[2012-04-16 15:26:12 | 000,000,042 | ---- | C] () -- C:\Users\Capa5\dlmgr_.pro
[2012-01-24 15:15:51 | 000,000,000 | ---- | C] () -- C:\Users\Capa5\AppData\Local\{248D05D5-65D8-4FE0-A1A5-E8DC566C0794}
[2012-01-20 15:39:37 | 000,000,000 | ---- | C] () -- C:\Users\Capa5\AppData\Local\{4D5406E4-540A-4CB8-8BAF-A269922E25C6}
[2011-12-05 12:13:14 | 000,001,074 | ---- | C] () -- C:\Users\Capa5\Documents - Shortcut.lnk
[2011-10-31 09:13:20 | 000,000,000 | ---- | C] () -- C:\Users\Capa5\AppData\Local\{528EAE6D-327E-4656-A23F-0AF620DEB5CC}
[2011-10-12 17:57:25 | 000,154,112 | ---- | C] () -- C:\Windows\SysWow64\Tngremov.exe
[2011-10-11 10:21:24 | 000,000,600 | ---- | C] () -- C:\Users\Capa5\winscp.RND
[2011-08-08 11:36:06 | 000,000,000 | ---- | C] () -- C:\Users\Capa5\AppData\Local\{64D4F5AE-A201-414B-9E41-2A7F0B0E7453}
[2011-07-28 17:49:19 | 000,006,656 | ---- | C] () -- C:\Users\Capa5\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-07-28 08:45:25 | 000,000,000 | ---- | C] () -- C:\Users\Capa5\AppData\Local\{8B203875-9A35-48EE-B8AC-E2D16F49C20F}
[2011-07-14 14:19:43 | 000,000,161 | ---- | C] () -- C:\Users\Capa5\.myeclipse.properties
[2011-06-27 10:53:56 | 000,867,020 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2011-06-27 10:53:56 | 000,128,204 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
[2011-06-27 10:53:56 | 000,105,608 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2011-06-27 10:28:06 | 013,899,776 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011-06-14 14:02:27 | 000,003,138 | ---- | C] () -- C:\Users\Capa5\.pulse2.locator
[2011-06-13 08:58:13 | 000,000,000 | ---- | C] () -- C:\Users\Capa5\AppData\Local\{82317E4A-A0DB-4BBF-85D0-E55CF02FDE33}
[2011-04-18 10:07:38 | 001,244,254 | ---- | C] () -- C:\Users\Capa5\AppData\Local\tmpDSC04010.JPG
[2011-04-18 10:07:37 | 004,561,944 | ---- | C] () -- C:\Users\Capa5\AppData\Local\tmpDSC04010.0
[2011-03-01 06:19:41 | 000,007,369 | ---- | C] () -- C:\Users\Capa5\is_install.rsp
[2010-08-14 10:05:49 | 000,000,600 | ---- | C] () -- C:\Users\Capa5\AppData\Local\PUTTY.RND
[2010-08-13 12:35:31 | 000,000,600 | ---- | C] () -- C:\Users\Capa5\AppData\Roaming\winscp.rnd
[2010-08-13 09:17:24 | 000,000,093 | ---- | C] () -- C:\Users\Capa5\AppData\Local\fusioncache.dat
[2010-08-13 01:40:06 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-08-02 16:50:21 | 000,582,744 | ---- | C] () -- C:\Users\Capa5\AppData\Local\tmpFOTOGRAFÍA179.JPG
[2010-08-02 16:50:20 | 001,309,913 | ---- | C] () -- C:\Users\Capa5\AppData\Local\tmpFOTOGRAFÍA179.0
[2010-07-28 14:30:41 | 000,007,654 | ---- | C] () -- C:\Users\Capa5\AppData\Local\Resmon.ResmonCfg

========== ZeroAccess Check ==========

[2009-07-13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 00:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2011-09-22 08:43:41 | 000,000,000 | ---D | M] -- C:\Users\Asine2\AppData\Roaming\Notepad++
[2011-09-19 13:29:39 | 000,000,000 | ---D | M] -- C:\Users\Asine2\AppData\Roaming\Subversion
[2011-12-12 10:20:06 | 000,000,000 | ---D | M] -- C:\Users\Asine2\AppData\Roaming\Teradata
[2010-08-17 11:20:33 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Ascential Software
[2012-12-13 09:03:52 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\BitTorrent
[2012-05-24 08:37:35 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\BSplayer
[2011-03-24 10:22:57 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\BSplayer Pro
[2012-06-28 14:10:00 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Business Objects
[2012-11-21 08:14:04 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\DAEMON Tools Lite
[2012-05-15 16:53:46 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\DBDesigner4
[2013-02-08 16:51:32 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\DemoCreator
[2012-09-17 10:47:39 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Downloaded Installations
[2012-10-26 08:04:44 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\driveridentifier
[2013-04-25 19:24:11 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Dropbox
[2013-04-23 19:12:05 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\FileZilla
[2012-02-28 10:07:40 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\GHISLER
[2012-09-27 14:55:29 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\IBM
[2010-08-17 11:19:34 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\IBM Corporation
[2011-04-03 09:02:35 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Lite
[2011-06-16 16:56:26 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\MySQL
[2010-08-16 10:50:12 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\NCR
[2012-09-17 10:51:33 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Nitro PDF
[2011-03-20 18:59:08 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Notepad++
[2012-12-27 15:00:10 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Oracle SQL Developer Data Modeler
[2011-06-16 15:32:51 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\postgresql
[2012-06-25 16:19:34 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Rational
[2011-10-11 15:56:25 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\SSH
[2010-08-11 08:21:51 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Subversion
[2012-07-09 10:24:59 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\SystemRequirementsLab
[2013-04-25 15:59:06 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\TeamViewer
[2010-08-25 17:01:19 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Telefónica Móviles
[2011-02-17 12:01:10 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Teradata
[2011-01-24 19:35:03 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Tific
[2012-06-08 15:59:56 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\webex
[2010-10-02 17:05:52 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\WildTangent
[2012-10-26 08:23:50 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\WinBatch
[2011-04-13 11:15:41 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Windows Live Writer
[2012-07-24 10:52:08 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Xcelsius
[2012-06-28 14:17:31 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\XcelsiuscustomThemes
[2012-06-28 14:17:31 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\XcelsiuscustomThemesAutoInfo
[2012-05-24 08:46:47 | 000,000,000 | ---D | M] -- C:\Users\Capa5\AppData\Roaming\Youtube Downloader HD
[2013-03-05 14:57:23 | 000,000,000 | ---D | M] -- C:\Users\cubos\AppData\Roaming\Subversion

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:82F50D1C

< End of report >

OscarZ · Apr 26, 2013

That´s it, please let me know if there is something else to do.

Thanks!

Broni · Apr 26, 2013

Run OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following

Code:

:OTL
PRC - [2011-12-08 12:55:30 | 000,124,088 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\klnagent.exe
SRV - [2011-12-08 12:55:30 | 000,124,088 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\klnagent.exe -- (klnagent)
IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 10.226.5.161:80
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O3 - HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\..\Toolbar\WebBrowser: (no name) - {00000000-0000-0000-0000-000000000000} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office15\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~4\Office15\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~4\Office15\ONBttnIE.dll/105 File not found
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:82F50D1C

:Services

:Reg

:Files
C:\Program Files (x86)\Kaspersky Lab

:Commands
[purity]
[emptytemp]
[emptyjava]
[emptyflash]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot the PC when it is done
You will get a log that shows the results of the fix. Please post it.

NOTE. If for any reason OTL stalls (most likely at "killing processes..." step) run the fix from safe mode.
Last scans...

Download Security Check from here or here and save it to your Desktop.

Double-click SecurityCheck.exe
Follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me.

Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.

Make sure the following options are checked:
- Internet Services
- Windows Firewall
- System Restore
- Security Center
- Windows Update
- Windows Defender
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.

Please run a free online scan with the ESET Online Scanner

Disable your antivirus program
Tick the box next to YES, I accept the Terms of Use
Click Start
Accept any security warnings from your browser.
Check Scan archives
Click Start
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click on List of found threats
Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
NOTE. If Eset won't find any threats, it won't produce any log.

OscarZ · Apr 30, 2013

Broni,

Sorry for not having answered yet, this moment I'm doing the last step, as soon as it finishes I'll post the messages.

Oscar.

OscarZ · Apr 30, 2013

Broni,

Please let me two more days to post the logs.

Thank you!!

Broni · Apr 30, 2013

OscarZ · May 2, 2013

Hi Broni,

Here the logs.

1. OLT

All processes killed
========== OTL ==========
Process klnagent.exe killed successfully!
Service klnagent stopped successfully!
Service klnagent deleted successfully!
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\klnagent.exe moved successfully.
HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKU\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-4263040667-3620211937-4277475905-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{00000000-0000-0000-0000-000000000000} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-0000-0000-0000-000000000000}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-itss\ deleted successfully.
File Protocol\Handler\ms-itss - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
File Protocol\Handler\skype-ie-addon-data - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
ADS C:\ProgramData\Temp:82F50D1C deleted successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\Data\Cleaner folder moved successfully.
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\Data folder moved successfully.
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\Bases folder moved successfully.
C:\Program Files (x86)\Kaspersky Lab\NetworkAgent folder moved successfully.
C:\Program Files (x86)\Kaspersky Lab folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: AppData
->Temp folder emptied: 0 bytes

User: Asine2
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 103726861 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 1493 bytes

User: Capa5
->Temp folder emptied: 8927022 bytes
->Temporary Internet Files folder emptied: 42947436 bytes
->Java cache emptied: 1760515 bytes
->FireFox cache emptied: 106922449 bytes
->Google Chrome cache emptied: 7746975 bytes
->Flash cache emptied: 5320699 bytes

User: cubos
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 21782320 bytes
->Java cache emptied: 463 bytes
->Flash cache emptied: 492 bytes

User: db2admin
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: informix
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: informix.Capa1
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Java cache emptied: 463 bytes

User: MsDtsServer110
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: MSSQLFDLauncher
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: MSSQLSERVER
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: MSSQLServerOLAPService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Public
->Temp folder emptied: 0 bytes

User: ReportServer
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 13386 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 84660 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 285.00 mb

[EMPTYJAVA]

User: All Users

User: AppData

User: Asine2
->Java cache emptied: 0 bytes

User: Capa5
->Java cache emptied: 0 bytes

User: cubos
->Java cache emptied: 0 bytes

User: db2admin

User: Default

User: Default User

User: informix

User: informix.Capa1
->Java cache emptied: 0 bytes

User: MsDtsServer110

User: MSSQLFDLauncher

User: MSSQLSERVER

User: MSSQLServerOLAPService

User: postgres

User: Public

User: ReportServer

Total Java Files Cleaned = 0.00 mb

[EMPTYFLASH]

User: All Users

User: AppData

User: Asine2
->Flash cache emptied: 0 bytes

User: Capa5
->Flash cache emptied: 0 bytes

User: cubos
->Flash cache emptied: 0 bytes

User: db2admin

User: Default

User: Default User

User: informix

User: informix.Capa1

User: MsDtsServer110

User: MSSQLFDLauncher

User: MSSQLSERVER

User: MSSQLServerOLAPService

User: postgres

User: Public

User: ReportServer

Total Flash Files Cleaned = 0.00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 04292013_191348

Files\Folders moved on Reboot...
C:\Users\Capa5\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Windows\temp\vmware-SYSTEM\vmware-usbarb-SYSTEM-2504.log moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

OscarZ · May 2, 2013

2. Checkup Security

Results of screen317's Security Check version 0.99.63
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
COMODO Antivirus
[size=1]WMI entry may not exist for antivirus; attempting automatic update.[/size]
`````````Anti-malware/Other Utilities Check:`````````
Ad-Aware
Malwarebytes Anti-Malware version 1.75.0.1300
platform.client.java.helper.swd.jco.webapp_bundles-4.0-core-nu
olap.oda.ssas2005.java-4.0-core-nu
platform.services.java.apsbinaries-4.0-en-nu
tp.apache.xerces.java.dswsbobje-2.6.2-core-nu
tp.azalea.java-5.5-core-nu
crystalreports.dataaccess.driver.javabeans-4.0-en-32
platform.sdk.boe.java.classes-4.0-core-nu
tp.ooc.java.bundle.boe-4.0.5-core-nu
crystalreports.partner.shared.java.siebel-4.0-core-nu
platform.client.java.helper.servletbridge_bobjcomponents.boe_webapp-4.0-core-nu
crystalreports.boe.sdkplugins.java-4.0-es-nu
crystalreports.boe.sdkplugins.java.crlov-4.0-core-nu
datafederator.boe.client.java-4.0-en-nu
crystalreports.boe.sdkplugins.java.managedreports-4.0-core-nu
connectivity.connectionserver.client.corba.java-4.0-core-nu
olap.oda.api.java-4.0-core-nu
platform.services.java.webapp_bundle-4.0-core-nu
tp.ooc.java.dswsbobje-4.0.5-core-nu
tp.rsa.crypto.java-4.1-core-nu
foundation.bcm.java.dswsbobje-4.0-core-nu
tp.apache.commons.java.dswsbobje-3.1-core-nu
platform.sdk.boe.java.sap.plugins_bundle-4.0-core-nu
re.shared.webservices.cons.dsws.javasdk-4.0-core-nu
cvom.java.ui_helpers-4.0-core-nu
platform.sdk.boe.java.sap-4.0-core-nu
olap.oda.core.java-4.0-core-nu
platform.client.java.app.opendoc.webpath_bundle-4.0-en-nu
crystalreports.dataaccess.driver.java-4.0-core-nu
tp.apache.xalan.java.dswsbobje-2.5.2-core-nu
connectivity.connectionserver.server.java-4.0-core-nu
repoaccess.extensions.ds_excel.java-4.0-core-nu
crystalreports.boe.sdkplugins.java.plugins_bundle-4.0-core-nu
platform.client.java.app.cmc.categories_tab_dfo-4.0-core-nu
repoaccess.repo_proxy_jni.java-4.0-core-nu
crystalreports.engine.java-4.0-core-nu
tp.apache.xalan.java.classes-2.5.2-core-nu
repoaccess.container.java.shared_classes-4.0-core-nu
foundation.tracelog.java.boe-4.0-core-nu
crystalreports.boe.serviceplugins.pss.java-4.0-core-nu
platform.client.java.app.cmc.help-4.0-en-nu
foundation.bcm.java.bundle.boe-4.0-core-nu
crystalreports.boe.sdkplugins.java-4.0-core-nu
platform.services.java.publishingservice_external-4.0-en-nu
platform.client.java.app.opensearch.webpath_bundle-4.0-core-nu
crystalreports.webreporting.java-4.0-core-nu
platform.services.search.java.webapp_bundle-4.0-core-nu
platform.sdk.boe.java.oracle-4.0-core-nu
platform.sdk.boe.java.siastatusquery-4.0-core-nu
platform.services.ras21.clientsdk.java.webapp.pbd-4.0-core-nu
biwidgets.boe.sdkplugins.java-4.0-core-nu
sdkbase.framework.java-4.0-core-nu
Java 7 Update 9
tp.apache.lucene.java-2.4.1-core-nu
platform.sdk.boe.java.jdedwards.plugins_bundle-4.0-core-nu
connectivity.foundation.java-4.0-core-nu
connectivity.connectionserver.client.inproc.java-4.0-core-nu
datafederator.sourcedefiner.java.webpath_bundles-4.0-core-nu
informationengine.ieplugin.java-4.0-core-nu
platform.services.ras21.servercore.forjavaproc-4.0-core-nu
foundation.tracelog.java.classes-4.0-core-nu
datafederator.boe.service.java-4.0-core-nu
platform.client.java.helper.swd.shared.webapp_bundle-4.0-core-nu
platform.client.java.app.shared.caf_dfos-4.0-core-nu
platform.client.java.app.cmc.applications_tab_dfo-4.0-core-nu
repoaccess.javasdk_repoaccess-4.0-core-nu
foundation.bcm.java.bpbi-4.0-core-nu
olap.oda.ea.java-4.0-core-nu
platform.library.common.authentication.jdedwards.java-4.0-core-nu
foundation.tracelog.java.dswsbobje-4.0-core-nu
tp.ooc.java-4.0.5-core-nu
datafederator.java.pbds-4.0-core-nu
platform.services.ras21.clientsdk.java.pbd-4.0-core-nu
platform.services.ras21.servercore.forjavaproc.pbd-4.0-core-nu
platform.client.java.plugins.plugins_um_bundle-4.0-core-nu
platform.client.java.app.cmc.servers_tab_dfo-4.0-core-nu
crystalreports.webreporting.java.dswsbobje-4.0-core-nu
olap.oda.bicsprovider.java-4.0-en-nu
platform.sdk.boe.java.siebel-4.0-core-nu
platform.services.ras21.clientsdk.java-4.0-core-nu
repoaccess.container.admintool.java-4.0-core-nu
platform.webservices.cons.dsws.javacommon-4.0-core-nu
repoaccess.container.java.dswsbobje-4.0-core-nu
foundation.bcm.java.boe-4.0-core-nu
crystalreports.boe.clientactions.java.caf_dfos-4.0-core-nu
tp.netscape.ldap.cpp.mozjavascript-6.0.5-core-32
tp.ooc.java.classes-4.0.5-core-nu
platform.services.java.securitytokenservice-4.0-core-nu
platform.sdk.boe.java.controlserversstate-4.0-core-nu
platform.client.java.app.cmc.accesslevels_tab_dfo-4.0-core-nu
platform.services.java.publishingservice_share-4.0-core-nu
platform.client.java.plugins.plugins_um_bundle-4.0-en-nu
platform.client.java.app.portal.archive-4.0-core-nu
platform.client.java.app.cmc.instancemanager_tab_dfo-4.0-core-nu
crystalreports.crystalcommon.cpp.crjavaconfig-4.0-core-nu
platform.client.java.app.cmc.cryptographickey_tab_dfo-4.0-core-nu
tp.apache.xerces.java.bpbi-2.6.2-core-nu
tp.rsa.crypto.java.classes-4.1-core-nu
tp.apache.xerces.java.boe-2.6.2-core-nu
platform.client.java.app.opendoc.webpath_bundle-4.0-core-nu
crystalreports.dataaccess.driver.javabeans-4.0-core-32
platform.client.java.app.cmc.personalfolders_tab_dfo-4.0-core-nu
platform.client.java.app.cmc.folders_tab_dfo-4.0-core-nu
platform.sdk.boe.java.bundles.boe-4.0-core-nu
platform.services.java.publishingservice-4.0-core-nu
tp.apache.xalan.java.boe-2.5.2-core-nu
tp.ooc.java.bundle-4.0.5-core-nu
crystalreports.sdk.java.sdkcommon-4.0-core-nu
foundation.javalibs.boe-4.0-core-nu
tp.ibm.icu.java.classes-3.8.1-core-nu
olap.oda.ssas2005.java-4.0-en-nu
repoaccess.repositoryproxyinterface.java-4.0-core-nu
platform.client.java.app.cmc.home_tab_dfo-4.0-core-nu
webi.cdzsrv.lib.java-4.0-core-nu
tp.apache.xalan.java.bpbi-2.5.2-core-nu
platform.sdk.boe.java-4.0-core-nu
platform.client.java.app.cmc.events_tab_dfo-4.0-core-nu
tp.json.java.boe-1.0_sap.1-core-nu
olap.oda.xmla_core.java-4.0-en-nu
foundation.bcm.java.bundle-4.0-core-nu
shared.library.keycode.decoder.java-4.0-core-nu
platform.client.java.app.cmc.inboxes_tab_dfo-4.0-core-nu
crystalreports.sdk.java.sdkcommon.dswsbobje-4.0-core-nu
platform.webservices.cons.dsws.javasdk-4.0-core-nu
platform.client.java.app.cmc.licenses_tab_dfo-4.0-core-nu
platform.client.java.plugins.plugins_bundle-4.0-en-nu
sdkbase.framework.java.dswsbobje-4.0-core-nu
platform.client.java.app.admintools-4.0-core-nu
platform.services.search.java.platformsearchjavaschedulingservice-4.0-core-nu
crystalreports.designers.java.launcher-4.0-core-32
tp.apache.xerces.java.classes-2.6.2-core-nu
datafederator.boe.java.authoring.packages-4.0-core-nu
olap.oda.xmla_core.java-4.0-core-nu
platform.library.common.authentication.siebel.java-4.0-core-nu
crystalreports.sdk.java.repository-4.0-core-nu
tp.antlr.java-3.1.1-core-nu
repoaccess.ctplugin.java.dswsbobje-4.0-core-nu
crystalreports.partner.shared.java.jde-4.0-core-nu
platform.client.java.ure.core-4.0-core-nu
tp.sap.jco.java-3.0.5-core-nu
platform.client.java.app.shared.boe_webapp-4.0-core-nu
repoaccess.container_plugins.java-4.0-core-nu
connectivity.connectionserver.ddk.java-4.0-core-nu
platform.client.java.app.shared.boe_webapp-4.0-en-nu
tools.astools.java-4.0-core-nu
platform.services.search.java.platformsearchservice-4.0-core-nu
platform.sdk.boe.java.peoplesoft-4.0-core-nu
foundation.bcm.java-4.0-core-nu
repoaccess.jnitools.java.shared_classes-4.0-core-nu
crystalreports.boe.serviceplugins.java.crnextgenprocserver-4.0-core-nu
Java version out of Date!
Adobe Flash Player 11.6.602.180
Mozilla Firefox (20.0.1)
Google Chrome 26.0.1410.43
Google Chrome 26.0.1410.64
````````Process Check: objlist.exe by Laurent````````
Ad-Aware AAWService.exe is disabled!
Ad-Aware AAWTray.exe is disabled!
Comodo Firewall cmdagent.exe
Common Files Microsoft Shared Microsoft Online Services MSOIDSVC.EXE
Common Files Microsoft Shared Microsoft Online Services MSOIDSvcm.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

OscarZ · May 2, 2013

3. Farbar Services Scanner:

Farbar Service Scanner Version: 14-04-2013
Ran by Capa5 (administrator) on 30-04-2013 at 07:58:29
Running from "C:\Users\Capa5\Downloads"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Attempt to access Yahoo IP returned error. Yahoo IP is offline
Yahoo.com is accessible.

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****

OscarZ · May 2, 2013

ESET Online Scanner:

C:\Users\All Users\Comodo\Cis\Quarantine\data\{CBB0D8CA-8EDE-47DC-8DF2-01872FEE70F8} Win32/Adware.MediaFinder application
C:\ProgramData\Comodo\Cis\Quarantine\data\{CBB0D8CA-8EDE-47DC-8DF2-01872FEE70F8} Win32/Adware.MediaFinder application cleaned by deleting - quarantined

Thanks!

Broni · May 2, 2013

Update Adobe Flash Player: http://get.adobe.com/flashplayer/
Make sure you UN-check Yes, install McAfee Security Scan Plus

NOTE 1: Beginning with Adobe Flash Version 11.3, the universal installer includes the 32-bit and 64-bit versions of the Flash Player.
NOTE 2: While installing make sure you UN-check any extra garbage which wants to install alongside.

==================================

Your computer is clean

1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point, using following OTL script:

Run OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following:

Code:

:OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[emptyjava]
[CLEARALLRESTOREPOINTS]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot the PC when it is done
Post resulting log.

2. Now, we'll remove all tools, we used during our cleaning process

Clean up with OTL:

Double-click OTL.exe to start the program.
Close all other programs apart from OTL as this step will require a reboot
On the OTL main screen, press the CLEANUP button
Say Yes to the prompt and then allow the program to reboot your computer.

If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

3. Make sure Windows Updates are current.

4. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

5. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Launch a quick scan now" link)

6. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

7. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

8. Run Temporary File Cleaner (TFC) weekly.

9. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

10. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

11. (Windows XP only) Run defrag at your convenience.

12. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

13. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/

14. Please, let me know, how your computer is doing.

OscarZ · May 3, 2013

Broni,

It's better, now when I reboot it doesn't execute CHDSK that was my original problem.

Thanks a lot!!

Broni · May 3, 2013

Yes!!

Good luck and stay safe

Solved CHKDSK Each time windows reboot

OscarZ

Posts: 48 +0

OscarZ

Posts: 48 +0

OscarZ

Posts: 48 +0

Broni

Posts: 56,041 +516

OscarZ

Posts: 48 +0

OscarZ

Posts: 48 +0

Broni

Posts: 56,041 +516

OscarZ

Posts: 48 +0

OscarZ

Posts: 48 +0

OscarZ

Posts: 48 +0

OscarZ

Posts: 48 +0

Broni

Posts: 56,041 +516

OscarZ

Posts: 48 +0

Broni

Posts: 56,041 +516

Similar threads

Latest posts