Solved CPU slow and randomly plays sounds, maybe a virus?

Addition log 2 pt 1

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Home at 2015-03-30 01:23:11
Running from C:\Users\Home\Desktop\iVAN sTUFF\virus stuff
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1981036122-3685374935-647843951-1001\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Address Book (HKLM-x32\...\ST6UNST #1) (Version: - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.5.0.1060 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Illustrator 10 (HKLM-x32\...\{412033BC-44CF-48D9-B813-4B835101F4D3}) (Version: 10 - Adobe Systems, Inc.)
Adobe Illustrator CS3 (HKLM-x32\...\Adobe_a04a925a57548091300ada368235fc6) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_2ac78060bc5856b0c1cf873bb919b58) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - )
Aerodrom Demo Version (HKLM-x32\...\{932491BA-1954-4DC2-978A-C3AE97595456}) (Version: 1.1.4.0 - funkyf@ctory Development)
Akamai NetSession Interface (HKU\S-1-5-21-1981036122-3685374935-647843951-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Apple Application Support (32-bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.10 - Michael Tippach)
Avid Mbox 2 USB Drivers (x64) (HKLM\...\{F9242D4E-09E7-45C7-A53A-83375D0FAD42}) (Version: 9.0.2 - Avid Technology, Inc.)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - )
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 17.28.0.1191 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
C310 (x32 Version: 140.0.304.000 - Hewlett-Packard) Hidden
Camel Audio Alchemy (HKLM-x32\...\Camel Audio Alchemy) (Version: 1.55.0 - Camel Audio)
Camel Audio CamelCrusher64 (HKLM-x32\...\Camel Audio CamelCrusher64) (Version: 1.01.0 - Camel Audio)
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.13.51.1 - Canon Inc.)
Canon Utilities Digital Photo Professional 1.0 (HKLM-x32\...\InstallShield_{F011B8F1-BCCD-4E73-84F8-CB2F2D258755}) (Version: 1.0 - Canon)
Canon Utilities Digital Photo Professional 1.0 (x32 Version: 1.0 - Canon) Hidden
CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version: - dvd8n)
Coby Media Manager (HKLM-x32\...\{D95C1542-CB89-4F38-870D-A672BA5E7D54}) (Version: 1.0.4717 - Coby)
Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.)
Content Manager Assistant for PlayStation(R) (HKLM-x32\...\{32C46540-7693-49E1-A81E-121B09C8303B}) (Version: 3.00.7187.47 - Sony Computer Entertainment Inc.)
Cool Edit Pro 2.0 (HKLM-x32\...\Cool Edit Pro 2.0) (Version: - )
Cool Edit Pro v1.2a (HKLM-x32\...\Cool Edit Pro v1.2a) (Version: - )
CR2 Converter (HKLM-x32\...\{775F32A5-7BA0-4717-89D0-32B3EC25B2C9}_is1) (Version: - cr2converter.com)
Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
Creative Diagnostics (HKLM-x32\...\Diagnostics 4_5) (Version: 5.11 - Creative Technology Limited)
Creative Live! Cam Center (HKLM-x32\...\Creative Live! Cam Center) (Version: 1.00 - Creative Technology Limited)
Creative Live! Cam Manager (HKLM-x32\...\Creative Live! Cam Manager) (Version: - )
Creative Live! Cam Notebook (VF0470) Driver (1.03.01.00) (HKLM\...\Creative VF0470) (Version: - )
Creative Live! Cam User's Guide (HKLM-x32\...\Creative Live! Cam User's Guide) (Version: - )
Creative Media Toolbox 6 (HKLM-x32\...\{F1A14CB2-A048-45A6-AFDA-3571296E1D76}) (Version: 6.02 - Creative Technology Limited)
Creative Media Toolbox 6 (Shared Components) (HKLM-x32\...\Uninstaller_B4736000_Creative Media Toolbox 6) (Version: 2.80.12 - Creative Labs)
Creative MediaSource 5 (HKLM-x32\...\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.26 - Creative Technology Limited)
Creative Photo Manager (HKLM-x32\...\Creative Photo Manager) (Version: - )
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: 1.02 - Creative Technology Limited)
Creative System Information (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.12 - Creative Technology Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows (HKLM-x32\...\{E40CE517-0D42-4198-96B4-C8232B257EB5}) (Version: 1.13 - Western Digital Corporation)
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: - Dell)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.47 - Dell)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Dock (HKLM-x32\...\Dell Dock) (Version: 2.0 - Stardock Corporation)
Dell Dock (Version: 2.0 - Stardock Corporation) Hidden
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Marketplace Webslice IE8 (HKLM-x32\...\{CF67ED0C-F85D-4791-AED3-3FE882EDB45D}) (Version: 8.0 - Nextjump Inc)
Destinations (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version: - )
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.00 - Creative Technology Limited)
Dropbox (HKU\S-1-5-21-1981036122-3685374935-647843951-1001\...\Dropbox) (Version: 2.10.27 - Dropbox, Inc.)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
Efficient Address Book 3.0 (HKLM-x32\...\Efficient Address Book_is1) (Version: - Efficient Software)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
ExtractNow (HKLM-x32\...\ExtractNow_is1) (Version: - Nathan Moinvaziri)
FastImageResizer (remove only) (HKLM-x32\...\FastImageResizer) (Version: - )
ffdshow v1.1.3572 [2010-09-13] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.3572.0 - )
FL Studio 10 (HKLM-x32\...\FL Studio 10) (Version: - Image-Line)
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
FL Studio 7 (HKLM-x32\...\FL Studio 7) (Version: - Image-Line bvba)
FLAC to MP3 Converter 6.1.9 (HKLM-x32\...\DD4F47DF-6540-4BDA-BEAD-2B19250B0C48_is1) (Version: - Accmeware Corporation)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Free M4a to MP3 Converter 5.9 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GoToAssist 8.0.0.514 (HKLM-x32\...\GoToAssist) (Version: - )
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Photosmart Prem C310 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{4E484899-4F93-4086-88BA-56BDDF47A776}) (Version: 14.0 - HP)
HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
iExplorer 3.4.0.1 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version: - Macroplant LLC)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line)
Image Line ToxicIII v1.41 VSTi (HKLM-x32\...\Image Line ToxicIII v1.41 VSTi) (Version: - )
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - LIGHTNING UK!)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.0 - PACE Anti-Piracy, Inc.)
Internet Explorer (x32 Version: 8 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)
Java 8 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218020F0}) (Version: 8.0.200 - Oracle Corporation)
Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LAV Filters 0.51.3 (HKLM-x32\...\lavfilters_is1) (Version: 0.51.3 - Hendrik Leppkes)
LeapFrog Connect (HKLM-x32\...\UPCShell) (Version: 4.2.9.15649 - LeapFrog)
LeapFrog Connect (x32 Version: 4.2.9.15649 - LeapFrog) Hidden
LeapFrog Tag Junior Plugin (x32 Version: 4.2.9.15649 - LeapFrog) Hidden
MAGIX Independence Libraries Common Files (HKLM\...\MX.{34563DEE-79CD-4E2B-B41B-41A81B8188F0}) (Version: 3.2.0.0 - MAGIX AG)
MAGIX Independence Libraries Common Files (Version: 3.2.0.0 - MAGIX AG) Hidden
MAGIX Independence Pro 3.2 VST-Plugins (HKLM\...\MX.{CE4E2B9B-9D8C-4857-8BD5-230CE6E24A3B}) (Version: 3.2.0.0 - MAGIX AG)
MAGIX Independence Pro 3.2 VST-Plugins (Version: 3.2.0.0 - MAGIX AG) Hidden
MAGIX Independence Pro Software Suite 3.2 (HKLM-x32\...\MX.{12FBE83D-482B-4D82-BAC7-665B7DD79DB2}) (Version: 3.2.0.91 - MAGIX AG)
MAGIX Independence Pro Software Suite 3.2 (Version: 3.2.0.91 - MAGIX AG) Hidden
Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
M-Audio Axiom Driver 1.1.1 (x64) (HKLM\...\{8D99210A-25E1-4920-8231-D12490FB8E2C}) (Version: 1.1.1 - M-Audio)
Memorex exPressit Label Design Studio (HKLM-x32\...\MVApplication1) (Version: - )
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office XP Professional with FrontPage (HKLM-x32\...\{90280409-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.3520.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1981036122-3685374935-647843951-1001\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 7.7 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mp3tag v2.66 (HKLM-x32\...\Mp3tag) (Version: v2.66 - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) Hidden
PACE System Files (HKLM-x32\...\{28F58CDE-6241-4B11-8232-6A5D4FB06E8B}) (Version: - )
PCM4Everio (HKLM-x32\...\{39CEE1F2-12B6-4C50-9131-04BFCA110578}) (Version: - )
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PowerDirector Express (HKLM-x32\...\{EDE721EC-870A-11D8-9D75-000129760D75}) (Version: - )
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 074511a(3.7)_Vista_JVC - CyberLink Corp.)
Proteus VX (HKLM-x32\...\Proteus VX) (Version: - )
PS_AIO_07_C310_SW_Min (x32 Version: 140.0.304.000 - Hewlett-Packard) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
RealDownloader (x32 Version: 17.0.13 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer Cloud (HKLM-x32\...\RealPlayer 17.0) (Version: 17.0.13 - RealNetworks)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.89.716.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7391 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden
Scarlett MixControl 1.8 (HKLM-x32\...\Saffire USB 26_is1) (Version: 1.8 - Focusrite Audio Engineering Limited)
Scarlett Plug-in Suite 1.5 (HKLM-x32\...\{D7F912D4-C237-4079-966A-5044A5025CBF}}_is1) (Version: 1.5 - Focusrite)
SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital)
Ses2Sesx (HKLM-x32\...\{C1E66AFC-3A37-4B4E-B51F-B3D603F9AF36}) (Version: 1.4.0.10 - Suite Spot Studios)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SlimDrivers (HKLM-x32\...\{5AD12E7A-D739-4451-9BD1-3610EC56D8F5}) (Version: 2.2.45206 - SlimWare Utilities, Inc.)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Soluto (HKLM\...\{037C627B-384E-450E-866C-95BAB3CDEA17}) (Version: 1.3.1494.0 - Soluto)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Sothink Video Converter (HKLM-x32\...\{0FD155A3-DF78-43ee-84B0-3CC86BA962F2}_is1) (Version: 3.6 - SourceTec Software Co., LTD)
Sound Blaster X-Fi (HKLM-x32\...\{20288888-A7AF-4B24-8AEB-398D20CD563C}) (Version: 1.0 - Creative Technology Limited)
SoundFont Bank Manager (HKLM-x32\...\SFBM) (Version: 3.21 - Creative Technology Limited)
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Switch Sound File Converter (HKLM-x32\...\Switch) (Version: - NCH Software)
SWMole Clone Remover 3.9 (HKLM-x32\...\SWMole Clone Remover 3.9_is1) (Version: - )
Synchredible (HKLM-x32\...\Synchredible_is1) (Version: 4.0.0.3 - ASCOMP Software GmbH)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
Total Video Converter 3.10 (HKLM-x32\...\Total Video Converter 3.10_is1) (Version: - EffectMatrix Inc.)
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
Use the entry named LeapFrog Connect to uninstall (LeapFrog Tag Junior Plugin) (HKLM-x32\...\TagJuniorPlugin) (Version: - LeapFrog)
UVI Workstation x64 2.5.9 (HKLM\...\UVI Workstation x64_is1) (Version: 2.5.9 - UVI)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Veetle TV (HKLM-x32\...\Veetle TV) (Version: 0.9.19 - Veetle, Inc)
Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.)
Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Voxengo SPAN (HKLM\...\Voxengo SPAN_is1) (Version: 2.8 - Voxengo)
WD Drive Manager (x64) (HKLM\...\{4EF6A3C5-7B7A-453A-A887-7252A1A65596}) (Version: 2.107 - Western Digital)
WD Drive Utilities (HKLM-x32\...\{439A51F7-84B1-4603-BEC8-647EB2AC307F}) (Version: 1.0.1.5 - Western Digital)
WD Security (HKLM-x32\...\{83270912-15C7-4336-822E-E8F1B1BBCA60}) (Version: 1.0.3.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{6FE8A1DA-8CA6-4801-BF0F-0F2FED143FF4}) (Version: 1.6.4.7 - Western Digital Technologies, Inc.)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
WildTangent Games (HKLM-x32\...\WildTangent dell Master Uninstall) (Version: 1.0.0.71 - WildTangent)
Windows Driver Package - Focusrite USB 2.0 Audio Driver (03/17/2014 2.5.128.1) (HKLM\...\D86E353566ECB4A7ADA159C02FE46D0BACC4FA6B) (Version: 03/17/2014 2.5.128.1 - Focusrite)
Windows Driver Package - LeapFrog (FlyUsb) USB (11/05/2008 1.1.1.0) (HKLM\...\781745E87AFF80C0C1388CFF79D19ECAB2E9BB47) (Version: 11/05/2008 1.1.1.0 - LeapFrog)
Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net (09/10/2009 02.03.05.012) (HKLM\...\8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D) (Version: 09/10/2009 02.03.05.012 - Leapfrog)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (03/06/2009 1.0.0008.0) (HKLM\...\422991454CB076E9B856C21BBF99AF2B82317EDA) (Version: 03/06/2009 1.0.0008.0 - Western Digital Technologies)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinPatrol (HKLM\...\{007811BF-E310-4285-BFC6-55DB29B3EDDE}) (Version: 20.5.2011.0 - BillP Studios)
XBMC (HKU\S-1-5-21-1981036122-3685374935-647843951-1001\...\XBMC) (Version: - Team XBMC)
XviD4PSP 5.0 (HKLM-x32\...\XviD4PSP5) (Version: 5.0.37.8 r132 - Winnydows 2007-2008 and FCP-team 2009-2010)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Home\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Home\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Home\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Home\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714_1\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Home\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714_1\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1981036122-3685374935-647843951-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Home\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

19-03-2015 18:52:05 Installed Realtek High Definition Audio Driver
21-03-2015 11:54:16 Windows Update
23-03-2015 01:25:42 Removed GameFly
26-03-2015 14:52:06 03/26/15 new
26-03-2015 15:02:03 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-01-20 01:28 - 2015-03-26 23:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {03AE02C9-EED3-463C-9F35-5B5E5EF7671C} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1981036122-3685374935-647843951-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {083947D3-9A67-4DB8-8A39-82BDBB4302BD} - System32\Tasks\{995F1D00-931E-4C17-BA7C-8A2186ABD08D} => pcalua.exe -a C:\Users\Home\Downloads\trilogyi.exe -d C:\Users\Home\Desktop
Task: {09C6FD46-E028-4708-B148-A0540D0065A6} - System32\Tasks\{AC5F1DD4-DD93-4C4C-9D67-9FADC43B916E} => pcalua.exe -a "D:\New Folder (7)\yfjhf\cepmp3.exe" -d "D:\New Folder (7)\yfjhf"
Task: {0B5281C2-B802-48D9-B3FD-5A61E94005D6} - System32\Tasks\{24E1AF44-7583-418C-BB7B-8A381DFBAF63} => C:\Program Files (x86)\iMobie\PhoneClean\PhoneClean.exe
Task: {0C70931D-912B-442B-816C-5F4818ED7F7B} - System32\Tasks\{8DEF2D27-0EBC-4E8A-B213-95E72EB24BF0} => pcalua.exe -a "D:\Additional Software\IK Multimedia SampleTank\SETUP.EXE" -d "D:\Additional Software\IK Multimedia SampleTank"
Task: {145E68CB-CB46-43ED-9936-A3336919ABAD} - System32\Tasks\{8F8EFAF8-7F94-4D3D-85B8-4C41531CBF4A} => C:\Program Files (x86)\iMobie\PhoneClean\PhoneClean.exe
Task: {17FEEEAF-B80C-45B1-98D7-29807B433247} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2014-12-01] (Apple Inc.)
Task: {1B9AA6DB-7157-47E0-9718-1F65602C3E51} - System32\Tasks\{F5757733-2A8B-41C4-8E77-DC194219C926} => C:\Program Files (x86)\iMobie\PhoneClean\PhoneClean.exe
Task: {1DC80522-C8AB-490D-A532-F939D8CB8FC8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {251BA695-7376-427D-9217-C22F067AD4C0} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1981036122-3685374935-647843951-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {2841A18A-E195-4261-9DF4-3D095A429C75} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1981036122-3685374935-647843951-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {2DC3B3CB-BA83-4A52-963B-486D7AD9F235} - System32\Tasks\{A9DDE5F3-EAA7-4E4B-9F5D-1C0B9206EDA8} => pcalua.exe -a "D:\Pro Tools LE Installer\Setup.exe" -d "D:\Pro Tools LE Installer"
Task: {3A20B7C1-DE9C-4000-976C-A0ED5160890B} - System32\Tasks\{CE3BDD4E-B675-45E6-917F-8517EF404062} => pcalua.exe -a "C:\Users\Home\AppData\Local\Temp\Temp1_asio4all_00 (1).zip\ASIO4ALL\English\ASIO4ALL_2_10_English.exe"
Task: {3CF032DA-4757-4BBB-ABE7-D67D35268F6B} - System32\Tasks\{A926E94B-7A73-4C97-97BC-C69AD49428BC} => Iexplore.exe http://ui.skype.com/ui/0/6.1.73.129.456/en/abandoninstall?page=tsWLM
Task: {4213FE6D-F5F8-4F51-AAAC-B788EBBBB4D2} - System32\Tasks\{1DF5CBE3-B129-4789-9702-800D35C42629} => pcalua.exe -a D:\start.exe -d D:\
Task: {4CE7F058-8FCD-4E06-93EA-0B653ECEADEE} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1981036122-3685374935-647843951-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2014-07-30] (RealNetworks, Inc.)
Task: {4DBDDEF3-2A72-4BF7-AF16-ED775BA9170D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-14] (Adobe Systems Incorporated)
Task: {557690D7-A1DE-4386-82B5-5B46B97EDFBE} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {5CC12C88-0334-4270-B6C1-DDA44926BAD7} - System32\Tasks\{BC034D0C-C584-4CA5-933E-2B0806D2D9BC} => msiexec.exe /package "C:\Users\Home\Downloads\UxStyle_Core_jul13_bits\UxStyle_Core_Jul13_x64.msi"
Task: {5F8FB586-3CFC-4F3C-9FCA-9DC572040397} - System32\Tasks\{F91A33DE-1AB7-4D4F-8B31-1152A65EC221} => pcalua.exe -a "C:\Users\Home\Desktop\Cool Edit Pro 2.0 + Serial (Audio Ripper, Sequencer, Mixer,\Cool Edit Pro 2.0 Registration.exe" -d "C:\Users\Home\Desktop\Cool Edit Pro 2.0 + Serial (Audio Ripper, Sequencer, Mixer,"
Task: {711BF86B-3D7C-40ED-8C7D-E1AF280C6446} - System32\Tasks\{EE244D9C-1B85-4446-8405-BFC28951474B} => pcalua.exe -a C:\Users\Home\Downloads\trilogyii.exe -d C:\Users\Home\Desktop
Task: {7F58B13A-33AE-44E3-9FF9-44349915A0F2} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1981036122-3685374935-647843951-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {7FF9AA0E-6062-4055-BA0C-D0D96B09A72E} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1981036122-3685374935-647843951-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {8416985D-6D40-4613-81F8-2D2C0E05E69A} - System32\Tasks\{35C85946-CCFB-43C6-8785-43175AFF09C9} => C:\Program Files (x86)\iMobie\PhoneClean\PhoneClean.exe
Task: {9164DE55-6125-4E42-9CCE-B6A6D4A519BA} - System32\Tasks\{EDD0CCCB-72A5-41D7-9BF9-70FF72FAAABD} => C:\Program Files (x86)\iMobie\PhoneClean\PhoneClean.exe
Task: {A671F8A7-DCFB-4509-8AAE-0C7D7444F7DB} - System32\Tasks\{14C5F9F2-4EE8-4D2F-BCF6-FC6D2C69454E} => C:\Program Files (x86)\iMobie\PhoneClean\PhoneClean.exe
Task: {B3FE5971-F5D7-464C-AD4D-D38B12811BB6} - System32\Tasks\{F3E48628-6F20-4FD9-A231-886310D1C85C} => pcalua.exe -a C:\Users\Home\Downloads\trilogyiii.exe -d C:\Users\Home\Desktop
Task: {B43A8DBE-A749-45F4-AB32-3D50AB5C7C59} - System32\Tasks\{5027DD32-1676-4F4B-8061-1D7EC4E43D8B} => Iexplore.exe http://ui.skype.com/ui/0/6.1.73.129.456/en/abandoninstall?page=tsWLM
Task: {C84DB1A8-AAFA-4099-92EF-C2576562E81E} - System32\Tasks\{204B3969-EC6A-4BF9-88ED-20CDD87AF31F} => pcalua.exe -a C:\Users\Home\Desktop\ASIO4ALL_2_10_English.exe -d C:\Users\Home\Desktop
Task: {C9253ED7-C9F0-4A41-A3D1-75E57AE04B39} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)
Task: {CB6C4E4E-7CAC-46E6-8566-642474A89DB6} - System32\Tasks\{33238EA3-8AC0-4271-ADF5-BF5E5838931D} => pcalua.exe -a E:\FruityLoops330_Full_Install.exe -d E:\
Task: {D1643AFC-6217-4DA2-AC32-3627EC16193B} - System32\Tasks\{D25EEE3B-260A-4FD3-BBE0-3889E208E9D8} => pcalua.exe -a "C:\Users\Home\Downloads\Games\ModMii Installer.exe" -d C:\Users\Home\Downloads\Games
Task: {F86EA2D1-F80B-4796-9759-7CB9EB3E1A0A} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1981036122-3685374935-647843951-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 
Addition log 2 pt 2

==================== Loaded Modules (whitelisted) ==============

2014-10-14 01:18 - 2014-10-14 01:18 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender\txmlutil.dll
2014-08-14 14:49 - 2014-08-14 14:49 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender\UI\accessl.ui
2014-05-31 23:18 - 2011-11-14 20:17 - 00153680 _____ () C:\Program Files\Bitdefender\Bitdefender\bdfwcore.dll
2014-05-31 23:18 - 2014-08-14 14:49 - 00004608 _____ () C:\Program Files\Bitdefender\Bitdefender\UI\IMSecurityAL.ui
2015-02-06 12:51 - 2015-02-06 12:51 - 00784712 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00050_007\ashttpbr.mdl
2015-02-06 12:51 - 2015-02-06 12:51 - 00573544 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00050_007\ashttpdsp.mdl
2015-02-06 12:51 - 2015-02-06 12:51 - 02657264 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00050_007\ashttpph.mdl
2015-02-06 12:51 - 2015-02-06 12:51 - 01331648 _____ () C:\Program Files\Bitdefender\Bitdefender\otengines_00050_007\ashttprbl.mdl
2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-10-16 21:28 - 2014-10-16 21:28 - 00267264 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\PCGAppControlPlugin#\52df5510f23c17994e7bbd8a76a1bdd0\PCGAppControlPluginLoader.ni.dll
2014-09-15 18:42 - 2014-09-15 18:42 - 00067072 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\SignalRWrapper\d5b38817f8ee556d947a9b3c9363c104\SignalRWrapper.ni.dll
2014-10-16 20:51 - 2014-10-16 20:51 - 03672064 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\PCGPreCompiled\147a38a7653169860dd6816e35e37384\PCGPreCompiled.ni.dll
2013-11-14 14:26 - 2013-11-14 14:26 - 00090688 _____ () C:\Program Files\Soluto\PCGDllExportInspector.dll
2013-11-14 14:26 - 2013-11-14 14:26 - 00054848 ____R () C:\Program Files\Soluto\PCGDeviceScanLib.dll
2014-05-31 23:18 - 2013-03-25 16:16 - 01117920 _____ () C:\Program Files\Bitdefender\Bitdefender SafeBox\System.Data.SQLite.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00781536 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
2014-10-14 01:18 - 2014-10-14 01:18 - 00265080 _____ () C:\Program Files\BitDefender\Bitdefender\txmlutil.dll
2014-10-16 20:47 - 2014-10-16 20:47 - 00472576 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\602ab9ddf3440af31bb4c168b59f2ba5\VistaBridgeLibrary.ni.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00056544 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\STCoreXml.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00113888 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\PSTVdsDisk.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00126176 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 01121504 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\LibXml2.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00077024 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\zlib1.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00232672 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\STFiles.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00072928 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\STRegistry.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00109792 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\STPE.dll
2011-03-23 10:55 - 2010-08-11 19:19 - 00119008 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\STNLS.dll
2014-10-16 19:14 - 2014-10-16 19:14 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\7d521e583439ddf659b36d5f281ca646\IsdiInterop.ni.dll
2011-03-23 10:47 - 2010-03-03 21:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-09-22 23:04 - 2014-09-22 23:04 - 00573528 _____ () c:\program files (x86)\real\realplayer\RPDS\Lib\r1api.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Home\Cookies:fKEFcvpE5w5PTSvgWMsFOp
AlternateDataStreams: C:\Users\Home\Desktop\IJM.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\adwcleaner_4.113.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\Bitter Installer.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\mbar-1.09.1.1004.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\minitool 7.7 installer.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\mp3tagv266setup.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\phoneclean-setup.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\SlimDrivers-setup.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\trilogyi.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\trilogyii.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\trilogyiii.exe:BDU
AlternateDataStreams: C:\Users\Home\AppData\Local\qEADyUUl:K5T8BHgDsb7m2Njx3P1pi3o6kf
AlternateDataStreams: C:\Users\Home\AppData\Local\Temp:4VU4owmjUhHauhlfNtTkG
AlternateDataStreams: C:\Users\Home\AppData\Local\Temp:imbCxsVxSciBlJjzUHqjDvHyXCY

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1981036122-3685374935-647843951-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Home\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

40E55D08808046E7A5EC (S-1-5-21-1981036122-3685374935-647843951-1008 - Limited - Enabled)
Administrator (S-1-5-21-1981036122-3685374935-647843951-500 - Administrator - Disabled)
Guest (S-1-5-21-1981036122-3685374935-647843951-501 - Limited - Disabled)
Home (S-1-5-21-1981036122-3685374935-647843951-1001 - Administrator - Enabled) => C:\Users\Home
HomeGroupUser$ (S-1-5-21-1981036122-3685374935-647843951-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart Prem C310 series
Description: Photosmart Prem C310 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/28/2015 06:18:58 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/28/2015 05:20:37 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/27/2015 04:03:37 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/26/2015 06:56:36 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/26/2015 04:12:35 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/26/2015 03:23:05 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/23/2015 01:40:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WinPatrol.exe, version: 20.5.2011.0, time stamp: 0x4dd02c80
Faulting module name: WinPatrol.exe, version: 20.5.2011.0, time stamp: 0x4dd02c80
Exception code: 0xc0000409
Fault offset: 0x0001376c
Faulting process id: 0x1790
Faulting application start time: 0xWinPatrol.exe0
Faulting application path: WinPatrol.exe1
Faulting module path: WinPatrol.exe2
Report Id: WinPatrol.exe3


System errors:
=============
Error: (03/30/2015 00:56:22 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Bitdefender Virus Shield service hung on starting.

Error: (03/28/2015 05:24:47 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Bitdefender Virus Shield service hung on starting.

Error: (03/27/2015 04:07:28 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.195.475.0).

Error: (03/27/2015 03:55:41 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Update service hung on starting.

Error: (03/27/2015 03:48:55 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Bitdefender Virus Shield service hung on starting.

Error: (03/27/2015 00:55:05 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (03/27/2015 00:15:04 AM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk5\DR5.

Error: (03/27/2015 00:13:16 AM) (Source: bowser) (EventID: 8003) (User: )
Description: The master browser has received a server announcement from the computer COMPUTER-21A0B4
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{AC44C6C2-14E8-4E6C-9ADC-0835FAA65696}.
The master browser is stopping or an election is being forced.

Error: (03/26/2015 11:52:27 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (03/26/2015 11:45:36 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\IJM\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.


Microsoft Office Sessions:
=========================
Error: (03/28/2015 06:18:58 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/28/2015 05:20:37 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/27/2015 04:03:37 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/26/2015 06:56:36 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\WINDOWS\Installer\{7FBAD091-89F7-4C77-A224-15FF4423C7D2}\recordingmanager.exe

Error: (03/26/2015 04:12:35 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/26/2015 03:23:05 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (03/23/2015 01:40:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: WinPatrol.exe20.5.2011.04dd02c80WinPatrol.exe20.5.2011.04dd02c80c00004090001376c179001d0652b6c1e9f7cC:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exeC:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe0b852773-d11f-11e4-af3f-b8ac6fe48f74


CodeIntegrity Errors:
===================================
Date: 2015-03-26 23:45:36.489
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\IJM\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-03-26 23:45:36.395
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\IJM\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU E5800 @ 3.20GHz
Percentage of memory in use: 53%
Total physical RAM: 4060.98 MB
Available physical RAM: 1905.33 MB
Total Pagefile: 8120.16 MB
Available Pagefile: 5575.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:451.91 GB) (Free:150.55 GB) NTFS
Drive k: (MEDIA BOOK) (Fixed) (Total:931.28 GB) (Free:325.83 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C648A420)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=13.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451.9 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 931.5 GB) (Disk ID: 44FDFE06)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)

==================== End Of Log ============================
 
Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
 

Attachments

  • fixlist.txt
    4.4 KB · Views: 3
FIX Log


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Home at 2015-03-30 20:02:55 Run:1
Running from C:\Users\Home\Desktop
Loaded Profiles: Home (Available profiles: Home)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1981036122-3685374935-647843951-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-1981036122-3685374935-647843951-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_20\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll No File
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
S3 catchme; \??\C:\IJM\catchme.sys [X]
R3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_6.1.32700.0.sys [X]
S3 DWA; system32\DRIVERS\WSR_DWA.SYS [X]
S3 hwa; system32\DRIVERS\WSR_HWA.SYS [X]
S3 HWARadio; system32\DRIVERS\WSR_RCI.SYS [X]
U3 swmidi; No ImagePath
2014-05-25 21:24 - 2014-05-25 21:24 - 2225152 _____ () C:\Program Files\Frohmage_vstwin_x64.dll
2010-03-29 18:40 - 2010-03-29 18:40 - 0100256 _____ () C:\Program Files\Common Files\LinkInstaller.exe
2012-07-15 00:56 - 2012-07-15 00:56 - 0007859 _____ () C:\Users\Home\AppData\Roaming\pcouffin.cat
2012-07-15 00:56 - 2012-07-15 00:56 - 0001167 _____ () C:\Users\Home\AppData\Roaming\pcouffin.inf
2012-07-15 00:57 - 2012-07-15 00:57 - 0000055 _____ () C:\Users\Home\AppData\Roaming\pcouffin.log
2012-07-15 00:56 - 2012-07-15 00:56 - 0082816 _____ (VSO Software) C:\Users\Home\AppData\Roaming\pcouffin.sys
2015-03-01 23:21 - 2015-03-07 00:41 - 0004608 _____ () C:\Users\Home\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-03-14 01:33 - 2015-03-14 01:33 - 0007603 _____ () C:\Users\Home\AppData\Local\Resmon.ResmonCfg
2011-12-04 01:41 - 2011-12-04 02:25 - 0001223 _____ () C:\ProgramData\hpzinstall.log
2014-07-13 03:53 - 2014-07-13 03:53 - 0000098 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
AlternateDataStreams: C:\Users\Home\Cookies:fKEFcvpE5w5PTSvgWMsFOp
AlternateDataStreams: C:\Users\Home\Desktop\IJM.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\adwcleaner_4.113.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\Bitter Installer.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\mbar-1.09.1.1004.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\minitool 7.7 installer.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\mp3tagv266setup.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\phoneclean-setup.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\SlimDrivers-setup.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\trilogyi.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\trilogyii.exe:BDU
AlternateDataStreams: C:\Users\Home\Downloads\trilogyiii.exe:BDU
AlternateDataStreams: C:\Users\Home\AppData\Local\qEADyUUl:K5T8BHgDsb7m2Njx3P1pi3o6kf
AlternateDataStreams: C:\Users\Home\AppData\Local\Temp:4VU4owmjUhHauhlfNtTkG
AlternateDataStreams: C:\Users\Home\AppData\Local\Temp:imbCxsVxSciBlJjzUHqjDvHyXCY


*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-1981036122-3685374935-647843951-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-1981036122-3685374935-647843951-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
"HKLM\Software\MozillaPlugins\@java.com/JavaPlugin" => Key deleted successfully.
C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\PepperFlash\pepflashplayer.dll not found.
C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\ppGoogleNaClPluginChrome.dll not found.
C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\pdf.dll not found.
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll not found.
C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll not found.
C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll not found.
C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll not found.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll not found.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll not found.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll not found.
C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll not found.
c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll not found.
catchme => Service deleted successfully.
cpuz136 => Service stopped successfully.
cpuz136 => Service deleted successfully.
DisplayLinkUsbPort => Service deleted successfully.
DWA => Service deleted successfully.
hwa => Service deleted successfully.
HWARadio => Service deleted successfully.
swmidi => Service deleted successfully.
C:\Program Files\Frohmage_vstwin_x64.dll => Moved successfully.
C:\Program Files\Common Files\LinkInstaller.exe => Moved successfully.
C:\Users\Home\AppData\Roaming\pcouffin.cat => Moved successfully.
C:\Users\Home\AppData\Roaming\pcouffin.inf => Moved successfully.
C:\Users\Home\AppData\Roaming\pcouffin.log => Moved successfully.
C:\Users\Home\AppData\Roaming\pcouffin.sys => Moved successfully.
C:\Users\Home\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => Moved successfully.
C:\Users\Home\AppData\Local\Resmon.ResmonCfg => Moved successfully.
C:\ProgramData\hpzinstall.log => Moved successfully.
C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc => Moved successfully.
"C:\Users\Home\Cookies" => ":fKEFcvpE5w5PTSvgWMsFOp" ADS not found.
"C:\Users\Home\Desktop\IJM.exe" => ":BDU" ADS not found.
C:\Users\Home\Downloads\adwcleaner_4.113.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\Bitter Installer.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\mbar-1.09.1.1004.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\minitool 7.7 installer.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\mp3tagv266setup.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\phoneclean-setup.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\SlimDrivers-setup.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\trilogyi.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\trilogyii.exe => ":BDU" ADS removed successfully.
C:\Users\Home\Downloads\trilogyiii.exe => ":BDU" ADS removed successfully.
C:\Users\Home\AppData\Local\qEADyUUl => ":K5T8BHgDsb7m2Njx3P1pi3o6kf" ADS removed successfully.
C:\Users\Home\AppData\Local\Temp => ":4VU4owmjUhHauhlfNtTkG" ADS removed successfully.
C:\Users\Home\AppData\Local\Temp => ":imbCxsVxSciBlJjzUHqjDvHyXCY" ADS removed successfully.

==== End of Fixlog 20:02:56 ====
 
Last scans...

redtarget.gif
Download Security Check from here or here and save it to your Desktop.
  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run


redtarget.gif
Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.

redtarget.gif
Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe
  • Double click on TFC.exe to run the program.
  • Click on Start button to begin cleaning process.
  • TFC will close all running programs, and it may ask you to restart computer.

redtarget.gif
Download Sophos Free Virus Removal Tool and save it to your desktop.
  • Double click the icon and select Run
  • Click Next
  • Select I accept the terms in this license agreement, then click Next twice
  • Click Install
  • Click Finish to launch the program
  • Once the virus database has been updated click Start Scanning
  • If any threats are found click Details, then View log file... (bottom left hand corner)
  • Copy and paste the results in your reply
  • Close the Notepad document, close the Threat Details screen, then click Start cleanup
  • Click Exit to close the program
 
I'm doing these now. Is it possible you can give me an update as to what's wrong or what is going on in my pc?
 
Security check log

Results of screen317's Security Check version 0.99.99
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Bitdefender Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java 8 Update 20
Java version 32-bit out of Date!
Adobe Flash Player 16.0.0.305 Flash Player out of Date!
Adobe Reader XI
````````Process Check: objlist.exe by Laurent````````
Bitdefender Bitdefender vsserv.exe
Bitdefender Bitdefender updatesrv.exe
Bitdefender Bitdefender SafeBox safeboxservice.exe
BitDefender Bitdefender bdagent.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````
 
FSS log

Farbar Service Scanner Version: 17-01-2015
Ran by Home (administrator) on 31-03-2015 at 07:46:10
Running from "C:\Users\Home\Desktop"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
 
redtarget.gif
Update Adobe Flash Player: http://get.adobe.com/flashplayer/
Make sure you UN-check Yes, install McAfee Security Scan Plus

NOTE 1: Beginning with Adobe Flash Version 11.3, the universal installer includes the 32-bit and 64-bit versions of the Flash Player.
NOTE 2: While installing make sure you UN-check any extra garbage which wants to install alongside.

redtarget.gif
Update your Java version here: https://www.techspot.com/downloads/6463-java-se.html
Alternate download: http://www.java.com/en/download/manual.jsp

Note 1: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.
Note 2: If you're running 64-bit system make sure you install BOTH, 32-bit and 64-bit Java.

=====================================

Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download
51a5ce45263de-delfix.png
DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:
  • Activate UAC (optional; some users prefer to keep it off)
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore
  • Reset system settings
Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC), AdwCleaner and Junkware Removal Tool (JRT) weekly (you need to redownload these tools since they were removed by DelFix).

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

11. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

12. Please, let me know, how your computer is doing.
 
Thank you I'll do these now. So far so good. It's booting faster and running smoother than before. I'll post an update after I do the final steps
 
You must log in or register to reply here.

Similar threads

yRaz
My current switch from Microsoft to Linux, de-googling my life and what it takes.
Replies
2
Views
2K
yRaz
yRaz
Scorpus
AMD Ryzen 7000 is off to a slow start, Zen 4 sales are not good
3 4 5
Replies
112
Views
7K
quadibloc
quadibloc
C
Solved Got a neighbors old computer, its a good one, but slow.
2
Replies
27
Views
5K
Broni
Broni

Latest posts

Back