Hi Eddie,
Thanks for getting back to me.
Here's the checkup.txt contents...
Results of screen317's Security Check version 0.99.78
Windows 7 Service Pack 1 x86 (UAC is enabled)
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
SUPERAntiSpyware
JavaFX 2.1.1
Java(TM) 6 Update 29
Java(TM) 6 Update 22
Java 7 Update 45
Adobe Flash Player 11.9.900.170
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox (26.0)
Google Chrome 29.0.1547.66
Google Chrome 31.0.1650.63
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````
Here's the Farbar FRST.txt contents...
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-01-2014
Ran by ys (administrator) on YS-HP on 06-01-2014 18:05:13
Running from C:\Users\ys\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AEstSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(DeviceVM, Inc.) C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(MusicLab, LLC) C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Zecter Inc.) C:\Program Files\Hewlett-Packard\HP CloudDrive\zumodrive.exe
(AVG Secure Search) C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Company) C:\Program Files\PictureMover\Bin\PictureMover.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Users\ys\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
() C:\Users\ys\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corp.) C:\Windows\System32\Defrag.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1897768 2010-09-17] (Synaptics Incorporated)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-06-09] (Intel Corporation)
HKLM\...\Run: [AmIcoSinglun] - C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [237568 2010-06-18] (Alcor Micro Corp.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495708 2010-08-03] (IDT, Inc.)
HKLM\...\Run: [HP Quick Launch] - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [584760 2010-08-24] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [41056 2013-05-09] (Adobe Systems Incorporated)
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-22] (Hewlett-Packard Company)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [DATAMNGR] - C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe [1693800 2012-03-05] (MusicLab, LLC)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-02-20] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-12-12] (Hewlett-Packard)
HKCU\...\Run: [ZumoDrive] - C:\Program Files\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk [2038 2011-03-30] ()
HKCU\...\Run: [Facebook Update] - C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKCU\...\Run: [Google Update] - C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-28] (Google Inc.)
HKCU\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] - C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe [1266712 2013-06-04] (AVG Secure Search)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE [5625624 2013-12-29] (SUPERAntiSpyware)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Channah\...\Policies\system: [LogonHoursAction] 2
HKU\Channah\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll [1233840 2012-03-05] (MusicLab, LLC)
Startup: C:\Users\ys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSour...ctid=CT3220468
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.jp.msn.com/HPALL/14
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.jp.msn.com/HPALL/14
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.jp.msn.com/HPALL/14
URLSearchHook: HKLM - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
URLSearchHook: HKCU - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://au.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/705-111071-2357-0/4?satitle={searchTerms}&mfe=Notebooks
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://au.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/705-111071-2357-0/4?satitle={searchTerms}&mfe=Notebooks
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DataMngr - {B939CF93-F2CB-443d-956C-DC523D85C9DB} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\BrowserConnection.dll (MusicLab, LLC)
BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
Toolbar: HKLM - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default
FF SelectedSearchEngine: Google
FF Homepage: google.com
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN78700427621403895&UM=&q =
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\ys\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ys\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ys\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\searc hplugins\avg-secure-search.xml
FF SearchPlugin: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\searc hplugins\Search_Results.xml
FF SearchPlugin: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\searc hplugins\utorrentcontrolv2-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
FF Extension: uTorrentControl_v2 - C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\Exten sions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
FF Extension: Wincore Mediabar - C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\Exten sions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
FF Extension: FlyOrDie Gyors Java Telepítő - C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\Exten sions\java@flyordie.com.xpi
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchKeyword: google.co.nz
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\ys\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Google Update) - C:\Users\ys\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (uTorrentControl_v2) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda\10.24.3.503_0
CHR Extension: (Google Wallet) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Graffiti Burst) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pljjmbnhpjnpblmkmmefbopnedifddlo\1_0
CHR HKLM\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\ys\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
========================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [119056 2013-05-24] (SUPERAntiSpyware.com)
R2 DvmMDES; C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe [338208 2010-09-29] (DeviceVM, Inc.)
S3 GameConsoleService; C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe [246520 2010-06-19] (WildTangent, Inc.)
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [103992 2010-07-22] (Hewlett-Packard Company)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [245842 2010-08-03] (IDT, Inc.)
==================== Drivers (Whitelisted) ====================
R3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [297000 2010-07-15] (Broadcom Corporation.)
R1 DVMIO; C:\Windows\System32\DRIVERS\dvmio.sys [18136 2009-11-12] (DeviceVM, Inc.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-23] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-13] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-06 18:05 - 2014-01-06 18:05 - 00021955 _____ C:\Users\ys\Downloads\FRST.txt
2014-01-06 18:04 - 2014-01-06 18:04 - 01064805 _____ (Farbar) C:\Users\ys\Downloads\FRST.exe
2014-01-06 18:04 - 2014-01-06 18:04 - 00000000 ____D C:\FRST
2014-01-06 18:00 - 2014-01-06 18:01 - 00987410 _____ C:\Users\ys\Downloads\SecurityCheck.exe
2014-01-04 21:31 - 2013-05-10 17:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-04 21:31 - 2013-05-10 17:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-03 19:35 - 2014-01-03 19:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl_01009.Wdf
2014-01-03 14:53 - 2014-01-03 14:54 - 00318870 _____ C:\Users\ys\Downloads\attachments.zip
2014-01-03 14:43 - 2014-01-03 14:43 - 00000000 ____D C:\SUPERDelete
2013-12-30 21:36 - 2013-12-30 22:31 - 00000000 ____D C:\Users\ys\Desktop\Aaliyah
2013-12-29 16:35 - 2013-12-29 16:40 - 00000000 ____D C:\Users\ys\.ss2
2013-12-29 16:19 - 2014-01-06 17:30 - 00000878 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-29 16:19 - 2014-01-06 16:30 - 00000874 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-29 16:19 - 2013-12-29 17:03 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-29 16:18 - 2013-12-29 16:19 - 00000000 ____D C:\Program Files\Google
2013-12-28 10:46 - 2013-12-28 10:46 - 00000000 ____D C:\ProgramData\Oracle
2013-12-28 10:45 - 2013-12-28 10:45 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-28 10:44 - 2013-12-28 10:44 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-28 10:37 - 2013-12-28 10:38 - 00915368 _____ (Oracle Corporation) C:\Users\ys\Downloads\jre-7u45-windows-i586-iftw.exe
2013-12-28 10:35 - 2013-10-19 14:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-27 18:37 - 2013-10-30 14:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-27 18:37 - 2013-10-04 14:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-12-27 18:37 - 2013-10-04 14:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-27 18:37 - 2013-10-04 14:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-12-27 18:36 - 2013-09-25 15:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-12-27 18:36 - 2013-09-25 15:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-12-27 18:36 - 2013-09-25 14:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-27 18:36 - 2013-09-25 14:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-12-27 18:36 - 2013-09-25 14:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-12-27 18:36 - 2013-09-25 14:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-12-27 18:36 - 2013-09-25 14:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-12-27 18:36 - 2013-09-25 13:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-12-27 18:36 - 2013-09-25 13:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-12-27 18:36 - 2013-07-05 01:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-12-27 18:35 - 2013-11-12 15:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-27 18:35 - 2013-10-30 15:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-27 18:35 - 2013-10-12 15:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-27 18:35 - 2013-10-12 15:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-27 18:35 - 2013-10-12 15:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-27 18:35 - 2013-10-04 14:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-27 18:35 - 2013-10-04 14:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-27 18:34 - 2013-10-12 15:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-27 18:34 - 2013-10-12 15:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-27 18:34 - 2013-10-12 14:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-27 18:34 - 2013-10-12 14:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-27 18:34 - 2013-10-06 08:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-27 18:34 - 2013-10-03 14:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
==================== One Month Modified Files and Folders =======
2014-01-06 18:05 - 2014-01-06 18:05 - 00021955 _____ C:\Users\ys\Downloads\FRST.txt
2014-01-06 18:04 - 2014-01-06 18:04 - 01064805 _____ (Farbar) C:\Users\ys\Downloads\FRST.exe
2014-01-06 18:04 - 2014-01-06 18:04 - 00000000 ____D C:\FRST
2014-01-06 18:04 - 2012-04-15 00:49 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-06 18:01 - 2014-01-06 18:00 - 00987410 _____ C:\Users\ys\Downloads\SecurityCheck.exe
2014-01-06 17:48 - 2011-12-28 13:55 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job
2014-01-06 17:44 - 2011-12-18 04:10 - 00000916 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job
2014-01-06 17:34 - 2011-03-30 14:48 - 02062442 _____ C:\Windows\WindowsUpdate.log
2014-01-06 17:30 - 2013-12-29 16:19 - 00000878 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-06 16:30 - 2013-12-29 16:19 - 00000874 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-06 16:30 - 2011-11-22 22:27 - 00000000 ____D C:\Users\ys\AppData\Roaming\ZumoDrive
2014-01-06 15:01 - 2013-09-22 20:21 - 00000278 _____ C:\Windows\Tasks\Registry Optimizer_DEFAULT.job
2014-01-06 13:10 - 2011-12-18 04:10 - 00000894 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job
2014-01-05 19:57 - 2009-09-07 12:02 - 00727334 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-05 19:54 - 2013-06-04 00:32 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-01-05 19:54 - 2011-12-28 13:55 - 00000844 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job
2014-01-05 12:07 - 2009-07-14 17:34 - 00014128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-05 12:07 - 2009-07-14 17:34 - 00014128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-05 12:02 - 2009-07-14 17:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-05 12:02 - 2009-07-14 17:39 - 00045148 _____ C:\Windows\setupact.log
2014-01-05 12:02 - 2009-07-14 17:33 - 00310208 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-05 10:43 - 2013-01-11 01:04 - 00000308 _____ C:\Windows\Tasks\HPCeeScheduleForys.job
2014-01-04 21:43 - 2013-07-29 06:09 - 00000000 ____D C:\Windows\system32\MRT
2014-01-04 21:27 - 2011-11-22 20:33 - 00000129 _____ C:\Users\ys\AppData\Local\mv_Photo.xml
2014-01-04 21:27 - 2011-11-22 20:33 - 00000120 _____ C:\Users\ys\AppData\Local\mv_music.xml
2014-01-04 21:23 - 2011-11-23 13:15 - 00264788 _____ C:\Windows\PFRO.log
2014-01-04 20:01 - 2012-12-30 21:30 - 00000000 ____D C:\Users\ys\AppData\Roaming\uTorrent
2014-01-03 19:35 - 2014-01-03 19:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl_01009.Wdf
2014-01-03 14:54 - 2014-01-03 14:53 - 00318870 _____ C:\Users\ys\Downloads\attachments.zip
2014-01-03 14:43 - 2014-01-03 14:43 - 00000000 ____D C:\SUPERDelete
2013-12-30 22:31 - 2013-12-30 21:36 - 00000000 ____D C:\Users\ys\Desktop\Aaliyah
2013-12-30 21:35 - 2013-08-13 11:55 - 00000000 ____D C:\Users\ys\Desktop\Movies
2013-12-30 01:09 - 2013-09-22 20:21 - 00000286 _____ C:\Windows\Tasks\Registry Optimizer_UPDATES.job
2013-12-30 01:08 - 2013-10-24 14:02 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-30 01:08 - 2012-06-18 21:11 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-30 01:08 - 2011-11-29 22:36 - 00000000 ____D C:\Users\ys\AppData\Roaming\SoftGrid Client
2013-12-30 01:01 - 2009-07-14 15:37 - 00000000 ____D C:\Windows\system32\NDF
2013-12-29 17:03 - 2013-12-29 16:19 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-29 16:40 - 2013-12-29 16:35 - 00000000 ____D C:\Users\ys\.ss2
2013-12-29 16:35 - 2011-11-22 20:21 - 00000000 ____D C:\Users\ys
2013-12-29 16:20 - 2011-12-28 13:55 - 00000000 ____D C:\Users\ys\AppData\Local\Google
2013-12-29 16:19 - 2013-12-29 16:18 - 00000000 ____D C:\Program Files\Google
2013-12-29 16:17 - 2010-10-20 13:22 - 00000000 ____D C:\Windows\system32\Adobe
2013-12-29 13:42 - 2013-08-01 10:33 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-12-29 13:32 - 2012-01-09 21:52 - 00000000 ____D C:\Users\ys\AppData\Roaming\Skype
2013-12-28 21:35 - 2012-04-15 00:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-28 21:35 - 2011-11-29 01:24 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-28 10:46 - 2013-12-28 10:46 - 00000000 ____D C:\ProgramData\Oracle
2013-12-28 10:45 - 2013-12-28 10:45 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-28 10:44 - 2013-12-28 10:44 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-28 10:43 - 2010-10-20 13:36 - 00000000 ____D C:\Program Files\Java
2013-12-28 10:38 - 2013-12-28 10:37 - 00915368 _____ (Oracle Corporation) C:\Users\ys\Downloads\jre-7u45-windows-i586-iftw.exe
2013-12-27 20:30 - 2011-11-22 20:33 - 00000000 ____D C:\Users\ys\AppData\Roaming\Mozilla
2013-12-27 19:27 - 2011-12-22 22:05 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-12-27 19:27 - 2011-11-23 20:59 - 00000052 _____ C:\Windows\system32\DOErrors.log
2013-12-27 15:26 - 2012-04-03 18:56 - 00000000 ____D C:\Users\ys\AppData\Local\CrashDumps
Files to move or delete:
====================
C:\Users\ys\jagex_cl_runescape_LIVE.dat
C:\Users\ys\jagex_cl_runescape_LIVE1.dat
C:\Users\ys\random.dat
Some content of TEMP:
====================
C:\Users\ys\AppData\Local\Temp\swt-gdip-win32-3448.dll
C:\Users\ys\AppData\Local\Temp\swt-win32-3448.dll
C:\Users\ys\AppData\Local\Temp\utt1616.tmp.exe
C:\Users\ys\AppData\Local\Temp\utt7DF8.tmp.exe
C:\Users\ys\AppData\Local\Temp\winziprosetup-WZRO6_20130221.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-30 13:15
==================== End Of Log ============================
And the ADDITIONAL.txt contents....
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-01-2014
Ran by ys at 2014-01-06 18:06:45
Running from C:\Users\ys\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (Version: 3.3.1.30017 - BitTorrent Inc.)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (Version: 11.5.8.612 - Adobe Systems, Inc)
Adobe Shockwave Player 12.0 (Version: 12.0.7.148 - Adobe Systems, Inc.)
Agatha Christie - Peril at End House (Version: 2.2.0.95 - WildTangent) Hidden
Alcor Micro USB Card Reader (Version: 1.9.17.35420 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (Version: 1.9.17.35420 - Alcor Micro Corp.) Hidden
Apple Application Support (Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
Bejeweled 2 Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Bounce Symphony (Version: 2.2.0.95 - WildTangent) Hidden
Broadcom 2070 Bluetooth 3.0 (Version: 6.3.0.6300 - Broadcom Corporation)
Broadcom 802.11 Wireless LAN Adapter (Version: 5.60.350.6 - Broadcom Corporation)
Cake Mania (Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
CyberLink DVD Suite (Version: 7.0.3320 - CyberLink Corp.)
CyberLink DVD Suite (Version: 7.0.3320 - CyberLink Corp.) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95 - WildTangent) Hidden
DiskAid 5.09 (Version: 5.09 - DigiDNA)
DivX Setup (Version: 2.6.1.8 - DivX, LLC)
Dream Chronicles (Version: 2.2.0.95 - WildTangent) Hidden
Energy Star Digital Logo (Version: 1.0.1 - Hewlett-Packard)
ESU for Microsoft Windows 7 (Version: 1.0.0 - Hewlett-Packard)
Evernote (Version: 3.5.6.2848 - Evernote Corp.)
Facebook Video Calling 1.2.0.287 (Version: 1.2.287 - Skype Limited)
Farm Frenzy (Version: 2.2.0.95 - WildTangent) Hidden
FATE (Version: 2.2.0.95 - WildTangent) Hidden
Google Chrome (Version: 31.0.1650.63 - Google Inc.)
Google Talk Plugin (Version: 4.9.1.16010 - Google)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.0.12656.3472 - Hewlett-Packard) Hidden
HP CloudDrive (Version: - Zecter Inc.)
HP Customer Experience Enhancements (Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (Version: 1.2.0.0 - Hewlett-Packard)
HP Game Console (Version: - WildTangent) Hidden
HP Games (Version: 1.0.1.5 - WildTangent)
HP HomeBase (Version: 3.2.2.116 - ArcSoft)
HP Photo Creations (Version: 1.0.0.4042 - HP Photo Creations Powered by RocketLife)
HP Power Manager (Version: 1.1.2 - Hewlett-Packard Company)
HP Quick Launch (Version: 2.2.6 - Hewlett-Packard Company)
HP QuickSync (Version: 6.2.684.10454 - Hewlett-Packard Company)
HP QuickWeb Installer (Version: 1.4.6.0 - DeviceVM Inc.)
HP Setup (Version: 8.4.4400.3525 - Hewlett-Packard Company)
HP Setup Manager (Version: 1.0.12844.3519 - Hewlett-Packard Company)
HP Software Framework (Version: 4.0.66.1 - Hewlett-Packard Company)
HP Support Assistant (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Wireless Assistant (Version: 4.0.10.0 - Hewlett-Packard Company)
IDT Audio (Version: 1.0.6292.0 - IDT)
Insaniquarium Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
Intel(R) Graphics Media Accelerator Driver (Version: 8.14.10.2117 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 9.6.4.1002 - Intel Corporation)
iTunes (Version: 11.0.2.26 - Apple Inc.)
Java 7 Update 45 (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 22 (Version: 6.0.220 - Oracle)
Java(TM) 6 Update 29 (Version: 6.0.290 - Oracle)
JavaFX 2.1.1 (Version: 2.1.1 - Oracle Corporation)
Jewel Quest - Heritage (Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest II (Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire (Version: 2.2.0.95 - WildTangent) Hidden
JoJo's Fashion Show (Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mahjongg Artifacts (Version: 2.2.0.95 - WildTangent) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - English (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 en-US) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
OpenOffice.org 3.3 (Version: 3.3.9567 - OpenOffice.org)
Penguins! (Version: 2.2.0.95 - WildTangent) Hidden
PictureMover (Version: 3.5.0.33 - Hewlett-Packard Company)
Plants vs. Zombies (Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (Version: 6.1.4419 - CyberLink Corp.)
Power2Go (Version: 6.1.4419 - CyberLink Corp.) Hidden
Realtek Ethernet Controller Driver For Windows 7 (Version: 7.23.623.2010 - Realtek)
Recovery Manager (Version: 5.5.3223 - CyberLink Corp.) Hidden
Skip-Bo - Castaway Caper (Version: 2.2.0.95 - WildTangent) Hidden
Skype™ 6.1 (Version: 6.1.129 - Skype Technologies S.A.)
Slingo Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
SUPERAntiSpyware (Version: 5.6.1020 - SUPERAntiSpyware.com)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.1.14.0 - Synaptics Incorporated)
Tradewinds Legends (Version: 2.2.0.95 - WildTangent) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
uTorrentControl_v2 Toolbar (Version: 6.9.0.16 - uTorrentControl_v2) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Virtual Villagers - The Secret City (Version: 2.2.0.95 - WildTangent) Hidden
Wedding Dash (Version: 2.2.0.95 - WildTangent) Hidden
Wincore MediaBar (Version: 3.0.0.122068 - Musiclab, LLC) <==== ATTENTION
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinZip Registry Optimizer (Version: 1.0 - WinZip International LLC)
Zuma Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
==================== Restore Points =========================
04-01-2014 08:27:49 Windows Update
==================== Hosts content: ==========================
2009-07-14 15:04 - 2009-06-11 10:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {04282284-CE17-496B-B64D-6A02C8F31A4F} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe [2010-09-28] ()
Task: {08D62F17-1AFF-4845-BD92-5CE336BBB7E8} - System32\Tasks\Registry Optimizer_UPDATES => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2013-02-13] (WinZip Computing, S.L. (WinZip Computing))
Task: {0BACC406-A4DD-4945-AB3A-185A91C96E34} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-28] (Adobe Systems Incorporated)
Task: {0D566403-3F22-4388-8650-EA010A63018C} - System32\Tasks\Registry Optimizer_DEFAULT => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2013-02-13] (WinZip Computing, S.L. (WinZip Computing))
Task: {0FDB9DBD-6F31-4723-AAA2-EBC9D38A0113} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-28] (Google Inc.)
Task: {12DFF2C3-7F74-44E8-A893-2F8A2A884981} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-29] (Google Inc.)
Task: {3164E9C0-71A9-4052-A101-E74ECA6D12E8} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{2330D65B-4DFB-450F-82E2-6A787D5E006F}.exe
Task: {38BD5391-0BA2-4B54-9BEC-CD7ABA274562} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-12-12] (Microsoft)
Task: {3C596EBD-C2C7-409C-B91E-F866EE07177D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {5EBE5C55-D572-4A41-BDB0-E752D4F872BC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {62C4CEEF-EE83-4BF1-A957-ED0B9B448AE1} - System32\Tasks\Registry Optimizer => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2013-02-13] (WinZip Computing, S.L. (WinZip Computing))
Task: {7052B763-88F3-4B0B-BC3C-FFE241EF6713} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-29] (Google Inc.)
Task: {7DBF30EE-678E-4CB3-8629-2FB99BE15456} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8D304934-52A4-4715-A8D1-E287FE68CC0B} - System32\Tasks\{F80F04FB-01ED-461C-8169-3D6D512996DC} => Firefox.exe http://ui.skype.com/ui/0/5.5.0.124/e...fered;disabled
Task: {9D68315D-B34D-40A8-815E-2B7C01008F14} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)
Task: {A8BC6AD8-1DE1-44F2-8335-EDF2B810ACA5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-28] (Google Inc.)
Task: {BD66C395-7C4B-4686-95D6-B540755BBE13} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {D8276EB9-5D9B-4C55-B451-495EB8631F26} - System32\Tasks\HPCeeScheduleForys => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {EC29B0CA-3E10-4AA8-A351-30AA6F9100C4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {F230AE00-5235-4287-980C-75EF9C0317F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2012-09-27] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{2330D65B-4DFB-450F-82E2-6A787D5E006F}.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForys.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Registry Optimizer_DEFAULT.job => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe
Task: C:\Windows\Tasks\Registry Optimizer_UPDATES.job => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe
==================== Loaded Modules (whitelisted) =============
2010-07-30 14:46 - 2010-07-30 14:46 - 00132384 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2011-07-29 12:09 - 2011-07-29 12:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2011-11-02 01:26 - 2011-11-02 01:26 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-02 01:26 - 2011-11-02 01:26 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-05 19:55 - 2014-01-05 19:55 - 00199168 ____N () C:\Users\ys\AppData\Local\Temp\WindowsAPI.dll6990101742134151559.lib
2014-01-05 19:56 - 2014-01-05 19:56 - 00379904 _____ () C:\Users\ys\AppData\Local\Temp\libsqlitejdbc-9221518677165382107.lib
2011-11-22 20:32 - 2010-09-29 07:59 - 12286008 _____ () C:\Users\ys\AppData\Roaming\PictureMover\Bin\Core.dll
2009-07-14 10:03 - 2009-07-14 14:15 - 00364544 _____ () C:\Windows\system32\msjetoledb40.dll
2011-11-22 20:32 - 2010-09-29 08:09 - 01695800 _____ () C:\Users\ys\AppData\Roaming\PictureMover\EN-AU\Presentation.dll
2011-01-17 18:19 - 2011-11-29 01:19 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2010-07-22 10:33 - 2010-07-22 10:33 - 00030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll
2010-07-22 10:33 - 2010-07-22 10:33 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll
2010-07-22 10:33 - 2010-07-22 10:33 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2013-12-29 17:03 - 2013-12-04 15:47 - 00702416 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-29 17:03 - 2013-12-04 15:47 - 00099792 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-29 17:03 - 2013-12-04 15:48 - 04055504 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-29 17:03 - 2013-12-04 15:48 - 00399312 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-29 17:03 - 2013-12-04 15:47 - 01619408 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-29 17:03 - 2013-12-04 15:48 - 13586896 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15803
System errors:
=============
Error: (01/06/2014 04:00:02 PM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service.
Error: (01/05/2014 08:02:22 PM) (Source: Tcpip) (User: )
Description: The system detected an address conflict for IP address 192.168.1.4 with the system
having network hardware address 68-09-27-EA-6D-25. Network operations on this system may
be disrupted as a result.
Error: (01/05/2014 11:59:33 AM) (Source: DCOM) (User: )
Description: {51FA2736-5DEE-11D4-98E8-006008BF430C}
Error: (01/05/2014 10:42:41 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service.
Error: (01/05/2014 10:42:41 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the btwdins service.
Error: (01/04/2014 09:23:49 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 8:02:38 PM on 4/01/2014 was unexpected.
Error: (01/04/2014 08:01:49 PM) (Source: DCOM) (User: )
Description: {51FA2736-5DEE-11D4-98E8-006008BF430C}
Error: (01/03/2014 08:56:28 PM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SysMain service.
Error: (01/01/2014 11:13:55 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (01/01/2014 11:13:25 PM) (Source: Service Control Manager) (User: )
Description: The Google Update Service (gupdate) service terminated unexpectedly. It has done this 1 time(s).
Microsoft Office Sessions:
=========================
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:57 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15803
==================== Memory info ===========================
Percentage of memory in use: 87%
Total physical RAM: 1011.87 MB
Available physical RAM: 121.52 MB
Total Pagefile: 2378.97 MB
Available Pagefile: 741.65 MB
Total Virtual: 2047.88 MB
Available Virtual: 1879.31 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:216.19 GB) (Free:62.39 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:16.4 GB) (Free:2.37 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 3393FCB8)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=216 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
==================== End Of Log ============================
Hope I've done it right, and thanks for your help!
Thanks for getting back to me.
Here's the checkup.txt contents...
Results of screen317's Security Check version 0.99.78
Windows 7 Service Pack 1 x86 (UAC is enabled)
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
SUPERAntiSpyware
JavaFX 2.1.1
Java(TM) 6 Update 29
Java(TM) 6 Update 22
Java 7 Update 45
Adobe Flash Player 11.9.900.170
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox (26.0)
Google Chrome 29.0.1547.66
Google Chrome 31.0.1650.63
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````
Here's the Farbar FRST.txt contents...
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-01-2014
Ran by ys (administrator) on YS-HP on 06-01-2014 18:05:13
Running from C:\Users\ys\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AEstSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(DeviceVM, Inc.) C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(MusicLab, LLC) C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Zecter Inc.) C:\Program Files\Hewlett-Packard\HP CloudDrive\zumodrive.exe
(AVG Secure Search) C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Company) C:\Program Files\PictureMover\Bin\PictureMover.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google) C:\Users\ys\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
() C:\Users\ys\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corp.) C:\Windows\System32\Defrag.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1897768 2010-09-17] (Synaptics Incorporated)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-06-09] (Intel Corporation)
HKLM\...\Run: [AmIcoSinglun] - C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [237568 2010-06-18] (Alcor Micro Corp.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495708 2010-08-03] (IDT, Inc.)
HKLM\...\Run: [HP Quick Launch] - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [584760 2010-08-24] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [41056 2013-05-09] (Adobe Systems Incorporated)
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-22] (Hewlett-Packard Company)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [DATAMNGR] - C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe [1693800 2012-03-05] (MusicLab, LLC)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-02-20] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-12-12] (Hewlett-Packard)
HKCU\...\Run: [ZumoDrive] - C:\Program Files\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk [2038 2011-03-30] ()
HKCU\...\Run: [Facebook Update] - C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKCU\...\Run: [Google Update] - C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-28] (Google Inc.)
HKCU\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] - C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe [1266712 2013-06-04] (AVG Secure Search)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE [5625624 2013-12-29] (SUPERAntiSpyware)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Channah\...\Policies\system: [LogonHoursAction] 2
HKU\Channah\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll [1233840 2012-03-05] (MusicLab, LLC)
Startup: C:\Users\ys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSour...ctid=CT3220468
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.jp.msn.com/HPALL/14
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.jp.msn.com/HPALL/14
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.jp.msn.com/HPALL/14
URLSearchHook: HKLM - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
URLSearchHook: HKCU - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://au.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/705-111071-2357-0/4?satitle={searchTerms}&mfe=Notebooks
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://au.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/705-111071-2357-0/4?satitle={searchTerms}&mfe=Notebooks
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: DataMngr - {B939CF93-F2CB-443d-956C-DC523D85C9DB} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\BrowserConnection.dll (MusicLab, LLC)
BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll ()
Toolbar: HKLM - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default
FF SelectedSearchEngine: Google
FF Homepage: google.com
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN78700427621403895&UM=&q =
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\ys\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ys\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ys\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\searc hplugins\avg-secure-search.xml
FF SearchPlugin: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\searc hplugins\Search_Results.xml
FF SearchPlugin: C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\searc hplugins\utorrentcontrolv2-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
FF Extension: uTorrentControl_v2 - C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\Exten sions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
FF Extension: Wincore Mediabar - C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\Exten sions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
FF Extension: FlyOrDie Gyors Java Telepítő - C:\Users\ys\AppData\Roaming\Mozilla\Firefox\Profiles\yzinuem9.default\Exten sions\java@flyordie.com.xpi
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchKeyword: google.co.nz
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\ys\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Google Update) - C:\Users\ys\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\ys\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (uTorrentControl_v2) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda\10.24.3.503_0
CHR Extension: (Google Wallet) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (Gmail) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Graffiti Burst) - C:\Users\ys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pljjmbnhpjnpblmkmmefbopnedifddlo\1_0
CHR HKLM\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\ys\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
========================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [119056 2013-05-24] (SUPERAntiSpyware.com)
R2 DvmMDES; C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe [338208 2010-09-29] (DeviceVM, Inc.)
S3 GameConsoleService; C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe [246520 2010-06-19] (WildTangent, Inc.)
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [103992 2010-07-22] (Hewlett-Packard Company)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [245842 2010-08-03] (IDT, Inc.)
==================== Drivers (Whitelisted) ====================
R3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [297000 2010-07-15] (Broadcom Corporation.)
R1 DVMIO; C:\Windows\System32\DRIVERS\dvmio.sys [18136 2009-11-12] (DeviceVM, Inc.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-23] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-13] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-06 18:05 - 2014-01-06 18:05 - 00021955 _____ C:\Users\ys\Downloads\FRST.txt
2014-01-06 18:04 - 2014-01-06 18:04 - 01064805 _____ (Farbar) C:\Users\ys\Downloads\FRST.exe
2014-01-06 18:04 - 2014-01-06 18:04 - 00000000 ____D C:\FRST
2014-01-06 18:00 - 2014-01-06 18:01 - 00987410 _____ C:\Users\ys\Downloads\SecurityCheck.exe
2014-01-04 21:31 - 2013-05-10 17:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-04 21:31 - 2013-05-10 17:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-03 19:35 - 2014-01-03 19:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl_01009.Wdf
2014-01-03 14:53 - 2014-01-03 14:54 - 00318870 _____ C:\Users\ys\Downloads\attachments.zip
2014-01-03 14:43 - 2014-01-03 14:43 - 00000000 ____D C:\SUPERDelete
2013-12-30 21:36 - 2013-12-30 22:31 - 00000000 ____D C:\Users\ys\Desktop\Aaliyah
2013-12-29 16:35 - 2013-12-29 16:40 - 00000000 ____D C:\Users\ys\.ss2
2013-12-29 16:19 - 2014-01-06 17:30 - 00000878 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-29 16:19 - 2014-01-06 16:30 - 00000874 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-29 16:19 - 2013-12-29 17:03 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-29 16:18 - 2013-12-29 16:19 - 00000000 ____D C:\Program Files\Google
2013-12-28 10:46 - 2013-12-28 10:46 - 00000000 ____D C:\ProgramData\Oracle
2013-12-28 10:45 - 2013-12-28 10:45 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-28 10:44 - 2013-12-28 10:44 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-28 10:37 - 2013-12-28 10:38 - 00915368 _____ (Oracle Corporation) C:\Users\ys\Downloads\jre-7u45-windows-i586-iftw.exe
2013-12-28 10:35 - 2013-10-19 14:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-27 18:37 - 2013-10-30 14:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-27 18:37 - 2013-10-04 14:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-12-27 18:37 - 2013-10-04 14:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-27 18:37 - 2013-10-04 14:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-12-27 18:36 - 2013-09-25 15:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-12-27 18:36 - 2013-09-25 15:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-12-27 18:36 - 2013-09-25 14:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-27 18:36 - 2013-09-25 14:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-12-27 18:36 - 2013-09-25 14:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-12-27 18:36 - 2013-09-25 14:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-12-27 18:36 - 2013-09-25 14:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-12-27 18:36 - 2013-09-25 13:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-12-27 18:36 - 2013-09-25 13:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-12-27 18:36 - 2013-07-05 01:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-12-27 18:35 - 2013-11-12 15:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-27 18:35 - 2013-10-30 15:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-27 18:35 - 2013-10-12 15:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-27 18:35 - 2013-10-12 15:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-27 18:35 - 2013-10-12 15:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-27 18:35 - 2013-10-04 14:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-27 18:35 - 2013-10-04 14:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-27 18:34 - 2013-10-12 15:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-27 18:34 - 2013-10-12 15:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-27 18:34 - 2013-10-12 14:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-27 18:34 - 2013-10-12 14:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-27 18:34 - 2013-10-06 08:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-27 18:34 - 2013-10-03 14:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
==================== One Month Modified Files and Folders =======
2014-01-06 18:05 - 2014-01-06 18:05 - 00021955 _____ C:\Users\ys\Downloads\FRST.txt
2014-01-06 18:04 - 2014-01-06 18:04 - 01064805 _____ (Farbar) C:\Users\ys\Downloads\FRST.exe
2014-01-06 18:04 - 2014-01-06 18:04 - 00000000 ____D C:\FRST
2014-01-06 18:04 - 2012-04-15 00:49 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-06 18:01 - 2014-01-06 18:00 - 00987410 _____ C:\Users\ys\Downloads\SecurityCheck.exe
2014-01-06 17:48 - 2011-12-28 13:55 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job
2014-01-06 17:44 - 2011-12-18 04:10 - 00000916 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job
2014-01-06 17:34 - 2011-03-30 14:48 - 02062442 _____ C:\Windows\WindowsUpdate.log
2014-01-06 17:30 - 2013-12-29 16:19 - 00000878 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-06 16:30 - 2013-12-29 16:19 - 00000874 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-06 16:30 - 2011-11-22 22:27 - 00000000 ____D C:\Users\ys\AppData\Roaming\ZumoDrive
2014-01-06 15:01 - 2013-09-22 20:21 - 00000278 _____ C:\Windows\Tasks\Registry Optimizer_DEFAULT.job
2014-01-06 13:10 - 2011-12-18 04:10 - 00000894 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job
2014-01-05 19:57 - 2009-09-07 12:02 - 00727334 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-05 19:54 - 2013-06-04 00:32 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-01-05 19:54 - 2011-12-28 13:55 - 00000844 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job
2014-01-05 12:07 - 2009-07-14 17:34 - 00014128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-05 12:07 - 2009-07-14 17:34 - 00014128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-05 12:02 - 2009-07-14 17:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-05 12:02 - 2009-07-14 17:39 - 00045148 _____ C:\Windows\setupact.log
2014-01-05 12:02 - 2009-07-14 17:33 - 00310208 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-05 10:43 - 2013-01-11 01:04 - 00000308 _____ C:\Windows\Tasks\HPCeeScheduleForys.job
2014-01-04 21:43 - 2013-07-29 06:09 - 00000000 ____D C:\Windows\system32\MRT
2014-01-04 21:27 - 2011-11-22 20:33 - 00000129 _____ C:\Users\ys\AppData\Local\mv_Photo.xml
2014-01-04 21:27 - 2011-11-22 20:33 - 00000120 _____ C:\Users\ys\AppData\Local\mv_music.xml
2014-01-04 21:23 - 2011-11-23 13:15 - 00264788 _____ C:\Windows\PFRO.log
2014-01-04 20:01 - 2012-12-30 21:30 - 00000000 ____D C:\Users\ys\AppData\Roaming\uTorrent
2014-01-03 19:35 - 2014-01-03 19:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl_01009.Wdf
2014-01-03 14:54 - 2014-01-03 14:53 - 00318870 _____ C:\Users\ys\Downloads\attachments.zip
2014-01-03 14:43 - 2014-01-03 14:43 - 00000000 ____D C:\SUPERDelete
2013-12-30 22:31 - 2013-12-30 21:36 - 00000000 ____D C:\Users\ys\Desktop\Aaliyah
2013-12-30 21:35 - 2013-08-13 11:55 - 00000000 ____D C:\Users\ys\Desktop\Movies
2013-12-30 01:09 - 2013-09-22 20:21 - 00000286 _____ C:\Windows\Tasks\Registry Optimizer_UPDATES.job
2013-12-30 01:08 - 2013-10-24 14:02 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-30 01:08 - 2012-06-18 21:11 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-30 01:08 - 2011-11-29 22:36 - 00000000 ____D C:\Users\ys\AppData\Roaming\SoftGrid Client
2013-12-30 01:01 - 2009-07-14 15:37 - 00000000 ____D C:\Windows\system32\NDF
2013-12-29 17:03 - 2013-12-29 16:19 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-29 16:40 - 2013-12-29 16:35 - 00000000 ____D C:\Users\ys\.ss2
2013-12-29 16:35 - 2011-11-22 20:21 - 00000000 ____D C:\Users\ys
2013-12-29 16:20 - 2011-12-28 13:55 - 00000000 ____D C:\Users\ys\AppData\Local\Google
2013-12-29 16:19 - 2013-12-29 16:18 - 00000000 ____D C:\Program Files\Google
2013-12-29 16:17 - 2010-10-20 13:22 - 00000000 ____D C:\Windows\system32\Adobe
2013-12-29 13:42 - 2013-08-01 10:33 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-12-29 13:32 - 2012-01-09 21:52 - 00000000 ____D C:\Users\ys\AppData\Roaming\Skype
2013-12-28 21:35 - 2012-04-15 00:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-28 21:35 - 2011-11-29 01:24 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-28 10:46 - 2013-12-28 10:46 - 00000000 ____D C:\ProgramData\Oracle
2013-12-28 10:45 - 2013-12-28 10:45 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-28 10:44 - 2013-12-28 10:44 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-28 10:44 - 2013-12-28 10:44 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-28 10:43 - 2010-10-20 13:36 - 00000000 ____D C:\Program Files\Java
2013-12-28 10:38 - 2013-12-28 10:37 - 00915368 _____ (Oracle Corporation) C:\Users\ys\Downloads\jre-7u45-windows-i586-iftw.exe
2013-12-27 20:30 - 2011-11-22 20:33 - 00000000 ____D C:\Users\ys\AppData\Roaming\Mozilla
2013-12-27 19:27 - 2011-12-22 22:05 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-12-27 19:27 - 2011-11-23 20:59 - 00000052 _____ C:\Windows\system32\DOErrors.log
2013-12-27 15:26 - 2012-04-03 18:56 - 00000000 ____D C:\Users\ys\AppData\Local\CrashDumps
Files to move or delete:
====================
C:\Users\ys\jagex_cl_runescape_LIVE.dat
C:\Users\ys\jagex_cl_runescape_LIVE1.dat
C:\Users\ys\random.dat
Some content of TEMP:
====================
C:\Users\ys\AppData\Local\Temp\swt-gdip-win32-3448.dll
C:\Users\ys\AppData\Local\Temp\swt-win32-3448.dll
C:\Users\ys\AppData\Local\Temp\utt1616.tmp.exe
C:\Users\ys\AppData\Local\Temp\utt7DF8.tmp.exe
C:\Users\ys\AppData\Local\Temp\winziprosetup-WZRO6_20130221.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-30 13:15
==================== End Of Log ============================
And the ADDITIONAL.txt contents....
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-01-2014
Ran by ys at 2014-01-06 18:06:45
Running from C:\Users\ys\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (Version: 3.3.1.30017 - BitTorrent Inc.)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (Version: 11.5.8.612 - Adobe Systems, Inc)
Adobe Shockwave Player 12.0 (Version: 12.0.7.148 - Adobe Systems, Inc.)
Agatha Christie - Peril at End House (Version: 2.2.0.95 - WildTangent) Hidden
Alcor Micro USB Card Reader (Version: 1.9.17.35420 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (Version: 1.9.17.35420 - Alcor Micro Corp.) Hidden
Apple Application Support (Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
Bejeweled 2 Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Bounce Symphony (Version: 2.2.0.95 - WildTangent) Hidden
Broadcom 2070 Bluetooth 3.0 (Version: 6.3.0.6300 - Broadcom Corporation)
Broadcom 802.11 Wireless LAN Adapter (Version: 5.60.350.6 - Broadcom Corporation)
Cake Mania (Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
CyberLink DVD Suite (Version: 7.0.3320 - CyberLink Corp.)
CyberLink DVD Suite (Version: 7.0.3320 - CyberLink Corp.) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95 - WildTangent) Hidden
DiskAid 5.09 (Version: 5.09 - DigiDNA)
DivX Setup (Version: 2.6.1.8 - DivX, LLC)
Dream Chronicles (Version: 2.2.0.95 - WildTangent) Hidden
Energy Star Digital Logo (Version: 1.0.1 - Hewlett-Packard)
ESU for Microsoft Windows 7 (Version: 1.0.0 - Hewlett-Packard)
Evernote (Version: 3.5.6.2848 - Evernote Corp.)
Facebook Video Calling 1.2.0.287 (Version: 1.2.287 - Skype Limited)
Farm Frenzy (Version: 2.2.0.95 - WildTangent) Hidden
FATE (Version: 2.2.0.95 - WildTangent) Hidden
Google Chrome (Version: 31.0.1650.63 - Google Inc.)
Google Talk Plugin (Version: 4.9.1.16010 - Google)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Auto (Version: 1.0.12494.3472 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.0.12656.3472 - Hewlett-Packard) Hidden
HP CloudDrive (Version: - Zecter Inc.)
HP Customer Experience Enhancements (Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (Version: 1.2.0.0 - Hewlett-Packard)
HP Game Console (Version: - WildTangent) Hidden
HP Games (Version: 1.0.1.5 - WildTangent)
HP HomeBase (Version: 3.2.2.116 - ArcSoft)
HP Photo Creations (Version: 1.0.0.4042 - HP Photo Creations Powered by RocketLife)
HP Power Manager (Version: 1.1.2 - Hewlett-Packard Company)
HP Quick Launch (Version: 2.2.6 - Hewlett-Packard Company)
HP QuickSync (Version: 6.2.684.10454 - Hewlett-Packard Company)
HP QuickWeb Installer (Version: 1.4.6.0 - DeviceVM Inc.)
HP Setup (Version: 8.4.4400.3525 - Hewlett-Packard Company)
HP Setup Manager (Version: 1.0.12844.3519 - Hewlett-Packard Company)
HP Software Framework (Version: 4.0.66.1 - Hewlett-Packard Company)
HP Support Assistant (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Wireless Assistant (Version: 4.0.10.0 - Hewlett-Packard Company)
IDT Audio (Version: 1.0.6292.0 - IDT)
Insaniquarium Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
Intel(R) Graphics Media Accelerator Driver (Version: 8.14.10.2117 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 9.6.4.1002 - Intel Corporation)
iTunes (Version: 11.0.2.26 - Apple Inc.)
Java 7 Update 45 (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 22 (Version: 6.0.220 - Oracle)
Java(TM) 6 Update 29 (Version: 6.0.290 - Oracle)
JavaFX 2.1.1 (Version: 2.1.1 - Oracle Corporation)
Jewel Quest - Heritage (Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest II (Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire (Version: 2.2.0.95 - WildTangent) Hidden
JoJo's Fashion Show (Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mahjongg Artifacts (Version: 2.2.0.95 - WildTangent) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - English (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 en-US) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
OpenOffice.org 3.3 (Version: 3.3.9567 - OpenOffice.org)
Penguins! (Version: 2.2.0.95 - WildTangent) Hidden
PictureMover (Version: 3.5.0.33 - Hewlett-Packard Company)
Plants vs. Zombies (Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (Version: 6.1.4419 - CyberLink Corp.)
Power2Go (Version: 6.1.4419 - CyberLink Corp.) Hidden
Realtek Ethernet Controller Driver For Windows 7 (Version: 7.23.623.2010 - Realtek)
Recovery Manager (Version: 5.5.3223 - CyberLink Corp.) Hidden
Skip-Bo - Castaway Caper (Version: 2.2.0.95 - WildTangent) Hidden
Skype™ 6.1 (Version: 6.1.129 - Skype Technologies S.A.)
Slingo Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
SUPERAntiSpyware (Version: 5.6.1020 - SUPERAntiSpyware.com)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.1.14.0 - Synaptics Incorporated)
Tradewinds Legends (Version: 2.2.0.95 - WildTangent) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
uTorrentControl_v2 Toolbar (Version: 6.9.0.16 - uTorrentControl_v2) <==== ATTENTION
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Virtual Villagers - The Secret City (Version: 2.2.0.95 - WildTangent) Hidden
Wedding Dash (Version: 2.2.0.95 - WildTangent) Hidden
Wincore MediaBar (Version: 3.0.0.122068 - Musiclab, LLC) <==== ATTENTION
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinZip Registry Optimizer (Version: 1.0 - WinZip International LLC)
Zuma Deluxe (Version: 2.2.0.95 - WildTangent) Hidden
==================== Restore Points =========================
04-01-2014 08:27:49 Windows Update
==================== Hosts content: ==========================
2009-07-14 15:04 - 2009-06-11 10:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {04282284-CE17-496B-B64D-6A02C8F31A4F} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe [2010-09-28] ()
Task: {08D62F17-1AFF-4845-BD92-5CE336BBB7E8} - System32\Tasks\Registry Optimizer_UPDATES => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2013-02-13] (WinZip Computing, S.L. (WinZip Computing))
Task: {0BACC406-A4DD-4945-AB3A-185A91C96E34} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-28] (Adobe Systems Incorporated)
Task: {0D566403-3F22-4388-8650-EA010A63018C} - System32\Tasks\Registry Optimizer_DEFAULT => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2013-02-13] (WinZip Computing, S.L. (WinZip Computing))
Task: {0FDB9DBD-6F31-4723-AAA2-EBC9D38A0113} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-28] (Google Inc.)
Task: {12DFF2C3-7F74-44E8-A893-2F8A2A884981} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-29] (Google Inc.)
Task: {3164E9C0-71A9-4052-A101-E74ECA6D12E8} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{2330D65B-4DFB-450F-82E2-6A787D5E006F}.exe
Task: {38BD5391-0BA2-4B54-9BEC-CD7ABA274562} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2013-12-12] (Microsoft)
Task: {3C596EBD-C2C7-409C-B91E-F866EE07177D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {5EBE5C55-D572-4A41-BDB0-E752D4F872BC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {62C4CEEF-EE83-4BF1-A957-ED0B9B448AE1} - System32\Tasks\Registry Optimizer => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe [2013-02-13] (WinZip Computing, S.L. (WinZip Computing))
Task: {7052B763-88F3-4B0B-BC3C-FFE241EF6713} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-12-29] (Google Inc.)
Task: {7DBF30EE-678E-4CB3-8629-2FB99BE15456} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8D304934-52A4-4715-A8D1-E287FE68CC0B} - System32\Tasks\{F80F04FB-01ED-461C-8169-3D6D512996DC} => Firefox.exe http://ui.skype.com/ui/0/5.5.0.124/e...fered;disabled
Task: {9D68315D-B34D-40A8-815E-2B7C01008F14} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)
Task: {A8BC6AD8-1DE1-44F2-8335-EDF2B810ACA5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-28] (Google Inc.)
Task: {BD66C395-7C4B-4686-95D6-B540755BBE13} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {D8276EB9-5D9B-4C55-B451-495EB8631F26} - System32\Tasks\HPCeeScheduleForys => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {EC29B0CA-3E10-4AA8-A351-30AA6F9100C4} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {F230AE00-5235-4287-980C-75EF9C0317F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2012-09-27] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{2330D65B-4DFB-450F-82E2-6A787D5E006F}.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job => C:\Users\ys\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000Core.job => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3026051894-1250015852-3689786124-1000UA.job => C:\Users\ys\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForys.job => C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Registry Optimizer_DEFAULT.job => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe
Task: C:\Windows\Tasks\Registry Optimizer_UPDATES.job => C:\Program Files\WinZip Registry Optimizer\Winzipro.exe
==================== Loaded Modules (whitelisted) =============
2010-07-30 14:46 - 2010-07-30 14:46 - 00132384 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2011-07-29 12:09 - 2011-07-29 12:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2011-11-02 01:26 - 2011-11-02 01:26 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-02 01:26 - 2011-11-02 01:26 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-05 19:55 - 2014-01-05 19:55 - 00199168 ____N () C:\Users\ys\AppData\Local\Temp\WindowsAPI.dll6990101742134151559.lib
2014-01-05 19:56 - 2014-01-05 19:56 - 00379904 _____ () C:\Users\ys\AppData\Local\Temp\libsqlitejdbc-9221518677165382107.lib
2011-11-22 20:32 - 2010-09-29 07:59 - 12286008 _____ () C:\Users\ys\AppData\Roaming\PictureMover\Bin\Core.dll
2009-07-14 10:03 - 2009-07-14 14:15 - 00364544 _____ () C:\Windows\system32\msjetoledb40.dll
2011-11-22 20:32 - 2010-09-29 08:09 - 01695800 _____ () C:\Users\ys\AppData\Roaming\PictureMover\EN-AU\Presentation.dll
2011-01-17 18:19 - 2011-11-29 01:19 - 00985088 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll
2010-07-22 10:33 - 2010-07-22 10:33 - 00030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll
2010-07-22 10:33 - 2010-07-22 10:33 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll
2010-07-22 10:33 - 2010-07-22 10:33 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2013-12-29 17:03 - 2013-12-04 15:47 - 00702416 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-29 17:03 - 2013-12-04 15:47 - 00099792 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-29 17:03 - 2013-12-04 15:48 - 04055504 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-29 17:03 - 2013-12-04 15:48 - 00399312 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-29 17:03 - 2013-12-04 15:47 - 01619408 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-29 17:03 - 2013-12-04 15:48 - 13586896 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15803
System errors:
=============
Error: (01/06/2014 04:00:02 PM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service.
Error: (01/05/2014 08:02:22 PM) (Source: Tcpip) (User: )
Description: The system detected an address conflict for IP address 192.168.1.4 with the system
having network hardware address 68-09-27-EA-6D-25. Network operations on this system may
be disrupted as a result.
Error: (01/05/2014 11:59:33 AM) (Source: DCOM) (User: )
Description: {51FA2736-5DEE-11D4-98E8-006008BF430C}
Error: (01/05/2014 10:42:41 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service.
Error: (01/05/2014 10:42:41 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the btwdins service.
Error: (01/04/2014 09:23:49 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 8:02:38 PM on 4/01/2014 was unexpected.
Error: (01/04/2014 08:01:49 PM) (Source: DCOM) (User: )
Description: {51FA2736-5DEE-11D4-98E8-006008BF430C}
Error: (01/03/2014 08:56:28 PM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SysMain service.
Error: (01/01/2014 11:13:55 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (01/01/2014 11:13:25 PM) (Source: Service Control Manager) (User: )
Description: The Google Update Service (gupdate) service terminated unexpectedly. It has done this 1 time(s).
Microsoft Office Sessions:
=========================
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 18892
Error: (01/06/2014 03:59:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17862
Error: (01/06/2014 03:58:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16801
Error: (01/06/2014 03:58:58 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/06/2014 03:58:57 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15803
==================== Memory info ===========================
Percentage of memory in use: 87%
Total physical RAM: 1011.87 MB
Available physical RAM: 121.52 MB
Total Pagefile: 2378.97 MB
Available Pagefile: 741.65 MB
Total Virtual: 2047.88 MB
Available Virtual: 1879.31 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:216.19 GB) (Free:62.39 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:16.4 GB) (Free:2.37 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 3393FCB8)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=216 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
==================== End Of Log ============================
Hope I've done it right, and thanks for your help!