Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD crashing constantly


  • This topic is locked This topic is locked
29 replies to this topic

#1 axuy09

axuy09

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 12:34 AM

I had been  posting on this forum (http://www.bleepingcomputer.com/forums/t/500149/hacktoolwin32keygen/page-2#entry3098408) am currently at number 1 of 6 tasks hope you can help.

 

I am now trying to learn how to post.

 

My OS is windows 7


Edited by axuy09, 08 July 2013 - 12:57 AM.


BC AdBot (Login to Remove)

 


#2 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 12:35 AM

There is not a lot yet to research at this time, so I will go back over the errors.

Please complete all of these scans and post the logs back here

 

EDIT -

I should have picked this up earlier - McAfee VirusScan Enterprise and MSE are both installed .............

MSE will never work with McAfee VirusScan Enterprise installed beside it - Remove one Now -
 

 

First step without the scans -

Click on this M/soft FixIt to reset your Hosts file http://go.microsoft.com/?linkid=9668866

Click Run and follow the basic instructions -

 

 

:step1: Scan your machine with ESET OnlineScan
1.Hold down Control and click HERE to open ESET OnlineScan in a new window.
2.Click the ESET Online Scanner button.
3.NOTE :.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

 

- 1.Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
- 2.Double click on the ESET Online Scanner icon on your desktop.

 

 4.Check "YES, I accept the Terms of Use."
 5.Click the Start button.
 6.Accept any security warnings from your browser.
 7.Under scan settings, check "Scan Archives" and "Remove found threats"
8.Click Advanced settings and select the following:
Scan potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth technology

 9.ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this will take some time to download the program for a first time, and then download updated data base (1 to 2  hours is not unusual)
10.When the scan completes, click List Threats
11.Click Export, and save the file to your desktop using a unique name, such as ESETScan.
- Include the contents of this report in your next reply.
12.Click the Back button.
13.Click the Finish button

 

If you have any of these programs installed, please Update prior to any scan -

 

 

:step2: Download Malwarebytes' Anti-Malware Free (aka MBAM)
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
Be sure to reboot the computer after you post the log.

 

:step3: Download SUPERAntiSpyware Free (aka SAS)
* Double-click SAS -setup.exe and follow the prompts to install the program.
* At the end, be sure to Check for Updates to be sure it is current
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Be sure to reboot the computer after you post the log.

 

:step4: Please download AdwCleaner by Xplode onto your desktop.

*Close all open programs and internet browsers.
*Double click on adwcleaner.exe to run the tool.
*Click on Delete.
*Confirm each time with Ok.
* NOTE : Your computer will be rebooted automatically.
*A text file will open after the restart.
*Please post the contents of that logfile with your next reply.
*You can find the logfile at C:\AdwCleaner[S1].txt as well.

 

:step5: Please download Junkware Removal Tool by thisisu to your desktop
Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

 

 

Finish with this Temp File Cleaner

:step6: Download TFC by Old Timer to your desktop
 •Close any open windows.
•Double click the TFC icon to run the program
•TFC will close all open programs itself in order to run,
•Click the Start button to begin the process.

•Allow TFC to run uninterrupted.
•The program should not take long to finish it's job
•Once its finished it should automatically reboot your machine,
•if it doesn't, please manually reboot to ensure a complete clean

 

 

Thank You -


Edited by axuy09, 08 July 2013 - 12:35 AM.


#3 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 12:38 AM

Hi I have gone back to stage 1 & currently runnig the program, it's taken slightly longer then 2hours. it is still runing. it is at 84% and has been running for 11:51:30



#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:35 PM

Posted 08 July 2013 - 02:15 AM

Hello -

 

:step1: Please describe all of your current problems, and your reason for wanting help.

We are not able to devise a repair routine without knowing your reasons for posting -

 

Once you do that, please follow these directions > >

 

:step2: Download Security Check by Screen317 from HERE
* Save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Note: If a security program requests permission to access the Internet, allow it to do so.

 

 

:step3: Please download MiniToolBox, Save it to your desktop and run it.
Close any Firefox browsers you may have open when you Reset Firefox Settings.
Checkmark the following boxes:
•Flush DNS
•Report IE Proxy Settings
•Reset IE Proxy Settings
•Report FF Proxy Settings
•Reset FF Proxy Settings
•List content of Hosts
•List IP configuration
•List last 10 Event Viewer log
•List Installed Programs
•List Users, Partitions and Memory size.
•List Minidump Files
 Click Go and copy / paste the result (Result.txt).

 

 

:step4: Please post a snapshot with Speccy for more system details, and include Make and Model if known.
How to Publish a snapshot with Speccy <<-- Directions Here

 

 

Thank You -



#5 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 05:12 AM

hi i have just finished the scan it took 18hours is that normal? here is that log. I have just seen your post noknojon. i will endeavour to do that soon. but looking after my babies makes things difficult

 

C:\Users\***admin**\Documents\pal_install_noask_r109702.exe    a variant of Win32/Bundled.Toolbar.Ask.C application    cleaned by deleting - quarantined
E:\Users\elia\Documents\samsung\kies\Backup\GT-I9300\GT-I9300_20130225090952\Others\ApkInstaller\com.groidify.origamifun.apk    a variant of Android/Adware.AirPush.G application    deleted - quarantined
E:\Users\elia\Documents\samsung\kies\Backup\GT-I9300\GT-I9300_20130225095033\Others\ApkInstaller\com.groidify.origamifun.apk    a variant of Android/Adware.AirPush.G application    deleted - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\Adaware_Installer(1).exe    Win32/OpenCandy application    deleted - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\Adaware_Installer.exe    Win32/OpenCandy application    deleted - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\DeviceDoctor_Bundle.exe    multiple threats    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\duplicate-file-finder-setup.exe    a variant of Win32/Bundled.Toolbar.Ask application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\FFSetup270.zip    a variant of Win32/Bundled.Toolbar.Ask application    deleted - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\FoxitReader514.0104_enu_Setup.exe    a variant of Win32/Bundled.Toolbar.Ask application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\FoxitReader545.0124_enu_Setup.exe    multiple threats    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\FreeFileViewer2011Setup.exe    Win32/InstallIQ application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\freefileviewer_730.exe    a variant of Win32/InstallIQ.A application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\hwmonitor_1.19-setup.exe    a variant of Win32/Bundled.Toolbar.Ask application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\SetupImgBurn_2.5.5.0.exe    a variant of Win32/Bundled.Toolbar.Ask application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\SoftonicDownloader_for_pageplus-starter-edition.exe    Win32/SoftonicDownloader application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\RANDOM INSTALLERS\zaZA_Setup_en.exe    a variant of Win32/AdInstaller application    cleaned by deleting - quarantined
E:\Users\elia\Downloads\OLD DOWNLOAD BEFORE 06072013\RANDOM INSTALLERS\zlsSetup_70_483_000_en.exe    a variant of Win32/AdInstaller application    cleaned by deleting - quarantined
E:\Windows\Installer\17598046.msi    a variant of Win32/SweetIM.F application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 1005.zip    a variant of Win32/Bundled.Toolbar.Ask application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 50.zip    a variant of Android/Adware.AirPush.G application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 53.zip    a variant of Android/Adware.AirPush.G application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 57.zip    Win32/OpenCandy application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 58.zip    multiple threats    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 59.zip    multiple threats    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 64.zip    multiple threats    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 69.zip    a variant of Win32/AdInstaller application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-03-09 084229\Backup files 70.zip    a variant of Win32/AdInstaller application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-04-08 093807\Backup files 1.zip    multiple threats    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-06-10 182329\Backup files 1.zip    a variant of Win32/SoftonicDownloader.E application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-07-07 230258\Backup files 3.zip    Win32/OpenCandy application    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-07-07 230258\Backup files 4.zip    multiple threats    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-07-07 230258\Backup files 5.zip    multiple threats    deleted - quarantined
G:\MY\Backup Set 2013-03-09 084229\Backup Files 2013-07-07 230258\Backup files 6.zip    a variant of Win32/Bundled.Toolbar.Ask application    deleted - quarantined
 



#6 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 05:32 AM

So my current problems are that the computer keeps crashing it dose not show a log of what caused the crash? i don't have a mini dump file for some reason. In the action Centre it keeps referring to a BOSD that occurred in 2011. i am pretty sure i resolved that.  the new reasons for my BOSD is unclear.

 

Is it unusual for the scan to have taken 18hours? imy pc crashed twice before i was able to run it. (i only ran the ESET scan)

 

here is the out put from point two in post 4

 

 Results of screen317's Security Check version 0.99.68  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:`````````
 CloneSpy 2.62    
 Spybot - Search & Destroy
 Malwarebytes Anti-Malware version 1.75.0.1300  
 Java 7 Update 17  
 Java version out of Date!
 Adobe Flash Player 11.7.700.224  
 Adobe Reader XI  
 Mozilla Firefox (22.0)
 Google Chrome 27.0.1453.110  
 Google Chrome 27.0.1453.116  
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Spybot Teatimer.exe is disabled!
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
 


Edited by axuy09, 08 July 2013 - 05:58 AM.


#7 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 05:36 AM

Number 3

 

MiniToolBox by Farbar  Version: 16-06-2013
Ran by Elia (ATTENTION: The logged in user is not administrator) on 08-07-2013 at 18:34:00
Running from "E:\Users\elia\Downloads"
Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

#       ::1             localhost

========================= IP Configuration: ================================

Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller = Local Area Connection (Connected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# End of IPv4 configuration



Windows IP Configuration

   Host Name . . . . . . . . . . . . : MY
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   System Quarantine State . . . . . : Not Restricted


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller
   Physical Address. . . . . . . . . : 00-26-18-1C-7A-EE
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::58da:8e5c:ea52:ca54%10(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.22(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : 07 July 2013 23:17:56
   Lease Expires . . . . . . . . . . : 09 July 2013 11:17:56
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 234890776
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-0A-64-FA-00-26-18-1C-7A-EE
   DNS Servers . . . . . . . . . . . : 192.168.1.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{1084549D-4B20-4D55-93CA-CE2C0A07B4A9}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 9:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:c20:1a94:c555:4a64(Preferred)
   Link-local IPv6 Address . . . . . : fe80::c20:1a94:c555:4a64%11(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter 6TO4 Adapter:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft 6to4 Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server:  router.asus.com
Address:  192.168.1.1

Name:    google.com
Addresses:  2404:6800:4006:802::100e
      74.125.237.66
      74.125.237.72
      74.125.237.73
      74.125.237.69
      74.125.237.64
      74.125.237.65
      74.125.237.67
      74.125.237.71
      74.125.237.68
      74.125.237.70
      74.125.237.78


Pinging google.com [74.125.237.78] with 32 bytes of data:
Reply from 74.125.237.78: bytes=32 time=308ms TTL=51
Reply from 74.125.237.78: bytes=32 time=77ms TTL=51

Ping statistics for 74.125.237.78:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 77ms, Maximum = 308ms, Average = 192ms
Server:  router.asus.com
Address:  192.168.1.1

Name:    yahoo.com
Addresses:  206.190.36.45
      98.138.253.109
      98.139.183.24


Pinging yahoo.com [98.139.183.24] with 32 bytes of data:
Reply from 98.139.183.24: bytes=32 time=320ms TTL=42
Reply from 98.139.183.24: bytes=32 time=315ms TTL=42

Ping statistics for 98.139.183.24:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 315ms, Maximum = 320ms, Average = 317ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time=7ms TTL=128
Reply from 127.0.0.1: bytes=32 time=3ms TTL=128

Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 3ms, Maximum = 7ms, Average = 5ms
===========================================================================
Interface List
 10...00 26 18 1c 7a ee ......Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller
  1...........................Software Loopback Interface 1
 13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 11...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 15...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1     192.168.1.22     10
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.1.0    255.255.255.0         On-link      192.168.1.22    266
     192.168.1.22  255.255.255.255         On-link      192.168.1.22    266
    192.168.1.255  255.255.255.255         On-link      192.168.1.22    266
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.1.22    266
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.1.22    266
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 11     58 ::/0                     On-link
  1    306 ::1/128                  On-link
 11     58 2001::/32                On-link
 11    306 2001:0:5ef5:79fb:c20:1a94:c555:4a64/128
                                    On-link
 10    266 fe80::/64                On-link
 11    306 fe80::/64                On-link
 11    306 fe80::c20:1a94:c555:4a64/128
                                    On-link
 10    266 fe80::58da:8e5c:ea52:ca54/128
                                    On-link
  1    306 ff00::/8                 On-link
 11    306 ff00::/8                 On-link
 10    266 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/07/2013 11:19:26 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/07/2013 11:19:23 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/07/2013 11:19:23 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/07/2013 11:19:16 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/07/2013 10:57:51 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/07/2013 10:56:59 PM) (Source: Application Hang) (User: )
Description: The program msiexec.exe version 5.0.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 11e4

Start Time: 01ce7b2198f15bdc

Termination Time: 16

Application Path: C:\Windows\system32\msiexec.exe

Report Id:

Error: (07/07/2013 10:55:34 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/07/2013 10:55:31 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (07/06/2013 10:56:22 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Microsoft SDKs\Windows\v8.0A\bin\NETFX 4.0 Tools\WinMDExp.exe . Error code = 0x80131f07

Error: (07/06/2013 10:56:22 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Microsoft SDKs\Windows\v8.0A\bin\NETFX 4.0 Tools\WinMDExp.exe . Error code = 0x80131f07


System errors:
=============
Error: (07/07/2013 11:17:56 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 23:15:15 on ?07/?07/?2013 was unexpected.

Error: (07/07/2013 10:48:00 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (07/07/2013 10:31:45 PM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk2\DR2.

Error: (07/07/2013 10:11:14 PM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk2\DR2.

Error: (07/07/2013 09:52:18 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
AFD
CSC
DfsC
discache
MpFilter
NetBIOS
NetBT
nsiproxy
Psched
rdbss
spldr
tdx
vpcnfltr
vpcvmm
Wanarpv6
WfpLwf

Error: (07/07/2013 09:52:18 PM) (Source: Service Control Manager) (User: )
Description: The Network Connections service depends on the Network Store Interface Service service which failed to start because of the following error:
%%1068

Error: (07/07/2013 09:52:18 PM) (Source: Service Control Manager) (User: )
Description: The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:
%%1068

Error: (07/07/2013 09:52:18 PM) (Source: Service Control Manager) (User: )
Description: The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:
%%1068

Error: (07/07/2013 09:52:18 PM) (Source: Service Control Manager) (User: )
Description: The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error:
%%31

Error: (07/07/2013 09:52:18 PM) (Source: Service Control Manager) (User: )
Description: The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error:
%%1068


Microsoft Office Sessions:
=========================
Error: (07/07/2013 11:19:26 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Users\elia\Downloads\esetsmartinstaller_enu.exe

Error: (07/07/2013 11:19:23 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Users\elia\Downloads\esetsmartinstaller_enu.exe

Error: (07/07/2013 11:19:23 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Users\elia\Downloads\esetsmartinstaller_enu.exe

Error: (07/07/2013 11:19:16 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Users\elia\Downloads\esetsmartinstaller_enu.exe

Error: (07/07/2013 10:57:51 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Users\elia\Downloads\esetsmartinstaller_enu.exe

Error: (07/07/2013 10:56:59 PM) (Source: Application Hang)(User: )
Description: msiexec.exe5.0.7601.1751411e401ce7b2198f15bdc16C:\Windows\system32\msiexec.exe

Error: (07/07/2013 10:55:34 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Users\elia\Downloads\esetsmartinstaller_enu.exe

Error: (07/07/2013 10:55:31 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Users\elia\Downloads\esetsmartinstaller_enu.exe

Error: (07/06/2013 10:56:22 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Microsoft SDKs\Windows\v8.0A\bin\NETFX 4.0 Tools\WinMDExp.exe . Error code = 0x80131f07
C:\Program Files (x86)\Microsoft SDKs\Windows\v8.0A\bin\NETFX 4.0 Tools\WinMDExp.exe

Error: (07/06/2013 10:56:22 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: C:\Program Files (x86)\Microsoft SDKs\Windows\v8.0A\bin\NETFX 4.0 Tools\WinMDExp.exe . Error code = 0x80131f07
C:\Program Files (x86)\Microsoft SDKs\Windows\v8.0A\bin\NETFX 4.0 Tools\WinMDExp.exe


CodeIntegrity Errors:
===================================
  Date: 2013-02-25 18:25:29.370
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:29.230
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:27.078
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:26.939
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:24.789
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:24.652
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:22.504
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:22.367
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:20.195
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-02-25 18:25:20.057
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\SysWOW64\FsUsbExDisk.Sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


=========================== Installed Programs ============================

µTorrent (Version: 3.1.3)
A.C.Ryan MovieJukebox (Version: 2.0.0)
Adobe Digital Editions
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader XI (11.0.03) (Version: 11.0.03)
Akamai NetSession Interface
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
AMD Fuel (Version: 2012.1219.1521.27485)
AMD VISION Engine Control Center (Version: 2012.1219.1521.27485)
Applian FLV and Media Player 3.1.1.12 (Version: 3.1.1.12)
Application Profiles (Version: 2.0.4273.33792)
Application Profiles (Version: 2.0.4331.36041)
Application Profiles (Version: 2.0.4719.35969)
Application Verifier x64 External Package (Version: 8.59.29722)
ASUS Download Master Utility (Version: 2.0.4.0)
ASUS DSL-N55U Wireless ADSL Router Utilities (Version: 4.2.4.5)
ASUS Wireless ADSL Router DSL-N55U Manuals (Version: 1.00.000)
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.22)
Audacity 2.0
Auslogics Duplicate File Finder (Version: 2.5)
CameraHelperMsi (Version: 13.51.815.0)
Canon Easy-PhotoPrint EX (Version: 4.1.5)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon MG5100 series MP Drivers
Canon MG5100 series User Registration
Canon MP Navigator EX 4.0
Canon My Image Garden (Version: 1.1.0)
Canon My Image Garden Design Files (Version: 1.0.1)
Canon My Printer (Version: 3.1.0)
Canon Solution Menu EX
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2009.0428.2132.36839)
Catalyst Control Center Graphics Previews Common (Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (Version: 2012.1219.1520.27485)
CCC Help Czech (Version: 2012.1219.1520.27485)
CCC Help Danish (Version: 2012.1219.1520.27485)
CCC Help Dutch (Version: 2012.1219.1520.27485)
CCC Help English (Version: 2012.1219.1520.27485)
CCC Help Finnish (Version: 2012.1219.1520.27485)
CCC Help French (Version: 2012.1219.1520.27485)
CCC Help German (Version: 2012.1219.1520.27485)
CCC Help Greek (Version: 2012.1219.1520.27485)
CCC Help Hungarian (Version: 2012.1219.1520.27485)
CCC Help Italian (Version: 2012.1219.1520.27485)
CCC Help Japanese (Version: 2012.1219.1520.27485)
CCC Help Korean (Version: 2012.1219.1520.27485)
CCC Help Norwegian (Version: 2012.1219.1520.27485)
CCC Help Polish (Version: 2012.1219.1520.27485)
CCC Help Portuguese (Version: 2012.1219.1520.27485)
CCC Help Russian (Version: 2012.1219.1520.27485)
CCC Help Spanish (Version: 2012.1219.1520.27485)
CCC Help Swedish (Version: 2012.1219.1520.27485)
CCC Help Thai (Version: 2012.1219.1520.27485)
CCC Help Turkish (Version: 2012.1219.1520.27485)
ccc-utility64 (Version: 2012.1219.1521.27485)
CCleaner (Version: 4.02)
CloneSpy 2.62
Combined Community Codec Pack 2013-05-30 (Version: 2013.05.30.0)
Comical 0.8
CPUID CPU-Z OC 1.64 (Version: 1.64)
CPUID HWMonitor 1.19
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Drive Power Manager 1.10
Dropbox (Version: 1.4.9)
Duplicate Files Finder
eMule
EndNote X5 (Version: 15.0.1.5774)
erLT (Version: 1.20.138.34)
ESET Online Scanner v3
e-tax 2011 (Version: 11.1.704)
e-tax 2012 (Version: 6.0.577)
Everything 1.2.1.371
foobar2000 v1.1.10 (Version: 1.1.10)
Google Chrome (Version: 27.0.1453.116)
Google Drive (Version: 1.10.4769.632)
Google Earth (Version: 7.0.3.8542)
Google Talk (remove only)
Google Talk Plugin (Version: 3.7.1.9330)
Google Talk Plugin (Version: 4.0.3.13724)
Google Update Helper (Version: 1.3.21.149)
HandBrake 0.9.9.1 (Version: 0.9.9.1)
HD Tune 2.55
ImgBurn (Version: 2.5.6.0)
Java 7 Update 17 (64-bit) (Version: 7.0.170)
Java 7 Update 17 (Version: 7.0.170)
Java Auto Updater (Version: 2.1.9.0)
Jawbone Updater (Version: 0.1)
Junk Mail filter update (Version: 16.4.3505.0912)
Kits Configuration Installer (Version: 8.59.25584)
Logitech Harmony Remote Software (Version: 1.0.110307)
Logitech Harmony Remote Software 7 (Version: 7.7.0.0)
Logitech SetPoint 6.32 (Version: 6.32.20)
Logitech Webcam Software (Version: 2.51)
LWS Facebook (Version: 13.50.854.0)
LWS Gallery (Version: 13.51.827.0)
LWS Help_main (Version: 13.51.828.0)
LWS Launcher (Version: 13.51.828.0)
LWS Motion Detection (Version: 13.51.815.0)
LWS Pictures And Video (Version: 13.51.815.0)
LWS Twitter (Version: 13.30.1346.0)
LWS Webcam Software (Version: 13.51.815.0)
LWS WLM Plugin (Version: 1.30.1201.0)
LWS YouTube Plugin (Version: 13.31.1038.0)
Maemo Flasher 3.5 (Version: 2.5.2.2)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Maxthon 3 (Version: )
MediaInfo 0.7.61 (Version: 0.7.61)
MediaMonkey 4.0 (Version: 4.0)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (Version: 4.5.50710)
Microsoft .NET Framework 4.5 SDK (Version: 4.5.50710)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mouse and Keyboard Center (Version: 2.2.173.0)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SkyDrive (Version: 17.0.2010.0530)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Windows Debugging Symbols (Version: 7601)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1)
mkv2vob (Version: 2.4.9)
Movie Maker (Version: 16.4.3505.0912)
Mozilla Firefox 22.0 (x86 en-US) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVC80_x64 (Version: 1.0.1.0)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86 (Version: 1.0.1.0)
MSVC80_x86_v2 (Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (Version: 1.0.1.2)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSVCRT110 (Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MusicBee (Version: 1.4.4443)
MyFreeCodec
Nokia Connectivity Cable Driver (Version: 7.1.78.0)
Nokia PC Suite (Version: 7.1.30.9)
Nokia Suite (Version: 3.5.34.0)
One Touch Upgrade Q 1.0.0.7
Opera 12.02 (Version: 12.02.1578)
Paint.NET v3.5.10 (Version: 3.60.0)
PC Connectivity Solution (Version: 12.0.32.0)
Photo Gallery (Version: 16.4.3505.0912)
Pidgin (Version: 2.10.1)
Platform (Version: 1.34)
Rapport (Version: 3.5.1108.78)
Read And Write 10 (Version: 10.0.6)
Remote Control USB Driver (Version: 2.3.2.317)
ResearchSoft Direct Export Helper
Revo Uninstaller 1.95 (Version: 1.95)
SABnzbd 0.6.14 (Version: 0.6.14)
Samsung AllShare (Version: 2.1.0.12031_10)
Samsung Kies (Version: 2.5.3.13043_14)
Samsung Story Album Viewer (Version: 1.0.0.13052_1)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.24.0)
SDK Debuggers (Version: 8.59.29746)
SeaTools for Windows (Version: 1.2.0.7)
SimilarImages (Version: 2012.12)
Skype™ 6.5 (Version: 6.5.158)
Speccy (Version: 1.15)
SpeedFan (remove only)
Spybot - Search & Destroy (Version: 1.6.2)
TenHands Plugin (Version: 1.8.20.1291)
TeraCopy 2.12
Ubuntu One (Version: 4.1.91)
Update for Microsoft .NET Framework 4.5 (KB2750147) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (Version: 1)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
VIA Platform Device Manager (Version: 1.34)
ViewSonic Monitor Drivers
VLC media player 2.0.6 (Version: 2.0.6)
Windows 7 Upgrade Advisor (Version: 2.0.5000.0)
Windows 7 USB/DVD Download Tool (Version: 1.0.30)
Windows App Certification Kit Native Components (Version: 8.59.29736)
Windows App Certification Kit x64 (Version: 8.59.29750)
Windows Driver Package - Nokia Modem  (06/01/2009 4.1) (Version: 06/01/2009 4.1)
Windows Driver Package - Nokia Modem  (06/01/2009 7.01.0.3) (Version: 06/01/2009 7.01.0.3)
Windows Driver Package - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
Windows Live Communications Platform (Version: 16.4.3505.0912)
Windows Live Essentials (Version: 16.4.3505.0912)
Windows Live Family Safety (Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (Version: 16.4.3505.0912)
Windows Live Mail (Version: 16.4.3505.0912)
Windows Live Messenger (Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (Version: 16.4.3505.0912)
Windows Live PIMT Platform (Version: 16.4.3505.0912)
Windows Live SOXE (Version: 16.4.3505.0912)
Windows Live SOXE Definitions (Version: 16.4.3505.0912)
Windows Live UX Platform (Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912)
Windows Live Writer (Version: 16.4.3505.0912)
Windows Live Writer Resources (Version: 16.4.3505.0912)
Windows Software Development Kit (Version: 8.59.29750)
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit DirectX x86 Remote (Version: 8.59.25584)
Windows Software Development Kit EULA (Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps (Version: 8.59.29750)
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.29699)
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (Version: 8.59.29699)
Windows Software Development Kit Redistributables (Version: 8.59.29750)
WinRAR 4.00 (64-bit) (Version: 4.00.0)
WPT Redistributables (Version: 8.59.29750)
WPTx64 (Version: 8.59.29722)

========================= Memory info: ===================================

Percentage of memory in use: 39%
Total physical RAM: 8190.18 MB
Available physical RAM: 4974.77 MB
Total Pagefile: 16378.54 MB
Available Pagefile: 13578.58 MB
Total Virtual: 4095.88 MB
Available Virtual: 3963.57 MB

========================= Partitions: =====================================

1 Drive c: © (Fixed) (Total:111.79 GB) (Free:38.03 GB) NTFS
2 Drive d: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.03 GB) NTFS
3 Drive e: () (Fixed) (Total:931.41 GB) (Free:264.81 GB) NTFS
4 Drive f: (CANON_IJ) (CDROM) (Total:0.28 GB) (Free:0 GB) CDFS
5 Drive g: (My Book) (Fixed) (Total:931.51 GB) (Free:134.47 GB) NTFS

========================= Users: ========================================

User accounts for \\MY

Administrator            Amy Ball I got Balls     Elia                     
god                      Guest                    

========================= Minidump Files ==================================

No minidump file found


**** End of log ****
 



#8 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 05:47 AM

http://speccy.piriform.com/results/fICYEGYEM4IULiVhTYFmDU0



#9 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 06:01 AM

figured i go through the scans in post 2 here is output of

 

Number 2 (MBAM)

 

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.07.08.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
god :: MY [administrator]

Protection: Enabled

08/07/2013 18:15:06
mbam-log-2013-07-08 (18-15-06).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 318532
Time elapsed: 2 minute(s), 37 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)



#10 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 06:07 AM

Output of Number 3 (in post 2) now for a reboot!

 

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/08/2013 at 07:05 PM

Application Version : 5.6.1020

Core Rules Database Version : 10592
Trace Rules Database Version: 8404

Scan type       : Quick Scan
Total Scan Time : 00:02:20

Operating System Information
Windows 7 Ultimate 64-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Limited User

Memory items scanned      : 704
Memory threats detected   : 0
Registry items scanned    : 64741
Registry threats detected : 0
File items scanned        : 11940
File threats detected     : 129

Adware.Tracking Cookie
    .imrworldwide.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .imrworldwide.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .ecucoursefinder.com.au [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .ecucoursefinder.com.au [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    C:\Users\Elia\AppData\Roaming\Microsoft\Windows\Cookies\XU56VCM2.txt [

/media.edmgateway.net ]
    .stats.slashgear.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    insight.torbit.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    insight-beacon.torbit.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .maplesoft.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .pcworldcommunication.122.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX

\PROFILES\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .australiapost.122.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .bankwest.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .ewstv.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .stgeorge.122.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .salmat.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .madcatz.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .dennispublishing.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX

\PROFILES\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .canon.122.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .hearstmagazines.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .bshg.122.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    uk.sitestat.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    uk.sitestat.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    uk.sitestat.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .legolas-media.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .yadro.ru [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .yadro.ru [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .mediafire.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .mediafire.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .mediafire.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .imediashare.tv [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .imediashare.tv [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .imediashare.tv [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    accounts.google.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .mmstat.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .mmstat.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    in.getclicky.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    tracking.thehut.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .flagcounter.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .e-2dj6wbk4ohazadq.stats.esomniture.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA

\FIREFOX\PROFILES\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .e-2dj6whlockdzgco.stats.esomniture.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA

\FIREFOX\PROFILES\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .myaccount.bigpond.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .myaccount.bigpond.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .estat.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .invitemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .invitemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .hardwarezone.com.sg [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .hardwarezone.com.sg [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .hardwarezone.com.sg [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .hardwarezone.com.sg [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .hardwarezone.com.sg [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    stats2.clicktracks.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    stats2.clicktracks.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    stats2.clicktracks.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    stats2.clicktracks.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .stats.paypal.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .liveperson.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .liveperson.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .liveperson.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .liveperson.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .liveperson.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .serving-sys.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .serving-sys.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .serving-sys.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .serving-sys.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .serving-sys.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .bs.serving-sys.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.myonlinemediaplayer.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.myonlinemediaplayer.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .myonlinemediaplayer.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .myonlinemediaplayer.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.myonlinemediaplayer.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.myonlinemediaplayer.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .trackalyzer.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .octofinder.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    tracking.reedge.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .overture.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    pulse-analytics-beacon.reutersmedia.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA

\FIREFOX\PROFILES\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .microsoftwindows.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX

\PROFILES\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .solvemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .solvemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .solvemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .xiti.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .xiti.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NAO3008K.DEFAULT

\COOKIES.SQLITE ]
    .amdvglobal.122.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .microsoftsto.112.2o7.net [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .steelhousemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .px.steelhousemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .invitemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .steelhousemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .overture.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .overture.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .accounts.google.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .accounts.google.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .accounts.google.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    accounts.youtube.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .invitemedia.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .stats.slashgear.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .stats.slashgear.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .stats.slashgear.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .stats.slashgear.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    accounts.youtube.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    accounts.google.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    accounts.google.com [ C:\USERS\ELIA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES

\NAO3008K.DEFAULT\COOKIES.SQLITE ]
    .doubleclick.net [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES

]
    accounts.youtube.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT

\COOKIES ]
    accounts.google.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT

\COOKIES ]
    accounts.google.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT

\COOKIES ]
    .imrworldwide.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT

\COOKIES ]
    .imrworldwide.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT

\COOKIES ]
    .histats.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .histats.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .histats.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    insight-beacon.torbit.com [ C:\USERS\ELIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA

\DEFAULT\COOKIES ]
 



#11 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 06:22 AM

Output of Number 4 (in post 2) AdwCleaner (this is where i came in!)

 

# AdwCleaner v2.304 - Logfile created 07/08/2013 at 19:10:21
# Updated 03/07/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : god - MY
# Boot Mode : Normal
# Running from : E:\Users\elia\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\ProgramData\search protection

***** [Registry] *****

Key Found : HKLM\Software\adawaretb
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Registry is clean.

-\\ Google Chrome v27.0.1453.116

File : C:\Users\Elia\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\god\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.1] : urls_to_restore_on_startup ={"backup":{"_signature":"feAVM0Zatf+apPquFOmao5F4Oh/8PDao2lZOnEI0a04=","_version":4,"extensions":{"ids":["ahfgeienlihckogmohjhadlkjgocpleb","blpcfgokakmgnkcojhhkbfbldkacnbeo","coobgpohoikkiipiblmjeljniedjpjpf","pjkljhegncpnkpknbcohdijeoejaedia"]},"homepage":"hxxp://www.google.com","homepage_is_newtabpage":false,"session":{"restore_on_startup":4,["hxxp://www.google.com"]}},"browser":{"last_known_google_url":"hxxp://www.google.com.au/","last_prompted_google_url":"hxxp://www.google.com.au/","window_placement":{"bottom":1030,"left":10,"maximized":false,"right":955,"top":10,"work_area_bottom":1040,"work_area_left":0,"work_area_right":1920,"work_area_top":0}},"countryid_at_install":18242,"default_apps_install_state":3,"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":false,"show_welcome_page":true,"skip_first_run_ui":true,"system_level":true,"verbose_logging":false},"download":{"directory_upgrade":true},"extensions":{"autoupdate":{"last_check":"12997838533665927","next_check":"12997854763327927"},"blacklistupdate":{"lastpingday":"12997785603731862","version":"0.0.0.135"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"aakhlmakppmkkmfkoibponkmmpgpmjgl":{"blacklist":true},"aandpgohbohmlknpjbblpmoladhoochg":{"blacklist":true},"abciiempgohamehppammbkhkicmkgkob":{"blacklist":true},"abfclfmhaemoockhhinpplncjehfpdbd":{"blacklist":true},"acmpfcamncegnhjdeiodgilikjafcamg":{"blacklist":true},"acomnmbomlajgjbcijkflekoojdfcldj":{"blacklist":true},"aconhjfogglfnkjhkjipaifepjklolog":{"blacklist":true},"aebfkgcamgnimcbnbiopgdakknjgggnm":{"blacklist":true},"aemcjbfajnnmhblifaejadoecfoaebld":{"blacklist":true},"afenhmponmfmdmbmccbmglppcmjhmhmh":{"blacklist":true},"aglmapjbjphdidmnileogpjkgpdoliep":{"blacklist":true},"agmhonoepgcnakccfpidhjehlocaeaaj":{"blacklist":true},"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","page_ordinal":"n"},"ahjfgnikolodijnpakeknpilnemojlhc":{"blacklist":true},"aieglpnmmhleoenpbmfaffppfomgjmba":{"blacklist":true},"aieihijcjcccdiepockaiekhpflicdii":{"blacklist":true},"aifmjmboebdkdelpjenakhaodgneempp":{"blacklist":true},"ajlkjjdbgcjdiklbcomhnfghjigfccoh":{"blacklist":true},"alcbnnpmipohgdllkkglhkbncijplago":{"blacklist":true},"aldalonecchncedclgcndcndgilaclnk":{"blacklist":true},"alfahpoknocfdebmiclonikapcnljlob":{"blacklist":true},"aljdncnajablgppdcfbehhmidlmbndda":{"blacklist":true},"amfgdngndpfldigimkcindjalokfnmem":{"blacklist":true},"amoobcjlpgloocplpikcldcpjjdnoeii":{"blacklist":true},"anmjpohfnlopdfaojooicpemopnliimn":{"blacklist":true},"aofechiiopolnegcjcddgedjabmkemhf":{"blacklist":true},"aojicjocmihiopalnhjikigammkhgckb":{"blacklist":true},"apdmgffkfhjfeejmbjidennfjdkmmmbl":{"blacklist":true},"aphncaagnlabkeipnbbicmcahnamibgb":{"blacklist":true},"bcddmcejgphfgofbpoocakaeapfomlek":{"blacklist":true},"bdgijcibmhjjccgbdohofncdjcophknj":{"blacklist":true},"benclngoadbppljglhphhnfknoppmjoa":{"blacklist":true},"bhdkpmneahdelgdgfhddianklldfoell":{"blacklist":true},"bilgncckogfgfipdlejkffnbkgjkmflh":{"blacklist":true},"bioeopenmokdgbekbgpgnacecjmpckbb":{"blacklist":true},"bjihddggcgnblgojnmhpnngonofbnkaj":{"blacklist":true},"bkhafliomebnpccanacmlfaemgfiofko":{"blacklist":true},"bkkchglolnigbfncnbnnbhhempjkdpkf":{"blacklist":true},"bkplhcigeaiiliajeehehiikokgocbhb":{"blacklist":true},"bldgnkigdcpgnbfehgbameigoohecdfl":{"blacklist":true},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"ack_external":true,"active_permissions":{"api":["appNotifications"]},"app_launcher_ordinal":"t","from_bookmark":true,"from_webstore":true,"install_time":"12997800923242512","lastpingday":"12997785603893862","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"current_locale":"en_US","default_locale":"en","description":"The world's most popular online video community.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","name":"YouTube","permissions":["appNotifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2.5"},"page_ordinal":"n","path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0","state":0,"was_installed_by_default":true},"bndahdijlcnncjbpammoedeapmlobllc":{"blacklist":true},"bnffnggkphadlnoopcoakdnkellnifjp":{"blacklist":true},"boaoagnmpennjoigkkmnjhecapibhfko":{"blacklist":true},"boclfockfmgcppbajihcgajhpggaakgl":{"blacklist":true},"bokkificjhapflinbdejegngffgkcgfe":{"blacklist":true},"caphkimknlmnhpjoneddiaakmcaajagb":{"blacklist":true},"cbbbpmlnlpnjojeplppgeilanlihoojg":{"blacklist":true},"cbbjhegipokkofhhicbckicchjpcpeni":{"blacklist":true},"cbjlfaogacjpkplebfbijaakaifoflno":{"blacklist":true},"cdogaeccgljmkecjmoedambgiekkllij":{"blacklist":true},"cekdjgnecpoooikhmceokdhojckkkhmh":{"blacklist":true},"cepfogmgfkddnllaopgknbdfkceejmhk":{"blacklist":true},"cfbdodejdeejbkffcmiaknpmojjeibpn":{"blacklist":true},"cfogpbanfnocakdckmgafapdlmclpiln":{"blacklist":true},"cgnegjfmdfenjojhjffejinpnpoglmlh":{"blacklist":true},"cgnkbnaiipmfbakpmhllalggoepniemh":{"blacklist":true},"cihlkpohodpdkdnfalhdkhhlhmhffmbe":{"blacklist":true},"cjhklhdjonhcohlacgggcbklpnldleck":{"blacklist":true},"cjohbbapkbkkhpohinffggbphnhoblea":{"blacklist":true},"ckckpgefkpjfopjppjfcikppehdhceah":{"blacklist":true},"ckphhghhpjbfddcgkpfbelfeojcciglo":{"blacklist":true},"clapnamcglekekmamicmbahkghdcjaeh":{"blacklist":true},"cmjphjljejnfgdbkdgdlclaabimpknna":{"blacklist":true},"cmlokmkdolieoaoddlfhaidnlmiadhik":{"blacklist":true},"cnimdnlablahacgompaahbgohcokcclp":{"blacklist":true},"coajchbkdbfhmhbgcjepiofllfjjcpfp":{"blacklist":true},"coobgpohoikkiipiblmjeljniedjpjpf":{"ack_external":true,"app_launcher_ordinal":"x","from_bookmark":true,"from_webstore":true,"install_time":"12997800922496512","lastpingday":"12997785603893862","location":1,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/webhp?source=search_app"},"urls":["*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"current_locale":"en_US","default_locale":"en","description":"The fastest way to search the web.","icons":{"128":"128.png","16":"16.png","32":"32.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","name":"Google Search","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.19"},"page_ordinal":"n","path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.19_0","state":0,"was_installed_by_default":true},"copjbedljgpkaakkmbhgkpoaadeahido":{"blacklist":true},"cpiiakoibaohkfoaijaigdnocfolnmll":{"blacklist":true},"dadcalgappognjbjpalfophhcfakoeac":{"blacklist":true},"danapgfidmepmcfbjjacceiaiiioieio":{"blacklist":true},"dbanhghadfmjndnjmmejdgfdmgidlbpm":{"blacklist":true},"dbiblcmlcgdjjbdpbmbcpineegngkiip":{"blacklist":true},"dbmdicehacbaohlockjgdglcobimmjkh":{"blacklist":true},"dejippphmhbpgckbhdidnjmdcpfccbaj":{"blacklist":true},"deocpjmfifplhepinpkmpinpnbiemfje":{"blacklist":true},"deonbedlmakdddidplniclflladdjoep":{"blacklist":true},"dfafokiagoiocidlpglcanjkcdbdnioi":{"blacklist":true},"dfoegfajplmijblljfancdapbdaopebb":{"blacklist":true},"dgaehaeahdegbdlenicbmkbakhdgoeml":{"blacklist":true},"dgcfmgdfbfbgcpbendbhbkfjppboebed":{"blacklist":true},"dgkemngdheppgohkjjelnkjmdeimmfml":{"blacklist":true},"dhclobcklknojliojkkclgjndemadnig":{"blacklist":true},"diinokaoicgobepmadnmedlhdfnpehcj":{"blacklist":true},"dinhjcapnfbffhiihdlnbdfjdjjfhcbk":{"blacklist":true},"djnahdkbfgnhgpakidinfonfcjbagkgp":{"blacklist":true},"dkhkecikbdfpoiopnnpoeglbdphgflmf":{"blacklist":true},"dlobhinihbmedmheccecfnkcadpehmbf":{"blacklist":true},"dmhgenmamfphbclmhdgmffajkfommkom":{"blacklist":true},"dmhjdbigobajgnfoabodjgmcdgoeoljm":{"blacklist":true},"dmkdhgkknhnfpdjeicefnpmhcpbimden":{"blacklist":true},"dnemhlkdpajbbniphgkgceplmnkfnhfo":{"blacklist":true},"doneghboglgnflpdicnkaojmmljgejkj":{"blacklist":true},"dpgenihgggagjjggfocjceeobjkadcbc":{"blacklist":true},"dpmloehicimdjkibmobhmpgdndgbcced":{"blacklist":true},"ebdcdchjcndpjhehacedepnggfdbfkpn":{"blacklist":true},"echngajnlpjeacbanjejlhcajjfoedcc":{"blacklist":true},"edmnikahahfkfilbbjbdoiabnghbkmjc":{"blacklist":true},"efbeabpbbkahnnjalakldjfhljboclkf":{"blacklist":true},"efhjelcghjkfigiagdfbfilndaffpmdj":{"blacklist":true},"efnaljpgehfilpmkhobibbjceeeondmn":{"blacklist":true},"egljdhfnbjahogjahnigfnbpidlmdagi":{"blacklist":true},"ehgoiaffgjoinpkllmmnikghgpghnabc":{"blacklist":true},"ehmjnpjodmgeocfphkjjnheiheehcoid":{"blacklist":true},"ehomcoocpagnlcakcbecdaknmacmedld":{"blacklist":true},"eiflkkehgogioennialfbilppmegcpoa":{"blacklist":true},"eihjeehdobnpkonebmpanonopghepfle":{"blacklist":true},"eijbdinddjecmebnlienfoijpjjobkjh":{"blacklist":true},"ejakhnjbomgngodiidgbkapjgbdckhnh":{"blacklist":true},"ejijgghlncnaphklndknkbkclebfboca":{"blacklist":true},"ejlekamipdcfcfpgfepjmklllbpeecaj":{"blacklist":true},"elcaigjcaijbfpjngaekbblphmfjdhfo":{"blacklist":true},"eofejpelggimkodeojpeojnbijgiglgh":{"blacklist":true},"eopmhecjnginkckggjmhombbopmkjpam":{"blacklist":true},"epbmnbdplhcomkedpjfceakddnbgfjmf":{"blacklist":true},"fafoohpbicgbcejffcplajonhhooddle":{"blacklist":true},"fbhiehmngojjcmljddjmgpmcockbccmo":{"blacklist":true},"fcfepemfihgibdacjlnlecebknaaepmj":{"blacklist":true},"fclheclkknbgfndeahkfdomollhmfkcn":{"blacklist":true},"ffgfbfakpcnngelphjnppokmoicdollk":{"blacklist":true},"fhlkffpjoajppmhcakbkjndbjfljccpi":{"blacklist":true},"fiapkdjniadkodmdibdnchoifkpfoiid":{"blacklist":true},"fibgploapkhokkbncddlkcmbmiengcfp":{"blacklist":true},"fihepkmlkmciffbhijldnpmifhbkiinp":{"blacklist":true},"fjhfnfakmfcejgmfkmnapemgblmehppf":{"blacklist":true},"fjjeecfjmgfnleghoellhldedkaocjfc":{"blacklist":true},"fleljamdchegbjeiipbnmiebnhgheeld":{"blacklist":true},"flmmgcfcpbfddenepkfmgfpbaceolcoe":{"blacklist":true},"fmcccidacjgnfiafddkngmeolkoiihil":{"blacklist":true},"fmonlemffgbabjifjfaoamdflijecdbk":{"blacklist":true},"fngolbdmkneakeaoiieafkilnogbocda":{"blacklist":true},"fnhcgnmfccojojojacgeiaaeacefdohb":{"blacklist":true},"fnkaadkanmfgpfbmdcllhjdgmdbgljpi":{"blacklist":true},"fnnmbghphdnmmjdapccfobgjemjadeli":{"blacklist":true},"fnoadkjdjfgafomgmablhmffooijcfbn":{"blacklist":true},"foenbafkkmajnmfnlcmejonkfaipdmme":{"blacklist":true},"fomljmklmcefndkgpakgifbiiidgbjej":{"blacklist":true},"fommcgokigkhmnhlhlkckfjhefnmfohd":{"blacklist":true},"fpbippbofbmgmbojjmgfcifpmdaelcmd":{"blacklist":true},"fpbkafpphnhlpakobppekmkebmbhkoco":{"blacklist":true},"fpjdackpllilinpkgmhkpidkanmccblc":{"blacklist":true},"fpmajanjndhgpifbcbnklbiehgnpkgmf":{"blacklist":true},"fpoajjnnpmledpmohlgpgbmlhbgkgahg":{"blacklist":true},"fpokembamndopkflopmplkklbdngnknd":{"blacklist":true},"gaicmfjflflabagobdiodejfpjikheeo":{"blacklist":true},"gandihaiobadcggbfkhpbkocmiemjlnf":{"blacklist":true},"gbenikfjhilhpgagllmfgggdjaflbmbi":{"blacklist":true},"gdggdkkjecogagaffaemnbfmllcoihjp":{"blacklist":true},"gekkhpjigmckhgmgngadbeknekgpgolb":{"blacklist":true},"gfjfhihpkmehdmblhfaikkipeplpdcla":{"blacklist":true},"ggkpicnfnljflddbdoeeaajjgepapcbf":{"blacklist":true},"ghgphbmpcfgkfneodjpbdanmdoemklio":{"blacklist":true},"ghmaokcegalalefnhlfcnjhnpdbanjkj":{"blacklist":true},"gifglngcdbggmlgkcombebegdaoknkho":{"blacklist":true},"gjkbghdignnlcknknflbigpammebiolo":{"blacklist":true},"gjmhdmobkhfhkpfmfegnkkimlamjdldi":{"blacklist":true},"gkhbgnodbilglgholifcjdblbgdaieah":{"blacklist":true},"gkjeccpmibljcfpfapfljciimedljpnm":{"blacklist":true},"gkjmgdpdndoaiholejnmdbbpdaafahmm":{"blacklist":true},"glhhlafadlhkgbklgbjnmblfhnkfknbm":{"blacklist":true},"gmghjgfdialcnhadahmjefeflgnhcjeb":{"blacklist":true},"gnapdhmknipknfmhhnhdmhakdfhgeing":{"blacklist":true},"gncfgndgeoddelbfhlndhljnecoednaa":{"blacklist":true},"gngmkbiihflpghldjnbpemaicedhdddk":{"blacklist":true},"gobjcjhhebpjbmjdgmejhebbleadnceo":{"blacklist":true},"goedioiidkokkbobdnopnlnaaalniegm":{"blacklist":true},"gpgehbjbkfhngdlfpfeokjgbkmmokjhe":{"blacklist":true},"gplgjmecjpbfcdikpbicknafcnfcidek":{"blacklist":true},"hbaajkahagmlkdekmbdabikbopdgpaac":{"blacklist":true},"hbdhabpmbbanaopgkbaondabkkepjfaf":{"blacklist":true},"hbmlheccjkodhfejcmblndjodllmnlnl":{"blacklist":true},"hcapokajkngndbglnfglpfdpoeidmpha":{"blacklist":true},"hcpndbchnlgojmnijaldkicigmihmdca":{"blacklist":true},"hdijkiondgomjpehfhopomicjbiodmcm":{"blacklist":true},"hdnbmmfjbblajkjkcaeofolgfnljpnim":{"blacklist":true},"hecijapnccjhonbmacmkmffooodfokoo":{"blacklist":true},"hefmoncdemhjembgbnkgglhlookbipdc":{"blacklist":true},"hfcgbiofoebieldldghfocjfnnajmpej":{"blacklist":true},"hfjpjodbolkmheaehcnmfhjakjileoof":{"blacklist":true},"hfpfbhnmbbigpmoodjemilggabklpopj":{"blacklist":true},"hgbaomphocgmdpmiohjclchaaljpaelp":{"blacklist":true},"hgboiaecclcbjphldpbgfgggcbihmnai":{"blacklist":true},"hgjgaeknhmidehalnmokomhpfhbfmpcm":{"blacklist":true},"hhfffemhgkginfafaoapljdllodppana":{"blacklist":true},"hhfiljkpjapjjphcocclhhaldpfkkjbi":{"blacklist":true},"hhjmkijkgojfifipdgmiemghfikbohcm":{"blacklist":true},"hhlgbfcfbkhlmajakkcjippgpcmejkko":{"blacklist":true},"hilncbjbdpnfepdidfchmdclhpnlegpj":{"blacklist":true},"hjkhligcnpfjhjlapmejaiaiigibofif":{"blacklist":true},"hkbgccpdcpbdckohbknjlamamelcnlki":{"blacklist":true},"hkjcejgfmaanpncnpoidgbhoikcaeepd":{"blacklist":true},"hkjfdgjkgpbbdmadbglcgljjjddkcdha":{"blacklist":true},"hmmoglffhpmacaacfbbmbbkcbdkjphnc":{"blacklist":true},"hnbcdmfeoldeppcbnnjmjkdofohaljbn":{"blacklist":true},"hncomkjbbkchfjelocejkbbflmjhlhfp":{"blacklist":true},"hnipgljcblpgnnojcfldehpeknhakbgj":{"blacklist":true},"hnkcpoijaeegompjgbjjhkdmljldaccg":{"blacklist":true},"hnnebfeppcbhhbhiifeaajgcjnkljlld":{"blacklist":true},"hnonhhpgjnjcjfbkjdpfbkfpaodcmncb":{"blacklist":true},"hpcdoodjfcmpcpkeendjnjkeinimhkih":{"blacklist":true},"hpibmhghjndideebpackbdlpncgkcppp":{"blacklist":true},"iablioliielnhdianpbiijaoncbmfend":{"blacklist":true},"iccblehkchfmjgfafjcpjlkjcponhdhl":{"blacklist":true},"icihfeaofpcfehanhbnjigdlpfahjlee":{"blacklist":true},"iemfpgbdjfoihicbocpbjppipdbfimeh":{"blacklist":true},"ifbkndkaolfbjjhnnhfmkbkoclpdkpli":{"blacklist":true},"ifeijfpkjckedpclgncedmgdiaoeahmk":{"blacklist":true},"igaajdmlejbjcbmpmnigopikfdaccdcm":{"blacklist":true},"igbaoknfddliiaoimhehfbkfekpmmfll":{"blacklist":true},"igghanohiioehififjoalfkdoicafjof":{"blacklist":true},"ihnembcpodnfgkafmiojebccomjekopm":{"blacklist":true},"iiiinekimabooeihccihfopoadcaaphn":{"blacklist":true},"ijecjbcgpblkacpijljpaienknanaloa":{"blacklist":true},"ijenlpgidnapbndonoinbkhekgjonojg":{"blacklist":true},"ijjmbbddenkbenbcfldgghhjgjmcnioo":{"blacklist":true},"ilhjicgcglhjigdehkcehjdokmkahbjl":{"blacklist":true},"iljfgjkppapinhcgonhjnipfppfmfedh":{"blacklist":true},"imfbomjbodpfgfhfahlgkkcllmhbelhk":{"blacklist":true},"imkffpjpdngdkpgadcmnlkhhmhdocijn":{"blacklist":true},"indfhnliadamglhalanplbajgenpjdml":{"blacklist":true},"iobnpmeeecphddicmhhmdjbnlbdhjlne":{"blacklist":true},"iomejadoamfilglofmeaffghddcgapmf":{"blacklist":true},"jabpdgllijbnknhkgjideeajfofafckp":{"blacklist":true},"jaejgaoiipdjjlbnapngknalafalbkej":{"blacklist":true},"janhdpmhnighonkkbkdpnljcoenpfkbh":{"blacklist":true},"jbfebbkjjmkcoldeaeelhpconkmgjhbg":{"blacklist":true},"jbmbiepnidbnhbbfdbgioomdkgnbcacj":{"blacklist":true},"jbnafcjbcfgejacaanogofkkehcomamp":{"blacklist":true},"jcmipejepoimfflnoapdmkdephgjinck":{"blacklist":true},"jddbdddmbfencninofcgnodekclofpaj":{"blacklist":true},"jdiakcmbpmcnniggjcmcjknnklpdlogc":{"blacklist":true},"jeehjhnmgohgpfpjneglogiholalkeip":{"blacklist":true},"jfalnphfjdoalcdhlnhdpekbmmopkgkj":{"blacklist":true},"jfhmafmjfdblceidmfdmoihamolaaeco":{"blacklist":true},"jfjagidcpadkoaonbogmbgfimmnefeie":{"blacklist":true},"jgdkappiifgomhgikcjbanhnmlekpeje":{"blacklist":true},"jgmpapdckakiohhebmeoemejibommimi":{"blacklist":true},"jhhabiomopkibeecgngiggmopkeofacl":{"blacklist":true},"jindbcpkhnnnjgcjgmkjedbibibiojjf":{"blacklist":true},"jiofcofpcbijcnlpekdkpmgjdppajbjb":{"blacklist":true},"jjnkfllhcgkgnfbekpnmoikpfihpjfli":{"blacklist":true},"jkihmglffmfjedfbpbpdbbimcodjbmdh":{"blacklist":true},"jkmhalpofmlfeglboejbchpoijnkmcgh":{"blacklist":true},"jljfnkmkkdkppfndippkedacgfkafped":{"blacklist":true},"jmbkhogpjgjpfjhpdikloblkbkljkgao":{"blacklist":true},"jmeanodbelbflfmnkfdjgpikmldgjjko":{"blacklist":true},"jmifipgdcllamghkhdplfjffkciekbgo":{"blacklist":true},"jpehgolpfgnknboibogccapmdcadjkbd":{"blacklist":true},"jpeijjbllejgmokmahkeommcodahoobm":{"blacklist":true},"jpgidahfcgiajlcbleeiaibpmmblcmnb":{"blacklist":true},"jpkdlckejfjidmplieobnhijmoiecbhl":{"blacklist":true},"kbipembkfhbdmkkkfbigmohilmknjnof":{"blacklist":true},"kcanfkmhccbaheheaackijegkclkaeic":{"blacklist":true},"kcfnnanmpghdnoompcfclakpacapnfbn":{"blacklist":true},"kcgplbmkmfcpngilmhjmebdgkkpbdemp":{"blacklist":true},"kdchmeaiapjkejkcbeclgjklemecieeg":{"blacklist":true},"kdfahjokahcbmecgaandpobmgiiknagf":{"blacklist":true},"kdjhalklkkcmodeicjiaekcgifkcepaf":{"blacklist":true},"kelcbonmemlciepjdmfcifnhloeammhj":{"blacklist":true},"kelljdoinjlkmkncffgadbebgpmlcang":{"blacklist":true},"kffhenjbibjnbnjhlkcdlmpeccpaohio":{"blacklist":true},"kgbkdabomfdpfoibliicpmibceaoohgh":{"blacklist":true},"kgdhnhadbnpeibkghaebmhmngobdafag":{"blacklist":true},"kgdkcodealpfjolmiagcogfbgmaamegh":{"blacklist":true},"kgdmldjagfciieddcnlhampgkajkpanc":{"blacklist":true},"kibgmcdcfmcglajcfbecilngejnfppjp":{"blacklist":true},"kiipngoehgkgkackngaidmhmnchfbmio":{"blacklist":true},"kinhljbhjmcmoddhdoodekeklmjapjff":{"blacklist":true},"kkhomejdleoonmbdhcigkhkjcghngncf":{"blacklist":true},"kleaapgdkahaekcocmkbgfainbhihccj":{"blacklist":true},"kljhmdlkclaglodecegamnpioaflmage":{"blacklist":true},"kmlebjoghkhpapfhbdikannggmmffnco":{"blacklist":true},"kojkdbedffnppdoalcfkkeelbhbklhgp":{"blacklist":true},"kolbbghckjilleabphhgeggcgpfidofi":{"blacklist":true},"lambangeielkjcnmioccboaphdfcffib":{"blacklist":true},"lbaddolhebpnhdcdkicpcflhnfamcemn":{"blacklist":true},"lbficnmfealeidppcbgdcbemgfjodbkg":{"blacklist":true},"lceaiepehinnomgijphkmjccbigkljkj":{"blacklist":true},"lcfkojlnjnedeoepfemhdgkhiabkeadc":{"blacklist":true},"lcmpleboacinanffcdgenhhbkboclkjb":{"blacklist":true},"ldgfapfmnplpaohbbadnecegcpfkfall":{"blacklist":true},"ldmoahefokhfelhpbgfjpelcdbahdofk":{"blacklist":true},"leccghfplhenabeogpibljliijgapfgb":{"blacklist":true},"lgalokbapphhklmilicdefmgbjkcmldf":{"blacklist":true},"lgcnahanhlfpceencjmlehpfklokhojk":{"blacklist":true},"lhajoamjgchgljkdjigcgmmcehjkagan":{"blacklist":true},"likifpgnijjfbdegfepoalpamlgnfofi":{"blacklist":true},"liomofjeffddiiccaolcnllbhnipbkhe":{"blacklist":true},"ljcicfibknpmlcmcecddjlbgkejehhpa":{"blacklist":true},"ljeihpebkahejeacdalhkhmckmggppif":{"blacklist":true},"ljmjoloiepllcndinchenhomcdcgbgef":{"blacklist":true},"lkdimamelhbiijkiljlnedmhnnkkmlbl":{"blacklist":true},"lkfdchejjogilmloogbbjlnlpbhgjfab":{"blacklist":true},"lkhcbijhgfchgdmklonlobkfbcadbokg":{"blacklist":true},"lljnngafekbnkpdfophmcdlbfebcbcld":{"blacklist":true},"lnahlgmhpghkhmafjppdidhcoaomipfg":{"blacklist":true},"lnbeebaenahmkbffnimghceldeeihfak":{"blacklist":true},"lncjcfkpannmofmpgdfoonkniofdnaba":{"blacklist":true},"lndempehphjoeimfchjflohpmhamiamf":{"blacklist":true},"lnjgjionmhobdfdegbciceafphgemjnc":{"blacklist":true},"lnlaeblencbjjjeaanegaldcjfekeled":{"blacklist":true},"lodollblmkailkkdiijmoccefdfjohgk":{"blacklist":true},"loggadfheaoeabmkgolecncpfdfioefa":{"blacklist":true},"lojppnndedobolgfepahepphhloediji":{"blacklist":true},"loldehkdjdncebfnncknlkdchjclifbn":{"blacklist":true},"lookpbabilcplifjdeifacodednpacmk":{"blacklist":true},"lpgiafapdmlapiokjnmpbbfkomiceoml":{"blacklist":true},"lplmcpcnhpbffpcfiaddbeaplhhbengd":{"blacklist":true},"maakimnachffhlgdhfomaejeeaikgjap":{"blacklist":true},"mamfageekafifnickhgkibkofcclfefe":{"blacklist":true},"mandondadnlimicalgkbkaohmeopdojj":{"blacklist":true},"mbmdaiddhfoljplpdhohimgieioblfif":{"blacklist":true},"mcbkimglepddodbiongpohpeidioafgk":{"blacklist":true},"mcknnlhkkdbcppajgefagceglahcafjd":{"blacklist":true},"mdiehnlecbjlppbpaaipmlnhhjgepfcg":{"blacklist":true},"mdngbiejioalifclonjepjjfppmbgned":{"blacklist":true},"megkcfpbmemnpkgadkoompnoajcolpni":{"blacklist":true},"mfffdpnblflpobcnekhekiahepofaane":{"blacklist":true},"mfhfkclojmdocagbmecgcnlofppebebd":{"blacklist":true},"mfncimdpmknolnnnccdmkpnpkaofonkc":{"blacklist":true},"mgdgiplcofghdmpekdeeceolepakodcb":{"blacklist":true},"mjalegijammcloleihdmooifidcjggjp":{"blacklist":true},"mjgobkikdipfikmaoakdcdbicpioljgg":{"blacklist":true},"mjolnadmlahbpepjaemohnkhpjkbhmef":{"blacklist":true},"mknjbohhleiicbpagpgmhoaigbblmnic":{"blacklist":true},"mkobblpffgbncfhijabakfafmkjdmmnm":{"blacklist":true},"mlmegahemifabfmdnndafagnncfbnahn":{"blacklist":true},"mlmmbepkgelpbenpobinockmiehdahai":{"blacklist":true},"mlnoedbhndgbjcbeadjfnmjloejlgojk":{"blacklist":true},"mmjodihhmnpkldljaifiajmlnpflfhpm":{"blacklist":true},"mndoohjdoechinpkfbkolflbonciahfo":{"blacklist":true},"mnhcgaghminpdabllkbkecahjfkdiabk":{"blacklist":true},"mnichagcickblneeijmfnmoiakigmmhf":{"blacklist":true},"mnllienogacopjnkmhgnniopjpgjpopp":{"blacklist":true},"mogepbcllienegdibkfpmombhefhcoic":{"blacklist":true},"mpgehpkneknbopplhmmkfijfiniddipf":{"blacklist":true},"mplhbhmkccidaokcelbcbcmhhedebcng":{"blacklist":true},"mplpabdbfbloeiboikmdbnggfnjbjmlh":{"blacklist":true},"naopgnjebjeeedbbhcadkhkmeefmloho":{"blacklist":true},"nbieffehfdniifkgdckbndjhojohbfjj":{"blacklist":true},"nckmikohoilfkcoahbjpbgbpegcjgngm":{"blacklist":true},"ncpdanjmicnihdlijomcggnnekloephc":{"blacklist":true},"ndhkiimgbjnendpcfbiadlifmangejoa":{"blacklist":true},"ndiogongcmocdgjciemhagfhpjamehpe":{"blacklist":true},"negkalblfongjbphdcbbhddlickhlamd":{"blacklist":true},"nepfiodmbijheamafkiglonfkjebdjmf":{"blacklist":true},"nfecfkjnlkbphobjbcnphimihniieehc":{"blacklist":true},"nhbfbnmmdjkjahhfdeklgphihfodfgnb":{"blacklist":true},"nhboiakpmibkbkbeehchlfkggmhphpnk":{"blacklist":true},"nhkmojkfnknbbmhbnacjdlodokeophkl":{"blacklist":true},"nibohffepnilngkecenfdgnokfhmnkod":{"blacklist":true},"nidmbljkkcbdfklgdkklgjgmhejmbojn":{"blacklist":true},"nidodbfomffkfabciljelkbdiabkeehe":{"blacklist":true},"nifbebeekindefklojhchehidpikbjfc":{"blacklist":true},"nihhbeikpchdddoillfdcdinnnnllmna":{"blacklist":true},"nlgapikcofpablcmfgaoodlhiejiehhh":{"blacklist":true},"nloaaepkhcnmoakooihnefhhggbmemed":{"blacklist":true},"nmgpbidjnaebdlbdbpjggenmbaolmfoi":{"blacklist":true},"nmmnodocfckpoddcgihiihcdinaonckb":{"blacklist":true},"nmphbnbmgfccfhcmibikmhcgajjpelpf":{"blacklist":true},"nnioepmjbjjlflmdgjanlcmbjahljeeo":{"blacklist":true},"nochkknnbahbhmmknnmdhagelcnfagom":{"blacklist":true},"noefghcilkpcabnhhilojimkkjplhcnd":{"blacklist":true},"npadaghbcdejfngcjpbnoikajdnongca":{"blacklist":true},"npolaghondefgiomhkbiiompikfjneep":{"blacklist":true},"oakhllhnbcpgagdafgbninlpjdemdmjk":{"blacklist":true},"oanjogmonneelfpnfmdlalfddkeckdej":{"blacklist":true},"obgljnmbldahelaakfdbjkplokjoneip":{"blacklist":true},"ocmhjnhildbnglmlfimkjnnfgddelacb":{"blacklist":true},"ocnlnkjmfnolmbclblfhfhcakldceiec":{"blacklist":true},"odeckaficnaplobiiaomegfbokokehhb":{"blacklist":true},"odnamglmogfldajnhkfodmloofeokcmm":{"blacklist":true},"oghphhcagopecifjblgdcfihjnlcbcfc":{"blacklist":true},"ogjbodghhojomghbdfnlkppdagkfjede":{"blacklist":true},"oidjdpbndkjhmhmgdoggibcjnippkcgo":{"blacklist":true},"oilfokmpgejhjhecdjjpikloibggpenf":{"blacklist":true},"ojglppmhgfohhfeinlhklglifnbfebak":{"blacklist":true},"ojmdhklabgbnnkkilmkcfcemdhognifc":{"blacklist":true},"omceiakkomngangmllpgbjcoeloglald":{"blacklist":true},"omnicnmbagoinlpamknknbcgopadcoci":{"blacklist":true},"onfbaaifbbahonepmednhkjbhdgogkbl":{"blacklist":true},"onjaecbdddgibdijafoemfiachlbcgkj":{"blacklist":true},"onpnpccdagncipgnoofbhchlbajcjnkd":{"blacklist":true},"oocfbmollajebjjpkahmlnclfhkjijea":{"blacklist":true},"ookcgejbfhcmcanfkfmmmpahflnlajbl":{"blacklist":true},"oomelpjfeldbopnleifpjibbpekflhlg":{"blacklist":true},"opnnngnphijodjhemhdafpnnpdjggofe":{"blacklist":true},"pajgiddgjidlcajihkjoacjbplimkgfe":{"blacklist":true},"pbdgmppmccanplobanhfkjndjkmmabgk":{"blacklist":true},"pbekednmpdekknlffkiopooofokfmkla":{"blacklist":true},"pbglijbamgmlcpnnpbfjkbdeheejjloj":{"blacklist":true},"pcaedgdgamlfffkfblocmakhgieggoak":{"blacklist":true},"peahabnpipmmfiajjjhgfggbeigbmbgp":{"blacklist":true},"peiijdmlgbelnnmnkighhkpeihmmamio":{"blacklist":true},"pfaooklcbjnkgconjjepimkohgcjmdji":{"blacklist":true},"pfcelnbmkeoaeicedjomcjkcammlkdbk":{"blacklist":true},"pfgmgcnbngcnhjddppmnloflcidemopc":{"blacklist":true},"pfhlnanelpgjbhndafjamnpfhkjadoip":{"blacklist":true},"pfoiaildicnbcjojocjlpcibenphhbln":{"blacklist":true},"pfonklmafadkmcedjlodommcoipgbcde":{"blacklist":true},"pgelifedkjaohmjehecojkfldinjlamn":{"blacklist":true},"pgjpnfpidejcmjibaaohcmehfohacckf":{"blacklist":true},"pgldfhecfiofkhnbgcncepnkjkeoahlk":{"blacklist":true},"phkpgooenaonkpnabopdbjjfmphclela":{"blacklist":true},"pihcfdffalbcnmbghijdfcaanagapelf":{"blacklist":true},"pjdhkkcnlbfebiokpeghfffajaabahfo":{"blacklist":true},"pjgbfgdpkbfimabdalhjmmeeelbmkcac":{"blacklist":true},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"]},"app_launcher_ordinal":"w","from_bookmark":false,"from_webstore":true,"install_time":"12997800922065512","lastpingday":"12997785603893862","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxps://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"en_US","default_locale":"en","description":"Fast, searchable email with less spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Gmail","options_page":"hxxps://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"7"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\7_1","state":0,"was_installed_by_default":true},"pjloefkigphblpjminnlpbhjchjafcfc":{"blacklist":true},"pkbbbncikcipejaiiiioboongndhmjgl":{"blacklist":true},"pkbkkendemaimikinaefldfljliecapm":{"blacklist":true},"pkdlpbfmpolnhligegklimbccminkioc":{"blacklist":true},"pkhidkonipdjidjglnkfcfhnkfnlefbk":{"blacklist":true},"plfijddblbcdcnammpdmfccchkbdekmm":{"blacklist":true},"pnaiiipilbpcceggeanphcpkkihnojan":{"blacklist":true},"pndadpldhngimdmhnajebjldbmcbpjol":{"blacklist":true},"pnnbdjcjeiobikdfikegpclkcimgafpp":{"blacklist":true},"pnpfkfanlgljpkpilhgiimfadggfmhcd":{"blacklist":true},"pnpgiaejfbdapllkchhgchjpdbcpiooa":{"blacklist":true},"pobponmhkpmphbnfhpjdagklbkmjhked":{"blacklist":true},"ppmfajacidhcjbddpgmcmigffpppcadd":{"blacklist":true}}},"homepage":"hxxp://www.google.com","homepage_is_newtabpage":false,"net":{"hxxp_server_properties":{"servers":{"clients2.google.com:443":{"settings":{"4":100,"5":3,"6":9},"supports_spdy":true},"www.google.com:443":{"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"www.gstatic.com:443":{"settings":{"4":100,"5":32,"6":0},"supports_spdy":true}},"version":1}},"ntp":{"promo_build":11,"promo_platform":15,"promo_resource_cache_update":"1353370524.193808"},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.64","migrated_to_pepper_flash":true,"plugins_list":[{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.64\\PepperFlash\\pepflashplayer.dll","version":"11.5.31.2"},{"enabled":true,"name":"Chrome Remote Desktop Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.64\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.64\\pdf.dll","version":""},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll","version":"10.1.4.38"},{"enabled":true,"name":"Google Talk Plugin","path":"C:\\Users\\god\\AppData\\Roaming\\Mozilla\\plugins\\npgoogletalk.dll","version":"3.7.1.9330"},{"enabled":true,"name":"Google Talk Plugin Video Accelerator","path":"C:\\Users\\god\\AppData\\Roaming\\Mozilla\\plugins\\npgtpo3dautoplugin.dll","version":"0,1,44,16"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPAUTHZ.DLL","version":"14.0.4730.1010"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"CANON iMAGE GATEWAY Album Plugin Utility","path":"C:\\Program Files (x86)\\Canon\\Easy-PhotoPrint EX\\NPEZFFPI.DLL","version":"3.0.5.0"},{"enabled":true,"name":"Google Earth Plugin","path":"C:\\Program Files (x86)\\Google\\Google Earth\\plugin\\npgeplugin.dll","version":"6.1.0.5001"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.123\\npGoogleUpdate3.dll","version":"1.3.21.123"},{"enabled":true,"name":"Harmony Firefox Plugin","path":"C:\\Program Files (x86)\\Logitech\\Harmony Remote Driver\\NprtHarmonyPlugin.dll","version":"1, 1, 0, 0"},{"enabled":true,"name":"Silverlight Plug-In","path":"C:\\Program Files (x86)\\Microsoft Silverlight\\5.1.10411.0\\npctrl.dll","version":"5.1.10411.0"},{"enabled":true,"name":"Nokia Suite Enabler Plugin","path":"C:\\Program Files (x86)\\Nokia\\Nokia Suite\\npNokiaSuiteEnabler.dll","version":"1, 0, 0, 1"},{"enabled":true,"name":"Java™ Platform SE 7 U4","path":"C:\\Program Files (x86)\\Oracle\\JavaFX 2.1 Runtime\\bin\\plugin2\\npjp2.dll","version":"10.4.1.255"},{"enabled":true,"name":"VLC Web Plugin","path":"C:\\Program Files (x86)\\VideoLAN\\VLC\\npvlc.dll","version":"2.0.2"},{"enabled":true,"name":"Windows Live? Photo Gallery","path":"C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll","version":"15.4.3555.0308_ship.wlx.w4m4 (ship)"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_4_402_287.dll","version":"11,4,402,287"},{"enabled":true,"name":"Java Deployment Toolkit 7.0.40.255","path":"C:\\Windows\\SysWOW64\\npDeployJava1.dll","version":"10.4.1.255"},{"enabled":true,"name":"Adobe Flash Player"},{"enabled":false,"name":"Adobe Reader"},{"enabled":true,"name":"CANON iMAGE GATEWAY Album Plugin Utility"},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Chrome Remote Desktop Viewer"},{"enabled":true,"name":"Google Earth Plugin"},{"enabled":true,"name":"Google Talk"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Harmony Firefox Plugin"},{"enabled":true,"name":"Java™"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Nokia Suite Enabler Plugin"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"VLC Web Plugin"},{"enabled":true,"name":"Windows Live? Photo Gallery"}]},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exited_cleanly":true,"name":"First user"},"promo":{"ntp_notification_promo":[{"closed":false,"end":1353427140.0,"gplus_required":false,"group":996157,"increment":1,"increment_frequency":0,"increment_max":900,"max_views":15,"num_groups":1000000,"segment":900,"start":1352649600.0,"text":"What do you think of Chrome? <a href=\"hxxps://survey.googleratings.com/wix/p5963862.aspx\">Take the survey</a>","views":0}]},"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,["hxxp://www.google.com"]}}

File : C:\Users\Amy Ball I got Balls\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v12.2.1578.0

File : C:\Users\Elia\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

File : C:\Users\god\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

File : C:\Users\Amy Ball I got Balls\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [35852 octets] - [03/06/2013 22:02:59]
AdwCleaner[R2].txt - [33770 octets] - [06/07/2013 21:17:17]
AdwCleaner[R3].txt - [33831 octets] - [06/07/2013 21:19:12]
AdwCleaner[R4].txt - [33892 octets] - [06/07/2013 21:33:39]
AdwCleaner[R5].txt - [33953 octets] - [07/07/2013 08:42:44]
AdwCleaner[R6].txt - [33825 octets] - [08/07/2013 19:10:21]
AdwCleaner[S1].txt - [3939 octets] - [03/06/2013 22:03:32]

########## EOF - \AdwCleaner[R6].txt - [33946 octets] ##########
 



#12 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 06:30 AM

Output of number 5 (in post 2) JRT

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Ultimate x64
Ran by god on 08/07/2013 at 19:22:34.80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\search protection"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08/07/2013 at 19:25:14.33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#13 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:35 PM

Posted 08 July 2013 - 05:17 PM

i have just finished the scan it took 18hours is that normal? < < This time will depend on your problems or infections -

Your problems in no way relate to the other topic you posted in -

 

This is your main error problem > >

Error: (07/07/2013 09:52:18 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
AFD
CSC
DfsC
discache
MpFilter
NetBIOS
NetBT
nsiproxy
Psched
rdbss
spldr
tdx
vpcnfltr
vpcvmm
Wanarpv6
WfpLwf

 

Go - Start > Programs > Accessories > Find Command Prompt and Right click on it > Select Run as Administrator > Type > sfc /scannow and press Enter

Note the space between c and / as it must be there for the program to run -

This will take from 15 to 30 minutes (on average) but please let it finish - This will check installed files and may repair some.

 

It may require to be run more than once during this repair - I am checking for other repairs now -

Post back only when it is finished -

 

Try to restore your Hosts file > Click on http://go.microsoft.com/?linkid=9668866

Agree > Click Run and follow the basic directions -

 

Thank You -



#14 axuy09

axuy09
  • Topic Starter

  • Members
  • 72 posts
  • OFFLINE
  •  
  • Local time:11:35 AM

Posted 08 July 2013 - 09:03 PM

From "sfc /scannow" I get

 

(Microsoft Windows [Version 6.1.7601]
Copyright © 2009 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32 )

 

It runs quite quickly have run it twice not sure if it did anything it says that it "did not find any integrity violations"

 

The SAS is running again and has found a trojan it didn't find before

 

Will click on link now



#15 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:35 PM

Posted 08 July 2013 - 09:50 PM

Re-run AdwCleaner but do not click on  Option [Search] - Click on Delete instead.

AdwCleaner[R6].txt < This means Search (Read) Only, and take no action -

 

µTorrent (Version: 3.1.3) < Uninstall while we are working on this problem
Java 7 Update 17 (64-bit) (Version: 7.0.170)
Java 7 Update 17 (Version: 7.0.170)
< Uninstall both as current is Version7 Update25
You can verify the version of Java installed, http://www.java.com/en/download/installed.jsp?detect=jre

Spybot - Search & Destroy < Uninstall as it is no longer working and storing infections
Windows Vista or Windows 7 must also remove: C:\ProgramData\Spybot – Search & Destroy

Google Chrome 27.0.1453.110  < This was the old version. remove this one

 

Were any of the programs you see in the Programs List installed via µTorrent ?? If so please delete them -

 

Thank You -

Edited to Add extras -


Edited by noknojon, 08 July 2013 - 09:53 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users