Blue screen when using ASC with antivirus 2013

andresuvz · July 24, 2012

Hi, I'm having troubles with ASC with antivirus 2013 on my desktop pc. Since I installed it I'm getting blue screens after login into my user account. If I dessactive ASC and services from msconfig everything works fine, and I don´t get those blue screens. But if I reactivate them, the problem comes back. I tried some things to solve this issues, like turn off Windows defender and User Control protección UAC. Tried to start Windows with basic services too, but it doesn't work. Even I reinstalled Windows, but it didn't solve the problem.

What do you reccomend? Is there anything else I can try?

I'm using Windows Ultimate x64, Windows firewall is activated and I don't have any other security system installed.

Melvin_Deal · July 25, 2012

Hi andresuvz... welcome to the iobit forums!

You have a serious issue if it is as you describe. Please follow these guidelines... it is important to post both of the dds logs!!

Sincerely,

-Mel

Live long and prosper!

andresuvz · July 25, 2012

IObit Malware Fighter

OS: Windows 7

Versión: 1.5.0.2

Definir Versión: 1151

Tiempo: 00:58:37

Objectos Escaneados: 199378

Amenaza(s) Hallada(s): 0

Ahorre Tiempo: 25/07/2012 12:42:56 a.m.

andresuvz · July 25, 2012

.

DDS (Ver_2011-08-26.01) - NTFSAMD64

Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.5.1

Run by Andrés at 15:39:28 on 2012-07-25

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.52.3082.18.4094.2349 [GMT -5:00]

.

AV: Advanced SystemCare with Antivirus *Disabled/Updated* {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\SysWOW64\srvany.exe

C:\Windows\KMService.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\taskhost.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Microsoft IntelliType Pro\itype.exe

C:\Program Files\Microsoft IntelliPoint\ipoint.exe

C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe

C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe

C:\Users\Andrés\AppData\Local\Google\Update\GoogleUpdate.exe

C:\Program Files (x86)\Tensons\Download Accelerator Manager\daman.exe

C:\Program Files (x86)\TweakNow DriveShortcut\Module64\DriveOnDesktop.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Users\Andrés\Desktop\Programas\Explorer\Útiles\feewhee.exe

C:\Users\Andrés\Desktop\Programas\Explorer\Útiles\ToggleFileExt\ToggleFileExt.exe

C:\Users\Andrés\Desktop\Programas\Explorer\Útiles\ToggleHiddenFiles\ToggleHiddenFiles.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\DllHost.exe

C:\Windows\system32\sppsvc.exe

C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\DllHost.exe

C:\Users\Andrés\Downloads\dds.scr

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\conhost.exe

C:\Windows\SysWOW64\cscript.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uSearch Page = hxxp://www.google.com

uSearch Bar = hxxp://www.google.com/ie

uDefault_Search_URL = hxxp://www.google.com/ie

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

mWinlogon: Userinit=userinit.exe

BHO: Tensons.Application.DownloadAcceleratorManager.BHO: {00000003-1118-11da-8cd6-0800200c9888} - mscoree.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: ExplorerBHO Class: {449d0d6e-2412-4e61-b68f-1cb625cd9e52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL

BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

BHO: Aplicación auxiliar de inicio de sesión de Windows Live ID: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: LastPass Browser Helper Object: {95d9ecf5-2a4d-4550-be49-70d42f71296e} - C:\Users\Andrés\AppData\Roaming\LastPass\LPBar.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll

TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Users\Andrés\AppData\Roaming\LastPass\LPBar.dll

TB: Classic Explorer Bar: {553891b7-a0d5-4526-be18-d3ce461d6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll

uRun: [OpenDNS Updater] "C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe" /autostart

uRun: [Google Update] "C:\Users\Andrés\AppData\Local\Google\Update\GoogleUpdate.exe" /c

uRun: [Download Accelerator Manager] C:\Program Files (x86)\Tensons\Download Accelerator Manager\daman.exe /s

uRun: [steam] "c:\program files (x86)\steam\steam.exe" -silent

uRun: [TweakNow DriveShortcut] C:\Program Files (x86)\TweakNow DriveShortcut\Module64\DriveOnDesktop.exe

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mRun: [iObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart

StartupFolder: C:\Users\ANDRS~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\feewhee.lnk - C:\Users\Andrés\Desktop\Programas\Explorer\Útiles\feewhee.exe

StartupFolder: C:\Users\ANDRS~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\TOGGLE~1.LNK - C:\Users\Andrés\Desktop\Programas\Explorer\Útiles\ToggleFileExt\ToggleFileExt.exe

StartupFolder: C:\Users\ANDRS~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\TOGGLE~2.LNK - C:\Users\Andrés\Desktop\Programas\Explorer\Útiles\ToggleHiddenFiles\ToggleHiddenFiles.exe

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: &Download with DAM - C:\Program Files (x86)\Tensons\Download Accelerator Manager\\addUrl.htm

IE: &Enviar a OneNote - C:\PROGRA~1\MICROS~4\Office14\ONBttnIE.dll/105

IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200

IE: Download &All with DAM - C:\Program Files (x86)\Tensons\Download Accelerator Manager\\addAllUrls.htm

IE: E&xportar a Microsoft Excel - C:\PROGRA~1\MICROS~4\Office14\EXCEL.EXE/3000

IE: LastPass - file://C:\Users\Andrés\AppData\Roaming\LastPass\context.html?cmd=lastpass

IE: LastPass Fill Forms - file://C:\Users\Andrés\AppData\Roaming\LastPass\context.html?cmd=fillforms

IE: Run DAM Media&Grabber - C:\Program Files (x86)\Tensons\Download Accelerator Manager\\runMg.htm

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Users\Andrés\AppData\Roaming\LastPass\LPBar.dll

IE: {64964764-1101-4bbd-8891-B56B1A53B9B3} - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

TCP: DhcpNameServer = 208.67.222.222 208.67.220.220

TCP: Interfaces\{DF450422-85B5-4AF4-AA41-80D72FC5C54D} : DhcpNameServer = 208.67.222.222 208.67.220.220

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL

{00000003-1118-11da-8cd6-0800200c9888}

{18DF081C-E8AD-4283-A596-FA578C2EBDC3}

{449D0D6E-2412-4E61-B68F-1CB625CD9E52}

{72853161-30C5-4D22-B7F9-0BBC1D38A37E}

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

{9030D464-4C02-4ABF-8ECC-5164760863C6}

{95D9ECF5-2A4D-4550-BE49-70D42F71296E}

{B4F3A835-0E21-4959-BA22-42B3008E02FF}

{DBC80044-A445-435b-BC74-9C25C1C588A9}

{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5}

{553891B7-A0D5-4526-BE18-D3CE461D6310}

mRun-x64: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mRun-x64: [iObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart

SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook

.

============= SERVICES / DRIVERS ===============

.

R2 IMFservice;IMF Service;C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-7-24 821592]

R2 KMService;KMService;C:\Windows\System32\srvany.exe [2012-7-12 8192]

R3 FileMonitor;FileMonitor;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-7-24 21384]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]

R3 Ph3xIB64;Philips 713x Inbox PCI TV Card;C:\Windows\system32\DRIVERS\Ph3xIB64.sys --> C:\Windows\system32\DRIVERS\Ph3xIB64.sys [?]

R3 RegFilter;RegFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys [2012-7-24 33224]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]

R3 UrlFilter;UrlFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys [2012-7-24 21904]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S3 dmvsc;dmvsc;C:\Windows\system32\drivers\dmvsc.sys --> C:\Windows\system32\drivers\dmvsc.sys [?]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-6-12 51740536]

S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]

S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys --> C:\Windows\system32\drivers\rdpvideominiport.sys [?]

S3 Synth3dVsc;Synth3dVsc;C:\Windows\system32\drivers\synth3dvsc.sys --> C:\Windows\system32\drivers\synth3dvsc.sys [?]

S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\system32\drivers\terminpt.sys --> C:\Windows\system32\drivers\terminpt.sys [?]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]

S3 tsusbhub;tsusbhub;C:\Windows\system32\drivers\tsusbhub.sys --> C:\Windows\system32\drivers\tsusbhub.sys [?]

S3 WatAdminSvc;Servicio de tecnologías de activación de Windows;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]

S4 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-4-4 63928]

S4 AdvancedSystemCareService5;Advanced SystemCare Service 5;C:\Program Files (x86)\IObit\Advanced SystemCare with Antivirus 2013\ASCSvc.exe [2012-7-22 513920]

S4 ASCAntivirusSrv;AdvancedSystemCareAntivirus;C:\Program Files (x86)\IObit\Advanced SystemCare with Antivirus 2013\ASCAvSvc.exe [2012-7-22 896896]

S4 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-7-12 1262400]

S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-5-15 382272]

.

=============== Created Last 30 ================

.

2012-07-25 20:39:31 -------- d-----w- C:\Users\AndrÚs\AppData\Local\Microsoft

2012-07-24 18:50:36 -------- d-----w- C:\Users\Andrés\AppData\Roaming\Apple Computer

2012-07-24 18:50:33 34152 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys

2012-07-24 18:50:33 126312 ----a-w- C:\Windows\System32\GEARAspi64.dll

2012-07-24 18:50:33 107368 ----a-w- C:\Windows\SysWow64\GEARAspi.dll

2012-07-24 18:49:57 -------- d-----w- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

2012-07-24 18:49:57 -------- d-----w- C:\Program Files\iTunes

2012-07-24 18:49:57 -------- d-----w- C:\Program Files\iPod

2012-07-24 18:49:57 -------- d-----w- C:\Program Files (x86)\iTunes

2012-07-24 18:49:02 -------- d-----w- C:\Program Files\Bonjour

2012-07-24 18:49:02 -------- d-----w- C:\Program Files (x86)\Bonjour

2012-07-23 21:16:18 -------- d-----w- C:\Users\Andrés\AppData\Roaming\Stardock

2012-07-23 21:16:13 -------- dc-h--w- C:\ProgramData\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}

2012-07-23 21:16:12 -------- d-----w- C:\Program Files (x86)\Stardock

2012-07-23 17:19:14 -------- d-----w- C:\Program Files (x86)\Melloware

2012-07-23 17:16:39 -------- d-----w- C:\Users\Andrés\AppData\Roaming\TweakNow DriveShortcut

2012-07-23 17:16:39 -------- d-----w- C:\Program Files (x86)\TweakNow DriveShortcut

2012-07-23 17:16:15 -------- d-----w- C:\Program Files\Classic Shell

2012-07-23 15:02:47 -------- d-----w- C:\Users\Andrés\AppData\Roaming\OnLive App

2012-07-23 15:02:43 -------- d-----w- C:\Program Files (x86)\OnLive

2012-07-23 14:40:32 -------- d-----w- C:\Program Files (x86)\Oracle

2012-07-23 14:39:44 772544 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll

2012-07-23 14:39:44 687544 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2012-07-23 04:25:22 -------- d-----w- C:\ProgramData\Solidshield

2012-07-22 19:35:19 329800 ----a-w- C:\Windows\System32\drivers\trufos.sys

2012-07-22 19:35:18 431176 ----a-w- C:\Windows\System32\drivers\bdfsfltr.sys

2012-07-22 19:35:10 -------- d-----w- C:\Program Files (x86)\IObit

2012-07-20 15:21:30 9133488 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3DB98581-8023-4529-A3B8-FB635E2C39D0}\mpengine.dll

2012-07-20 05:28:35 -------- d-----w- C:\Users\Andrés\AppData\Roaming\NVIDIA

2012-07-20 05:28:32 466456 ----a-w- C:\Windows\System32\wrap_oal.dll

2012-07-20 05:28:32 122904 ----a-w- C:\Windows\System32\OpenAL32.dll

2012-07-20 05:28:31 444952 ----a-w- C:\Windows\SysWow64\wrap_oal.dll

2012-07-20 05:28:31 109080 ----a-w- C:\Windows\SysWow64\OpenAL32.dll

2012-07-20 05:28:31 -------- d-----w- C:\Program Files (x86)\OpenAL

2012-07-19 03:39:55 -------- d-----w- C:\Program Files (x86)\Microsoft XNA

2012-07-15 17:18:42 315904 ----a-w- C:\Windows\SysWow64\Difxf73a.rra

2012-07-15 17:17:19 315904 ----a-w- C:\Windows\SysWow64\Difxb2ea.rra

2012-07-14 01:59:35 -------- d-----w- C:\Users\Andrés\AppData\Roaming\EPSON

2012-07-14 01:55:55 -------- d-----w- C:\Program Files\Common Files\EPSON

2012-07-13 23:03:41 2605920 ----a-w- C:\Windows\System32\D3DCompiler_40.dll

2012-07-13 23:03:41 2036576 ----a-w- C:\Windows\SysWow64\D3DCompiler_40.dll

2012-07-13 23:03:40 519000 ----a-w- C:\Windows\System32\d3dx10_40.dll

2012-07-13 23:03:40 452440 ----a-w- C:\Windows\SysWow64\d3dx10_40.dll

2012-07-13 23:03:39 5631312 ----a-w- C:\Windows\System32\D3DX9_40.dll

2012-07-13 23:03:39 4379984 ----a-w- C:\Windows\SysWow64\D3DX9_40.dll

2012-07-13 22:12:53 -------- d-----w- C:\Program Files (x86)\Origin Games

2012-07-13 22:12:48 -------- d-----w- C:\ProgramData\Origin

2012-07-13 22:10:47 -------- d-----w- C:\ProgramData\Electronic Arts

2012-07-13 22:10:41 -------- d-----w- C:\Program Files (x86)\Origin

2012-07-13 21:53:04 -------- d-----w- C:\Users\Andrés\AppData\Roaming\Origin

2012-07-13 16:33:59 8363864 ----a-w- C:\Windows\System32\MaxxAudioRealtek.dll

2012-07-13 16:20:52 77656 ----a-w- C:\Windows\System32\XAPOFX1_5.dll

2012-07-13 16:14:16 -------- d-----w- C:\Windows\SysWow64\directx

2012-07-13 16:14:03 -------- d-----w- C:\Program Files (x86)\EVGA Precision X

2012-07-13 03:24:18 -------- d-----w- C:\Windows\pss

2012-07-13 01:43:18 88064 ----a-w- C:\Windows\System32\E_IBCBHJB.DLL

2012-07-13 01:43:18 118784 ----a-w- C:\Windows\System32\E_ILMHJB.DLL

2012-07-13 01:43:11 -------- d-----w- C:\ProgramData\EPSON

2012-07-13 01:42:55 464384 ----a-w- C:\Windows\System32\esxw2ud.dll

2012-07-13 01:42:55 13824 ----a-w- C:\Windows\System32\esxcdev.dll

2012-07-13 01:42:55 132560 ----a-w- C:\Windows\System32\esdevapp.exe

2012-07-13 01:42:50 -------- d-----w- C:\Program Files (x86)\epson

2012-07-13 01:23:22 -------- d-----w- C:\Program Files (x86)\Common Files\Steam

2012-07-13 01:23:20 -------- d-----w- C:\Program Files (x86)\Steam

2012-07-13 01:12:35 8192 ----a-w- C:\Windows\SysWow64\srvany.exe

2012-07-13 01:12:35 151552 ----a-w- C:\Windows\KMService.exe

2012-07-13 01:06:59 -------- d-----w- C:\Program Files\Microsoft Synchronization Services

2012-07-13 01:06:27 -------- d-----w- C:\Program Files\Microsoft SQL Server Compact Edition

2012-07-13 01:05:45 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8

2012-07-13 01:04:25 -------- d-----w- C:\Program Files\Microsoft Analysis Services

2012-07-13 01:04:25 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services

2012-07-13 01:00:08 -------- d-----w- C:\Program Files (x86)\Watchtower

2012-07-13 00:52:16 -------- d-----w- C:\Program Files (x86)\VideoLAN

2012-07-13 00:51:54 955840 ----a-w- C:\Windows\System32\npDeployJava1.dll

2012-07-13 00:51:54 839096 ----a-w- C:\Windows\System32\deployJava1.dll

2012-07-13 00:49:51 889664 ----a-w- C:\Windows\System32\nvvsvc.exe

2012-07-13 00:49:51 63296 ----a-w- C:\Windows\System32\nvshext.dll

2012-07-13 00:49:51 6151488 ----a-w- C:\Windows\System32\nvcpl.dll

2012-07-13 00:49:51 3149632 ----a-w- C:\Windows\System32\nvsvc64.dll

2012-07-13 00:49:51 2621723 ----a-w- C:\Windows\System32\nvcoproc.bin

2012-07-13 00:49:51 2561856 ----a-w- C:\Windows\System32\nvsvcr.dll

2012-07-13 00:49:51 118080 ----a-w- C:\Windows\System32\nvmctray.dll

2012-07-13 00:45:01 -------- d-----w- C:\NVIDIA

2012-07-13 00:44:50 -------- d-----w- C:\Users\Andrés\Tracing

2012-07-13 00:42:00 6260088 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\4fc311081cd609010\Silverlight.4.0.exe

2012-07-13 00:41:43 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live

2012-07-13 00:39:40 -------- d-----w- C:\Users\Andrés\AppData\Roaming\OpenDNS Updater

2012-07-13 00:39:39 -------- d-----w- C:\Program Files (x86)\OpenDNS Updater

2012-07-13 00:32:31 -------- d-----w- C:\Users\Andrés\AppData\Roaming\NetSpeedMonitor

2012-07-13 00:31:32 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2012-07-13 00:31:32 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2012-07-13 00:30:41 -------- d-----w- C:\Program Files (x86)\Tensons

2012-07-13 00:29:14 -------- d-----w- C:\Users\Andrés\AppData\Roaming\ImgBurn

2012-07-13 00:25:47 -------- d-----w- C:\Users\Andrés\AppData\Roaming\LastPass

2012-07-13 00:23:19 -------- d-----w- C:\Users\Andrés\AppData\Roaming\Macromedia

2012-07-13 00:23:19 -------- d-----w- C:\Users\Andrés\AppData\Roaming\Adobe

2012-07-13 00:14:33 -------- d-----w- C:\Program Files (x86)\BurnAware Free

2012-07-13 00:07:34 1139200 ----a-w- C:\Windows\System32\FntCache.dll

2012-07-13 00:07:33 902656 ----a-w- C:\Windows\System32\d2d1.dll

2012-07-13 00:07:33 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll

2012-07-13 00:00:44 -------- d-----w- C:\Program Files\Microsoft IntelliPoint

2012-07-12 23:56:12 -------- d-----w- C:\Program Files\Microsoft IntelliType Pro

2012-07-12 23:56:09 -------- d-----w- C:\Windows\PCHEALTH

2012-07-12 23:53:42 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll

2012-07-12 23:53:42 366592 ----a-w- C:\Windows\System32\qdvd.dll

2012-07-12 23:51:41 -------- d-----w- C:\Windows\SysWow64\Wat

2012-07-12 23:51:39 -------- d-----w- C:\Windows\System32\Wat

2012-07-12 23:40:28 -------- d-----w- C:\Windows\SysWow64\wbem\en-US

2012-07-12 23:40:25 -------- d-----w- C:\Windows\System32\wbem\en-US

2012-07-12 23:32:32 3148800 ----a-w- C:\Windows\System32\win32k.sys

2012-07-12 23:14:41 81408 ----a-w- C:\Windows\System32\imagehlp.dll

2012-07-12 23:14:41 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys

2012-07-12 23:14:41 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll

2012-07-12 23:14:40 5120 ----a-w- C:\Windows\SysWow64\wmi.dll

2012-07-12 23:14:40 5120 ----a-w- C:\Windows\System32\wmi.dll

2012-07-12 23:14:40 220672 ----a-w- C:\Windows\System32\wintrust.dll

2012-07-12 23:14:40 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll

2012-07-12 22:57:12 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

2012-07-12 22:57:12 2048 ----a-w- C:\Windows\System32\tzres.dll

2012-07-12 22:57:05 9133488 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll

2012-07-12 22:55:59 86528 ----a-w- C:\Windows\SysWow64\SearchFilterHost.exe

2012-07-12 22:54:02 861696 ----a-w- C:\Windows\System32\oleaut32.dll

2012-07-12 22:54:02 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll

2012-07-12 22:54:02 331776 ----a-w- C:\Windows\System32\oleacc.dll

2012-07-12 22:54:02 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll

2012-07-12 22:53:52 267776 ----a-w- C:\Windows\System32\FXSCOVER.exe

2012-07-12 22:53:49 976896 ----a-w- C:\Windows\System32\inetcomm.dll

2012-07-12 22:53:49 741376 ----a-w- C:\Windows\SysWow64\inetcomm.dll

2012-07-12 22:53:49 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll

2012-07-12 22:53:49 634880 ----a-w- C:\Windows\System32\msvcrt.dll

2012-07-12 22:53:48 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe

2012-07-12 22:53:48 31232 ----a-w- C:\Windows\System32\prevhost.exe

2012-07-12 22:53:14 1918320 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2012-07-12 22:53:01 723456 ----a-w- C:\Windows\System32\EncDec.dll

2012-07-12 22:53:01 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll

2012-07-12 22:49:43 1731920 ----a-w- C:\Windows\System32\ntdll.dll

2012-07-12 22:49:43 1292080 ----a-w- C:\Windows\SysWow64\ntdll.dll

2012-07-12 22:49:26 77312 ----a-w- C:\Windows\System32\packager.dll

2012-07-12 22:49:26 67072 ----a-w- C:\Windows\SysWow64\packager.dll

2012-07-12 22:41:32 -------- d-----w- C:\ProgramData\NVIDIA Corporation

2012-07-12 22:41:25 -------- d-----w- C:\Program Files\NVIDIA Corporation

2012-07-12 22:41:25 -------- d-----w- C:\Program Files (x86)\NVIDIA Corporation

2012-07-12 22:40:55 -------- d-----w- C:\Program Files\CCleaner

2012-07-12 22:39:16 -------- d-sh--w- C:\Windows\Installer

2012-07-12 22:34:28 -------- d-----w- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}

2012-07-12 22:34:27 -------- d-----w- C:\ProgramData\iobit

2012-07-12 22:34:27 -------- d-----w- C:\ProgramData\{6F2F3866-38AD-4f48-852C-2FF5DE7A7588}

2012-07-12 22:34:26 -------- d-----w- C:\Users\Andrés\AppData\Roaming\IObit

2012-07-12 22:31:51 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll

2012-07-12 22:31:51 1031680 ----a-w- C:\Windows\System32\rdpcore.dll

2012-07-12 22:31:50 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys

2012-07-12 22:28:07 2622464 ----a-w- C:\Windows\System32\wucltux.dll

2012-07-12 22:28:03 99840 ----a-w- C:\Windows\System32\wudriver.dll

2012-07-12 22:26:59 -------- d-s---w- C:\Users\Andrés\AppData\Roaming\Microsoft

2012-07-12 15:40:32 -------- d-----w- C:\Windows\Panther

2012-07-12 15:22:35 -------- d-----w- C:\Windows.old

.

==================== Find3M ====================

.

2012-06-19 21:54:20 4065296 ----a-w- C:\Windows\System32\drivers\RTKVHD64.sys

2012-06-14 18:43:32 5096448 ----a-w- C:\Windows\System32\RCoRes64.dat

2012-06-08 21:18:46 3615888 ----a-w- C:\Windows\System32\RtkAPO64.dll

2012-06-06 15:44:20 869520 ----a-w- C:\Windows\System32\RtkApi64.dll

2012-06-06 06:06:16 2004480 ----a-w- C:\Windows\System32\msxml6.dll

2012-06-06 06:06:16 1881600 ----a-w- C:\Windows\System32\msxml3.dll

2012-06-06 06:02:54 1133568 ----a-w- C:\Windows\System32\cdosys.dll

2012-06-06 05:05:52 1390080 ----a-w- C:\Windows\SysWow64\msxml6.dll

2012-06-06 05:05:52 1236992 ----a-w- C:\Windows\SysWow64\msxml3.dll

2012-06-06 05:03:06 805376 ----a-w- C:\Windows\SysWow64\cdosys.dll

2012-06-02 20:19:42 186752 ----a-w- C:\Windows\System32\wuwebv.dll

2012-06-02 20:15:12 36864 ----a-w- C:\Windows\System32\wuapp.exe

2012-06-02 05:50:10 458704 ----a-w- C:\Windows\System32\drivers\cng.sys

2012-06-02 05:48:16 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys

2012-06-02 05:48:16 151920 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

2012-06-02 05:45:31 340992 ----a-w- C:\Windows\System32\schannel.dll

2012-06-02 05:44:21 307200 ----a-w- C:\Windows\System32\ncrypt.dll

2012-06-02 04:40:42 22016 ----a-w- C:\Windows\SysWow64\secur32.dll

2012-06-02 04:40:39 225280 ----a-w- C:\Windows\SysWow64\schannel.dll

2012-06-02 04:39:10 219136 ----a-w- C:\Windows\SysWow64\ncrypt.dll

2012-06-02 04:34:09 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll

2012-06-01 14:37:38 2674320 ----a-w- C:\Windows\System32\RtPgEx64.dll

2012-05-31 23:08:20 105616 ----a-w- C:\Windows\System32\RCoInstII64.dll

2012-05-31 17:25:12 279656 ------w- C:\Windows\System32\MpSigStub.exe

2012-05-25 23:06:00 1706640 ----a-w- C:\Windows\RtlExUpd.dll

2012-05-17 16:29:24 7163744 ----a-w- C:\Windows\System32\R4EEP64A.dll

2012-05-17 16:29:22 74592 ----a-w- C:\Windows\System32\R4EEG64A.dll

2012-05-17 16:29:22 141152 ----a-w- C:\Windows\System32\R4EEL64A.dll

2012-05-17 16:29:20 433504 ----a-w- C:\Windows\System32\R4EED64A.dll

2012-05-17 16:29:20 123744 ----a-w- C:\Windows\System32\R4EEA64A.dll

2012-05-15 07:21:50 423744 ----a-w- C:\Windows\SysWow64\nvStreaming.exe

2012-05-10 20:22:14 1262696 ----a-w- C:\Windows\System32\RTCOM64.dll

2012-05-04 11:06:22 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe

2012-05-04 10:03:53 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe

2012-05-04 10:03:50 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe

2012-05-01 05:40:20 209920 ----a-w- C:\Windows\System32\profsvc.dll

2012-04-28 05:32:05 1112064 ----a-w- C:\Windows\System32\rdpcorets.dll

2012-04-28 03:55:21 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys

.

============= FINISH: 15:42:06.40 ===============

andresuvz · July 25, 2012

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows 7 Ultimate

Boot Device: \Device\HarddiskVolume1

Install Date: 12/07/2012 05:26:46 p.m.

System Uptime: 25/07/2012 03:33:22 p.m. (0 hours ago)

.

Motherboard: Gigabyte Technology Co., Ltd. | | P35-DS3L

Processor: Intel® Core2 Duo CPU E8400 @ 3.00GHz | Socket 775 | 1980/333mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 596 GiB total, 75.446 GiB free.

D: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP35: 16/07/2012 11:35:20 p.m. - Se ha instalado DirectX

RP36: 17/07/2012 08:11:50 a.m. - Windows Update

RP37: 18/07/2012 10:39:58 p.m. - Se ha instalado DirectX

RP38: 20/07/2012 10:20:56 a.m. - Windows Update

RP39: 23/07/2012 09:38:58 a.m. - Installed Java 7 Update 5

RP40: 23/07/2012 09:39:54 a.m. - Instalado JavaFX 2.1.1

RP41: 23/07/2012 12:15:58 p.m. - Installed Classic Shell

RP42: 23/07/2012 12:18:59 p.m. - Installed Melloware PlacesBar Editor

RP43: 24/07/2012 01:49:27 p.m. - Installed iTunes

.

==== Installed Programs ======================

.

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X (10.1.3) - Español

Advanced SystemCare with Antivirus 2013

Alan Wake

All Zombies Must Die!

Apple Application Support

Apple Software Update

AZMD! Scorepocalypse

Bastion

Blur

Burn Zombie Burn

BurnAware Free 4.9

Burnout Paradise The Ultimate Box

D3DX10

Download Accelerator Manager

EPSON Scan

EVGA Precision X 3.0.3

Fences

FlatOut

Google Chrome

Hard Reset

Hydrophobia: Prophecy

ImgBurn

IObit Malware Fighter

Java Auto Updater

Java 7 Update 5

JavaFX 2.1.1

King Arthur - The Role-playing Wargame

LastPass (uninstall only)

Melloware PlacesBar Editor

Microsoft Silverlight

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft XNA Framework Redistributable 3.1

MSVCRT

NVIDIA PhysX

NVIDIA Stereoscopic 3D Driver

OnLive

OpenAL

OpenDNS Updater 2.2.1

Origin

Picasa 3

Rayman Origins

Realtek High Definition Audio Driver

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

SHIFT 2 UNLEASHED™

Sonic Generations

Steam

TweakNow DriveShortcut

Twin Sector

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

VLC media player 2.0.2

Watchtower Library 2010 - español

Windows Live Communications Platform

Windows Live Essentials

Windows Live Installer

Windows Live Messenger

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

.

==== Event Viewer Messages From Past Week ========

.

24/07/2012 12:32:22 p.m., Error: Service Control Manager [7001] - El servicio Servicio de lista de redes depende del servicio Reconocimiento de ubicación de red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

24/07/2012 12:32:22 p.m., Error: Microsoft-Windows-DistributedCOM [10005] - Error de DCOM "1084" al intentar iniciar el servicio WSearch con argumentos "" para ejecutar el servidor: {9E175B6D-F52A-11D8-B9A5-505054503030}

24/07/2012 12:32:22 p.m., Error: Microsoft-Windows-DistributedCOM [10005] - Error de DCOM "1084" al intentar iniciar el servicio WSearch con argumentos "" para ejecutar el servidor: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

24/07/2012 12:32:21 p.m., Error: Service Control Manager [7001] - El servicio Servicio de lista de redes depende del servicio Reconocimiento de ubicación de red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

24/07/2012 12:32:21 p.m., Error: Microsoft-Windows-DistributedCOM [10005] - Error de DCOM "1068" al intentar iniciar el servicio netprofm con argumentos "" para ejecutar el servidor: {A47979D2-C419-11D9-A5B4-001185AD2B89}

24/07/2012 12:32:21 p.m., Error: Microsoft-Windows-DistributedCOM [10005] - Error de DCOM "1068" al intentar iniciar el servicio netman con argumentos "" para ejecutar el servidor: {BA126AD1-2166-11D1-B1D0-00805FC1270E}

24/07/2012 12:32:20 p.m., Error: Microsoft-Windows-DistributedCOM [10005] - Error de DCOM "1084" al intentar iniciar el servicio EventSystem con argumentos "" para ejecutar el servidor: {1BE1F766-5536-11D1-B726-00C04FB926AF}

24/07/2012 12:32:14 p.m., Error: Microsoft-Windows-DistributedCOM [10005] - Error de DCOM "1084" al intentar iniciar el servicio ShellHWDetection con argumentos "" para ejecutar el servidor: {DD522ACC-F821-461A-A407-50B198B896DC}

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7026] - El siguiente controlador de inicio del sistema o de inicio del arranque no se cargó correctamente: AFD CSC DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Servicio Interfaz de almacenamiento en red depende del servicio NSI proxy service driver., el cual no pudo iniciarse debido al siguiente error: Uno de los dispositivos conectados al sistema no funciona.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Reconocimiento de ubicación de red depende del servicio Servicio Interfaz de almacenamiento en red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Minirredirector SMB 2.0 depende del servicio Contenedor y motor de minirredirector SMB, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Minirredirector SMB 1.x depende del servicio Contenedor y motor de minirredirector SMB, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Estación de trabajo depende del servicio Servicio Interfaz de almacenamiento en red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Contenedor y motor de minirredirector SMB depende del servicio Subsistema de almacenamiento en búfer redirigido, el cual no pudo iniciarse debido al siguiente error: Uno de los dispositivos conectados al sistema no funciona.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Cliente DNS depende del servicio Controlador de soporte TDI heredado NetIO, el cual no pudo iniciarse debido al siguiente error: Uno de los dispositivos conectados al sistema no funciona.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Cliente DHCP depende del servicio Ancillary Function Driver for Winsock, el cual no pudo iniciarse debido al siguiente error: Uno de los dispositivos conectados al sistema no funciona.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Aplicación auxiliar IP depende del servicio Servicio Interfaz de almacenamiento en red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

24/07/2012 12:32:02 p.m., Error: Service Control Manager [7001] - El servicio Aplicación auxiliar de NetBIOS sobre TCP/IP depende del servicio Ancillary Function Driver for Winsock, el cual no pudo iniciarse debido al siguiente error: Uno de los dispositivos conectados al sistema no funciona.

24/07/2012 11:34:37 p.m., Error: Service Control Manager [7031] - El servicio Apple Mobile Device terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 60000 milisegundos: Reiniciar el servicio.

22/07/2012 11:17:38 p.m., Error: srv [2017] - El servidor no pudo asignar memoria desde el bloque no paginado del sistema porque alcanzó el límite configurado para ésta.

22/07/2012 11:16:38 p.m., Error: srv [2017] - El servidor no pudo asignar memoria desde el bloque no paginado del sistema porque alcanzó el límite configurado para ésta.

22/07/2012 11:09:38 p.m., Error: srv [2017] - El servidor no pudo asignar memoria desde el bloque no paginado del sistema porque alcanzó el límite configurado para ésta.

22/07/2012 02:35:25 p.m., Error: Service Control Manager [7030] - El servicio Advanced SystemCare Service 5 ha sido marcado como servicio interactivo. Sin embargo, el sistema está configurado para no permitir servicios interactivos. Este servicio puede tener un funcionamiento incorrecto.

22/07/2012 02:32:07 p.m., Error: Service Control Manager [7034] - El servicio AdvancedSystemCareAntivirus se terminó de manera inesperada. Esto ha sucedido 1 veces.

22/07/2012 02:24:29 p.m., Error: Service Control Manager [7001] - El servicio Servicio de lista de redes depende del servicio Reconocimiento de ubicación de red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

22/07/2012 02:24:28 p.m., Error: Service Control Manager [7001] - El servicio Servicio de lista de redes depende del servicio Reconocimiento de ubicación de red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

22/07/2012 02:24:14 p.m., Error: Service Control Manager [7026] - El siguiente controlador de inicio del sistema o de inicio del arranque no se cargó correctamente: AFD CSC DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf

22/07/2012 02:24:14 p.m., Error: Service Control Manager [7001] - El servicio Reconocimiento de ubicación de red depende del servicio Servicio Interfaz de almacenamiento en red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

22/07/2012 02:24:14 p.m., Error: Service Control Manager [7001] - El servicio Estación de trabajo depende del servicio Servicio Interfaz de almacenamiento en red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

22/07/2012 02:24:14 p.m., Error: Service Control Manager [7001] - El servicio Contenedor y motor de minirredirector SMB depende del servicio Subsistema de almacenamiento en búfer redirigido, el cual no pudo iniciarse debido al siguiente error: Uno de los dispositivos conectados al sistema no funciona.

22/07/2012 02:24:14 p.m., Error: Service Control Manager [7001] - El servicio Aplicación auxiliar IP depende del servicio Servicio Interfaz de almacenamiento en red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia.

22/07/2012 02:24:14 p.m., Error: Service Control Manager [7001] - El servicio Aplicación auxiliar de NetBIOS sobre TCP/IP depende del servicio Ancillary Function Driver for Winsock, el cual no pudo iniciarse debido al siguiente error: Uno de los dispositivos conectados al sistema no funciona.

.

==== End Of File ===========================

Melvin_Deal · July 25, 2012

Hi Andre! I have studied your logs.

Thank you for following the instruction. Although I am not fully trained I can see the evidence your system is compromised. Please do only what Superdave advises.

Superdave will assist you with this!

Sincerely,

-Mel

Live long and prosper!

Superdave · July 26, 2012

Hello and welcome to IOBit Forums. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.

2. The fixes are specific to your problem and should only be used for this issue on this machine.

3. If you don't know or understand something, please don't hesitate to ask.

4. Please DO NOT run any other tools or scans while I am helping you.

5. It is important that you reply to this thread. Do not start a new topic.

6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.

7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.

*************************************************************

SUPERAntiSpyware

If you already have SUPERAntiSpyware be sure to check for updates before scanning!

Download SuperAntispyware Free Edition (SAS)

* Double-click the icon on your desktop to run the installer.

* When asked to Update the program definitions, click Yes

* If you encounter any problems while downloading the updates, manually download and unzip them from here

* Next click the Preferences button.

•Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts

* Click the Scanning Control tab.

* Under Scanner Options make sure only the following are checked:

•Close browsers before scanning

•Scan for tracking cookies

•Terminate memory threats before quarantining

•Please leave the others unchecked

•Click the Close button to leave the control center screen.

* On the main screen click Scan your computer

* On the left check the box for the drive you are scanning.

* On the right choose Perform Complete Scan

* Click Next to start the scan. Please be patient while it scans your computer.

* After the scan is complete a summary box will appear. Click OK

* Make sure everything in the white box has a check next to it, then click Next

* It will quarantine what it found and if it asks if you want to reboot, click Yes

•To retrieve the removal information please do the following:

•After reboot, double-click the SUPERAntiSpyware icon on your desktop.

•Click Preferences. Click the Statistics/Logs tab.

•Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

•It will open in your default text editor (preferably Notepad).

•Save the notepad file to your desktop by clicking (in notepad) File > Save As...

* Save the log somewhere you can easily find it. (normally the desktop)

* Click close and close again to exit the program.

*Copy and Paste the log in your post.

*********************************************

Please download Malwarebytes Anti-Malware from here.

Double Click mbam-setup.exe to install the application.

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Full Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
Please save the log to a location you will remember.
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

********************************************************

Please download aswMBR.exe ( 511KB ) to your desktop.

Double click the aswMBR.exe to run it

http://i424.photobucket.com/albums/pp322/digistar/aswMBR_Scan.jpg

Click the "Scan" button to start scan

Note: Do not take action against any **Rootkit** entries until I have reviewed the log. Often there are false positives

http://i424.photobucket.com/albums/pp322/digistar/aswMBR_SaveLog.png

On completion of the scan click save log, save it to your desktop and post in your next reply.

andresuvz · July 28, 2012

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

Generated 07/28/2012 at 02:54 AM

Application Version : 5.5.1012

Core Rules Database Version : 8975

Trace Rules Database Version: 6787

Scan type : Complete Scan

Total Scan Time : 03:43:57

Operating System Information

Windows 7 Ultimate 64-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Limited User

Memory items scanned : 553

Memory threats detected : 0

Registry items scanned : 69146

Registry threats detected : 0

File items scanned : 575851

File threats detected : 0

andresuvz · July 28, 2012

Malwarebytes Anti-Malware 1.62.0.1300

http://www.malwarebytes.org

Versión de la Base de Datos: v2012.07.28.01

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

Andrés :: ESCRITORIO-PC [administrador]

28/07/2012 03:25:35 p.m.

mbam-log-2012-07-28 (17-51-00).txt

Tipos de Análisis: Análisis Completo (C:\|)

Opciones de análisis desactivados: P2P

Objetos examinados: 759547

Tiempo transcurrido: 2 hora(s), 2 minuto(s), 17 segundo(s)

Procesos en Memoria Detectados: 0

(No se han detectado elementos maliciosos)

Módulos de Memoria Detectados: 0

(No se han detectado elementos maliciosos)

Claves del Registro Detectados: 0

(No se han detectado elementos maliciosos)

Valores del Registro Detectados: 0

(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Detectados: 0

(No se han detectado elementos maliciosos)

Carpetas Detectadas: 0

(No se han detectado elementos maliciosos)

Archivos Detectados: 4

C:\Users\Andrés\Desktop\Programas\Multimedia\Adobe Audition CS5.5\Adobemasterkeygen55-multi.exe (Trojan.Agent.ck) -> No se tomaron medidas.

C:\Users\Andrés\Desktop\Programas\Oficina\Office 2010\mini-KMS.Activator.v1.3.Office.2010\mini-KMS Activator v1.3 Office 2010.exe (Riskware.Tool.CK) -> No se tomaron medidas.

C:\Users\Daniel\Desktop\Crack_Photoshop_CS2\Keygen Adobe Photoshop CS2.exe (RiskWare.Tool.CK) -> No se tomaron medidas.

C:\Users\Daniel\Downloads\Sony_All_Soft_Keygen_2008\Sony All Soft Keygen 2008\Keygen.exe (RiskWare.Tool.CK) -> No se tomaron medidas.

fin)

andresuvz · July 28, 2012

Run date: 2012-07-28 18:25:48

-----------------------------

18:25:48.846 OS Version: Windows x64 6.1.7601 Service Pack 1

18:25:48.846 Number of processors: 2 586 0x1706

18:25:48.846 ComputerName: ESCRITORIO-PC UserName: Andrés

18:25:49.650 Initialize success

18:26:09.758 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Scsi\JRAID1Port0Path0Target0Lun0

18:26:09.759 Disk 0 Vendor: JRAID___ 0000 Size: 610432MB BusType: 8

18:26:09.771 Disk 0 MBR read successfully

18:26:09.773 Disk 0 MBR scan

18:26:09.775 Disk 0 Windows 7 default MBR code

18:26:09.783 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048

18:26:09.796 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 610330 MB offset 206848

18:26:09.829 Disk 0 scanning C:\Windows\system32\drivers

18:26:19.720 Service scanning

18:26:34.664 Modules scanning

18:26:34.664 Disk 0 trace - called modules:

18:26:34.664 ntoskrnl.exe CLASSPNP.SYS disk.sys SCSIPORT.SYS hal.dll jraid.sys

18:26:34.680 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004621790]

18:26:34.680 3 CLASSPNP.SYS[fffff880019c443f] -> nt!IofCallDriver -> \Device\Scsi\JRAID1Port0Path0Target0Lun0[0xfffffa80041f5050]

18:26:35.179 Scan finished successfully

18:50:29.199 Disk 0 MBR has been saved successfully to "C:\Users\Andrés\Desktop\MBR.dat"

18:50:29.199 The log file has been saved successfully to "C:\Users\Andrés\Desktop\aswMBR.txt"

Superdave · July 29, 2012

Your computer has keygens, which is a form of software piracy. What is so bad about Cracks, Hacks, Pirated software, warez, or Keygens?

Most popular cracks or keygens I see, are for Adobe CS3, a lot of different games, Nero, Kaspersky antivirus, and much more. All of these cracks and keygens have what is called "cloaked malware," which is a form of spyware or viruses or trojans that hide themselves inside the keygen or crack files. Most hacks for games that come in the form of a program or installer, will also be infected. It is the opportunity for attackers to present a seemingly safe situation where the opportunity to steal something is in play, while the malware infects your system in the process. Yes, it will install what you were looking for, but also allow malware to potentially take control of your computer.

Lastly, it is illegal. I will counsel you that we do not report such incidents. However, it is not good practice to pirate software.

*********************************************************

Download Combofix from any of the links below, and save it to your DESKTOP.

Link 1

Link 2

Link 3

To prevent your anti-virus application interfering with ComboFix we need to disable it. See here for a tutorial regarding how to do so if you are unsure.

Close any open windows and double click ComboFix.exe to run it.

You will see the following image:

http://i424.photobucket.com/albums/pp322/digistar/NSIS_disclaimer_ENG.png

Click I Agree to start the program.

ComboFix will then extract the necessary files and you will see this:

http://i424.photobucket.com/albums/pp322/digistar/NSIS_extraction.png

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. This will not occur in Windows Vista and 7

It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

If you did not have it installed, you will see the prompt below. Choose YES.

http://i424.photobucket.com/albums/pp322/digistar/RcAuto1.gif

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

http://i424.photobucket.com/albums/pp322/digistar/whatnext.png

Click on Yes, to continue scanning for malware.

When finished, it will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).

Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.

Note: Please Do NOT mouseclick combofix's window while its running because it may cause it to stall.

andresuvz · July 29, 2012

ComboFix 12-07-27.03 - Andrés 28/07/2012 19:53:46.1.2 - x64

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.52.3082.18.4094.2869 [GMT -5:00]

Running from: C:\ComboFix_1.exe

AV: Advanced SystemCare with Antivirus *Disabled/Updated* {1C304DC4-1D72-5DB9-B33A-43B638ECFD30}

SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\Install.exe

c:\windows\security\Database\tmp.edb

.

((((((((((((((((((((((((( Files Created from 2012-06-28 to 2012-07-29 )))))))))))))))))))))))))))))))

.

2012-07-29 01:01 . 2012-07-29 01:01 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-28 23:53 . 2012-07-28 23:53 -------- d-----w- c:\program files (x86)\Futuremark

2012-07-28 23:53 . 2012-07-28 23:53 -------- d-----w- c:\program files\Futuremark

2012-07-28 04:05 . 2012-07-28 04:05 -------- d-----w- c:\program files\SUPERAntiSpyware

2012-07-28 04:05 . 2012-07-28 04:05 -------- d-----w- c:\programdata\SUPERAntiSpyware.com

2012-07-28 03:58 . 2012-07-28 03:58 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2012-07-28 03:58 . 2012-07-28 03:58 -------- d-----w- c:\programdata\Malwarebytes

2012-07-28 03:58 . 2012-07-03 18:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-07-25 23:41 . 2012-07-25 23:41 -------- d-----w- c:\program files\Recuva

2012-07-25 20:39 . 2012-07-25 20:39 -------- d-----w- c:\users\AndrÚs

2012-07-24 18:50 . 2012-07-24 18:50 -------- dc----w- c:\windows\system32\DRVSTORE

2012-07-24 18:50 . 2009-05-18 18:17 34152 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2012-07-24 18:50 . 2008-04-17 17:12 126312 ----a-w- c:\windows\system32\GEARAspi64.dll

2012-07-24 18:50 . 2008-04-17 17:12 107368 ----a-w- c:\windows\SysWow64\GEARAspi.dll

2012-07-24 18:49 . 2012-07-24 18:50 -------- d-----w- c:\programdata\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

2012-07-24 18:49 . 2012-07-24 18:50 -------- d-----w- c:\program files\iTunes

2012-07-24 18:49 . 2012-07-24 18:50 -------- d-----w- c:\program files (x86)\iTunes

2012-07-24 18:49 . 2012-07-24 18:49 -------- d-----w- c:\programdata\Apple Computer

2012-07-24 18:49 . 2012-07-24 18:49 -------- d-----w- c:\program files\iPod

2012-07-24 18:49 . 2012-07-24 18:49 -------- d-----w- c:\program files (x86)\Apple Software Update

2012-07-24 18:49 . 2012-07-24 18:49 -------- d-----w- c:\program files\Common Files\Apple

2012-07-24 18:49 . 2012-07-24 18:49 -------- d-----w- c:\program files\Bonjour

2012-07-24 18:49 . 2012-07-24 18:49 -------- d-----w- c:\program files (x86)\Bonjour

2012-07-24 18:48 . 2012-07-24 18:49 -------- d-----w- c:\program files (x86)\Common Files\Apple

2012-07-24 18:48 . 2012-07-24 18:49 -------- d-----w- c:\programdata\Apple

2012-07-23 21:16 . 2012-07-23 21:16 -------- dc-h--w- c:\programdata\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}

2012-07-23 21:16 . 2012-07-23 21:16 -------- d-----w- c:\program files (x86)\Stardock

2012-07-23 17:19 . 2012-07-23 17:19 -------- d-----w- c:\program files (x86)\Melloware

2012-07-23 17:16 . 2012-07-23 17:16 -------- d-----w- c:\program files (x86)\TweakNow DriveShortcut

2012-07-23 17:16 . 2012-07-23 17:16 -------- d-----w- c:\program files\Classic Shell

2012-07-23 15:02 . 2012-07-23 15:02 -------- d-----w- c:\program files (x86)\OnLive

2012-07-23 14:41 . 2012-07-23 14:41 -------- d-----w- c:\program files (x86)\Common Files\Java

2012-07-23 14:40 . 2012-07-23 14:40 -------- d-----w- c:\program files (x86)\Oracle

2012-07-23 14:39 . 2012-07-06 03:06 772544 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2012-07-23 14:39 . 2012-07-06 03:06 687544 ----a-w- c:\windows\SysWow64\deployJava1.dll

2012-07-23 14:39 . 2012-07-23 14:39 -------- d-----w- c:\program files (x86)\Java

2012-07-23 04:25 . 2012-07-23 04:26 -------- d-----w- c:\programdata\Solidshield

2012-07-22 19:35 . 2011-11-21 23:59 329800 ----a-w- c:\windows\system32\drivers\trufos.sys

2012-07-22 19:35 . 2011-03-24 20:36 431176 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys

2012-07-22 19:35 . 2012-07-25 04:43 -------- d-----w- c:\program files (x86)\IObit

2012-07-20 15:21 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3DB98581-8023-4529-A3B8-FB635E2C39D0}\mpengine.dll

2012-07-20 05:28 . 2012-07-20 05:28 466456 ----a-w- c:\windows\system32\wrap_oal.dll

2012-07-20 05:28 . 2012-07-20 05:28 122904 ----a-w- c:\windows\system32\OpenAL32.dll

2012-07-20 05:28 . 2012-07-20 05:28 -------- d-----w- c:\program files (x86)\OpenAL

2012-07-20 05:28 . 2012-07-20 05:28 444952 ----a-w- c:\windows\SysWow64\wrap_oal.dll

2012-07-20 05:28 . 2012-07-20 05:28 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll

2012-07-19 03:39 . 2012-07-19 03:39 -------- d-----w- c:\program files (x86)\Microsoft XNA

2012-07-15 17:18 . 2009-07-14 01:15 315904 ----a-w- c:\windows\SysWow64\Difxf73a.rra

2012-07-15 17:17 . 2009-07-14 01:15 315904 ----a-w- c:\windows\SysWow64\Difxb2ea.rra

2012-07-14 02:06 . 2012-07-14 02:06 -------- d-----w- c:\program files (x86)\Google

2012-07-14 01:55 . 2012-07-14 01:55 -------- d-----w- c:\program files\Common Files\EPSON

2012-07-13 23:03 . 2012-07-13 23:03 -------- d-----w- c:\users\Andr‚s

2012-07-13 23:03 . 2008-10-15 11:22 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll

2012-07-13 23:03 . 2008-10-15 11:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll

2012-07-13 23:03 . 2008-10-15 11:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll

2012-07-13 23:03 . 2008-10-15 11:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll

2012-07-13 23:03 . 2008-10-15 11:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll

2012-07-13 23:03 . 2008-10-15 11:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll

2012-07-13 22:12 . 2012-07-15 21:49 -------- d-----w- c:\program files (x86)\Origin Games

2012-07-13 22:12 . 2012-07-23 04:25 -------- d-----w- c:\programdata\Origin

2012-07-13 22:10 . 2012-07-13 22:10 -------- d-----w- c:\programdata\Electronic Arts

2012-07-13 22:10 . 2012-07-13 22:12 -------- d-----w- c:\program files (x86)\Origin

2012-07-13 16:33 . 2012-05-17 16:29 7163744 ----a-w- c:\windows\system32\R4EEP64A.dll

2012-07-13 16:20 . 2010-06-02 09:55 77656 ----a-w- c:\windows\system32\XAPOFX1_5.dll

2012-07-13 16:19 . 2006-03-31 17:41 3927248 ----a-w- c:\windows\system32\d3dx9_30.dll

2012-07-13 16:14 . 2012-07-13 16:33 -------- d-----w- c:\program files (x86)\EVGA Precision X

2012-07-13 04:18 . 2012-07-13 04:18 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help

2012-07-13 01:43 . 2009-10-01 09:01 88064 ----a-w- c:\windows\system32\E_IBCBHJB.DLL

2012-07-13 01:43 . 2008-11-12 09:00 118784 ----a-w- c:\windows\system32\E_ILMHJB.DLL

2012-07-13 01:43 . 2012-07-14 01:55 -------- d-----w- c:\programdata\EPSON

2012-07-13 01:42 . 2009-12-09 05:00 464384 ----a-w- c:\windows\system32\esxw2ud.dll

2012-07-13 01:42 . 2009-10-16 05:00 13824 ----a-w- c:\windows\system32\esxcdev.dll

2012-07-13 01:42 . 2009-10-16 05:00 132560 ----a-w- c:\windows\system32\esdevapp.exe

2012-07-13 01:42 . 2012-07-13 01:42 -------- d-----w- c:\program files (x86)\epson

2012-07-13 01:36 . 2012-07-27 14:11 -------- d-----w- c:\users\Daniel

2012-07-13 01:31 . 2012-07-13 01:32 -------- d-----w- c:\users\Andrés Ulloa

2012-07-13 01:23 . 2012-07-13 01:40 -------- d-----w- c:\program files (x86)\Common Files\Steam

2012-07-13 01:23 . 2012-07-25 23:38 -------- d-----w- c:\program files (x86)\Steam

2012-07-13 01:12 . 2012-07-13 01:12 8192 ----a-w- c:\windows\SysWow64\srvany.exe

2012-07-13 01:07 . 2012-07-13 01:07 -------- d-----w- c:\program files\Common Files\DESIGNER

2012-07-13 01:06 . 2012-07-13 01:06 -------- d-----w- c:\program files\Microsoft Synchronization Services

2012-07-13 01:06 . 2012-07-13 01:06 -------- d-----w- c:\program files\Microsoft Sync Framework

2012-07-13 01:06 . 2012-07-13 01:06 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition

2012-07-13 01:05 . 2012-07-13 01:05 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8

2012-07-13 01:04 . 2012-07-13 01:04 -------- d-----w- c:\program files\Microsoft Analysis Services

2012-07-13 01:04 . 2012-07-13 01:04 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services

2012-07-13 01:02 . 2012-07-13 01:06 -------- d-----w- c:\program files\Microsoft Office

2012-07-13 01:02 . 2012-07-13 04:21 -------- d-----w- c:\programdata\Microsoft Help

2012-07-13 01:00 . 2012-07-13 01:00 -------- d-----w- c:\program files (x86)\Watchtower

2012-07-13 00:53 . 2012-07-13 00:53 -------- d-----w- c:\program files (x86)\Common Files\Adobe

2012-07-13 00:52 . 2012-07-13 00:52 -------- d-----w- c:\program files (x86)\VideoLAN

2012-07-13 00:51 . 2012-07-13 00:51 955840 ----a-w- c:\windows\system32\npDeployJava1.dll

2012-07-13 00:51 . 2012-07-13 00:51 839096 ----a-w- c:\windows\system32\deployJava1.dll

2012-07-13 00:51 . 2012-07-13 00:51 268720 ----a-w- c:\windows\system32\javaws.exe

2012-07-13 00:51 . 2012-07-13 00:51 189360 ----a-w- c:\windows\system32\javaw.exe

2012-07-13 00:51 . 2012-07-13 00:51 188840 ----a-w- c:\windows\system32\java.exe

2012-07-13 00:51 . 2012-07-13 00:51 -------- d-----w- c:\program files\Java

2012-07-13 00:50 . 2012-07-13 00:50 -------- d-----w- c:\users\UpdatusUser

2012-07-13 00:49 . 2012-07-13 03:18 -------- d-----w- c:\programdata\NVIDIA

2012-07-13 00:49 . 2012-05-15 09:29 889664 ----a-w- c:\windows\system32\nvvsvc.exe

2012-07-13 00:49 . 2012-05-15 09:29 63296 ----a-w- c:\windows\system32\nvshext.dll

2012-07-13 00:49 . 2012-05-15 09:29 2561856 ----a-w- c:\windows\system32\nvsvcr.dll

2012-07-13 00:49 . 2012-05-15 09:29 118080 ----a-w- c:\windows\system32\nvmctray.dll

2012-07-13 00:49 . 2012-05-15 09:29 2621723 ----a-w- c:\windows\system32\nvcoproc.bin

2012-07-13 00:49 . 2012-05-15 09:29 3149632 ----a-w- c:\windows\system32\nvsvc64.dll

2012-07-13 00:49 . 2012-05-15 09:28 6151488 ----a-w- c:\windows\system32\nvcpl.dll

2012-07-13 00:45 . 2012-07-13 00:45 -------- d-----w- C:\NVIDIA

2012-07-13 00:43 . 2012-07-13 00:44 -------- d-----w- c:\program files (x86)\Windows Live

2012-07-13 00:42 . 2012-07-13 02:29 -------- d-----w- c:\program files (x86)\Microsoft Silverlight

2012-07-13 00:41 . 2012-07-13 00:41 -------- d-----w- c:\program files (x86)\Common Files\Windows Live

2012-07-13 00:39 . 2012-07-13 00:39 -------- d-----w- c:\program files (x86)\OpenDNS Updater

2012-07-13 00:31 . 2012-07-22 02:46 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-07-13 00:31 . 2012-07-22 02:46 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-07-13 00:31 . 2012-07-13 00:31 -------- d-----w- c:\windows\SysWow64\Macromed

2012-07-13 00:31 . 2012-07-13 00:31 -------- d-----w- c:\windows\system32\Macromed

2012-07-13 00:30 . 2012-07-13 00:30 -------- d-----w- c:\program files (x86)\Tensons

2012-07-13 00:16 . 2012-07-13 01:06 -------- d-----w- c:\program files (x86)\Microsoft.NET

2012-07-13 00:14 . 2012-07-13 00:14 -------- d-----w- c:\program files (x86)\BurnAware Free

2012-07-13 00:13 . 2012-07-13 00:13 -------- d-----w- c:\program files (x86)\ImgBurn

2012-07-13 00:09 . 2012-07-13 00:09 -------- d-----w- c:\users\Default\AppData\Roaming\IObit

2012-07-13 00:07 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll

2012-07-13 00:07 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll

2012-07-13 00:07 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll

2012-07-13 00:00 . 2012-07-13 00:00 -------- d-----w- c:\program files\Microsoft IntelliPoint

2012-07-12 23:56 . 2012-07-12 23:56 -------- d-----w- c:\program files\Microsoft IntelliType Pro

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-07-13 00:43 . 2011-03-28 23:36 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-05-31 17:25 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe

2012-05-15 10:48 . 2012-02-10 03:43 68928 ----a-w- c:\windows\system32\OpenCL.dll

2012-05-15 10:48 . 2012-02-10 03:43 61248 ----a-w- c:\windows\SysWow64\OpenCL.dll

2012-05-15 10:48 . 2012-02-10 03:43 1738048 ----a-w- c:\windows\system32\nvdispco64.dll

2012-05-15 10:48 . 2012-02-10 03:43 1468224 ----a-w- c:\windows\system32\nvgenco64.dll

2012-05-15 07:21 . 2012-05-15 07:21 423744 ----a-w- c:\windows\SysWow64\nvStreaming.exe

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]

@="{594D4122-1F87-41E2-96C7-825FB4796516}"

[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]

2012-06-30 14:03 610304 ----a-w- c:\program files\Classic Shell\ClassicExplorer32.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OpenDNS Updater"="c:\program files (x86)\OpenDNS Updater\OpenDNSUpdater.exe" [2010-06-16 839680]

"Download Accelerator Manager"="c:\program files (x86)\Tensons\Download Accelerator Manager\daman.exe" [2012-06-18 777728]

"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-07-09 5661056]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]

.

c:\users\Andrés\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

feewhee.lnk - c:\users\Andrés\Desktop\Programas\Explorer\Útiles\feewhee.exe [2012-4-8 6656]

ToggleFileExt.lnk - c:\users\Andrés\Desktop\Programas\Explorer\Útiles\ToggleFileExt\ToggleFileExt.exe [2010-11-3 308697]

ToggleHiddenFiles.lnk - c:\users\Andrés\Desktop\Programas\Explorer\Útiles\ToggleHiddenFiles\ToggleHiddenFiles.exe [2009-3-11 307673]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

@="Service"

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 KMService;KMService;c:\windows\system32\srvany.exe [x]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]

R3 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2012-01-05 21384]

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 51740536]

R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-10 174440]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-21 20992]

R3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [2012-07-05 33224]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-21 88960]

R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-21 34816]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]

R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [2012-07-05 21904]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R3 WatAdminSvc;Servicio de tecnologías de activación de Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-12 1255736]

R4 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]

R4 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare with Antivirus 2013\ascsvc.exe [2012-06-15 513920]

R4 ASCAntivirusSrv;AdvancedSystemCareAntivirus;c:\program files (x86)\IObit\Advanced SystemCare with Antivirus 2013\ascavsvc.exe [2012-06-19 896896]

R4 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-10 821592]

R4 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]

R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]

S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]

S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]

S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]

S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-05-18 47616]

S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [2012-04-26 135584]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]

S3 Ph3xIB64;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB64.sys [2009-06-10 1627520]

S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [2011-08-01 45416]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]

.

--- Other Services/Drivers In Memory ---

.

*NewlyCreated* - CPUZ135

*Deregistered* - cpuz135

.

Contents of the 'Scheduled Tasks' folder

.

--------- X64 Entries -----------

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]

@="{594D4122-1F87-41E2-96C7-825FB4796516}"

[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]

2012-06-30 14:04 740352 ----a-w- c:\program files\Classic Shell\ClassicExplorer64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1873256]

"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]

"{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uDefault_Search_URL = hxxp://www.google.com/ie

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: &Download with DAM - c:\program files (x86)\Tensons\Download Accelerator Manager\\addUrl.htm

IE: &Enviar a OneNote - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Download &All with DAM - c:\program files (x86)\Tensons\Download Accelerator Manager\\addAllUrls.htm

IE: E&xportar a Microsoft Excel - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000

IE: LastPass - file://c:\users\Andrés\AppData\Roaming\LastPass\context.html?cmd=lastpass

IE: LastPass Fill Forms - file://c:\users\Andrés\AppData\Roaming\LastPass\context.html?cmd=fillforms

IE: Run DAM Media&Grabber - c:\program files (x86)\Tensons\Download Accelerator Manager\\runMg.htm

TCP: DhcpNameServer = 192.168.1.254

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2012-07-28 20:03:52

ComboFix-quarantined-files.txt 2012-07-29 01:03

.

Pre-Run: 80,726,237,184 bytes libres

Post-Run: 80,375,312,384 bytes libres

.

- - End Of File - - C2AA6E7BDEFF52854DCA6D6AC855B715

Superdave · July 29, 2012

Are you still experiencing problems with the computer?

Please download Rooter and Save it to your desktop.

Double click it to start the tool.Vista and Windows7 run as administrator.
Click Scan.
Eventually, a Notepad file containing the report will open, also found at C:\Rooter.txt. Post that log in your next reply.

andresuvz · July 29, 2012

Hi, yes, I'm still having troubles with my computer, but it only happens when Advance system care with antivirus 2013 is running, when I dissable it from startup the blue screen doesn't show up. This is rooter log, I post the ntblog from windows boot log after blue screen and reboot.

Rooter.exe (v1.0.2) by Eric_71

.

SeDebugPrivilege granted successfully ...

.

Windows 7 . (6.1.7601) Service Pack 1

[32_bits] - Intel64 Family 6 Model 23 Stepping 6, GenuineIntel

.

[wscsvc] STOPPED (state:1) : Security Center -> Disabled !

[MpsSvc] RUNNING (state:4)

Windows Firewall -> Enabled

Windows Defender -> Enabled

User Account Control (UAC) -> Enabled

.

Internet Explorer 9.0.8112.16421

.

C:\ [Fixed-NTFS] .. ( Total:596 Go - Free:74 Go )

D:\ [CD_Rom]

.

Scan : 15:46.31

Path : C:\Users\Andrés\Desktop\Rooter.exe

User : Andrés ( Administrator -> YES )

.

----------------------\\ Processes

.

Locked [system Process] (0)

Locked System (4)

______ ???0?????? (256)

______ ???0?????? (332)

______ ???0?????? (368)

______ ???0?????? (384)

______ ???0?????? (424)

______ ???0?????? (432)

______ ???0?????? (440)

______ ???0?????? (472)

______ ???0?????? (592)

______ ???0?????? (664)

______ ???0?????? (720)

______ ???0?????? (796)

______ ???0?????? (852)

______ ???0?????? (920)

______ ???0?????? (948)

______ ???0?????? (276)

______ ???0?????? (940)

______ ???0?????? (1124)

______ ???0?????? (1284)

______ ???0?????? (1328)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1712)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1888)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1896)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1904)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1912)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1920)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1928)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1936)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1944)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1956)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1964)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1972)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1980)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1988)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1996)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (2004)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (1848)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (2132)

______ C:\Windows\SysWOW64\rundll32.exe (2240)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (2248)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (2512)

______ C:\Users\Andrés\AppData\Local\Google\Chrome\Application\chrome.exe (2660)

______ C:\Program Files (x86)\Tensons\Download Accelerator Manager\daman.exe (2704)

______ C:\Users\Andrés\Desktop\Rooter.exe (2908)

.

----------------------\\ Device\Harddisk0\

.

\Device\Harddisk0 [sectors : 63 x 512 Bytes]

.

\Device\Harddisk0\Partition1 --[ MBR ]-- (Start_Offset:1048576 | Length:104857600)

\Device\Harddisk0\Partition2 (Start_Offset:105906176 | Length:639977390080)

.

----------------------\\ Scheduled Tasks

.

C:\Windows\Tasks\SA.DAT

C:\Windows\Tasks\SCHEDLGU.TXT

.

----------------------\\ Registry

.

----------------------\\ Files & Folders

.

----------------------\\ Scan completed at 15:47.29

.

C:\Rooter$\Rooter_1.txt - (29/07/2012 | 15:47.29)

andresuvz · July 29, 2012

Windows ntblog:

Service Pack 1 7 29 2012 15:49:21.375

Loaded driver \SystemRoot\system32\ntoskrnl.exe

Loaded driver \SystemRoot\system32\hal.dll

Loaded driver \SystemRoot\system32\kdcom.dll

Loaded driver \SystemRoot\system32\mcupdate_GenuineIntel.dll

Loaded driver \SystemRoot\system32\PSHED.dll

Loaded driver \SystemRoot\system32\CLFS.SYS

Loaded driver \SystemRoot\system32\CI.dll

Loaded driver \SystemRoot\system32\drivers\Wdf01000.sys

Loaded driver \SystemRoot\system32\drivers\WDFLDR.SYS

Loaded driver \SystemRoot\system32\drivers\ACPI.sys

Loaded driver \SystemRoot\system32\drivers\WMILIB.SYS

Loaded driver \SystemRoot\system32\drivers\msisadrv.sys

Loaded driver \SystemRoot\system32\drivers\pci.sys

Loaded driver \SystemRoot\system32\drivers\vdrvroot.sys

Loaded driver \SystemRoot\System32\drivers\partmgr.sys

Loaded driver \SystemRoot\system32\drivers\volmgr.sys

Loaded driver \SystemRoot\System32\drivers\volmgrx.sys

Loaded driver \SystemRoot\system32\drivers\pciide.sys

Loaded driver \SystemRoot\system32\drivers\PCIIDEX.SYS

Loaded driver \SystemRoot\system32\drivers\jraid.sys

Loaded driver \SystemRoot\system32\drivers\SCSIPORT.SYS

Loaded driver \SystemRoot\System32\drivers\mountmgr.sys

Loaded driver \SystemRoot\system32\drivers\atapi.sys

Loaded driver \SystemRoot\system32\drivers\ataport.SYS

Loaded driver \SystemRoot\system32\DRIVERS\msahci.sys

Loaded driver \SystemRoot\system32\drivers\amdxata.sys

Loaded driver \SystemRoot\system32\drivers\fltmgr.sys

Loaded driver \SystemRoot\system32\drivers\fileinfo.sys

Loaded driver \SystemRoot\System32\Drivers\Ntfs.sys

Loaded driver \SystemRoot\System32\Drivers\msrpc.sys

Loaded driver \SystemRoot\System32\Drivers\ksecdd.sys

Loaded driver \SystemRoot\System32\Drivers\cng.sys

Loaded driver \SystemRoot\System32\drivers\pcw.sys

Loaded driver \SystemRoot\System32\Drivers\Fs_Rec.sys

Loaded driver \SystemRoot\system32\drivers\ndis.sys

Loaded driver \SystemRoot\system32\drivers\NETIO.SYS

Loaded driver \SystemRoot\System32\Drivers\ksecpkg.sys

Loaded driver \SystemRoot\System32\drivers\tcpip.sys

Loaded driver \SystemRoot\System32\drivers\fwpkclnt.sys

Loaded driver \SystemRoot\system32\drivers\vmstorfl.sys

Loaded driver \SystemRoot\system32\drivers\volsnap.sys

Loaded driver \SystemRoot\System32\Drivers\spldr.sys

Loaded driver \SystemRoot\System32\drivers\rdyboost.sys

Loaded driver \SystemRoot\System32\Drivers\mup.sys

Loaded driver \SystemRoot\System32\drivers\hwpolicy.sys

Loaded driver \SystemRoot\System32\DRIVERS\fvevol.sys

Loaded driver \SystemRoot\system32\drivers\disk.sys

Loaded driver \SystemRoot\system32\drivers\CLASSPNP.SYS

Loaded driver \SystemRoot\system32\DRIVERS\cdrom.sys

Loaded driver \SystemRoot\System32\Drivers\Null.SYS

Loaded driver \SystemRoot\System32\Drivers\Beep.SYS

Loaded driver \SystemRoot\System32\drivers\vga.sys

Loaded driver \SystemRoot\System32\DRIVERS\RDPCDD.sys

Loaded driver \SystemRoot\system32\drivers\rdpencdd.sys

Loaded driver \SystemRoot\system32\drivers\rdprefmp.sys

Loaded driver \SystemRoot\System32\Drivers\Msfs.SYS

Loaded driver \SystemRoot\System32\Drivers\Npfs.SYS

Loaded driver \SystemRoot\system32\DRIVERS\tdx.sys

Loaded driver \SystemRoot\system32\drivers\afd.sys

Loaded driver \SystemRoot\System32\DRIVERS\netbt.sys

Loaded driver \SystemRoot\system32\drivers\ws2ifsl.sys

Loaded driver \SystemRoot\system32\DRIVERS\wfplwf.sys

Loaded driver \SystemRoot\system32\DRIVERS\pacer.sys

Loaded driver \SystemRoot\system32\DRIVERS\netbios.sys

Loaded driver \SystemRoot\system32\DRIVERS\serial.sys

Loaded driver \SystemRoot\system32\DRIVERS\wanarp.sys

Loaded driver \SystemRoot\system32\DRIVERS\termdd.sys

Loaded driver \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

Loaded driver \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

Loaded driver \SystemRoot\system32\DRIVERS\rdbss.sys

Loaded driver \SystemRoot\system32\drivers\nsiproxy.sys

Loaded driver \SystemRoot\system32\DRIVERS\mssmbios.sys

Loaded driver \SystemRoot\System32\drivers\discache.sys

Loaded driver \SystemRoot\system32\drivers\csc.sys

Loaded driver \SystemRoot\System32\Drivers\dfsc.sys

Loaded driver \SystemRoot\system32\DRIVERS\blbdrive.sys

Loaded driver \SystemRoot\system32\DRIVERS\tunnel.sys

Loaded driver \SystemRoot\system32\DRIVERS\intelppm.sys

Loaded driver \SystemRoot\System32\drivers\dxgkrnl.sys

Loaded driver \SystemRoot\system32\DRIVERS\nvlddmkm.sys

Loaded driver \SystemRoot\system32\DRIVERS\HDAudBus.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbuhci.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbehci.sys

Loaded driver \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys

Loaded driver \SystemRoot\system32\DRIVERS\Rt64win7.sys

Loaded driver \SystemRoot\system32\DRIVERS\Ph3xIB64.sys

Loaded driver \SystemRoot\system32\drivers\ksthunk.sys

Loaded driver \SystemRoot\system32\DRIVERS\serenum.sys

Loaded driver \SystemRoot\system32\DRIVERS\parport.sys

Loaded driver \SystemRoot\system32\DRIVERS\CompositeBus.sys

Loaded driver \SystemRoot\system32\DRIVERS\AgileVpn.sys

Loaded driver \SystemRoot\system32\DRIVERS\rasl2tp.sys

Loaded driver \SystemRoot\system32\DRIVERS\ndistapi.sys

Loaded driver \SystemRoot\system32\DRIVERS\ndiswan.sys

Loaded driver \SystemRoot\system32\DRIVERS\raspppoe.sys

Loaded driver \SystemRoot\system32\DRIVERS\raspptp.sys

Loaded driver \SystemRoot\system32\DRIVERS\rassstp.sys

Loaded driver \SystemRoot\system32\DRIVERS\rdpbus.sys

Loaded driver \SystemRoot\system32\DRIVERS\kbdclass.sys

Loaded driver \SystemRoot\system32\DRIVERS\mouclass.sys

Loaded driver \SystemRoot\system32\DRIVERS\swenum.sys

Loaded driver \SystemRoot\system32\DRIVERS\umbus.sys

Did not load driver \SystemRoot\System32\drivers\vga.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbhub.sys

Loaded driver \SystemRoot\System32\Drivers\NDProxy.SYS

Did not load driver \SystemRoot\System32\Drivers\NDProxy.SYS

Loaded driver \SystemRoot\system32\drivers\nvhda64v.sys

Loaded driver \SystemRoot\system32\drivers\RTKVHD64.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbccgp.sys

Loaded driver \SystemRoot\system32\DRIVERS\dc3d.sys

Loaded driver \SystemRoot\system32\DRIVERS\hidusb.sys

Loaded driver \SystemRoot\system32\DRIVERS\kbdhid.sys

Loaded driver \SystemRoot\system32\DRIVERS\NuidFltr.sys

Loaded driver \SystemRoot\system32\DRIVERS\mouhid.sys

Loaded driver \SystemRoot\system32\DRIVERS\point64.sys

Loaded driver \SystemRoot\system32\DRIVERS\monitor.sys

Loaded driver \SystemRoot\system32\DRIVERS\xusb21.sys

Loaded driver \SystemRoot\system32\drivers\luafv.sys

Loaded driver \SystemRoot\system32\drivers\WudfPf.sys

Loaded driver \SystemRoot\system32\DRIVERS\lltdio.sys

Loaded driver \SystemRoot\system32\DRIVERS\rspndr.sys

Loaded driver \SystemRoot\system32\drivers\HTTP.sys

Loaded driver \SystemRoot\system32\DRIVERS\bowser.sys

Loaded driver \SystemRoot\System32\drivers\mpsdrv.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb10.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb20.sys

Loaded driver \SystemRoot\system32\drivers\peauth.sys

Loaded driver \SystemRoot\System32\Drivers\secdrv.SYS

Loaded driver \SystemRoot\System32\DRIVERS\srvnet.sys

Loaded driver \SystemRoot\System32\drivers\tcpipreg.sys

Loaded driver \SystemRoot\System32\DRIVERS\srv2.sys

Loaded driver \SystemRoot\System32\DRIVERS\srv.sys

Did not load driver \SystemRoot\System32\DRIVERS\srv.sys

Loaded driver \??\C:\Program Files (x86)\EVGA Precision X\RTCore64.sys

Loaded driver \SystemRoot\system32\DRIVERS\asyncmac.sys

Loaded driver \SystemRoot\system32\DRIVERS\TRUFOS.sys

Loaded driver \SystemRoot\system32\DRIVERS\bdfsfltr.sys

Loaded driver \SystemRoot\system32\DRIVERS\TRUFOS.sys

Service Pack 1 7 29 2012 16:01:36.375

Loaded driver \SystemRoot\system32\ntoskrnl.exe

Loaded driver \SystemRoot\system32\hal.dll

Loaded driver \SystemRoot\system32\kdcom.dll

Loaded driver \SystemRoot\system32\mcupdate_GenuineIntel.dll

Loaded driver \SystemRoot\system32\PSHED.dll

Loaded driver \SystemRoot\system32\CLFS.SYS

Loaded driver \SystemRoot\system32\CI.dll

Loaded driver \SystemRoot\system32\drivers\Wdf01000.sys

Loaded driver \SystemRoot\system32\drivers\WDFLDR.SYS

Loaded driver \SystemRoot\system32\drivers\ACPI.sys

Loaded driver \SystemRoot\system32\drivers\WMILIB.SYS

Loaded driver \SystemRoot\system32\drivers\msisadrv.sys

Loaded driver \SystemRoot\system32\drivers\pci.sys

Loaded driver \SystemRoot\system32\drivers\vdrvroot.sys

Loaded driver \SystemRoot\System32\drivers\partmgr.sys

Loaded driver \SystemRoot\system32\drivers\volmgr.sys

Loaded driver \SystemRoot\System32\drivers\volmgrx.sys

Loaded driver \SystemRoot\system32\drivers\pciide.sys

Loaded driver \SystemRoot\system32\drivers\PCIIDEX.SYS

Loaded driver \SystemRoot\system32\drivers\jraid.sys

Loaded driver \SystemRoot\system32\drivers\SCSIPORT.SYS

Loaded driver \SystemRoot\System32\drivers\mountmgr.sys

Loaded driver \SystemRoot\system32\drivers\atapi.sys

Loaded driver \SystemRoot\system32\drivers\ataport.SYS

Loaded driver \SystemRoot\system32\DRIVERS\msahci.sys

Loaded driver \SystemRoot\system32\drivers\amdxata.sys

Loaded driver \SystemRoot\system32\drivers\fltmgr.sys

Loaded driver \SystemRoot\system32\drivers\fileinfo.sys

Loaded driver \SystemRoot\System32\Drivers\Ntfs.sys

Loaded driver \SystemRoot\System32\Drivers\msrpc.sys

Loaded driver \SystemRoot\System32\Drivers\ksecdd.sys

Loaded driver \SystemRoot\System32\Drivers\cng.sys

Loaded driver \SystemRoot\System32\drivers\pcw.sys

Loaded driver \SystemRoot\System32\Drivers\Fs_Rec.sys

Loaded driver \SystemRoot\system32\drivers\ndis.sys

Loaded driver \SystemRoot\system32\drivers\NETIO.SYS

Loaded driver \SystemRoot\System32\Drivers\ksecpkg.sys

Loaded driver \SystemRoot\System32\drivers\tcpip.sys

Loaded driver \SystemRoot\System32\drivers\fwpkclnt.sys

Loaded driver \SystemRoot\system32\drivers\vmstorfl.sys

Loaded driver \SystemRoot\system32\drivers\volsnap.sys

Loaded driver \SystemRoot\System32\Drivers\spldr.sys

Loaded driver \SystemRoot\System32\drivers\rdyboost.sys

Loaded driver \SystemRoot\System32\Drivers\mup.sys

Loaded driver \SystemRoot\System32\drivers\hwpolicy.sys

Loaded driver \SystemRoot\System32\DRIVERS\fvevol.sys

Loaded driver \SystemRoot\system32\drivers\disk.sys

Loaded driver \SystemRoot\system32\drivers\CLASSPNP.SYS

Loaded driver \SystemRoot\system32\DRIVERS\cdrom.sys

Loaded driver \SystemRoot\System32\Drivers\Null.SYS

Loaded driver \SystemRoot\System32\Drivers\Beep.SYS

Loaded driver \SystemRoot\System32\drivers\vga.sys

Loaded driver \SystemRoot\System32\DRIVERS\RDPCDD.sys

Loaded driver \SystemRoot\system32\drivers\rdpencdd.sys

Loaded driver \SystemRoot\system32\drivers\rdprefmp.sys

Loaded driver \SystemRoot\System32\Drivers\Msfs.SYS

Loaded driver \SystemRoot\System32\Drivers\Npfs.SYS

Loaded driver \SystemRoot\system32\DRIVERS\tdx.sys

Loaded driver \SystemRoot\system32\drivers\afd.sys

Loaded driver \SystemRoot\System32\DRIVERS\netbt.sys

Loaded driver \SystemRoot\system32\drivers\ws2ifsl.sys

Loaded driver \SystemRoot\system32\DRIVERS\wfplwf.sys

Loaded driver \SystemRoot\system32\DRIVERS\pacer.sys

Loaded driver \SystemRoot\system32\DRIVERS\netbios.sys

Loaded driver \SystemRoot\system32\DRIVERS\serial.sys

Loaded driver \SystemRoot\system32\DRIVERS\wanarp.sys

Loaded driver \SystemRoot\system32\DRIVERS\termdd.sys

Loaded driver \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

Loaded driver \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

Loaded driver \SystemRoot\system32\DRIVERS\rdbss.sys

Loaded driver \SystemRoot\system32\drivers\nsiproxy.sys

Loaded driver \SystemRoot\system32\DRIVERS\mssmbios.sys

Loaded driver \SystemRoot\System32\drivers\discache.sys

Loaded driver \SystemRoot\system32\drivers\csc.sys

Loaded driver \SystemRoot\System32\Drivers\dfsc.sys

Loaded driver \SystemRoot\system32\DRIVERS\blbdrive.sys

Loaded driver \SystemRoot\system32\DRIVERS\tunnel.sys

Loaded driver \SystemRoot\system32\DRIVERS\intelppm.sys

Loaded driver \SystemRoot\System32\drivers\dxgkrnl.sys

Loaded driver \SystemRoot\system32\DRIVERS\nvlddmkm.sys

Loaded driver \SystemRoot\system32\DRIVERS\HDAudBus.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbuhci.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbehci.sys

Loaded driver \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys

Loaded driver \SystemRoot\system32\DRIVERS\Rt64win7.sys

Loaded driver \SystemRoot\system32\DRIVERS\Ph3xIB64.sys

Loaded driver \SystemRoot\system32\drivers\ksthunk.sys

Loaded driver \SystemRoot\system32\DRIVERS\serenum.sys

Loaded driver \SystemRoot\system32\DRIVERS\parport.sys

Loaded driver \SystemRoot\system32\DRIVERS\CompositeBus.sys

Loaded driver \SystemRoot\system32\DRIVERS\AgileVpn.sys

Loaded driver \SystemRoot\system32\DRIVERS\rasl2tp.sys

Loaded driver \SystemRoot\system32\DRIVERS\ndistapi.sys

Loaded driver \SystemRoot\system32\DRIVERS\ndiswan.sys

Loaded driver \SystemRoot\system32\DRIVERS\raspppoe.sys

Loaded driver \SystemRoot\system32\DRIVERS\raspptp.sys

Loaded driver \SystemRoot\system32\DRIVERS\rassstp.sys

Loaded driver \SystemRoot\system32\DRIVERS\rdpbus.sys

Loaded driver \SystemRoot\system32\DRIVERS\kbdclass.sys

Loaded driver \SystemRoot\system32\DRIVERS\mouclass.sys

Loaded driver \SystemRoot\system32\DRIVERS\swenum.sys

Loaded driver \SystemRoot\system32\DRIVERS\umbus.sys

Did not load driver \SystemRoot\System32\drivers\vga.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbhub.sys

Loaded driver \SystemRoot\System32\Drivers\NDProxy.SYS

Did not load driver \SystemRoot\System32\Drivers\NDProxy.SYS

Loaded driver \SystemRoot\system32\drivers\nvhda64v.sys

Loaded driver \SystemRoot\system32\drivers\RTKVHD64.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbccgp.sys

Loaded driver \SystemRoot\system32\DRIVERS\dc3d.sys

Loaded driver \SystemRoot\system32\DRIVERS\hidusb.sys

Loaded driver \SystemRoot\system32\DRIVERS\kbdhid.sys

Loaded driver \SystemRoot\system32\DRIVERS\NuidFltr.sys

Loaded driver \SystemRoot\system32\DRIVERS\mouhid.sys

Loaded driver \SystemRoot\system32\DRIVERS\point64.sys

Loaded driver \SystemRoot\system32\DRIVERS\xusb21.sys

Loaded driver \SystemRoot\system32\DRIVERS\monitor.sys

Loaded driver \SystemRoot\system32\drivers\luafv.sys

Loaded driver \SystemRoot\system32\drivers\WudfPf.sys

Loaded driver \SystemRoot\system32\DRIVERS\lltdio.sys

Loaded driver \SystemRoot\system32\DRIVERS\rspndr.sys

Loaded driver \SystemRoot\system32\drivers\HTTP.sys

Loaded driver \SystemRoot\system32\DRIVERS\bowser.sys

Loaded driver \SystemRoot\System32\drivers\mpsdrv.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb10.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb20.sys

Loaded driver \SystemRoot\system32\drivers\peauth.sys

Loaded driver \SystemRoot\System32\Drivers\secdrv.SYS

Loaded driver \SystemRoot\System32\DRIVERS\srvnet.sys

Loaded driver \SystemRoot\System32\drivers\tcpipreg.sys

Loaded driver \SystemRoot\System32\DRIVERS\srv2.sys

Loaded driver \SystemRoot\System32\DRIVERS\srv.sys

Did not load driver \SystemRoot\System32\DRIVERS\srv.sys

Loaded driver \??\C:\Program Files (x86)\EVGA Precision X\RTCore64.sys

Loaded driver \SystemRoot\system32\DRIVERS\TRUFOS.sys

Loaded driver \SystemRoot\system32\DRIVERS\bdfsfltr.sys

Loaded driver \SystemRoot\system32\DRIVERS\asyncmac.sys

Service Pack 1 7 29 2012 16:08:23.375

Loaded driver \SystemRoot\system32\ntoskrnl.exe

Loaded driver \SystemRoot\system32\hal.dll

Loaded driver \SystemRoot\system32\kdcom.dll

Loaded driver \SystemRoot\system32\mcupdate_GenuineIntel.dll

Loaded driver \SystemRoot\system32\PSHED.dll

Loaded driver \SystemRoot\system32\CLFS.SYS

Loaded driver \SystemRoot\system32\CI.dll

Loaded driver \SystemRoot\system32\drivers\Wdf01000.sys

Loaded driver \SystemRoot\system32\drivers\WDFLDR.SYS

Loaded driver \SystemRoot\system32\drivers\ACPI.sys

Loaded driver \SystemRoot\system32\drivers\WMILIB.SYS

Loaded driver \SystemRoot\system32\drivers\msisadrv.sys

Loaded driver \SystemRoot\system32\drivers\pci.sys

Loaded driver \SystemRoot\system32\drivers\vdrvroot.sys

Loaded driver \SystemRoot\System32\drivers\partmgr.sys

Loaded driver \SystemRoot\system32\drivers\volmgr.sys

Loaded driver \SystemRoot\System32\drivers\volmgrx.sys

Loaded driver \SystemRoot\system32\drivers\pciide.sys

Loaded driver \SystemRoot\system32\drivers\PCIIDEX.SYS

Loaded driver \SystemRoot\system32\drivers\jraid.sys

Loaded driver \SystemRoot\system32\drivers\SCSIPORT.SYS

Loaded driver \SystemRoot\System32\drivers\mountmgr.sys

Loaded driver \SystemRoot\system32\drivers\atapi.sys

Loaded driver \SystemRoot\system32\drivers\ataport.SYS

Loaded driver \SystemRoot\system32\DRIVERS\msahci.sys

Loaded driver \SystemRoot\system32\drivers\amdxata.sys

Loaded driver \SystemRoot\system32\drivers\fltmgr.sys

Loaded driver \SystemRoot\system32\drivers\fileinfo.sys

Loaded driver \SystemRoot\System32\Drivers\Ntfs.sys

Loaded driver \SystemRoot\System32\Drivers\msrpc.sys

Loaded driver \SystemRoot\System32\Drivers\ksecdd.sys

Loaded driver \SystemRoot\System32\Drivers\cng.sys

Loaded driver \SystemRoot\System32\drivers\pcw.sys

Loaded driver \SystemRoot\System32\Drivers\Fs_Rec.sys

Loaded driver \SystemRoot\system32\drivers\ndis.sys

Loaded driver \SystemRoot\system32\drivers\NETIO.SYS

Loaded driver \SystemRoot\System32\Drivers\ksecpkg.sys

Loaded driver \SystemRoot\System32\drivers\tcpip.sys

Loaded driver \SystemRoot\System32\drivers\fwpkclnt.sys

Loaded driver \SystemRoot\system32\drivers\vmstorfl.sys

Loaded driver \SystemRoot\system32\drivers\volsnap.sys

Loaded driver \SystemRoot\System32\Drivers\spldr.sys

Loaded driver \SystemRoot\System32\drivers\rdyboost.sys

Loaded driver \SystemRoot\System32\Drivers\mup.sys

Loaded driver \SystemRoot\System32\drivers\hwpolicy.sys

Loaded driver \SystemRoot\System32\DRIVERS\fvevol.sys

Loaded driver \SystemRoot\system32\drivers\disk.sys

Loaded driver \SystemRoot\system32\drivers\CLASSPNP.SYS

Loaded driver \SystemRoot\system32\DRIVERS\cdrom.sys

Loaded driver \SystemRoot\System32\Drivers\Null.SYS

Loaded driver \SystemRoot\System32\Drivers\Beep.SYS

Loaded driver \SystemRoot\System32\drivers\vga.sys

Loaded driver \SystemRoot\System32\DRIVERS\RDPCDD.sys

Loaded driver \SystemRoot\system32\drivers\rdpencdd.sys

Loaded driver \SystemRoot\system32\drivers\rdprefmp.sys

Loaded driver \SystemRoot\System32\Drivers\Msfs.SYS

Loaded driver \SystemRoot\System32\Drivers\Npfs.SYS

Loaded driver \SystemRoot\system32\DRIVERS\tdx.sys

Loaded driver \SystemRoot\system32\drivers\afd.sys

Loaded driver \SystemRoot\System32\DRIVERS\netbt.sys

Loaded driver \SystemRoot\system32\drivers\ws2ifsl.sys

Loaded driver \SystemRoot\system32\DRIVERS\wfplwf.sys

Loaded driver \SystemRoot\system32\DRIVERS\pacer.sys

Loaded driver \SystemRoot\system32\DRIVERS\netbios.sys

Loaded driver \SystemRoot\system32\DRIVERS\serial.sys

Loaded driver \SystemRoot\system32\DRIVERS\wanarp.sys

Loaded driver \SystemRoot\system32\DRIVERS\termdd.sys

Loaded driver \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

Loaded driver \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

Loaded driver \SystemRoot\system32\DRIVERS\rdbss.sys

Loaded driver \SystemRoot\system32\drivers\nsiproxy.sys

Loaded driver \SystemRoot\system32\DRIVERS\mssmbios.sys

Loaded driver \SystemRoot\System32\drivers\discache.sys

Loaded driver \SystemRoot\system32\drivers\csc.sys

Loaded driver \SystemRoot\System32\Drivers\dfsc.sys

Loaded driver \SystemRoot\system32\DRIVERS\blbdrive.sys

Loaded driver \SystemRoot\system32\DRIVERS\tunnel.sys

Loaded driver \SystemRoot\system32\DRIVERS\intelppm.sys

Loaded driver \SystemRoot\System32\drivers\dxgkrnl.sys

Loaded driver \SystemRoot\system32\DRIVERS\nvlddmkm.sys

Loaded driver \SystemRoot\system32\DRIVERS\HDAudBus.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbuhci.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbehci.sys

Loaded driver \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys

Loaded driver \SystemRoot\system32\DRIVERS\Rt64win7.sys

Loaded driver \SystemRoot\system32\DRIVERS\Ph3xIB64.sys

Loaded driver \SystemRoot\system32\drivers\ksthunk.sys

Loaded driver \SystemRoot\system32\DRIVERS\serenum.sys

Loaded driver \SystemRoot\system32\DRIVERS\parport.sys

Loaded driver \SystemRoot\system32\DRIVERS\CompositeBus.sys

Loaded driver \SystemRoot\system32\DRIVERS\AgileVpn.sys

Loaded driver \SystemRoot\system32\DRIVERS\rasl2tp.sys

Loaded driver \SystemRoot\system32\DRIVERS\ndistapi.sys

Loaded driver \SystemRoot\system32\DRIVERS\ndiswan.sys

Loaded driver \SystemRoot\system32\DRIVERS\raspppoe.sys

Loaded driver \SystemRoot\system32\DRIVERS\raspptp.sys

Loaded driver \SystemRoot\system32\DRIVERS\rassstp.sys

Loaded driver \SystemRoot\system32\DRIVERS\rdpbus.sys

Loaded driver \SystemRoot\system32\DRIVERS\kbdclass.sys

Loaded driver \SystemRoot\system32\DRIVERS\mouclass.sys

Loaded driver \SystemRoot\system32\DRIVERS\swenum.sys

Loaded driver \SystemRoot\system32\DRIVERS\umbus.sys

Did not load driver \SystemRoot\System32\drivers\vga.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbhub.sys

Loaded driver \SystemRoot\System32\Drivers\NDProxy.SYS

Did not load driver \SystemRoot\System32\Drivers\NDProxy.SYS

Loaded driver \SystemRoot\system32\drivers\nvhda64v.sys

Loaded driver \SystemRoot\system32\drivers\RTKVHD64.sys

Loaded driver \SystemRoot\system32\DRIVERS\usbccgp.sys

Loaded driver \SystemRoot\system32\DRIVERS\dc3d.sys

Loaded driver \SystemRoot\system32\DRIVERS\hidusb.sys

Loaded driver \SystemRoot\system32\DRIVERS\kbdhid.sys

Loaded driver \SystemRoot\system32\DRIVERS\NuidFltr.sys

Loaded driver \SystemRoot\system32\DRIVERS\mouhid.sys

Loaded driver \SystemRoot\system32\DRIVERS\point64.sys

Loaded driver \SystemRoot\system32\DRIVERS\xusb21.sys

Loaded driver \SystemRoot\system32\DRIVERS\monitor.sys

Loaded driver \SystemRoot\system32\drivers\luafv.sys

Loaded driver \SystemRoot\system32\drivers\WudfPf.sys

Loaded driver \SystemRoot\system32\DRIVERS\lltdio.sys

Loaded driver \SystemRoot\system32\DRIVERS\rspndr.sys

Loaded driver \SystemRoot\system32\drivers\HTTP.sys

Loaded driver \SystemRoot\system32\DRIVERS\bowser.sys

Loaded driver \SystemRoot\System32\drivers\mpsdrv.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb10.sys

Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb20.sys

Loaded driver \SystemRoot\system32\drivers\peauth.sys

Loaded driver \SystemRoot\System32\Drivers\secdrv.SYS

Loaded driver \SystemRoot\System32\DRIVERS\srvnet.sys

Loaded driver \SystemRoot\System32\drivers\tcpipreg.sys

Loaded driver \SystemRoot\System32\DRIVERS\srv2.sys

Loaded driver \SystemRoot\System32\DRIVERS\srv.sys

Did not load driver \SystemRoot\System32\DRIVERS\srv.sys

Loaded driver \??\C:\Program Files (x86)\EVGA Precision X\RTCore64.sys

Service Pack 1 7 29 2012 16:10:19.375

Loaded driver \SystemRoot\system32\ntoskrnl.exe

Loaded driver \SystemRoot\system32\hal.dll

Loaded driver \SystemRoot\system32\kdcom.dll

Loaded driver \SystemRoot\system32\mcupdate_GenuineIntel.dll

Loaded driver \SystemRoot\system32\PSHED.dll

Loaded driver \SystemRoot\system32\CLFS.SYS

Loaded driver \SystemRoot\system32\CI.dll

Loaded driver \SystemRoot\system32\drivers\Wdf01000.sys

Loaded driver \SystemRoot\system32\drivers\WDFLDR.SYS

Loaded driver \SystemRoot\system32\drivers\ACPI.sys

Loaded driver \SystemRoot\system32\drivers\WMILIB.SYS

Loaded driver \SystemRoot\system32\drivers\msisadrv.sys

Loaded driver \SystemRoot\system32\drivers\pci.sys

Loaded driver \SystemRoot\system32\drivers\vdrvroot.sys

Loaded driver \SystemRoot\System32\drivers\partmgr.sys

Loaded driver \SystemRoot\system32\drivers\volmgr.sys

Loaded driver \SystemRoot\System32\drivers\volmgrx.sys

Loaded driver \SystemRoot\system32\drivers\pciide.sys

Loaded driver \SystemRoot\system32\drivers\PCIIDEX.SYS

Loaded driver \SystemRoot\system32\drivers\jraid.sys

Loaded driver \SystemRoot\system32\drivers\SCSIPORT.SYS

Loaded driver \SystemRoot\System32\drivers\mountmgr.sys

Loaded driver \SystemRoot\system32\drivers\atapi.sys

Loaded driver \SystemRoot\system32\drivers\ataport.SYS

Loaded driver \SystemRoot\system32\DRIVERS\msahci.sys

Loaded driver \SystemRoot\system32\drivers\amdxata.sys

Loaded driver \SystemRoot\system32\drivers\fltmgr.sys

Loaded driver \SystemRoot\system32\drivers\fileinfo.sys

Loaded driver \SystemRoot\System32\Drivers\Ntfs.sys

Loaded driver \SystemRoot\System32\Drivers\msrpc.sys

Loaded driver \SystemRoot\System32\Drivers\ksecdd.sys

Loaded driver \SystemRoot\System32\Drivers\cng.sys

Loaded driver \SystemRoot\System32\drivers\pcw.sys

Loaded driver \SystemRoot\System32\Drivers\Fs_Rec.sys

Loaded driver \SystemRoot\system32\drivers\ndis.sys

Loaded driver \SystemRoot\system32\drivers\NETIO.SYS

Loaded driver \SystemRoot\System32\Drivers\ksecpkg.sys

Loaded driver \SystemRoot\System32\drivers\tcpip.sys

Loaded driver \SystemRoot\System32\drivers\fwpkclnt.sys

Loaded driver \SystemRoot\system32\drivers\vmstorfl.sys

Loaded driver \SystemRoot\system32\drivers\volsnap.sys

Loaded driver \SystemRoot\System32\Drivers\spldr.sys

Loaded driver \SystemRoot\System32\drivers\rdyboost.sys

Loaded driver \SystemRoot\System32\Drivers\mup.sys

Loaded driver \SystemRoot\System32\drivers\hwpolicy.sys

Loaded driver \SystemRoot\System32\DRIVERS\fvevol.sys

Loaded driver \SystemRoot\system32\drivers\disk.sys

Loaded driver \SystemRoot\system32\drivers\CLASSPNP.SYS

andresuvz · July 29, 2012

Continue:

Did not load driver @hal.inf,%acpi_amd64.devicedesc%;ACPI x64-based PC

Did not load driver @cpu.inf,%intelppm.devicedesc%;Procesador Intel

Did not load driver @msports.inf,%*pnp0501.devicedesc%;Puerto de comunicaciones

Did not load driver @msports.inf,%*pnp0400.devicedesc%;Puerto de impresora

Did not load driver @cpu.inf,%intelppm.devicedesc%;Procesador Intel

Did not load driver @oem16.inf,%nvidia_dev.0e22%;NVIDIA GeForce GTX 460

Did not load driver @ph3xibc1.inf,%pctv110i.devicedesc%;Pinnacle PCTV 110i Capture Device