WJC19

So I'm going to build a PC its main purpose will be to do some minor graphic design and programming (both web development and software programming). I have about £1000 to spend, I already have the operating software already. What are your recommendations?

Ok for some reason I cant see some replies but the last one telling me to run SFC Scan now etc has worked both the slow down on IE and black screen on Win 7 has worked!! many thanks I also cant see the solved button?

Yes sorry its the same computer the black screen issue has only started over the last few days, should I try the system restore?

Oh Ive also got Bitdefender 2015 and it found no viruses

This is what Ive tried so far to no avail 1. Uninstall any recent Windows Updates (Didn't do anything so installed the important ones again) 2. Tried to reinstall video driver by Right-click the taskbar, and then click Start Task Manager. Click the Processes tab, click explorer.exe, and then click End Process. Click File, and then click New Task (Run). In the Open text box, enter explorer.exe, and then click OK. Click the Start button http://res2.windows.microsoft.com/resbox/en/windows%207/main/4f6cbd09-148c-4dd8-b1f2-48f232a2fd33_818.jpg, enter device manager in the search box, and then, in the search results, click Device Manager. Double-click Display adapters, right-click your display device, click Update Driver Software, and then follow the steps in the wizard that appears. 2. Gone into registery and checked that key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon under shell is explorer.exe 3. Tried system restore to the recommended point None of this has done anything

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-02-2015 Ran by Wes at 2015-02-21 19:02:57 Running from C:\Users\Wes\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D} AS: Bitdefender Antispyware (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY) ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden Adobe Flash Player 16 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 18.20.0.1429 - Bitdefender) Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) Broadcom Gigabit NetLink Controller (HKLM\...\{A84DB02B-9C2B-4272-9D2D-A80E00A56513}) (Version: 14.0.2.3 - Broadcom Corporation) DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON SX430 Series Printer Uninstall (HKLM\...\EPSON SX430 Series) (Version: - SEIKO EPSON Corporation) EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION) GIMP 2.6.10 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.10 - The GIMP Team) ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel® Turbo Boost Technology Driver (HKLM\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation) iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Excel Viewer (HKLM\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation) Network Guide EPSON SX430 Series (HKLM\...\EPSON SX430 Series Netg) (Version: - ) Qualcomm Atheros Fast Reconnect (HKLM\...\{0CA2063D-D43F-41F2-A8AC-A3C4A4C722D2}) (Version: 1.0 - QualComm Atheros) QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek USB 2.0 Card Reader (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30122 - Realtek Semiconductor Corp.) ReiBoot (HKLM\...\ReiBoot) (Version: - Tenorshare, Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) User's Guide EPSON SX430 Series (HKLM\...\EPSON SX430 Series Useg) (Version: - ) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden Windows Phone app for desktop (HKLM\...\{5F71448B-88EB-4357-9A98-8658D4C49C48}) (Version: 1.1.2726.0 - Microsoft Corporation) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{00b7e0ab-817a-44ad-a04b-d1148d524136}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{7c6e29bc-8b8b-4c3d-859e-af6cd158be0f}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c0-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c1-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c2-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c3-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c4-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c5-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c8-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969c9-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969ca-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File CustomCLSID: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000_Classes\CLSID\{88d969d6-f192-11d4-a65f-0040963251e5}\InprocServer32 -> %SystemDrive%\Users\Wes\AppData\Roaming\Microsoft\MSXML2\msxml4.dll No File ==================== Restore Points ========================= 13-02-2015 10:23:23 Windows Update 18-02-2015 13:34:44 Windows Update 19-02-2015 18:13:28 zoek.exe restore point 19-02-2015 18:44:08 Installed AVG 2015 19-02-2015 18:44:38 Installed AVG 2015 19-02-2015 19:48:37 Removed AVG 2015 19-02-2015 19:54:59 Removed AVG 2015 19-02-2015 20:18:18 Installing COMODO Antivirus 19-02-2015 20:20:16 Device Driver Package Install: COMODO Network Service 20-02-2015 12:25:51 Removed GeekBuddy. 20-02-2015 12:51:21 Removed COMODO Antivirus 20-02-2015 13:28:47 Removed Java 7 Update 65 20-02-2015 13:31:41 Removed Visual Studio 2012 x86 Redistributables 21-02-2015 15:01:02 Windows Update 21-02-2015 15:27:34 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2015-02-19 18:13 - 2015-02-19 18:13 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {002420C3-EDAC-493C-8ED9-AD1CD7DDB3D3} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION Task: {6BAD1E44-F048-4432-B4A2-508ED3DC0D8E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {83238B53-FE0F-4109-A5AF-6248D9AA3588} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated) Task: {B9551DB8-51F4-4F11-9608-D6D8456EF6F2} - System32\Tasks\{256C0A2C-14D1-438A-9219-90BB088B3ECE} => pcalua.exe -a C:\Users\Wes\Downloads\epson374739eu.exe -d C:\Users\Wes\Downloads Task: {F1C52B8B-64B7-4E70-9E97-8A965301445D} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============== 2015-02-20 12:48 - 2014-08-27 16:30 - 00204280 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll 2015-02-20 12:47 - 2013-09-03 14:29 - 00095088 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll 2015-02-20 12:48 - 2014-12-17 14:32 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui 2015-02-20 12:48 - 2012-10-29 14:22 - 00130656 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll 2015-02-20 13:07 - 2015-02-20 13:08 - 00678616 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00042_002\ashttpbr.mdl 2015-02-20 13:07 - 2015-02-20 13:07 - 00493216 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00042_002\ashttpdsp.mdl 2015-02-20 13:07 - 2015-02-20 13:08 - 02187048 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00042_002\ashttpph.mdl 2015-02-20 13:07 - 2015-02-20 13:08 - 01135424 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_00042_002\ashttprbl.mdl 2014-04-23 15:05 - 2014-04-23 15:05 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-20 14:45 - 2010-10-20 14:45 - 08801120 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Windows\system32\Drivers\BdfNdisf6.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\bdvedisk.sys:$CmdTcID AlternateDataStreams: C:\Users\Wes\Desktop\FRST.exe:BDU ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2092696980-4044864727-2507283134-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Wes\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-2092696980-4044864727-2507283134-500 - Administrator - Disabled) Guest (S-1-5-21-2092696980-4044864727-2507283134-501 - Limited - Disabled) Hannah (S-1-5-21-2092696980-4044864727-2507283134-1003 - Administrator - Enabled) => C:\Users\Hannah HomeGroupUser$ (S-1-5-21-2092696980-4044864727-2507283134-1002 - Limited - Enabled) Wes (S-1-5-21-2092696980-4044864727-2507283134-1000 - Administrator - Enabled) => C:\Users\Wes ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/20/2015 00:54:55 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost (4256) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while opening logfile C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (02/20/2015 00:54:55 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost (4256) WebCacheLocal: An attempt to open the file "C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). Error: (02/20/2015 00:54:45 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost (4256) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while opening logfile C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (02/20/2015 00:54:45 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost (4256) WebCacheLocal: An attempt to open the file "C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). Error: (02/20/2015 00:54:35 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost (4256) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while opening logfile C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (02/20/2015 00:54:35 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost (4256) WebCacheLocal: An attempt to open the file "C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). Error: (02/20/2015 00:54:25 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost (4256) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while opening logfile C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log. Error: (02/20/2015 00:54:25 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost (4256) WebCacheLocal: An attempt to open the file "C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8). Error: (02/19/2015 08:37:46 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisStatusChangeCisStatusChange//./root/cis Error: (02/19/2015 08:37:46 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisNotificationCisNotification//./root/cis System errors: ============= Error: (02/21/2015 06:56:50 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (02/21/2015 03:41:43 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (02/21/2015 03:24:38 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (02/21/2015 02:58:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (02/20/2015 03:16:50 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (02/20/2015 01:43:00 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (02/20/2015 01:17:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (02/20/2015 01:16:40 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: The Bitdefender Virus Shield service hung on starting. Error: (02/20/2015 01:00:51 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (02/20/2015 00:27:09 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: The following fatal alert was generated: 10. The internal error state is 10. Microsoft Office Sessions: ========================= Error: (02/20/2015 00:54:55 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (02/20/2015 00:54:55 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process. Error: (02/20/2015 00:54:45 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (02/20/2015 00:54:45 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process. Error: (02/20/2015 00:54:35 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (02/20/2015 00:54:35 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process. Error: (02/20/2015 00:54:25 PM) (Source: ESENT) (EventID: 455) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8) Error: (02/20/2015 00:54:25 PM) (Source: ESENT) (EventID: 489) (User: ) Description: DllHost4256WebCacheLocal: C:\Users\Wes\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process. Error: (02/19/2015 08:37:46 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisStatusChangeCisStatusChange//./root/cis Error: (02/19/2015 08:37:46 PM) (Source: WinMgmt) (EventID: 24) (User: ) Description: CisWmiSELECT * FROM CisNotificationCisNotification//./root/cis CodeIntegrity Errors: =================================== Date: 2015-01-02 11:12:48.475 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_windows-defender-modern-app_31bf3856ad364e35_6.3.9600.17079_none_75963e11d81cc880\MpUXSrv.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:48.475 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_windows-defender-modern-app_31bf3856ad364e35_6.3.9600.17079_none_75963e11d81cc880\MpUXSrv.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:48.428 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_windows-defender-modern-app_31bf3856ad364e35_6.3.9600.16384_none_7586892dd8294392\MpUXSrv.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:48.428 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_windows-defender-modern-app_31bf3856ad364e35_6.3.9600.16384_none_7586892dd8294392\MpUXSrv.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:46.276 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_sonicwall-vpnplugin-appx_31bf3856ad364e35_6.3.9600.16408_none_5b5570c6280796ea\MobileConnectVpnPluginAppBg.dll because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:46.182 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_sonicwall-vpnplugin-appx_31bf3856ad364e35_6.3.9600.16408_none_5b5570c6280796ea\MobileConnectVpnPluginApp.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:46.166 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_sonicwall-vpnplugin-appx_31bf3856ad364e35_6.3.9600.16408_none_5b5570c6280796ea\MobileConnectVpnPluginApp.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:35.634 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.3.9600.16384_none_29133e5ca8956c97\wlrmdr.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:35.634 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.3.9600.16384_none_29133e5ca8956c97\wlrmdr.exe because the set of per-page image hashes could not be found on the system. Date: 2015-01-02 11:12:34.870 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\WinSxS\x86_microsoft-windows-webservices_31bf3856ad364e35_6.3.9600.17031_none_a34f0f044a261f82\webservices.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel® Core i5 CPU M 480 @ 2.67GHz Percentage of memory in use: 64% Total physical RAM: 2358.7 MB Available physical RAM: 842.62 MB Total Pagefile: 4715.7 MB Available Pagefile: 2896.74 MB Total Virtual: 2047.88 MB Available Virtual: 1895.52 MB ==================== Drives ================================ Drive c: (Win 7) (Fixed) (Total:175.86 GB) (Free:75.6 GB) NTFS Drive e: (Win 8) (Fixed) (Total:122.13 GB) (Free:108.42 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 04E7318A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=175.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=122.1 GB) - (Type=07 NTFS) ==================== End Of Log ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-02-2015 Ran by Wes (administrator) on WES-PC on 21-02-2015 18:58:56 Running from C:\Users\Wes\Desktop Loaded Profiles: Wes (Available profiles: Wes & Hannah) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: English (United States) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe (ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\qttask.exe [421888 2015-02-02] (Apple Inc.) HKLM\...\Run: [bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1861032 2015-02-20] (Bitdefender) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated) HKU\S-1-5-21-2092696980-4044864727-2507283134-1000\...\Run: [bitdefender Wallet Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [671400 2015-02-20] (Bitdefender) HKU\S-1-5-21-2092696980-4044864727-2507283134-1000\...\RunOnce: [Adobe Speed Launcher] => 1424544956 ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender) ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender) ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender) ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll (Bitdefender) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms} BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender) Toolbar: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender) Toolbar: HKU\S-1-5-21-2092696980-4044864727-2507283134-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://qtinstall.apple.com/qtactivex/qtplugin.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0 FireFox: ======== FF ProfilePath: C:\Users\Wes\AppData\Roaming\Mozilla\Firefox\Profiles\g0sf9cph.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdwteff FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\bdwteff [2015-02-20] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-02-20] FF Extension: No Name - C:\Users\Wes\AppData\Roaming\Mozilla\Firefox\Profiles\g0sf9cph.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [Not Found] FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Chrome: ======= CHR HKLM\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - https://clients2.google.com/service/update2/crx ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY) S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [69880 2014-12-09] (Bitdefender) S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [81704 2013-07-08] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [54424 2014-10-27] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1308464 2015-02-20] (Bitdefender) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) S4 ZAtheros Wlan Agent; C:\Program Files\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe [57344 2011-08-10] (Atheros) [File not signed] S4 OutfoxTvService; C:\Program Files\OutfoxTV\OutfoxTvService.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1083448 2015-02-20] (BitDefender) R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [243456 2015-02-20] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [548336 2015-02-20] (BitDefender) R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [77632 2015-02-20] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [93648 2012-10-29] (BitDefender LLC) S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [108008 2013-07-02] (Bitdefender SRL) S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [66832 2015-02-20] (BitDefender SRL) R1 bdselfpr; C:\Program Files\Bitdefender\Bitdefender 2015\bdselfpr.sys [135600 2013-07-26] (BitDefender LLC) R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [72704 2015-02-20] (BitDefender) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [169992 2014-10-22] (BitDefender LLC) R3 SjtWinIo; C:\Windows\System32\DRIVERS\SjtWinIo.sys [8704 2014-08-22] (SpeedJet Technology INC.) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [408280 2014-10-15] (BitDefender S.R.L.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-21 18:58 - 2015-02-21 19:01 - 00009857 _____ () C:\Users\Wes\Desktop\FRST.txt 2015-02-21 18:58 - 2015-02-21 18:58 - 01126400 _____ (Farbar) C:\Users\Wes\Desktop\FRST.exe 2015-02-21 15:34 - 2012-08-23 14:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-21 15:34 - 2012-08-23 14:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-21 15:34 - 2012-08-23 13:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2015-02-21 15:34 - 2012-08-23 11:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2015-02-21 15:34 - 2012-08-23 10:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-02-21 15:32 - 2015-02-21 15:32 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-21 15:32 - 2015-02-21 15:32 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2015-02-21 15:32 - 2015-02-21 15:32 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-21 15:32 - 2015-02-21 15:32 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-21 15:32 - 2015-02-21 15:32 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-21 15:32 - 2015-02-21 15:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-21 15:32 - 2015-02-21 15:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-02-21 15:28 - 2013-10-02 00:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2015-02-21 15:28 - 2013-10-02 00:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-02-21 15:28 - 2013-10-02 00:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-02-21 15:28 - 2013-10-02 00:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2015-02-21 15:28 - 2013-10-02 00:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2015-02-21 15:28 - 2013-10-01 23:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2015-02-21 15:28 - 2013-10-01 23:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2015-02-21 15:28 - 2013-10-01 23:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-21 15:28 - 2013-10-01 23:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-21 15:28 - 2013-10-01 22:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2015-02-21 15:28 - 2013-10-01 22:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2015-02-21 15:28 - 2013-10-01 20:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-20 13:34 - 2015-02-20 13:34 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-02-20 13:34 - 2015-02-20 13:34 - 00001994 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2015-02-20 13:34 - 2015-02-20 13:34 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2015-02-20 13:34 - 2015-02-20 13:34 - 00000000 ____D () C:\Program Files\Adobe 2015-02-20 13:29 - 2015-01-09 02:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2015-02-20 13:29 - 2015-01-09 02:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2015-02-20 13:29 - 2015-01-09 02:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2015-02-20 13:23 - 2015-02-20 13:23 - 00000000 ____D () C:\Users\Wes\AppData\Temp 2015-02-20 13:05 - 2015-02-20 13:05 - 00074000 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuiskin.dll 2015-02-20 13:04 - 2015-02-20 13:04 - 01083448 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2015-02-20 13:00 - 2015-02-20 13:00 - 00000385 _____ () C:\Windows\system32\user_gensett.xml 2015-02-20 13:00 - 2015-02-20 13:00 - 00000385 _____ () C:\Users\Wes\AppData\Roaminguser_gensett.xml 2015-02-20 12:53 - 2015-02-20 12:53 - 00801572 _____ () C:\ProgramData\1424435741.bdinstall.bin 2015-02-20 12:50 - 2015-02-20 12:50 - 00002131 _____ () C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk 2015-02-20 12:50 - 2015-02-20 12:50 - 00000308 ____H () C:\bdr-cf01 2015-02-20 12:50 - 2015-02-20 12:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2015-02-20 12:50 - 2015-02-20 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2015 2015-02-20 12:49 - 2015-02-20 13:09 - 00000000 ____D () C:\ProgramData\BDLogging 2015-02-20 12:48 - 2015-02-20 13:03 - 00026624 _____ (BitDefender SRL) C:\Windows\system32\bdsandboxuh.dll 2015-02-20 12:48 - 2015-02-20 12:57 - 00066832 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys 2015-02-20 12:48 - 2015-02-20 12:50 - 00077632 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys 2015-02-20 12:48 - 2015-02-20 12:50 - 00072704 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2015-02-20 12:48 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll 2015-02-20 12:47 - 2015-02-20 13:03 - 00243456 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys 2015-02-20 12:47 - 2015-02-20 12:57 - 00548336 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2015-02-20 12:40 - 2015-02-20 12:55 - 00000000 ____D () C:\Users\Wes\AppData\Roaming\Bitdefender 2015-02-20 12:40 - 2015-02-20 12:50 - 00253404 ____H () C:\bdr-ld01 2015-02-20 12:40 - 2015-02-20 12:50 - 00009216 ____H () C:\bdr-ld01.mbr 2015-02-20 12:40 - 2014-07-04 17:47 - 39361413 ____H () C:\bdr-im01.gz 2015-02-20 12:40 - 2012-08-15 15:28 - 02294848 ____H () C:\bdr-bz01 2015-02-20 12:35 - 2015-02-20 12:51 - 00000000 ____D () C:\ProgramData\Bitdefender 2015-02-20 12:35 - 2015-02-20 12:40 - 00000000 ____D () C:\Program Files\Bitdefender 2015-02-20 12:35 - 2015-02-20 12:35 - 00000000 ____D () C:\Users\Wes\AppData\Roaming\QuickScan 2015-02-20 12:35 - 2015-02-20 12:35 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender 2015-02-20 12:35 - 2014-10-22 09:29 - 00169992 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2015-02-20 12:35 - 2014-10-15 16:14 - 00408280 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2015-02-19 20:43 - 2015-02-19 20:44 - 00000075 _____ () C:\Windows\system32\debug.log 2015-02-19 20:41 - 2015-02-19 20:41 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar 2015-02-19 20:17 - 2015-02-20 13:00 - 00000000 ____D () C:\Program Files\Comodo 2015-02-19 20:16 - 2015-02-20 13:00 - 00000000 ____D () C:\ProgramData\Comodo 2015-02-19 19:56 - 2015-02-19 20:09 - 00000000 ____D () C:\Users\Wes\AppData\Roaming\K9AMW 2015-02-19 19:55 - 2015-01-30 16:23 - 00017680 _____ () C:\Windows\system32\roboot.exe 2015-02-19 19:37 - 2015-02-19 19:37 - 00012778 _____ () C:\Users\Wes\Desktop\Gateway.htm 2015-02-19 18:46 - 2015-02-19 18:46 - 00000000 ____D () C:\Users\Wes\AppData\Roaming\TuneUp Software 2015-02-19 18:42 - 2015-02-19 20:37 - 00000000 ____D () C:\ProgramData\MFAData 2015-02-19 18:42 - 2015-02-19 18:42 - 00000000 ____D () C:\Users\Wes\AppData\Local\MFAData 2015-02-19 18:22 - 2015-02-19 18:11 - 00024064 _____ () C:\Windows\zoek-delete.exe 2015-02-19 18:13 - 2015-02-19 18:24 - 00013516 _____ () C:\zoek-results.log 2015-02-19 18:11 - 2015-02-19 18:21 - 00000000 ____D () C:\zoek_backup 2015-02-16 22:01 - 2015-02-21 18:59 - 00000000 ____D () C:\FRST 2015-02-16 18:39 - 2015-02-16 18:39 - 00448512 _____ (OldTimer Tools) C:\Users\Wes\Downloads\TFC.exe 2015-02-16 15:08 - 2015-02-16 15:08 - 00290304 _____ (Microsoft Corporation) C:\Windows\system32\subinacl.exe 2015-02-16 15:07 - 2015-02-19 18:08 - 00000000 ____D () C:\Program Files\Adware-Removal-Tool 2015-02-16 15:01 - 2015-02-16 15:03 - 00000000 ____D () C:\AdwCleaner 2015-02-16 13:56 - 2015-02-16 13:57 - 15507456 _____ () C:\Users\Wes\Downloads\dban-2.2.8_i586.iso 2015-02-15 15:16 - 2015-02-15 15:17 - 00000000 ____D () C:\Users\Wes\Desktop\Backup 2015-02-11 15:00 - 2015-01-15 07:46 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-11 15:00 - 2015-01-15 07:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-02-11 15:00 - 2015-01-15 07:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-02-11 15:00 - 2015-01-15 07:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-02-11 15:00 - 2015-01-15 07:42 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-11 15:00 - 2015-01-15 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-02-11 15:00 - 2015-01-15 07:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-02-11 15:00 - 2015-01-15 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-02-11 15:00 - 2015-01-15 07:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-11 15:00 - 2015-01-15 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-02-11 15:00 - 2015-01-15 07:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-11 15:00 - 2015-01-15 04:21 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-11 15:00 - 2015-01-14 05:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-02-11 15:00 - 2015-01-14 05:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-11 15:00 - 2015-01-09 01:45 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-11 14:59 - 2015-02-04 02:54 - 00482304 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-02-11 14:59 - 2015-02-04 02:53 - 00767488 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-02-11 14:59 - 2015-02-04 02:53 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-02-11 14:59 - 2015-02-04 02:53 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-02-11 14:59 - 2015-02-04 02:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-02-11 14:59 - 2015-02-04 02:53 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-02-11 14:59 - 2015-02-04 02:49 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-02-11 14:59 - 2015-01-27 23:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-02-11 14:59 - 2015-01-13 02:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-11 14:59 - 2014-12-12 05:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-11 14:59 - 2014-12-08 02:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-11 14:59 - 2014-11-26 03:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-11 14:59 - 2014-07-07 01:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-02-11 14:59 - 2014-07-07 01:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-02-05 19:31 - 2015-02-05 19:31 - 00002461 _____ () C:\Users\Wes\Desktop\Trish.txt 2015-02-02 14:41 - 2015-02-02 14:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2015-02-02 14:38 - 2015-02-02 14:41 - 00000000 ____D () C:\Program Files\QuickTime 2015-01-27 20:02 - 2015-01-27 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-01-27 20:01 - 2015-01-27 20:02 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB 2015-01-27 20:01 - 2015-01-27 20:02 - 00000000 ____D () C:\Program Files\iTunes 2015-01-27 20:01 - 2015-01-27 20:01 - 00000000 ____D () C:\Program Files\iPod 2015-01-27 19:47 - 2015-01-27 19:47 - 00000258 __RSH () C:\Users\Hannah\ntuser.pol 2015-01-24 20:15 - 2015-01-24 20:15 - 00000093 _____ () C:\Users\Wes\Desktop\meals.txt ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-21 18:58 - 2013-09-25 09:52 - 01401549 _____ () C:\Windows\WindowsUpdate.log 2015-02-21 18:55 - 2014-08-25 16:17 - 00013295 _____ () C:\Windows\setupact.log 2015-02-21 18:55 - 2009-07-14 04:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-21 15:45 - 2009-07-14 04:34 - 00022256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-21 15:45 - 2009-07-14 04:34 - 00022256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-21 15:38 - 2009-07-14 02:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-21 15:34 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-02-21 15:33 - 2014-06-09 17:58 - 00015407 _____ () C:\Windows\IE11_main.log 2015-02-21 15:21 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\tracing 2015-02-21 15:15 - 2013-09-25 09:59 - 00905550 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-21 14:56 - 2013-09-26 19:38 - 00123458 _____ () C:\Windows\PFRO.log 2015-02-20 15:48 - 2013-09-25 21:15 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-20 15:17 - 2013-09-25 21:10 - 00000000 ____D () C:\Program Files\Google 2015-02-20 13:37 - 2013-09-25 21:10 - 00000000 ____D () C:\Users\Wes\AppData\Local\Google 2015-02-20 13:36 - 2015-01-04 19:45 - 00000000 ____D () C:\Users\Wes\AppData\Local\Adobe 2015-02-20 13:34 - 2013-11-01 21:55 - 00000000 ____D () C:\ProgramData\Adobe 2015-02-20 13:19 - 2014-03-13 08:49 - 00000000 ____D () C:\Windows\Minidump 2015-02-20 13:19 - 2009-07-14 04:52 - 00000000 ____D () C:\Windows\Offline Web Pages 2015-02-19 20:21 - 2015-01-21 15:59 - 00000000 ____D () C:\Users\Wes\Desktop\Photos 2015-02-19 20:14 - 2014-06-07 12:57 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2015-02-19 19:08 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\rescache 2015-02-19 18:24 - 2015-01-01 15:13 - 00000008 __RSH () C:\Users\Wes\ntuser.pol 2015-02-19 18:24 - 2013-09-25 09:58 - 00000000 ____D () C:\Users\Wes 2015-02-19 18:21 - 2009-07-14 02:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2015-02-16 21:57 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\system32\NDF 2015-02-11 22:01 - 2009-07-14 04:33 - 00410336 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-11 21:59 - 2014-12-20 19:39 - 00000000 ____D () C:\Windows\system32\appraiser 2015-02-11 21:59 - 2014-05-17 08:31 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-02-11 16:35 - 2013-09-25 10:47 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-11 16:32 - 2013-09-25 10:47 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-11 16:31 - 2013-09-28 19:34 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-02-11 16:31 - 2009-07-14 02:04 - 00000478 _____ () C:\Windows\win.ini 2015-02-07 19:50 - 2014-06-07 12:57 - 00000000 ____D () C:\Users\Wes\AppData\Roaming\Mozilla 2015-02-06 21:00 - 2013-10-31 08:12 - 00018937 _____ () C:\Users\Wes\Desktop\Joint Outgoings.xlsx 2015-02-06 20:48 - 2013-09-25 21:15 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-02-06 20:48 - 2013-09-25 21:15 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-01-28 21:19 - 2013-11-03 19:04 - 00000000 ____D () C:\Users\Hannah\AppData\Roaming\Skype 2015-01-28 21:08 - 2014-08-10 19:53 - 00000000 ____D () C:\Users\Hannah\Desktop\Photos 2015-01-28 20:00 - 2009-07-14 04:52 - 00000000 ____D () C:\Windows\system32\FxsTmp 2015-01-27 20:01 - 2014-09-18 19:03 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 2015-01-27 20:01 - 2013-12-17 18:22 - 00000000 ____D () C:\Program Files\Common Files\Apple 2015-01-27 19:47 - 2013-10-01 17:22 - 00000000 ____D () C:\Users\Hannah 2015-01-25 15:44 - 2015-01-02 11:04 - 00016212 _____ () C:\Users\Wes\Desktop\Final Outgoings.xlsx 2015-01-24 19:21 - 2015-01-01 15:40 - 00000000 ____D () C:\Users\Wes\.gimp-2.6 ==================== Files in the root of some directories ======= 2015-02-20 12:53 - 2015-02-20 12:53 - 0801572 _____ () C:\ProgramData\1424435741.bdinstall.bin ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-19 19:00 ==================== End Of Log ============================

Hanging on black screen on bootup My Windows 7 PC has started hanging on a black screen with the cursor going around for about 20 seconds on bootup (just before my Win7 login screen). Any ideas whats causing this could it be a Windows update as this is the only thing Ive recently done

I used ESET, each time I scan though it says its still present the log I below ESET C:\AdwCleaner\Quarantine\C\Program Files\Settings Manager\smdmf\del_DM_LL_nsk851E.dll.vir a variant of Win32/Toolbar.SearchSuite.C potentially unwanted application deleted - quarantined C:\AdwCleaner\Quarantine\C\Windows\system32\roboot.exe.vir a variant of Win32/Systweak.A potentially unwanted application deleted - quarantined C:\Program Files\Adware-Removal-Tool\ARTP3.exe MSIL/FakeTool.PS trojan cleaned by deleting - quarantined C:\Users\Wes\Downloads\cbsidlm-cbsi183-ReiBoot-SEO-76037571.exe a variant of Win32/CNETInstaller.B potentially unwanted application deleted - quarantined C:\Users\Wes\Downloads\Internet Explorer Download Manager.exe a variant of Win32/InstallCore.TU potentially unwanted application deleted - quarantined C:\Windows\System32\pmls.dll a variant of Win32/Adware.RK.AM application cleaned by deleting - quarantined E:\Users\Westley\AppData\Local\Temp\nsgE35C.exe Win32/Conduit.SearchProtect.R potentially unwanted application deleted - quarantined E:\Users\Westley\AppData\Local\Temp\nsp9373.exe Win32/Conduit.SearchProtect.R potentially unwanted application deleted - quarantined E:\Users\Westley\AppData\Local\Temp\nsu6165.tmp a variant of Win32/ClientConnect.A potentially unwanted application deleted - quarantined E:\Users\Westley\AppData\Local\Temp\nsy8A48.exe Win32/Conduit.SearchProtect.R potentially unwanted application deleted - quarantined E:\Users\Westley\Downloads\openofficesuite-setup.exe Win32/DownloadAdmin.G potentially unwanted application deleted - quarantined ESET C:\AdwCleaner\Quarantine\C\Program Files\Settings Manager\smdmf\del_DM_LL_nsk851E.dll.vir a variant of Win32/Toolbar.SearchSuite.C potentially unwanted application deleted - quarantined C:\AdwCleaner\Quarantine\C\Windows\system32\roboot.exe.vir a variant of Win32/Systweak.A potentially unwanted application deleted - quarantined C:\Program Files\Adware-Removal-Tool\ARTP3.exe MSIL/FakeTool.PS trojan cleaned by deleting - quarantined C:\Users\Wes\Downloads\cbsidlm-cbsi183-ReiBoot-SEO-76037571.exe a variant of Win32/CNETInstaller.B potentially unwanted application deleted - quarantined C:\Users\Wes\Downloads\Internet Explorer Download Manager.exe a variant of Win32/InstallCore.TU potentially unwanted application deleted - quarantined C:\Windows\System32\pmls.dll a variant of Win32/Adware.RK.AM application cleaned by deleting - quarantined E:\Users\Westley\AppData\Local\Temp\nsgE35C.exe Win32/Conduit.SearchProtect.R potentially unwanted application deleted - quarantined E:\Users\Westley\AppData\Local\Temp\nsp9373.exe Win32/Conduit.SearchProtect.R potentially unwanted application deleted - quarantined E:\Users\Westley\AppData\Local\Temp\nsu6165.tmp a variant of Win32/ClientConnect.A potentially unwanted application deleted - quarantined E:\Users\Westley\AppData\Local\Temp\nsy8A48.exe Win32/Conduit.SearchProtect.R potentially unwanted application deleted - quarantined E:\Users\Westley\Downloads\openofficesuite-setup.exe Win32/DownloadAdmin.G potentially unwanted application deleted - quarantined

Anyone heard of this? ran a scan and it flagged it up, should I be concerned? Can I get rid of it?

Hi just wondering if someone would be willing to share their wisdom with me. Im able to build PCs and understand the basic operation of them and can fix some problems. Where I really fall down is viruses/malware/spyware, what scanners (free/paid) do you use and from this information how do you remove them (manual/use a program). I struggle to understand scan results and am wondering what I need to learn ie more about the registery etc? Many thanks in advance