1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Consistant, random computer crashes

Discussion in 'Virus & Other Malware Removal' started by Reciever80, May 3, 2012.

Thread Status:
Not open for further replies.
  1. Reciever80

    Reciever80 Thread Starter

    Joined:
    Feb 21, 2007
    Messages:
    13
    Hey, thanks for reading. I can't exactly pin point the start of all this, but I've been having computer crashes almost non-stop for the last two weeks. I was hoping you guys could look over my log files, and just double check that it's not any malware causing the issue (just trying to rule out options here). Already ran spybot and MBAM, and removed some stuff with them. If you don't like reading the logs in the forums, I attached them below, and the "attached" file created by DDS is only listed under the attachments; I didn't copy and paste to try and keep with the rules in the sticky. Thanks for reading this, again, and hopefully this will eliminate any bad programs as my issue.

    Setup:

    AMD x6 Phenom II OC'd at 3.9Ghz (core temps stay at 30 C @ idle)
    G.Skill 4x2GB (1333mhz)
    Asus m5A88-EVO motherboard
    Radeon HD 6950, normal clocks
    650W Antec Earthwatts PSU
    Corsair Force 3 SSD 90GB
    Digital Western 750GB
    Win7 Ultimate, 64-bit.

    I've had the setup minus the SSD for well over a year. The CPU's been OC'd since (about) last summer, and I got the SSD back in December. Minus a few hangs here and there (expected with SSD's), I haven't been having the issues I'm having now. BSOD's are common, and there are times where I'll leave my computer on, mid-game, and come back a few minutes later and my computer had restarted. I'm trying to re-download BF3, and everytime I'm updating, at no specific point in the 4 hour process, my computer crashes and I have to restart the whole thing. It's most likely drivers, but I figure I should make sure it's not any of this. Thanks.





    HijackThis Log:

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 9:40:24 PM, on 5/3/2012
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v8.00 (8.00.7601.17514)
    Boot mode: Normal

    Running processes:
    E:\Users\Brent\Desktop\MSI Afterburner\MSIAfterburner.exe
    E:\Users\Brent\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe
    E:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Users\Brent\Downloads\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = E:\Windows\SysWOW64\blank.htm
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (file missing)
    F2 - REG:system.ini: UserInit=userinit.exe,
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live

    \WindowsLiveLogin.dll
    O2 - BHO: Vuze Remote - {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (file missing)
    O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (file missing)
    O4 - HKLM\..\Run: [StartupDelayer] "E:\Program Files (x86)\r2 Studios\Startup Delayer\Startup Launcher.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files (x86)\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [StartCCC] "E:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "E:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    O4 - HKCU\..\Run: [Google Update] "E:\Users\Brent\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] E:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
    O10 - Unknown file in Winsock LSP: e:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: e:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O17 - HKLM\System\CCS\Services\Tcpip\..\{80210E95-C997-4AA4-A9A0-306FB182B304}: NameServer = 192.168.1.1
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - E:\Windows\SysWOW64\Macromed\Flash

    \FlashPlayerUpdateService.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - E:\Windows\System32\alg.exe (file missing)
    O23 - Service: AMD External Events Utility - Unknown owner - E:\Windows\system32\atiesrxx.exe (file missing)
    O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - E:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - E:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - E:\Windows\System32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - E:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - E:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - E:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - E:\Windows\system32\lsass.exe (file missing)
    O23 - Service: MBAMService - Malwarebytes Corporation - E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - E:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - E:\Windows\system32\lsass.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - E:\Windows\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - E:\Windows\system32\PnkBstrB.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - E:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - E:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - E:\Windows\system32\lsass.exe (file missing)
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - E:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - E:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - E:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - E:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - E:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - E:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - E:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - E:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - E:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - E:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - E:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - E:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file

    missing)

    --
    End of file - 8076 bytes

    DDS File: .
    DDS (Ver_2011-08-26.01) - NTFSAMD64
    Internet Explorer: 8.0.7601.17514
    Run by Brent at 21:36:42 on 2012-05-03
    Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8191.6754 [GMT -4:00]
    .
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ===============
    .
    E:\Windows\system32\wininit.exe
    E:\Windows\system32\lsm.exe
    E:\Windows\system32\svchost.exe -k DcomLaunch
    E:\Windows\system32\svchost.exe -k RPCSS
    E:\Windows\system32\atiesrxx.exe
    E:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    E:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    E:\Windows\system32\svchost.exe -k netsvcs
    E:\Windows\system32\svchost.exe -k LocalService
    E:\Windows\system32\svchost.exe -k NetworkService
    E:\Windows\system32\atieclxx.exe
    E:\Windows\System32\spoolsv.exe
    E:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    E:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    E:\Windows\system32\taskeng.exe
    E:\Windows\system32\Dwm.exe
    E:\Windows\Explorer.EXE
    E:\Windows\system32\taskhost.exe
    E:\Windows\system32\taskeng.exe
    E:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    E:\Users\Brent\Desktop\MSI Afterburner\MSIAfterburner.exe
    E:\Program Files\Bonjour\mDNSResponder.exe
    E:\Windows\SysWOW64\PnkBstrA.exe
    E:\Windows\SysWOW64\PnkBstrB.exe
    E:\Windows\system32\svchost.exe -k imgsvc
    E:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    E:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    E:\Users\Brent\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe
    E:\Program Files (x86)\iTunes\iTunesHelper.exe
    E:\Users\Brent\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler64.exe
    E:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    E:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    E:\Windows\system32\SearchIndexer.exe
    E:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    E:\Program Files\Waterfox\firefox.exe
    E:\Program Files\iPod\bin\iPodService.exe
    E:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    E:\Windows\system32\wbem\wmiprvse.exe
    E:\Program Files\Windows Media Player\wmpnetwk.exe
    E:\Windows\System32\svchost.exe -k LocalServicePeerNet
    E:\Windows\system32\DllHost.exe
    E:\Program Files\CCleaner\CCleaner64.exe
    E:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    E:\Program Files\Waterfox\plugin-container.exe
    E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    E:\Windows\system32\sppsvc.exe
    E:\Windows\System32\svchost.exe -k secsvcs
    E:\Windows\system32\wbem\wmiprvse.exe
    E:\Windows\system32\SearchFilterHost.exe
    E:\Windows\system32\SearchProtocolHost.exe
    E:\Windows\SysWOW64\cmd.exe
    E:\Windows\system32\conhost.exe
    E:\Windows\SysWOW64\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uInternet Settings,ProxyOverride = *.local
    uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
    mURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
    mWinlogon: Userinit=userinit.exe,
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - E:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - E:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
    TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
    TB: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File
    uRun: [Google Update] "E:\Users\Brent\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    mRun: [StartupDelayer] "E:\Program Files (x86)\r2 Studios\Startup Delayer\Startup Launcher.exe"
    mRun: [iTunesHelper] "E:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [Adobe ARM] "E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [StartCCC] "E:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "E:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
    mRun: [Malwarebytes' Anti-Malware] "E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    mPolicies-explorer: NoActiveDesktop = 1 (0x1)
    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableLUA = 0 (0x0)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
    TCP: Interfaces\{80210E95-C997-4AA4-A9A0-306FB182B304} : NameServer = 192.168.1.1
    TCP: Interfaces\{80210E95-C997-4AA4-A9A0-306FB182B304}\E4544574541425 : DhcpNameServer = 192.168.1.1
    BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO-X64: AcroIEHelperStub - No File
    BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
    BHO-X64: Vuze Remote - No File
    TB-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
    TB-X64: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File
    mRun-x64: [StartupDelayer] "E:\Program Files (x86)\r2 Studios\Startup Delayer\Startup Launcher.exe"
    mRun-x64: [iTunesHelper] "E:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun-x64: [Adobe ARM] "E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun-x64: [StartCCC] "E:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun-x64: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "E:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
    mRun-x64: [Malwarebytes' Anti-Malware] "E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    Hosts: 127.0.0.1 www.spywareinfo.com
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - E:\Users\Brent\AppData\Roaming\Mozilla\Firefox\Profiles\ccw6u6qj.default\
    FF - prefs.js: network.proxy.type - 0
    FF - plugin: E:\Program Files\Java\jre6\bin\plugin2\npdeployJava1.dll
    FF - plugin: E:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
    FF - plugin: E:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
    FF - plugin: E:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrlui.dll
    FF - plugin: E:\Users\Brent\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
    FF - plugin: E:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_233.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R1 vwififlt;Virtual WiFi Filter Driver;E:\Windows\system32\DRIVERS\vwififlt.sys --> E:\Windows\system32\DRIVERS\vwififlt.sys [?]
    R2 AdobeARMservice;Adobe Acrobat Update Service;E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
    R2 AMD External Events Utility;AMD External Events Utility;E:\Windows\system32\atiesrxx.exe --> E:\Windows\system32\atiesrxx.exe [?]
    R2 AMD FUEL Service;AMD FUEL Service;E:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-4-5 361984]
    R2 AODDriver4.1;AODDriver4.1;E:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-3-5 53888]
    R2 MBAMService;MBAMService;E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-5-3 654408]
    R2 SBSDWSCService;SBSD Security Center Service;E:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2012-4-30 1153368]
    R3 amdiox64;AMD IO Driver;E:\Windows\system32\DRIVERS\amdiox64.sys --> E:\Windows\system32\DRIVERS\amdiox64.sys [?]
    R3 amdkmdag;amdkmdag;E:\Windows\system32\DRIVERS\atikmdag.sys --> E:\Windows\system32\DRIVERS\atikmdag.sys [?]
    R3 amdkmdap;amdkmdap;E:\Windows\system32\DRIVERS\atikmpag.sys --> E:\Windows\system32\DRIVERS\atikmpag.sys [?]
    R3 athur;Wireless Network Adapter Service;E:\Windows\system32\DRIVERS\athurx.sys --> E:\Windows\system32\DRIVERS\athurx.sys [?]
    R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;E:\Windows\system32\drivers\AtihdW76.sys --> E:\Windows\system32\drivers\AtihdW76.sys [?]
    R3 MBAMProtector;MBAMProtector;\??\E:\Windows\system32\drivers\mbam.sys --> E:\Windows\system32\drivers\mbam.sys [?]
    R3 RTCore64;RTCore64;E:\Users\Brent\Desktop\MSI Afterburner\RTCore64.sys [2012-3-6 14648]
    R3 RTL8167;Realtek 8167 NT Driver;E:\Windows\system32\DRIVERS\Rt64win7.sys --> E:\Windows\system32\DRIVERS\Rt64win7.sys [?]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;E:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;E:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S2 gupdate;Google Update Service (gupdate);E:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-3-26 116648]
    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;E:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-3 253088]
    S3 gupdatem;Google Update Service (gupdatem);E:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-3-26 116648]
    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;E:\Windows\system32\drivers\rdpvideominiport.sys --> E:\Windows\system32\drivers\rdpvideominiport.sys [?]
    S3 TsUsbFlt;TsUsbFlt;E:\Windows\system32\drivers\tsusbflt.sys --> E:\Windows\system32\drivers\tsusbflt.sys [?]
    S3 USBAAPL64;Apple Mobile USB Driver;E:\Windows\system32\Drivers\usbaapl64.sys --> E:\Windows\system32\Drivers\usbaapl64.sys [?]
    S3 WatAdminSvc;Windows Activation Technologies Service;E:\Windows\system32\Wat\WatAdminSvc.exe --> E:\Windows\system32\Wat\WatAdminSvc.exe [?]
    .
    =============== Created Last 30 ================
    .
    2012-05-04 00:07:40 -------- d-----w- E:\Users\Brent\AppData\Roaming\Malwarebytes
    2012-05-04 00:07:37 24904 ----a-w- E:\Windows\System32\drivers\mbam.sys
    2012-05-04 00:07:37 -------- d-----w- E:\ProgramData\Malwarebytes
    2012-05-04 00:07:37 -------- d-----w- E:\Program Files (x86)\Malwarebytes' Anti-Malware
    2012-05-03 22:08:07 8917360 ----a-w- E:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E055F24B-5382-448B-947F-B49244BFA78D}\mpengine.dll
    2012-05-02 20:24:44 -------- d-----w- E:\Windows\System32\appmgmt
    2012-05-02 20:18:39 -------- d-----w- E:\Program Files (x86)\AMD APP
    2012-05-01 20:49:06 -------- d-----w- E:\Program Files (x86)\AMD AVT
    2012-05-01 20:49:05 -------- d-----w- E:\Program Files\Common Files\ATI Technologies
    2012-05-01 20:49:05 -------- d-----w- E:\Program Files (x86)\Common Files\ATI Technologies
    2012-05-01 20:44:17 -------- d-----w- E:\Program Files\ATI Technologies
    2012-04-30 21:40:26 -------- d-----w- E:\ProgramData\Spybot - Search & Destroy
    2012-04-30 21:40:26 -------- d-----w- E:\Program Files (x86)\Spybot - Search & Destroy
    2012-04-30 19:57:59 2580552 ----a-w- E:\Windows\SysWow64\pbsvc.exe
    2012-04-27 01:40:05 -------- d-----w- E:\Program Files (x86)\Flawless Widescreen
    2012-04-19 22:28:05 -------- d-----w- E:\AMD
    2012-04-19 22:23:33 -------- d-----w- E:\Program Files (x86)\WinSCP
    2012-04-19 03:04:47 283304 ----a-w- E:\Windows\SysWow64\PnkBstrB.xtr
    2012-04-19 03:04:04 -------- d-----w- E:\Users\Brent\AppData\Local\ESN Sonar
    2012-04-19 01:15:41 -------- d-----w- E:\Users\Brent\AppData\Local\PunkBuster
    2012-04-19 01:00:06 -------- d-----w- E:\Program Files (x86)\Battlelog Web Plugins
    2012-04-12 19:32:01 -------- d-----w- E:\Program Files (x86)\RADVideo
    2012-04-12 19:24:58 -------- d-----w- E:\Program Files (x86)\Common Files\BioWare
    2012-04-11 20:10:09 5559152 ----a-w- E:\Windows\System32\ntoskrnl.exe
    2012-04-11 20:10:09 3968368 ----a-w- E:\Windows\SysWow64\ntkrnlpa.exe
    2012-04-11 20:10:08 3913072 ----a-w- E:\Windows\SysWow64\ntoskrnl.exe
    2012-04-11 20:09:39 81408 ----a-w- E:\Windows\System32\imagehlp.dll
    2012-04-11 20:09:39 5120 ----a-w- E:\Windows\SysWow64\wmi.dll
    2012-04-11 20:09:39 5120 ----a-w- E:\Windows\System32\wmi.dll
    2012-04-11 20:09:39 23408 ----a-w- E:\Windows\System32\drivers\fs_rec.sys
    2012-04-11 20:09:39 220672 ----a-w- E:\Windows\System32\wintrust.dll
    2012-04-11 20:09:39 172544 ----a-w- E:\Windows\SysWow64\wintrust.dll
    2012-04-11 20:09:39 159232 ----a-w- E:\Windows\SysWow64\imagehlp.dll
    2012-04-11 19:41:03 -------- d-----w- E:\Users\Brent\AppData\Local\ElevatedDiagnostics
    2012-04-11 02:03:10 -------- d-----w- E:\Program Files (x86)\MixMeister BPM Analyzer
    2012-04-11 01:44:45 -------- d-----w- E:\Program Files\PeerBlock
    2012-04-11 01:37:02 -------- d-----w- E:\Users\Brent\.swt
    2012-04-11 01:37:01 -------- d-----w- E:\Users\Brent\AppData\Roaming\Azureus
    2012-04-11 01:36:49 -------- d-----w- E:\Program Files (x86)\Vuze
    2012-04-11 01:36:47 -------- d-----w- E:\Users\Brent\AppData\Local\Conduit
    2012-04-11 01:36:47 -------- d-----w- E:\Program Files (x86)\Conduit
    2012-04-09 01:06:19 -------- d-----w- E:\Users\Brent\AppData\Roaming\Ableton
    2012-04-09 01:06:19 -------- d-----w- E:\ProgramData\Ableton
    2012-04-08 17:20:57 -------- d-----w- E:\Users\Brent\AppData\Roaming\vexorian
    2012-04-07 21:34:00 -------- d-----w- E:\ProgramData\xml_param
    2012-04-06 05:22:40 11174400 ----a-w- E:\Windows\System32\drivers\atikmdag.sys
    2012-04-06 02:34:26 187392 ----a-w- E:\Windows\System32\clinfo.exe
    2012-04-06 02:34:10 74752 ----a-w- E:\Windows\System32\OpenVideo64.dll
    2012-04-06 02:34:04 64512 ----a-w- E:\Windows\SysWow64\OpenVideo.dll
    2012-04-06 02:33:56 63488 ----a-w- E:\Windows\System32\OVDecode64.dll
    2012-04-06 02:33:52 56320 ----a-w- E:\Windows\SysWow64\OVDecode.dll
    2012-04-06 02:33:44 16457216 ----a-w- E:\Windows\System32\amdocl64.dll
    2012-04-06 02:32:56 13007872 ----a-w- E:\Windows\SysWow64\amdocl.dll
    2012-04-06 02:22:00 159744 ----a-w- E:\Windows\System32\atiapfxx.exe
    2012-04-06 02:21:52 909312 ----a-w- E:\Windows\SysWow64\aticfx32.dll
    2012-04-06 02:16:52 442368 ----a-w- E:\Windows\System32\ATIDEMGX.dll
    2012-04-06 02:16:46 503808 ----a-w- E:\Windows\System32\atieclxx.exe
    2012-04-06 02:16:02 236544 ----a-w- E:\Windows\System32\atiesrxx.exe
    2012-04-06 02:14:44 120320 ----a-w- E:\Windows\System32\atitmm64.dll
    2012-04-06 02:14:30 21504 ----a-w- E:\Windows\System32\atimuixx.dll
    2012-04-06 02:14:26 59392 ----a-w- E:\Windows\System32\atiedu64.dll
    2012-04-06 02:14:20 43520 ----a-w- E:\Windows\SysWow64\ati2edxx.dll
    2012-04-06 02:13:42 6800896 ----a-w- E:\Windows\SysWow64\atidxx32.dll
    2012-04-06 02:10:50 26181632 ----a-w- E:\Windows\System32\atio6axx.dll
    2012-04-06 01:50:56 19753984 ----a-w- E:\Windows\SysWow64\atioglxx.dll
    2012-04-06 01:35:24 1120768 ----a-w- E:\Windows\System32\atiumd6v.dll
    2012-04-06 01:34:50 1831424 ----a-w- E:\Windows\SysWow64\atiumdmv.dll
    2012-04-06 01:34:34 4731904 ----a-w- E:\Windows\System32\atiumd6a.dll
    2012-04-06 01:34:04 6203392 ----a-w- E:\Windows\SysWow64\atiumdag.dll
    2012-04-06 01:30:16 51200 ----a-w- E:\Windows\System32\aticalrt64.dll
    2012-04-06 01:30:14 46080 ----a-w- E:\Windows\SysWow64\aticalrt.dll
    2012-04-06 01:30:08 44544 ----a-w- E:\Windows\System32\aticalcl64.dll
    2012-04-06 01:30:06 44032 ----a-w- E:\Windows\SysWow64\aticalcl.dll
    2012-04-06 01:29:54 16090624 ----a-w- E:\Windows\System32\aticaldd64.dll
    2012-04-06 01:25:30 13764096 ----a-w- E:\Windows\SysWow64\aticaldd.dll
    2012-04-06 01:23:24 7431680 ----a-w- E:\Windows\System32\atiumd64.dll
    2012-04-06 01:22:54 4795904 ----a-w- E:\Windows\SysWow64\atiumdva.dll
    2012-04-06 01:11:28 514560 ----a-w- E:\Windows\System32\atiadlxx.dll
    2012-04-06 01:11:06 17408 ----a-w- E:\Windows\System32\atig6pxx.dll
    2012-04-06 01:11:04 14848 ----a-w- E:\Windows\SysWow64\atiglpxx.dll
    2012-04-06 01:11:04 14848 ----a-w- E:\Windows\System32\atiglpxx.dll
    2012-04-06 01:11:00 41984 ----a-w- E:\Windows\System32\atig6txx.dll
    2012-04-06 01:10:52 33280 ----a-w- E:\Windows\SysWow64\atigktxx.dll
    2012-04-06 01:10:44 343040 ----a-w- E:\Windows\System32\drivers\atikmpag.sys
    2012-04-06 01:09:48 41984 ----a-w- E:\Windows\SysWow64\atiuxpag.dll
    2012-04-06 01:09:42 44544 ----a-w- E:\Windows\System32\atiu9p64.dll
    2012-04-06 01:09:34 32256 ----a-w- E:\Windows\SysWow64\atiu9pag.dll
    2012-04-06 01:09:02 53248 ----a-w- E:\Windows\System32\drivers\ati2erec.dll
    2012-04-06 01:06:08 54784 ----a-w- E:\Windows\System32\atimpc64.dll
    2012-04-06 01:06:08 54784 ----a-w- E:\Windows\System32\amdpcom64.dll
    2012-04-06 01:06:04 53760 ----a-w- E:\Windows\SysWow64\atimpc32.dll
    2012-04-06 01:06:04 53760 ----a-w- E:\Windows\SysWow64\amdpcom32.dll
    2012-04-04 05:53:56 182160 ----a-w- E:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll
    .
    ==================== Find3M ====================
    .
    2012-05-03 20:45:00 189248 ----a-w- E:\Windows\SysWow64\PnkBstrB.exe
    2012-05-03 20:44:53 75136 ----a-w- E:\Windows\SysWow64\PnkBstrA.exe
    2012-05-03 20:44:53 189248 ----a-w- E:\Windows\SysWow64\PnkBstrB.ex0
    2012-04-14 02:19:09 70304 ----a-w- E:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2012-04-14 02:19:09 418464 ----a-w- E:\Windows\SysWow64\FlashPlayerApp.exe
    2012-04-14 02:19:05 8741536 ----a-w- E:\Windows\SysWow64\FlashPlayerInstaller.exe
    2012-04-06 02:20:04 1067520 ----a-w- E:\Windows\System32\aticfx64.dll
    2012-04-06 02:00:10 64000 ----a-w- E:\Windows\System32\coinst.dll
    2012-04-06 01:54:46 7479296 ----a-w- E:\Windows\System32\atidxx64.dll
    2012-04-06 01:11:20 360448 ----a-w- E:\Windows\SysWow64\atiadlxy.dll
    2012-04-06 01:09:56 54784 ----a-w- E:\Windows\System32\atiuxp64.dll
    2012-03-09 18:07:04 29184 ----a-w- E:\Windows\System32\kdbsdk64.dll
    2012-03-09 18:06:14 24576 ----a-w- E:\Windows\SysWow64\kdbsdk32.dll
    2012-03-06 00:34:25 175616 ----a-w- E:\Windows\System32\msclmd.dll
    2012-03-06 00:34:25 152576 ----a-w- E:\Windows\SysWow64\msclmd.dll
    2012-03-05 22:44:26 0 ----a-w- E:\Windows\ativpsrm.bin
    2012-03-05 22:41:28 525544 ----a-w- E:\Windows\System32\deployJava1.dll
    2012-02-28 06:39:37 1188864 ----a-w- E:\Windows\System32\wininet.dll
    2012-02-28 05:38:52 981504 ----a-w- E:\Windows\SysWow64\wininet.dll
    2012-02-28 04:31:38 1638912 ----a-w- E:\Windows\System32\mshtml.tlb
    2012-02-28 03:52:27 1638912 ----a-w- E:\Windows\SysWow64\mshtml.tlb
    2012-02-23 14:18:36 279656 ------w- E:\Windows\System32\MpSigStub.exe
    2012-02-23 12:32:04 95760 ----a-w- E:\Windows\System32\drivers\AtihdW76.sys
    2012-02-17 06:38:27 1112064 ----a-w- E:\Windows\System32\rdpcorets.dll
    2012-02-17 06:38:26 1031680 ----a-w- E:\Windows\System32\rdpcore.dll
    2012-02-17 05:34:22 826880 ----a-w- E:\Windows\SysWow64\rdpcore.dll
    2012-02-17 04:58:24 210944 ----a-w- E:\Windows\System32\drivers\rdpwd.sys
    2012-02-17 04:57:32 23552 ----a-w- E:\Windows\System32\drivers\tdtcp.sys
    2012-02-15 15:01:50 52736 ----a-w- E:\Windows\System32\drivers\usbaapl64.sys
    2012-02-15 15:01:50 4547944 ----a-w- E:\Windows\System32\usbaaplrc.dll
    2012-02-15 06:03:44 54272 ----a-w- E:\Windows\System32\OpenCL.dll
    2012-02-15 06:03:38 48128 ----a-w- E:\Windows\SysWow64\OpenCL.dll
    2012-02-10 06:36:07 1544192 ----a-w- E:\Windows\System32\DWrite.dll
    2012-02-10 05:38:43 1077248 ----a-w- E:\Windows\SysWow64\DWrite.dll
    .
    ============= FINISH: 21:36:57.71 ===============
     

    Attached Files:

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1051898

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice