1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Keyboard gliches and files lost

Discussion in 'Virus & Other Malware Removal' started by RJSM644, Nov 20, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. RJSM644

    RJSM644 Thread Starter

    Joined:
    Nov 9, 2009
    Messages:
    4
    Problem;I have been typing and others letters, words have been placed in place of what i am typing. Documents that I have been working on have been completely removed. While trying to type in search engines, keyboard stops working, at times letters i type are like very third or two in a row disappear. It will take two or three times of clicking a link or button to gett he process to work. Seems like its just the beginning of what could be a major issue. Scans from trend micro housecall and web root, provide nothing. Also concerned of keylogger, but not positive.

    Tech Support Guy System Info Utility version 1.0.0.2
    OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
    Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz, Intel64 Family 6 Model 42 Stepping 7
    Processor Count: 4
    RAM: 3992 Mb
    Graphics Card: Intel(R) HD Graphics 3000, 1804 Mb
    Hard Drives: C: Total - 588927 MB, Free - 535861 MB; D: Total - 21247 MB, Free - 2293 MB;
    Motherboard: Hewlett-Packard, 183D
    Antivirus: Webroot SecureAnywhere, Updated and Enabled

    HJT Log FIle
    [FONT=&quot]Logfile of Trend Micro HijackThis v2.0.4[/FONT]
    [FONT=&quot]Scan saved at 8:26:13 AM, on 11/20/2012[/FONT]
    [FONT=&quot]Platform: Windows 7 SP1 (WinNT 6.00.3505)[/FONT]
    [FONT=&quot]MSIE: Internet Explorer v9.00 (9.00.8112.16455)[/FONT]
    [FONT=&quot]Boot mode: Normal[/FONT]

    [FONT=&quot]Running processes:[/FONT]
    [FONT=&quot]C:\Program Files\Webroot\WRSA.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\iTunes\iTunesHelper.exe[/FONT]
    [FONT=&quot]C:\Windows\SysWOW64\RunDll32.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Mozilla Firefox\firefox.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe[/FONT]
    [FONT=&quot]C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[/FONT]
    [FONT=&quot]C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[/FONT]
    [FONT=&quot]C:\Users\Butterfly Baby\Desktop\HijackThis.exe[/FONT]

    [FONT=&quot]R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1[/FONT]
    [FONT=&quot]R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896[/FONT]
    [FONT=&quot]R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1[/FONT]
    [FONT=&quot]R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1[/FONT]
    [FONT=&quot]R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896[/FONT]
    [FONT=&quot]R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896[/FONT]
    [FONT=&quot]R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1[/FONT]
    [FONT=&quot]R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [/FONT]
    [FONT=&quot]R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = [/FONT]
    [FONT=&quot]R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm[/FONT]
    [FONT=&quot]R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local[/FONT]
    [FONT=&quot]R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = [/FONT]
    [FONT=&quot]O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll[/FONT]
    [FONT=&quot]O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll[/FONT]
    [FONT=&quot]O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll[/FONT]
    [FONT=&quot]O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL[/FONT]
    [FONT=&quot]O2 - BHO: Webroot Vault - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\ProgramData\WRData\pkg\LPBar.dll[/FONT]
    [FONT=&quot]O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)[/FONT]
    [FONT=&quot]O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll[/FONT]
    [FONT=&quot]O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)[/FONT]
    [FONT=&quot]O3 - Toolbar: Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [WRSVC] "C:\Program Files\Webroot\WRSA.exe" -ul[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"[/FONT]
    [FONT=&quot]O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"[/FONT]
    [FONT=&quot]O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background[/FONT]
    [FONT=&quot]O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe[/FONT]
    [FONT=&quot]O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64"[/FONT]
    [FONT=&quot]O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727"[/FONT]
    [FONT=&quot]O4 - Global Startup: Bluetooth.lnk = ?[/FONT]
    [FONT=&quot]O4 - Global Startup: Install Webroot FF RunOnce.lnk = C:\Program Files (x86)\Common Files\wruninstall.exe[/FONT]
    [FONT=&quot]O4 - Global Startup: Install Webroot IE RunOnce.lnk = C:\Program Files (x86)\Common Files\wruninstall.exe[/FONT]
    [FONT=&quot]O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000[/FONT]
    [FONT=&quot]O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105[/FONT]
    [FONT=&quot]O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm[/FONT]
    [FONT=&quot]O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm[/FONT]
    [FONT=&quot]O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll[/FONT]
    [FONT=&quot]O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll[/FONT]
    [FONT=&quot]O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll[/FONT]
    [FONT=&quot]O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll[/FONT]
    [FONT=&quot]O9 - Extra button: Webroot - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\ProgramData\WRData\pkg\LPBar.dll[/FONT]
    [FONT=&quot]O9 - Extra 'Tools' menuitem: Webroot - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\ProgramData\WRData\pkg\LPBar.dll[/FONT]
    [FONT=&quot]O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll[/FONT]
    [FONT=&quot]O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll[/FONT]
    [FONT=&quot]O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)[/FONT]
    [FONT=&quot]O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)[/FONT]
    [FONT=&quot]O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm[/FONT]
    [FONT=&quot]O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm[/FONT]
    [FONT=&quot]O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll[/FONT]
    [FONT=&quot]O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll[/FONT]
    [FONT=&quot]O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics[/FONT]
    [FONT=&quot]O16 - DPF: {B3E32D88-8E7F-468F-B0E2-3A300FD4A82C} (Enlite 2.x Simulation Engine Installer) - http://myitlab.pearsoned.com/Pegasus/Modules/SIMIntegration/Resources/ax/stub.cab[/FONT]
    [FONT=&quot]O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL[/FONT]
    [FONT=&quot]O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll[/FONT]
    [FONT=&quot]O18 - Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]O18 - Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL[/FONT]
    [FONT=&quot]O18 - Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]O18 - Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[/FONT]
    [FONT=&quot]O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[/FONT]
    [FONT=&quot]O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe[/FONT]
    [FONT=&quot]O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe[/FONT]
    [FONT=&quot]O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe[/FONT]
    [FONT=&quot]O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe[/FONT]
    [FONT=&quot]O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe[/FONT]
    [FONT=&quot]O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe[/FONT]
    [FONT=&quot]O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe[/FONT]
    [FONT=&quot]O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe[/FONT]
    [FONT=&quot]O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[/FONT]
    [FONT=&quot]O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe[/FONT]
    [FONT=&quot]O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe[/FONT]
    [FONT=&quot]O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe[/FONT]
    [FONT=&quot]O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[/FONT]
    [FONT=&quot]O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[/FONT]
    [FONT=&quot]O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe[/FONT]
    [FONT=&quot]O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)[/FONT]
    [FONT=&quot]O23 - Service: WRSVC - Webroot - C:\Program Files\Webroot\WRSA.exe[/FONT]

    [FONT=&quot]--[/FONT]
    [FONT=&quot]End of file - 15198 bytes[/FONT]


    [FONT=&quot]DDS file[/FONT]




    [FONT=&quot]DDS (Ver_2012-11-20.01) - NTFS_AMD64 [/FONT]
    [FONT=&quot]Internet Explorer: 9.0.8112.16455 BrowserJavaVersion: 10.7.2[/FONT]
    [FONT=&quot]Run by Butterfly Baby at 8:29:43 on 2012-11-20[/FONT]
    [FONT=&quot]Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3992.2215 [GMT -5:00][/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]AV: Webroot SecureAnywhere *Enabled/Updated* {9C0666FC-6C7D-3E97-3C40-0C6B33FC7401}[/FONT]
    [FONT=&quot]SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}[/FONT]
    [FONT=&quot]SP: Webroot SecureAnywhere *Enabled/Updated* {27678718-4A47-3119-06F0-3719487B3EBC}[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]============== Running Processes ===============[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]C:\Windows\system32\lsm.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k DcomLaunch[/FONT]
    [FONT=&quot]C:\Program Files\Webroot\WRSA.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k RPCSS[/FONT]
    [FONT=&quot]C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted[/FONT]
    [FONT=&quot]C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k netsvcs[/FONT]
    [FONT=&quot]C:\Program Files\IDT\WDM\STacSV64.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k LocalService[/FONT]
    [FONT=&quot]C:\Windows\system32\Hpservice.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k NetworkService[/FONT]
    [FONT=&quot]C:\Windows\system32\WLANExt.exe[/FONT]
    [FONT=&quot]C:\Windows\System32\spoolsv.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE[/FONT]
    [FONT=&quot]C:\Program Files\Bonjour\mDNSResponder.exe[/FONT]
    [FONT=&quot]C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe[/FONT]
    [FONT=&quot]C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe[/FONT]
    [FONT=&quot]C:\Program Files\Intel\iCLS Client\HeciServer.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k imgsvc[/FONT]
    [FONT=&quot]C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[/FONT]
    [FONT=&quot]C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe[/FONT]
    [FONT=&quot]C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\wbem\unsecapp.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted[/FONT]
    [FONT=&quot]C:\Windows\system32\taskhost.exe[/FONT]
    [FONT=&quot]C:\Program Files\Webroot\WRSA.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\Dwm.exe[/FONT]
    [FONT=&quot]C:\Windows\Explorer.EXE[/FONT]
    [FONT=&quot]C:\Windows\System32\rundll32.exe[/FONT]
    [FONT=&quot]C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[/FONT]
    [FONT=&quot]C:\Program Files\IDT\WDM\sttray64.exe[/FONT]
    [FONT=&quot]C:\Windows\System32\hkcmd.exe[/FONT]
    [FONT=&quot]C:\Windows\System32\igfxpers.exe[/FONT]
    [FONT=&quot]C:\Windows\System32\StikyNot.exe[/FONT]
    [FONT=&quot]C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\SearchIndexer.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\iTunes\iTunesHelper.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\wbem\wmiprvse.exe[/FONT]
    [FONT=&quot]C:\Program Files\iPod\bin\iPodService.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation[/FONT]
    [FONT=&quot]C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[/FONT]
    [FONT=&quot]C:\Windows\SysWOW64\RunDll32.exe[/FONT]
    [FONT=&quot]C:\Program Files\Windows Media Player\wmpnetwk.exe[/FONT]
    [FONT=&quot]C:\Windows\System32\svchost.exe -k LocalServicePeerNet[/FONT]
    [FONT=&quot]C:\Windows\system32\taskeng.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[/FONT]
    [FONT=&quot]C:\Windows\System32\svchost.exe -k secsvcs[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Mozilla Firefox\firefox.exe[/FONT]
    [FONT=&quot]C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe[/FONT]
    [FONT=&quot]C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[/FONT]
    [FONT=&quot]C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[/FONT]
    [FONT=&quot]C:\Windows\servicing\TrustedInstaller.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\wuauclt.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\SearchProtocolHost.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\SearchFilterHost.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\taskhost.exe[/FONT]
    [FONT=&quot]C:\Windows\system32\wbem\wmiprvse.exe[/FONT]
    [FONT=&quot]C:\Windows\System32\cscript.exe[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]============== Pseudo HJT Report ===============[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll[/FONT]
    [FONT=&quot]BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll[/FONT]
    [FONT=&quot]BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll[/FONT]
    [FONT=&quot]BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL[/FONT]
    [FONT=&quot]BHO: Webroot Vault: {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\ProgramData\WRData\PKG\LPBar.dll[/FONT]
    [FONT=&quot]BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - [/FONT]
    [FONT=&quot]BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll[/FONT]
    [FONT=&quot]TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - [/FONT]
    [FONT=&quot]TB: Webroot Toolbar: {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\PKG\LPBar.dll[/FONT]
    [FONT=&quot]uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background[/FONT]
    [FONT=&quot]uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe[/FONT]
    [FONT=&quot]uRunOnce: [Uninstall C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64] C:\Windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64"[/FONT]
    [FONT=&quot]uRunOnce: [Uninstall C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727] C:\Windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Butterfly Baby\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727"[/FONT]
    [FONT=&quot]mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"[/FONT]
    [FONT=&quot]mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"[/FONT]
    [FONT=&quot]mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe[/FONT]
    [FONT=&quot]mRun: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey[/FONT]
    [FONT=&quot]mRun: [WRSVC] "C:\Program Files\Webroot\WRSA.exe" -ul[/FONT]
    [FONT=&quot]mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe[/FONT]
    [FONT=&quot]mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"[/FONT]
    [FONT=&quot]mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"[/FONT]
    [FONT=&quot]mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"[/FONT]
    [FONT=&quot]StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe[/FONT]
    [FONT=&quot]StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\INSTAL~2.LNK - C:\Program Files (x86)\Common Files\wruninstall.exe[/FONT]
    [FONT=&quot]StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\INSTAL~1.LNK - C:\Program Files (x86)\Common Files\wruninstall.exe[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoViewOnDrive = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoDrives = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: DisableLocalMachineRun = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: DisableLocalMachineRunOnce = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: DisableCurrentUserRun = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: DisableCurrentUserRunOnce = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoDriveTypeAutoRun = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoFile = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: HideClock = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoDevMgrUpdate = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoDFSTab = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoWindowsUpdate = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoEncryptOnMove = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoRunasInstallPrompt = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoResolveTrack = dword:0[/FONT]
    [FONT=&quot]uPolicies-Explorer: NoStartMenuSubFolders = dword:0[/FONT]
    [FONT=&quot]uPolicies-System: NoDispAppearancePage = dword:0[/FONT]
    [FONT=&quot]uPolicies-System: NoDispSettingsPage = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoActiveDesktop = dword:1[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoViewOnDrive = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDrives = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableLocalMachineRun = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableLocalMachineRunOnce = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableCurrentUserRun = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableCurrentUserRunOnce = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDriveTypeAutoRun = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoFile = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: HideClock = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDevMgrUpdate = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDFSTab = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoWindowsUpdate = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoEncryptOnMove = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoRunasInstallPrompt = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoResolveTrack = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoStartMenuSubFolders = dword:0[/FONT]
    [FONT=&quot]mPolicies-System: ConsentPromptBehaviorUser = dword:3[/FONT]
    [FONT=&quot]mPolicies-System: EnableUIADesktopToggle = dword:0[/FONT]
    [FONT=&quot]mPolicies-System: NoDispAppearancePage = dword:0[/FONT]
    [FONT=&quot]mPolicies-System: NoDispSettingsPage = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoViewOnDrive = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDrives = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableLocalMachineRun = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableLocalMachineRunOnce = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableCurrentUserRun = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: DisableCurrentUserRunOnce = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDriveTypeAutoRun = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoFile = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: HideClock = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDevMgrUpdate = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoDFSTab = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoWindowsUpdate = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoEncryptOnMove = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoRunasInstallPrompt = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoResolveTrack = dword:0[/FONT]
    [FONT=&quot]mPolicies-Explorer: NoStartMenuSubFolders = dword:0[/FONT]
    [FONT=&quot]mPolicies-System: NoDispAppearancePage = dword:0[/FONT]
    [FONT=&quot]mPolicies-System: NoDispSettingsPage = dword:0[/FONT]
    [FONT=&quot]IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000[/FONT]
    [FONT=&quot]IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105[/FONT]
    [FONT=&quot]IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm[/FONT]
    [FONT=&quot]IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm[/FONT]
    [FONT=&quot]IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll[/FONT]
    [FONT=&quot]IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll[/FONT]
    [FONT=&quot]IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\ProgramData\WRData\PKG\LPBar.dll[/FONT]
    [FONT=&quot]IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll[/FONT]
    [FONT=&quot]IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204[/FONT]
    [FONT=&quot]IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm[/FONT]
    [FONT=&quot]DPF: {B3E32D88-8E7F-468F-B0E2-3A300FD4A82C} - hxxp://myitlab.pearsoned.com/Pegasus/Modules/SIMIntegration/Resources/ax/stub.cab[/FONT]
    [FONT=&quot]TCP: NameServer = 192.168.1.1[/FONT]
    [FONT=&quot]TCP: Interfaces\{6E377C10-BBC5-423D-8A66-6626E7769C67} : DHCPNameServer = 192.168.1.1[/FONT]
    [FONT=&quot]TCP: Interfaces\{875452B3-93D8-431E-B498-0C9A6B5E9033} : DHCPNameServer = 40.20.1.201 40.20.1.202[/FONT]
    [FONT=&quot]Filter: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL[/FONT]
    [FONT=&quot]Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll[/FONT]
    [FONT=&quot]Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll[/FONT]
    [FONT=&quot]Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll[/FONT]
    [FONT=&quot]SSODL: WebCheck - <orphaned>[/FONT]
    [FONT=&quot]mASetup: {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec /fu {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} /qn[/FONT]
    [FONT=&quot]x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll[/FONT]
    [FONT=&quot]x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL[/FONT]
    [FONT=&quot]x64-BHO: Webroot Vault: {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\ProgramData\WRData\PKG\LPBar64.dll[/FONT]
    [FONT=&quot]x64-TB: Webroot Toolbar: {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\PKG\LPBar64.dll[/FONT]
    [FONT=&quot]x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe[/FONT]
    [FONT=&quot]x64-Run: [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe[/FONT]
    [FONT=&quot]x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe[/FONT]
    [FONT=&quot]x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe[/FONT]
    [FONT=&quot]x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe[/FONT]
    [FONT=&quot]x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe[/FONT]
    [FONT=&quot]x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll[/FONT]
    [FONT=&quot]x64-IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\ProgramData\WRData\PKG\LPBar64.dll[/FONT]
    [FONT=&quot]x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll[/FONT]
    [FONT=&quot]x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm[/FONT]
    [FONT=&quot]x64-Filter: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - <orphaned>[/FONT]
    [FONT=&quot]x64-Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - <orphaned>[/FONT]
    [FONT=&quot]x64-Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - <orphaned>[/FONT]
    [FONT=&quot]x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL[/FONT]
    [FONT=&quot]x64-Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - <orphaned>[/FONT]
    [FONT=&quot]x64-Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - <orphaned>[/FONT]
    [FONT=&quot]x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>[/FONT]
    [FONT=&quot]x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>[/FONT]
    [FONT=&quot]x64-Notify: igfxcui - igfxdev.dll[/FONT]
    [FONT=&quot]x64-SSODL: WebCheck - <orphaned>[/FONT]
    [FONT=&quot]x64-mASetup: {0CE7EBAF-157D-4111-9146-057CB2A4023E} - msiexec /fu {0CE7EBAF-157D-4111-9146-057CB2A4023E} /qn[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]================= FIREFOX ===================[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]FF - ProfilePath - C:\Users\Butterfly Baby\AppData\Roaming\Mozilla\Firefox\Profiles\pjbs61mr.default\[/FONT]
    [FONT=&quot]FF - prefs.js: browser.startup.homepage - bing[/FONT]
    [FONT=&quot]FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL[/FONT]
    [FONT=&quot]FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll[/FONT]
    [FONT=&quot]FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npCouponPrinter.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npMozCouponPrinter.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Windows\SysWOW64\npDeployJava1.dll[/FONT]
    [FONT=&quot]FF - plugin: C:\Windows\SysWOW64\npmproxy.dll[/FONT]
    [FONT=&quot]FF - ExtSQL: 2012-10-16 22:06; [email protected]; C:\Users\Butterfly Baby\AppData\Roaming\Mozilla\Firefox\Profiles\pjbs61mr.default\extensions\[email protected][/FONT]
    [FONT=&quot]FF - ExtSQL: 2012-11-04 07:39; {8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}; C:\Users\Butterfly Baby\AppData\Roaming\Mozilla\Firefox\Profiles\pjbs61mr.default\extensions\{8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]============= SERVICES / DRIVERS ===============[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]R0 iaStorA;iaStorA;C:\Windows\System32\drivers\iaStorA.sys [2012-10-30 645952][/FONT]
    [FONT=&quot]R0 iaStorF;iaStorF;C:\Windows\System32\drivers\iaStorF.sys [2012-10-30 27456][/FONT]
    [FONT=&quot]R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2012-8-25 16152][/FONT]
    [FONT=&quot]R0 WRkrn;WRkrn;C:\Windows\System32\drivers\WRkrn.sys [2012-8-25 110608][/FONT]
    [FONT=&quot]R2 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-7-13 249648][/FONT]
    [FONT=&quot]R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-9-9 86072][/FONT]
    [FONT=&quot]R2 HPAuto;HP Auto;C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-2-17 682040][/FONT]
    [FONT=&quot]R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168][/FONT]
    [FONT=&quot]R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2011-5-13 30520][/FONT]
    [FONT=&quot]R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-3-5 35200][/FONT]
    [FONT=&quot]R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-6-1 7168][/FONT]
    [FONT=&quot]R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-8 607456][/FONT]
    [FONT=&quot]R2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-6-1 128280][/FONT]
    [FONT=&quot]R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-6-1 161560][/FONT]
    [FONT=&quot]R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-6-1 363800][/FONT]
    [FONT=&quot]R2 WRSVC;WRSVC;C:\Program Files\Webroot\WRSA.exe [2012-8-25 729544][/FONT]
    [FONT=&quot]R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\System32\drivers\clwvd.sys [2010-7-28 31088][/FONT]
    [FONT=&quot]R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2012-10-30 342528][/FONT]
    [FONT=&quot]R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2012-8-25 355096][/FONT]
    [FONT=&quot]R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2012-8-25 786200][/FONT]
    [FONT=&quot]R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-6-1 565352][/FONT]
    [FONT=&quot]R3 SmbDrv;SmbDrv;C:\Windows\System32\drivers\Smb_driver.sys [2012-8-25 21264][/FONT]
    [FONT=&quot]S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384][/FONT]
    [FONT=&quot]S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576][/FONT]
    [FONT=&quot]S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944][/FONT]
    [FONT=&quot]S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-9-15 195320][/FONT]
    [FONT=&quot]S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;C:\Windows\System32\drivers\bcbtums.sys [2012-6-1 134696][/FONT]
    [FONT=&quot]S3 btwampfl;btwampfl Bluetooth filter driver;C:\Windows\System32\drivers\btwampfl.sys [2012-6-1 620584][/FONT]
    [FONT=&quot]S3 BTWDPAN;Bluetooth Personal Area Network;C:\Windows\System32\drivers\btwdpan.sys [2012-6-1 89640][/FONT]
    [FONT=&quot]S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2012-6-1 39976][/FONT]
    [FONT=&quot]S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-9-16 57280][/FONT]
    [FONT=&quot]S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-9-12 1512448][/FONT]
    [FONT=&quot]S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072][/FONT]
    [FONT=&quot]S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;C:\Windows\System32\drivers\RtsP2Stor.sys [2012-6-1 258664][/FONT]
    [FONT=&quot]S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864][/FONT]
    [FONT=&quot]S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312][/FONT]
    [FONT=&quot]S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864][/FONT]
    [FONT=&quot]S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392][/FONT]
    [FONT=&quot]S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232][/FONT]
    [FONT=&quot]S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-8-27 1255736][/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]=============== File Associations ===============[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]FileExt: .txt: Applications\Winword.exe="C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "%1" [UserChoice] [default=edit - 'Open' doesn't exist][/FONT]
    [FONT=&quot]FileExt: .ini: inifile=C:\Windows\SysWow64\NOTEPAD.EXE %1[/FONT]
    [FONT=&quot]FileExt: .inf: inffile=C:\Windows\SysWow64\NOTEPAD.EXE %1[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]=============== Created Last 30 ================[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]2012-11-20 13:27:10 9125352 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EE93AA91-F9EE-441A-A20E-7BBA090A35B3}\mpengine.dll[/FONT]
    [FONT=&quot]2012-11-18 13:53:31 -------- d-----w- C:\Users\Butterfly Baby\AppData\Local\lptmp1515627213[/FONT]
    [FONT=&quot]2012-11-15 22:12:26 -------- d-----w- C:\Users\Butterfly Baby\AppData\Local\lptmp772915602[/FONT]
    [FONT=&quot]2012-11-15 22:12:24 9842040 ----a-w- C:\Program Files (x86)\Common Files\wruninstall.exe[/FONT]
    [FONT=&quot]2012-11-15 04:25:09 9728 ----a-w- C:\Windows\System32\Wdfres.dll[/FONT]
    [FONT=&quot]2012-11-15 04:25:09 785512 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys[/FONT]
    [FONT=&quot]2012-11-15 04:25:09 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys[/FONT]
    [FONT=&quot]2012-11-15 04:25:09 2560 ----a-w- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui[/FONT]
    [FONT=&quot]2012-11-15 04:13:38 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys[/FONT]
    [FONT=&quot]2012-11-15 04:13:38 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll[/FONT]
    [FONT=&quot]2012-11-15 04:13:38 744448 ----a-w- C:\Windows\System32\WUDFx.dll[/FONT]
    [FONT=&quot]2012-11-15 04:13:38 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll[/FONT]
    [FONT=&quot]2012-11-15 04:13:38 229888 ----a-w- C:\Windows\System32\WUDFHost.exe[/FONT]
    [FONT=&quot]2012-11-15 04:13:38 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys[/FONT]
    [FONT=&quot]2012-11-15 04:13:38 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll[/FONT]
    [FONT=&quot]2012-11-15 00:58:51 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll[/FONT]
    [FONT=&quot]2012-11-15 00:58:51 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll[/FONT]
    [FONT=&quot]2012-11-15 00:58:51 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll[/FONT]
    [FONT=&quot]2012-11-15 00:58:51 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll[/FONT]
    [FONT=&quot]2012-11-15 00:58:47 3149824 ----a-w- C:\Windows\System32\win32k.sys[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 70656 ----a-w- C:\Windows\System32\nlaapi.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 569344 ----a-w- C:\Windows\System32\iphlpsvc.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 52224 ----a-w- C:\Windows\SysWow64\nlaapi.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 303104 ----a-w- C:\Windows\System32\nlasvc.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 246272 ----a-w- C:\Windows\System32\netcorehc.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 216576 ----a-w- C:\Windows\System32\ncsi.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 1914248 ----a-w- C:\Windows\System32\drivers\tcpip.sys[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 18944 ----a-w- C:\Windows\SysWow64\netevent.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 18944 ----a-w- C:\Windows\System32\netevent.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 175104 ----a-w- C:\Windows\SysWow64\netcorehc.dll[/FONT]
    [FONT=&quot]2012-11-15 00:51:50 156672 ----a-w- C:\Windows\SysWow64\ncsi.dll[/FONT]
    [FONT=&quot]2012-11-15 00:37:16 95744 ----a-w- C:\Windows\System32\synceng.dll[/FONT]
    [FONT=&quot]2012-11-15 00:37:16 78336 ----a-w- C:\Windows\SysWow64\synceng.dll[/FONT]
    [FONT=&quot]2012-11-05 14:01:54 -------- d-----w- C:\Users\Butterfly Baby\AppData\Local\Apple Computer[/FONT]
    [FONT=&quot]2012-11-05 14:01:30 33240 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys[/FONT]
    [FONT=&quot]2012-11-05 14:01:06 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69[/FONT]
    [FONT=&quot]2012-11-05 14:01:06 -------- d-----w- C:\Program Files\iTunes[/FONT]
    [FONT=&quot]2012-11-05 14:01:06 -------- d-----w- C:\Program Files\iPod[/FONT]
    [FONT=&quot]2012-11-05 14:01:06 -------- d-----w- C:\Program Files (x86)\iTunes[/FONT]
    [FONT=&quot]2012-11-05 14:00:33 -------- d-----w- C:\Users\Butterfly Baby\AppData\Local\Apple[/FONT]
    [FONT=&quot]2012-11-05 14:00:04 -------- d-----w- C:\Program Files\Bonjour[/FONT]
    [FONT=&quot]2012-11-05 14:00:04 -------- d-----w- C:\Program Files (x86)\Bonjour[/FONT]
    [FONT=&quot]2012-10-30 16:42:27 276288 ----a-w- C:\Windows\SysWow64\IntelCpHeciSvc.exe[/FONT]
    [FONT=&quot]2012-10-30 16:40:41 645952 ----a-w- C:\Windows\System32\drivers\iaStorA.sys[/FONT]
    [FONT=&quot]2012-10-30 16:40:41 27456 ----a-w- C:\Windows\System32\drivers\iaStorF.sys[/FONT]
    [FONT=&quot]2012-10-30 15:00:55 -------- d-----w- C:\Windows\en[/FONT]
    [FONT=&quot]2012-10-30 14:57:12 5659096 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\d7900d601cdb6ae01\skydrivesetup.exe[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]==================== Find3M ====================[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]2012-11-18 13:50:10 150712 ----a-w- C:\Windows\SysWow64\WRusr.dll[/FONT]
    [FONT=&quot]2012-11-18 13:50:10 103344 ----a-w- C:\Windows\System32\WRusr.dll[/FONT]
    [FONT=&quot]2012-11-12 00:17:05 110608 ----a-w- C:\Windows\System32\drivers\WRkrn.sys[/FONT]
    [FONT=&quot]2012-10-30 16:41:54 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll[/FONT]
    [FONT=&quot]2012-10-09 16:03:20 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl[/FONT]
    [FONT=&quot]2012-10-09 16:03:20 696760 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe[/FONT]
    [FONT=&quot]2012-10-08 11:31:03 2312704 ----a-w- C:\Windows\System32\jscript9.dll[/FONT]
    [FONT=&quot]2012-10-08 11:23:52 1392128 ----a-w- C:\Windows\System32\wininet.dll[/FONT]
    [FONT=&quot]2012-10-08 11:22:55 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl[/FONT]
    [FONT=&quot]2012-10-08 11:18:22 173056 ----a-w- C:\Windows\System32\ieUnatt.exe[/FONT]
    [FONT=&quot]2012-10-08 11:17:35 599040 ----a-w- C:\Windows\System32\vbscript.dll[/FONT]
    [FONT=&quot]2012-10-08 11:13:33 2382848 ----a-w- C:\Windows\System32\mshtml.tlb[/FONT]
    [FONT=&quot]2012-10-08 07:56:24 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll[/FONT]
    [FONT=&quot]2012-10-08 07:48:03 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll[/FONT]
    [FONT=&quot]2012-10-08 07:47:44 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl[/FONT]
    [FONT=&quot]2012-10-08 07:44:05 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe[/FONT]
    [FONT=&quot]2012-10-08 07:43:21 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll[/FONT]
    [FONT=&quot]2012-10-08 07:40:56 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb[/FONT]
    [FONT=&quot]2012-09-14 19:19:29 2048 ----a-w- C:\Windows\System32\tzres.dll[/FONT]
    [FONT=&quot]2012-09-14 18:28:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll[/FONT]
    [FONT=&quot]2012-09-12 20:07:44 58368 ----a-w- C:\Windows\SysWow64\sirenacm.dll[/FONT]
    [FONT=&quot]2012-09-12 19:57:44 322048 ----a-w- C:\Windows\WLXPGSS.SCR[/FONT]
    [FONT=&quot]2012-09-05 12:49:20 95208 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll[/FONT]
    [FONT=&quot]2012-09-05 12:49:20 821736 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll[/FONT]
    [FONT=&quot]2012-09-05 12:49:20 746984 ----a-w- C:\Windows\SysWow64\deployJava1.dll[/FONT]
    [FONT=&quot]2012-08-31 18:19:35 1659760 ----a-w- C:\Windows\System32\drivers\ntfs.sys[/FONT]
    [FONT=&quot]2012-08-30 18:03:45 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe[/FONT]
    [FONT=&quot]2012-08-30 17:12:02 3968880 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe[/FONT]
    [FONT=&quot]2012-08-30 17:12:02 3914096 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe[/FONT]
    [FONT=&quot]2012-08-25 21:36:32 786200 ----a-w- C:\Windows\System32\drivers\iusb3xhc.sys[/FONT]
    [FONT=&quot]2012-08-25 21:36:32 41984 ----a-w- C:\Windows\System32\drivers\USB3Ver.dll[/FONT]
    [FONT=&quot]2012-08-25 21:36:32 355096 ----a-w- C:\Windows\System32\drivers\iusb3hub.sys[/FONT]
    [FONT=&quot]2012-08-25 21:36:32 16152 ----a-w- C:\Windows\System32\drivers\iusb3hcs.sys[/FONT]
    [FONT=&quot]2012-08-25 21:35:18 6656 ----a-w- C:\Windows\System32\bcmwlrc.dll[/FONT]
    [FONT=&quot]2012-08-25 21:35:17 95544 ----a-w- C:\Windows\System32\bcmwlcoi.dll[/FONT]
    [FONT=&quot]2012-08-25 21:35:17 4747840 ----a-w- C:\Windows\System32\drivers\BCMWL664.SYS[/FONT]
    [FONT=&quot]2012-08-25 21:35:17 3952640 ----a-w- C:\Windows\System32\bcmihvsrv64.dll[/FONT]
    [FONT=&quot]2012-08-25 21:35:17 3617792 ----a-w- C:\Windows\System32\bcmihvui64.dll[/FONT]
    [FONT=&quot]2012-08-24 18:05:07 220160 ----a-w- C:\Windows\System32\wintrust.dll[/FONT]
    [FONT=&quot]2012-08-24 16:57:48 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll[/FONT]
    [FONT=&quot]2012-08-22 18:12:40 950128 ----a-w- C:\Windows\System32\drivers\ndis.sys[/FONT]
    [FONT=&quot]2012-08-22 18:12:40 376688 ----a-w- C:\Windows\System32\drivers\netio.sys[/FONT]
    [FONT=&quot]2012-08-22 18:12:33 288624 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]============= FINISH: 8:30:06.49 ===============[/FONT]


    [FONT=&quot]ATTACH file[/FONT]





    [FONT=&quot].[/FONT]
    [FONT=&quot]UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.[/FONT]
    [FONT=&quot]IF REQUESTED, ZIP IT UP & ATTACH IT[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]DDS (Ver_2012-11-20.01)[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]Microsoft Windows 7 Home Premium [/FONT]
    [FONT=&quot]Boot Device: \Device\HarddiskVolume1[/FONT]
    [FONT=&quot]Install Date: 8/24/2012 12:01:16 AM[/FONT]
    [FONT=&quot]System Uptime: 11/20/2012 7:57:37 AM (1 hours ago)[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]Motherboard: Hewlett-Packard | | 183D[/FONT]
    [FONT=&quot]Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz | U3E1 | 2501/100mhz[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]==== Disk Partitions =========================[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]C: is FIXED (NTFS) - 575 GiB total, 523.299 GiB free.[/FONT]
    [FONT=&quot]D: is FIXED (NTFS) - 21 GiB total, 2.24 GiB free.[/FONT]
    [FONT=&quot]E: is CDROM ()[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]==== Disabled Device Manager Items =============[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]Class GUID: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}[/FONT]
    [FONT=&quot]Description: Broadcom 20702 Bluetooth 4.0 Adapter[/FONT]
    [FONT=&quot]Device ID: USB\VID_0A5C&PID_21E3\08EDB98F5E52[/FONT]
    [FONT=&quot]Manufacturer: Broadcom[/FONT]
    [FONT=&quot]Name: Broadcom 20702 Bluetooth 4.0 Adapter[/FONT]
    [FONT=&quot]PNP Device ID: USB\VID_0A5C&PID_21E3\08EDB98F5E52[/FONT]
    [FONT=&quot]Service: BTHUSB[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]==== System Restore Points ===================[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]RP46: 10/30/2012 10:58:45 AM - Installed DirectX[/FONT]
    [FONT=&quot]RP47: 10/30/2012 10:58:58 AM - Installed DirectX[/FONT]
    [FONT=&quot]RP48: 10/30/2012 10:59:10 AM - Installed DirectX[/FONT]
    [FONT=&quot]RP49: 10/30/2012 10:59:34 AM - WLSetup[/FONT]
    [FONT=&quot]RP50: 10/30/2012 11:10:37 AM - HPSF Applying updates[/FONT]
    [FONT=&quot]RP51: 10/30/2012 11:54:00 AM - HPSF Applying updates[/FONT]
    [FONT=&quot]RP52: 10/30/2012 12:41:27 PM - Installed Realtek Ethernet Controller Driver[/FONT]
    [FONT=&quot]RP53: 11/5/2012 9:00:38 AM - Installed iTunes[/FONT]
    [FONT=&quot]RP54: 11/6/2012 7:24:48 AM - Windows Update[/FONT]
    [FONT=&quot]RP55: 11/9/2012 8:09:52 AM - Windows Update[/FONT]
    [FONT=&quot]RP56: 11/13/2012 8:38:43 AM - Windows Update[/FONT]
    [FONT=&quot]RP57: 11/14/2012 12:33:57 PM - HPSF Restore Point[/FONT]
    [FONT=&quot]RP58: 11/14/2012 11:07:21 PM - Windows Update[/FONT]
    [FONT=&quot]RP59: 11/17/2012 10:02:06 AM - Windows Update[/FONT]
    [FONT=&quot]RP60: 11/19/2012 8:10:58 AM - Windows Update[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]==== Installed Programs ======================[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]Adobe Flash Player 11 ActiveX[/FONT]
    [FONT=&quot]Adobe Flash Player 11 Plugin[/FONT]
    [FONT=&quot]Adobe Reader X (10.1.4) MUI[/FONT]
    [FONT=&quot]Adobe Shockwave Player 11.6[/FONT]
    [FONT=&quot]Apple Application Support[/FONT]
    [FONT=&quot]Apple Mobile Device Support[/FONT]
    [FONT=&quot]Apple Software Update[/FONT]
    [FONT=&quot]Bejeweled 3[/FONT]
    [FONT=&quot]Bing Bar[/FONT]
    [FONT=&quot]Blackhawk Striker 2[/FONT]
    [FONT=&quot]Blio[/FONT]
    [FONT=&quot]Bonjour[/FONT]
    [FONT=&quot]Broadcom 802.11 Wireless LAN Adapter[/FONT]
    [FONT=&quot]Broadcom Bluetooth Software[/FONT]
    [FONT=&quot]Chuzzle Deluxe[/FONT]
    [FONT=&quot]Coupon Printer for Windows[/FONT]
    [FONT=&quot]Cradle of Rome 2[/FONT]
    [FONT=&quot]CyberLink YouCam[/FONT]
    [FONT=&quot]D3DX10[/FONT]
    [FONT=&quot]Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition[/FONT]
    [FONT=&quot]Dora's World Adventure[/FONT]
    [FONT=&quot]ESU for Microsoft Windows 7 SP1[/FONT]
    [FONT=&quot]Evernote v. 4.5.2[/FONT]
    [FONT=&quot]Farm Frenzy[/FONT]
    [FONT=&quot]Farmscapes[/FONT]
    [FONT=&quot]FATE[/FONT]
    [FONT=&quot]Final Drive Fury[/FONT]
    [FONT=&quot]Hewlett-Packard ACLM.NET v1.1.2.0[/FONT]
    [FONT=&quot]Hoyle Card Games[/FONT]
    [FONT=&quot]HP 3D DriveGuard[/FONT]
    [FONT=&quot]HP Application Assistant[/FONT]
    [FONT=&quot]HP Auto[/FONT]
    [FONT=&quot]HP Client Services[/FONT]
    [FONT=&quot]HP CoolSense[/FONT]
    [FONT=&quot]HP Customer Experience Enhancements[/FONT]
    [FONT=&quot]HP Documentation[/FONT]
    [FONT=&quot]HP Games[/FONT]
    [FONT=&quot]HP Launch Box[/FONT]
    [FONT=&quot]HP MovieStore[/FONT]
    [FONT=&quot]HP On Screen Display[/FONT]
    [FONT=&quot]HP Power Manager[/FONT]
    [FONT=&quot]HP Quick Launch[/FONT]
    [FONT=&quot]HP Recovery Manager[/FONT]
    [FONT=&quot]HP Security Assistant[/FONT]
    [FONT=&quot]HP Setup[/FONT]
    [FONT=&quot]HP Setup Manager[/FONT]
    [FONT=&quot]HP Software Framework[/FONT]
    [FONT=&quot]HP Support Assistant[/FONT]
    [FONT=&quot]IDT Audio[/FONT]
    [FONT=&quot]Intel(R) Control Center[/FONT]
    [FONT=&quot]Intel(R) Management Engine Components[/FONT]
    [FONT=&quot]Intel(R) Processor Graphics[/FONT]
    [FONT=&quot]Intel(R) Rapid Storage Technology[/FONT]
    [FONT=&quot]Intel(R) SDK for OpenCL - CPU Only Runtime Package[/FONT]
    [FONT=&quot]Intel(R) USB 3.0 eXtensible Host Controller Driver[/FONT]
    [FONT=&quot]Intel® Trusted Connect Service Client[/FONT]
    [FONT=&quot]iTunes[/FONT]
    [FONT=&quot]Java 7 Update 7[/FONT]
    [FONT=&quot]Java Auto Updater[/FONT]
    [FONT=&quot]Jewel Match 3[/FONT]
    [FONT=&quot]Jewel Quest Mysteries: The Seventh Gate Collector's Edition[/FONT]
    [FONT=&quot]John Deere Drive Green[/FONT]
    [FONT=&quot]Junk Mail filter update[/FONT]
    [FONT=&quot]Letters from Nowhere 2[/FONT]
    [FONT=&quot]Luxor HD[/FONT]
    [FONT=&quot]Mah Jong Medley[/FONT]
    [FONT=&quot]MathPlayer[/FONT]
    [FONT=&quot]Microsoft .NET Framework 4 Client Profile[/FONT]
    [FONT=&quot]Microsoft Application Error Reporting[/FONT]
    [FONT=&quot]Microsoft Office 2010[/FONT]
    [FONT=&quot]Microsoft Office 2010 Service Pack 1 (SP1)[/FONT]
    [FONT=&quot]Microsoft Office Access MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Access Setup Metadata MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Excel MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Office 64-bit Components 2010[/FONT]
    [FONT=&quot]Microsoft Office OneNote MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Outlook Connector[/FONT]
    [FONT=&quot]Microsoft Office Outlook MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office PowerPoint MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Professional 2010[/FONT]
    [FONT=&quot]Microsoft Office Proof (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Proof (French) 2010[/FONT]
    [FONT=&quot]Microsoft Office Proof (Spanish) 2010[/FONT]
    [FONT=&quot]Microsoft Office Proofing (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Publisher MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Shared 64-bit MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Shared MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Shared Setup Metadata MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Office Single Image 2010[/FONT]
    [FONT=&quot]Microsoft Office Word MUI (English) 2010[/FONT]
    [FONT=&quot]Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit[/FONT]
    [FONT=&quot]Microsoft Silverlight[/FONT]
    [FONT=&quot]Microsoft SkyDrive[/FONT]
    [FONT=&quot]Microsoft SQL Server 2005 Compact Edition [ENU][/FONT]
    [FONT=&quot]Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17[/FONT]
    [FONT=&quot]Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148[/FONT]
    [FONT=&quot]Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161[/FONT]
    [FONT=&quot]Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148[/FONT]
    [FONT=&quot]Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161[/FONT]
    [FONT=&quot]Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319[/FONT]
    [FONT=&quot]Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319[/FONT]
    [FONT=&quot]Microsoft WSE 3.0 Runtime[/FONT]
    [FONT=&quot]Movie Maker[/FONT]
    [FONT=&quot]Mozilla Firefox 16.0.2 (x86 en-US)[/FONT]
    [FONT=&quot]Mozilla Maintenance Service[/FONT]
    [FONT=&quot]MSVCRT[/FONT]
    [FONT=&quot]MSVCRT_amd64[/FONT]
    [FONT=&quot]MSVCRT110[/FONT]
    [FONT=&quot]MSVCRT110_amd64[/FONT]
    [FONT=&quot]MSXML 4.0 SP2 (KB954430)[/FONT]
    [FONT=&quot]MSXML 4.0 SP2 (KB973688)[/FONT]
    [FONT=&quot]opensource[/FONT]
    [FONT=&quot]Penguins![/FONT]
    [FONT=&quot]Photo Common[/FONT]
    [FONT=&quot]Photo Gallery[/FONT]
    [FONT=&quot]Plants vs. Zombies - Game of the Year[/FONT]
    [FONT=&quot]PlayReady PC Runtime x86[/FONT]
    [FONT=&quot]Poker Superstars III[/FONT]
    [FONT=&quot]Polar Bowler[/FONT]
    [FONT=&quot]Polar Golfer[/FONT]
    [FONT=&quot]Realtek Ethernet Controller Driver[/FONT]
    [FONT=&quot]Realtek PCIE Card Reader[/FONT]
    [FONT=&quot]RollerCoaster Tycoon 3: Platinum[/FONT]
    [FONT=&quot]Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)[/FONT]
    [FONT=&quot]Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)[/FONT]
    [FONT=&quot]Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)[/FONT]
    [FONT=&quot]Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)[/FONT]
    [FONT=&quot]Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)[/FONT]
    [FONT=&quot]Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)[/FONT]
    [FONT=&quot]Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)[/FONT]
    [FONT=&quot]Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2553091)[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2553096)[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2553260) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2589322) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition[/FONT]
    [FONT=&quot]Security Update for Microsoft Word 2010 (KB2553488) 32-Bit Edition[/FONT]
    [FONT=&quot]Skype™ 5.10[/FONT]
    [FONT=&quot]swMSM[/FONT]
    [FONT=&quot]Synaptics Pointing Device Driver[/FONT]
    [FONT=&quot]The Treasures of Mystery Island: The Ghost Ship[/FONT]
    [FONT=&quot]Torchlight[/FONT]
    [FONT=&quot]Update for Microsoft .NET Framework 4 Client Profile (KB2468871)[/FONT]
    [FONT=&quot]Update for Microsoft .NET Framework 4 Client Profile (KB2533523)[/FONT]
    [FONT=&quot]Update for Microsoft .NET Framework 4 Client Profile (KB2600217)[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2553065)[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2566458)[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft OneNote 2010 (KB2687277) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition[/FONT]
    [FONT=&quot]Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition[/FONT]
    [FONT=&quot]Update Installer for WildTangent Games App[/FONT]
    [FONT=&quot]Virtual Villagers 4 - The Tree of Life[/FONT]
    [FONT=&quot]Webroot SecureAnywhere[/FONT]
    [FONT=&quot]WildTangent Games App (HP Games)[/FONT]
    [FONT=&quot]Windows Live Communications Platform[/FONT]
    [FONT=&quot]Windows Live Essentials[/FONT]
    [FONT=&quot]Windows Live Family Safety[/FONT]
    [FONT=&quot]Windows Live ID Sign-in Assistant[/FONT]
    [FONT=&quot]Windows Live Installer[/FONT]
    [FONT=&quot]Windows Live Mail[/FONT]
    [FONT=&quot]Windows Live Messenger[/FONT]
    [FONT=&quot]Windows Live MIME IFilter[/FONT]
    [FONT=&quot]Windows Live Photo Common[/FONT]
    [FONT=&quot]Windows Live PIMT Platform[/FONT]
    [FONT=&quot]Windows Live SOXE[/FONT]
    [FONT=&quot]Windows Live SOXE Definitions[/FONT]
    [FONT=&quot]Windows Live UX Platform[/FONT]
    [FONT=&quot]Windows Live UX Platform Language Pack[/FONT]
    [FONT=&quot]Windows Live Writer[/FONT]
    [FONT=&quot]Windows Live Writer Resources[/FONT]
    [FONT=&quot]Zuma's Revenge[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]==== Event Viewer Messages From Past Week ========[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]11/18/2012 8:50:45 AM, Error: Microsoft-Windows-WMPNSS-Service [14332] - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.[/FONT]
    [FONT=&quot]11/17/2012 9:58:53 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service.[/FONT]
    [FONT=&quot]11/17/2012 9:52:31 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.[/FONT]
    [FONT=&quot]11/17/2012 9:52:04 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}[/FONT]
    [FONT=&quot]11/17/2012 9:52:04 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}[/FONT]
    [FONT=&quot]11/17/2012 9:52:04 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}[/FONT]
    [FONT=&quot]11/17/2012 9:52:04 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}[/FONT]
    [FONT=&quot]11/17/2012 9:52:03 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}[/FONT]
    [FONT=&quot]11/17/2012 9:51:55 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}[/FONT]
    [FONT=&quot]11/17/2012 9:51:47 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx vwififlt Wanarpv6 WfpLwf[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.[/FONT]
    [FONT=&quot]11/17/2012 9:51:46 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.[/FONT]
    [FONT=&quot]11/14/2012 8:27:08 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer OWNER-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6E377C10-BBC5-423D-8A66-6626E7769C67}. The master browser is stopping or an election is being forced.[/FONT]
    [FONT=&quot].[/FONT]
    [FONT=&quot]==== End Of File ===========================[/FONT]



    Thank you,
    RJSM644
     
  2. Mark1956

    Mark1956 Malware Specialist

    Joined:
    May 7, 2011
    Messages:
    14,142
    IMPORTANT: Please take the time to read this first.
    For the benefit of others that are waiting for help please try to respond as fast as you can and make sure you read all of the instructions I will be giving you to follow. Time spent waiting for replies or having to repeat questions keeps other people waiting in the queue for help.

    I am in Spain at GMT+1 hour, I check my emails several times a day so will usually reply to your responses within a few hours or less unless it is night time here. During the evening here I will usually reply within minutes. Please try to do the same for a swift clean up. Some Malware needs to be dealt with quickly or it will multiply and become deeply embedded in your system and more difficult to find and remove, so quick replies will have more than one benefit.

    Keep in mind that I cannot see your PC, so please give as much detail as possible if something goes wrong or you receive any error messages.

    Malware can be unpredictable and often time consuming to remove, on rare occasions something can go awry and your system may need to have Windows re-installed. Please make sure before we start that you have copies of all your important data saved to an external hard drive or CD/DVD's. Please make sure you disconnect any external hard drives and/or Flash drives during the clean up.

    If you have run any scans that found an infection please let me know.

    DO NOT run any scans or make any changes that I have not asked you to do as this can cause misleading results and make my job much harder in trying to help you. Please also uninstall any file sharing software i.e. uTorrent, BitTorrent, etc, if you insist on keeping it do not use it until we are finished. Use of file sharing software is one of the easiest ways to get your PC infected.

    If I get no reply from you for two days I will mark the thread as Solved and move on to helping someone else. If you know you will be unable to reply for any length of time please let me know in advance.

    Please don't abandon the thread as soon as your PC starts to work normally again as there will be other important checks to make to help protect your system from re-infection. It is also important to follow the correct procedure when removing the tools used to ensure all quarantined infections are completely removed and infected Restore Points are safely deleted.

    Stick with me and we can quickly clean up your PC, if you cannot dedicate the time then a Reformat and Re-install will be your quickest option.

    _____________________________________________________________________________________

    There is nothing of significance in the above logs. First and foremost you need to try another keyboard to eliminate it as the cause. You will need to use a keyboard from a desktop PC and plug it into the laptop.

    Please also run this scan:

    Please download Malwarebytes [​IMG] and save it to your desktop.

    • Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.
    • Double-click on the renamed file to install, then follow these instructions for doing a Quick Scan in normal mode.
    • Malwarebytes will automatically check for updates as soon as it is launched.
    • If you cannot update Malwarebytes or use the Internet to download any files to the infected computer, manually update the database by following the instructions in FAQ Section A: 4. Issues.


    Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

    • Double click on the Malwarebytes icon on your desktop to launch the program
    • Under the Scanner tab, make sure the Perform Quick Scan option is selected.
    • Click on the Scan button.
    • When finished, a message box will say "The scan completed successfully. Click Show Results to display all objects found".
    • NOTE: If no detections are found a log will automatically open in Notepad, please copy and paste the log back here and close all windows, in this case you do not need to continue.
    • Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
    • Make sure that everything is checked and then click Remove Selected.
    • When removal is completed, a log report will open in Notepad.
    • The log is automatically saved and can be viewed by clicking the Logs tab.
    • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
    • Exit Malwarebytes when done.


    If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes from removing all the malware.
     
  3. RJSM644

    RJSM644 Thread Starter

    Joined:
    Nov 9, 2009
    Messages:
    4
    Malwarebytes Anti-Malware (Trial) 1.65.1.1000
    www.malwarebytes.org

    Database version: v2012.11.20.03

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 9.0.8112.16421
    Butterfly Baby :: BUTTERFLYBABY [administrator]

    Protection: Enabled

    11/20/2012 11:06:21 AM
    mbam-log-2012-11-20 (11-06-21).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 202819
    Time elapsed: 2 minute(s), 3 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 0
    (No malicious items detected)

    (end)


    Thank you
     
  4. Mark1956

    Mark1956 Malware Specialist

    Joined:
    May 7, 2011
    Messages:
    14,142
    That scan is clean. Have you tried what I suggested with the keyboard?
     
  5. RJSM644

    RJSM644 Thread Starter

    Joined:
    Nov 9, 2009
    Messages:
    4
    no I haven't
    dont have one available at this time
    I can mark as solved and repost if there seems to be a need to
    Thank you
     
  6. Mark1956

    Mark1956 Malware Specialist

    Joined:
    May 7, 2011
    Messages:
    14,142
    You needn't mark the thread as solved until it is. The keyboard is a prime suspect with the symptoms you are seeing so it could be a big waste of time to run other scans looking for something that probably isn't there. A faulty keyboard can cause many problems so it needs to be checked before moving on.

    If you can't get anyone to lend you a keyboard for a quick test go to a computer repair shop, I am sure they won't charge much, if anything, just to let you plug in a keyboard to see if it works or not.
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1077561