Error 9C57 installing IE 11

Martin7365 · September 20, 2014

Windows update fails to update IE 11, always displays the error code 9C57.

Can anyone help with this issue.

Regards Martin

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014

Ran by Martin (administrator) on FAMILY-PC on 20-09-2014 22:46:46

Running from C:\Users\Martin\Desktop

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 9

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(BUFFALO INC.) C:\Program Files (x86)\BUFFALO\Backup_Utility\BUService.exe

(BUFFALO INC.) C:\Program Files (x86)\BUFFALO\Backup_Utility\BUVSSService64.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Safe Web Lite\Engine\2.0.0.16\ccSvcHst.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKU\.DEFAULT\...\RunOnce: [spUninstallDeleteDir] => rmdir /s /q "\SearchProtect"

HKU\.DEFAULT\...\Policies\system: [LogonHoursAction] 2

HKU\.DEFAULT\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\.DEFAULT\...\Policies\Explorer: [NoFolderOptions] 0

HKU\.DEFAULT\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-2497641722-1424367119-3422776657-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-08] (Apple Inc.)

HKU\S-1-5-21-2497641722-1424367119-3422776657-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-08-14] (Apple Inc.)

HKU\S-1-5-21-2497641722-1424367119-3422776657-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-08-15] (Apple Inc.)

HKU\S-1-5-21-2497641722-1424367119-3422776657-1000\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-21-2497641722-1424367119-3422776657-1000\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-2497641722-1424367119-3422776657-1000\...\MountPoints2: D - D:\Launch.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB9AE14C9AFC7CF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-GB

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.co.uk/

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKCU - DefaultScope {FE8A66E2-CFDD-44C0-A697-FB531AA5D172} URL = https://uk.search.yahoo.com/search?fr=mcafee&type=B011GB81004D20140420&p={SearchTerms}

SearchScopes: HKCU - {FE8A66E2-CFDD-44C0-A697-FB531AA5D172} URL = https://uk.search.yahoo.com/search?fr=mcafee&type=B011GB81004D20140420&p={SearchTerms}

BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKLM-x32 - No Name - {30CEEEA2-3742-40e4-85DD-812BF1CBB83D} - No File

DPF: HKLM-x32 {444785F1-DE89-4295-863A-D46C3A781394} http://webplayer.unity3d.com/download_webplayer/UnityWebPlayer.cab

DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455}

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File

Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)

Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File

Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File

Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:

========

FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: electronicarts.com/GameFacePlugin -> C:\Users\Martin\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll (Electronic Arts)

FF HKLM-x32\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension

FF Extension: Firefox Synchronisation Extension - C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension [2011-06-05]

FF HKLM-x32\...\Firefox\Extensions: [{203FB6B2-2E1E-4474-863B-4C483ECCE78E}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2.0.0.16\coFFNST

FF Extension: Norton Safe Web Lite Toolbar - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2.0.0.16\coFFNST [2014-09-20]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-04-20]

FF HKLM-x32\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension

FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension [2011-06-05]

Chrome:

=======

CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-19]

CHR Extension: (Google Docs) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-19]

CHR Extension: (Google Drive) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-19]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-20]

CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-19]

CHR Extension: (Google Search) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-19]

CHR Extension: (Google Sheets) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-19]

CHR Extension: (SiteAdvisor) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-09-20]

CHR Extension: (Google Wallet) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-19]

CHR Extension: (Gmail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-19]

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-09-20]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

CHR HKLM-x32\...\Chrome\Extension: [oedoknoijoakeplhlghdcggkclkbmaje] - C:\Users\Callum\AppData\Local\PriceMeter Express\PriceMeterExpress.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BFBackupUtilityService; C:\Program Files (x86)\BUFFALO\Backup_Utility\BUService.exe [320888 2010-04-28] (BUFFALO INC.)

R2 BFBackupUtilityVSSService; C:\Program Files (x86)\BUFFALO\Backup_Utility\BUVSSService64.exe [359288 2010-04-28] (BUFFALO INC.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [603424 2014-06-12] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)

R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58387104 2014-07-12] (Microsoft Corporation)

R2 NSL; C:\Program Files (x86)\Norton Safe Web Lite\Engine\2.0.0.16\ccSvcHst.exe [138760 2011-08-10] (Symantec Corporation)

S4 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)

S4 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [632832 2011-03-21] (Nokia) [File not signed]

S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [441504 2014-07-12] (Microsoft Corporation)

S3 WMZuneComm; C:\zune\WMZuneComm.exe [306400 2011-08-05] (Microsoft Corporation)

S3 ZuneNetworkSvc; C:\zune\ZuneNss.exe [8277728 2011-08-05] (Microsoft Corporation)

S3 ZuneWlanCfgSvc; C:\zune\ZuneWlanCfgSvc.exe [467680 2011-08-05] (Microsoft Corporation)

R3 WinHttpAutoProxySvc; winhttp.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 bftpdskc64; C:\Windows\System32\drivers\bftpdskc64.sys [67712 2010-01-12] (BUFFALO INC.)

R3 bftpusbx64; C:\Windows\System32\drivers\bftpusbx64.sys [20608 2010-01-18] (BUFFALO INC.)

R1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\0200000.010\ccSetx64.sys [167048 2011-08-09] (Symantec Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2011-09-13] ()

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-20] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)

R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)

S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)

R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)

S3 SaiH8000; C:\Windows\System32\DRIVERS\SaiH8000.sys [178560 2008-04-04] (Saitek)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)

S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]

S3 MREMP50; \??\C:\PROGRA~2\COMMON~1\Motive\MREMP50.SYS [X]

S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]

S3 MREMPR5; \??\C:\PROGRA~2\COMMON~1\Motive\MREMPR5.SYS [X]

S3 MRENDIS5; \??\C:\PROGRA~2\COMMON~1\Motive\MRENDIS5.SYS [X]

S3 MRESP50; \??\C:\PROGRA~2\COMMON~1\Motive\MRESP50.SYS [X]

S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-20 22:46 - 2014-09-20 22:47 - 00023501 _____ () C:\Users\Martin\Desktop\FRST.txt

2014-09-20 22:46 - 2014-09-20 22:46 - 00000000 ____D () C:\Users\Martin\Desktop\FRST-OlderVersion

2014-09-20 22:03 - 2014-09-20 22:03 - 00000134 _____ () C:\Users\Martin\Desktop\Internet Explorer Troubleshooting.url

2014-09-20 21:32 - 2014-09-20 21:32 - 00000000 ___RD () C:\Users\Martin\iCloudDrive

2014-09-20 21:32 - 2014-09-20 21:32 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Inc

2014-09-20 21:17 - 2014-09-20 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2014-09-20 21:09 - 2014-09-20 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2014-09-20 21:08 - 2014-09-20 21:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\Program Files\iTunes

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\Program Files\iPod

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-09-20 20:23 - 2014-09-20 20:23 - 01373475 _____ () C:\Users\Martin\Downloads\adwcleaner_3.310.exe

2014-09-20 17:08 - 2014-09-20 17:08 - 00000000 ____D () C:\Users\Martin\AppData\Local\Adobe

2014-09-20 17:02 - 2014-09-20 17:02 - 00002963 _____ () C:\Users\Martin\Desktop\HiJackThis.lnk

2014-09-20 17:02 - 2014-09-20 17:02 - 00000000 ____D () C:\Users\Martin\Desktop\Hijackthis

2014-09-20 17:02 - 2014-09-20 17:02 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

2014-09-20 16:47 - 2014-09-20 16:47 - 00000000 ____D () C:\Users\Martin\Downloads\Autoruns

2014-09-20 16:46 - 2014-09-20 16:46 - 00511633 _____ () C:\Users\Martin\Downloads\Autoruns.zip

2014-09-20 16:14 - 2014-09-20 16:14 - 00013638 _____ () C:\Users\Callum\Desktop\hijackthis.log

2014-09-20 16:12 - 2014-09-20 16:13 - 00013638 _____ () C:\Users\Callum\Downloads\hijackthis.log

2014-09-20 16:11 - 2014-09-20 16:11 - 00388608 _____ (Trend Micro Inc.) C:\Users\Callum\Downloads\HijackThis.exe

2014-09-20 14:17 - 2014-09-20 14:17 - 07814408 _____ () C:\Users\Martin\Downloads\saSetup4.exe

2014-09-20 13:11 - 2014-09-20 13:11 - 44335120 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\IE10-Windows6.1-x64-en-us.exe

2014-09-20 12:30 - 2014-09-20 12:30 - 00274672 _____ () C:\Windows\Minidump\092014-20014-01.dmp

2014-09-20 11:50 - 2014-09-20 11:50 - 00002259 _____ () C:\Users\Conor\Desktop\Google Chrome.lnk

2014-09-20 11:50 - 2014-09-20 11:50 - 00000004 _____ () C:\Users\Conor\AppData\Roaming\appdataFr2.bin

2014-09-20 11:19 - 2014-09-20 11:19 - 00000004 _____ () C:\Users\Callum\AppData\Roaming\appdataFr2.bin

2014-09-19 21:07 - 2014-09-19 21:07 - 12789816 _____ () C:\Users\Conor\Downloads\Warriors-MP3.zip

2014-09-19 11:41 - 2014-09-19 11:41 - 00002259 _____ () C:\Users\Martin\Desktop\Google Chrome.lnk

2014-09-19 09:38 - 2014-09-19 09:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Martin\Desktop\MicrosoftFixit.IEPerformance.FISC.24833454657388370.1.1.Run.exe

2014-09-19 09:34 - 2014-09-19 09:34 - 00985600 _____ () C:\Users\Martin\Desktop\MicrosoftFixit50123.msi

2014-09-18 17:40 - 2014-09-18 17:40 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-FAMILY-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat

2014-09-18 17:39 - 2014-09-18 17:39 - 00000000 ____D () C:\RegBackup

2014-09-15 19:26 - 2014-09-15 19:26 - 00002334 _____ () C:\Users\Callum\Downloads\WCS (1).RDP

2014-09-15 19:25 - 2014-09-15 19:25 - 00002334 _____ () C:\Users\Callum\Downloads\WCS.RDP

2014-09-14 20:12 - 2014-09-14 20:13 - 00004871 _____ () C:\Users\Callum\Documents\What it was like to live in Mississippi in the 1930.odt

2014-09-14 16:45 - 2014-09-14 16:45 - 00023070 _____ () C:\Users\Callum\Documents\Profile of Emmeline Pankhurst and Millicent Fawcett.odt

2014-09-14 15:27 - 2014-09-14 15:27 - 00002163 _____ () C:\Users\Martin\Desktop\Tweaking.com - Windows Repair (All in One).lnk

2014-09-14 15:27 - 2014-09-14 15:27 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com

2014-09-14 15:27 - 2014-09-14 15:27 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com

2014-09-14 15:25 - 2014-09-14 15:25 - 09526552 _____ () C:\Users\Martin\Desktop\tweaking.com_windows_repair_aio_setup.exe

2014-09-14 14:28 - 2014-09-14 14:28 - 00000000 ____D () C:\Windows\CheckSur

2014-09-14 14:25 - 2014-09-14 14:28 - 551293744 _____ () C:\Users\Martin\Desktop\Windows6.1-KB947821-v33-x64.msuSurtool.msu

2014-09-14 13:04 - 2014-09-14 13:04 - 00005461 _____ () C:\AdwCleaner[s1].txt

2014-09-14 12:58 - 2014-09-14 12:58 - 01373475 _____ () C:\Users\Julie\Downloads\adwcleaner_3.310 (1).exe

2014-09-14 12:57 - 2014-09-14 12:58 - 01373475 _____ () C:\Users\Julie\Downloads\adwcleaner_3.310.exe

2014-09-14 12:48 - 2014-09-14 12:48 - 00918440 _____ (Oracle Corporation) C:\Users\Julie\Downloads\chromeinstall-7u67 (1).exe

2014-09-14 12:38 - 2014-09-14 12:38 - 00000000 ____D () C:\Windows\Sun

2014-09-14 12:38 - 2014-09-14 12:38 - 00000000 ____D () C:\Users\Julie\AppData\Roaming\Oracle

2014-09-14 12:36 - 2014-09-14 12:36 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-09-14 12:36 - 2014-09-14 12:36 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-09-14 12:36 - 2014-09-14 12:36 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-09-14 12:36 - 2014-09-14 12:36 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-09-14 12:36 - 2014-09-14 12:36 - 00000000 ____D () C:\Program Files (x86)\Java

2014-09-14 12:34 - 2014-09-14 12:34 - 00918440 _____ (Oracle Corporation) C:\Users\Julie\Downloads\chromeinstall-7u67.exe

2014-09-13 14:07 - 2014-09-13 10:20 - 03326176 _____ (Microsoft Corporation) C:\Users\Martin\Documents\OutlookConnector.exe

2014-09-13 10:22 - 2014-09-13 10:22 - 00000000 ____D () C:\Program Files (x86)\MSECache

2014-09-12 19:03 - 2014-09-17 18:52 - 00000000 ____D () C:\Users\Conor\Documents\Visual Studio 2010

2014-09-12 09:15 - 2014-09-13 13:52 - 00001343 _____ () C:\Users\Martin\Desktop\BT Cloud.lnk

2014-09-12 09:15 - 2014-09-12 09:15 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Cloud

2014-09-12 09:15 - 2014-09-12 09:15 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\F-Secure

2014-09-12 09:15 - 2014-09-12 09:15 - 00000000 ____D () C:\ProgramData\F-Secure

2014-09-12 09:15 - 2013-08-23 07:44 - 00000000 ____D () C:\Users\Martin\BT Cloud Sync

2014-09-12 09:14 - 2014-09-12 09:14 - 29128240 _____ (F-Secure Corporation) C:\Users\Martin\Desktop\BTCloudWindows.exe

2014-09-12 09:14 - 2014-09-12 09:14 - 00000000 ____D () C:\Users\Martin\AppData\Local\F-Secure

2014-09-11 22:32 - 2014-09-11 22:32 - 00000000 ____D () C:\Users\Conor\Documents\7 Days To Die

2014-09-10 19:43 - 2014-09-10 19:43 - 00000000 ____D () C:\Users\Conor\AppData\Roaming\HpUpdate

2014-09-10 18:44 - 2014-09-10 18:44 - 00039222 _____ () C:\Users\Conor\Downloads\720720 UseDiagram.asta

2014-09-10 18:31 - 2014-09-10 18:31 - 00318890 _____ () C:\Users\Callum\Documents\Frecnh.odt

2014-09-06 12:53 - 2014-09-19 20:52 - 00000000 ____D () C:\Users\Conor\Documents\A2 College HW

2014-09-03 21:32 - 2014-09-03 21:32 - 00245624 _____ (Software Installer ) C:\Users\Martin\Downloads\Setup.exe

2014-09-03 20:22 - 2014-09-03 20:22 - 00415707 _____ () C:\Users\Martin\Downloads\Fix IE.zip

2014-09-03 20:20 - 2014-09-03 20:21 - 00014012 _____ () C:\Users\Martin\Downloads\iefix.zip

2014-09-03 20:04 - 2014-09-03 20:04 - 00347816 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\MicrosoftFixit.wu.LB.132333201779340213.1.1.Run.exe

2014-09-03 19:50 - 2011-09-22 21:07 - 00105832 _____ (Microsoft Corporation) C:\Windows\system32\SQSRVRES.DLL

2014-09-03 19:50 - 2011-09-22 21:06 - 00109416 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll

2014-09-03 19:50 - 2011-09-22 17:18 - 00073064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll

2014-09-03 19:49 - 2014-09-03 19:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0

2014-09-03 19:40 - 2014-09-03 19:40 - 00985600 _____ () C:\Users\Martin\Downloads\MicrosoftFixit50123 (2).msi

2014-09-03 19:36 - 2014-09-03 19:36 - 00347816 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.19933319997370014.4.1.Run.exe

2014-09-03 19:14 - 2014-09-03 19:14 - 00000869 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk

2014-09-03 19:14 - 2014-09-03 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-09-03 19:14 - 2014-09-03 19:14 - 00000000 ____D () C:\Program Files\CPUID

2014-09-03 19:13 - 2014-09-03 19:13 - 01500512 _____ ( ) C:\Users\Martin\Downloads\cpu-z_1.70-setup-en.exe

2014-08-27 07:28 - 2014-08-27 07:28 - 02041176 _____ () C:\Users\Martin\Downloads\Windows6.1-KB2888049-x64.msu

2014-08-27 07:28 - 2014-08-27 07:28 - 01003796 _____ () C:\Users\Martin\Downloads\Windows6.1-KB2834140-v2-x64.msu

2014-08-26 22:17 - 2014-08-26 22:17 - 00000000 ____D () C:\Windows\ERUNT

2014-08-26 21:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-08-26 21:51 - 2014-09-20 20:37 - 00000000 ____D () C:\AdwCleaner

2014-08-26 19:52 - 2014-09-20 20:20 - 00000000 ____D () C:\Users\Martin\Documents\pc1

2014-08-26 19:47 - 2014-08-26 19:47 - 00110240 _____ () C:\Users\Martin\pc1.txt

2014-08-26 19:44 - 2014-08-26 19:47 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Notepad++

2014-08-26 19:14 - 2014-09-20 22:46 - 00000000 ____D () C:\FRST

2014-08-26 19:12 - 2014-09-20 22:46 - 02105856 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe

2014-08-26 12:42 - 2014-08-26 12:42 - 17291904 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam_premium.exe

2014-08-26 11:41 - 2014-09-20 22:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-08-26 11:41 - 2014-08-26 12:43 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-26 11:41 - 2014-08-26 12:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-26 11:41 - 2014-08-26 12:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-26 11:41 - 2014-08-26 11:41 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-26 11:41 - 2014-05-12 08:19 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-08-26 11:41 - 2014-05-12 08:19 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-08-26 11:41 - 2014-05-12 08:19 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-08-26 11:22 - 2014-08-26 11:22 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-26 11:07 - 2014-08-26 11:07 - 00003110 _____ () C:\Windows\System32\Tasks\{48F43E3A-9C7A-4535-87A1-033D6EE7FF1F}

2014-08-26 11:06 - 2014-08-26 11:06 - 00003092 _____ () C:\Windows\System32\Tasks\{9D4A2211-7B31-4A21-8019-D4F06E80C889}

2014-08-26 11:05 - 2014-08-26 11:06 - 00000000 ____D () C:\Users\Martin\.nbi

2014-08-26 10:44 - 2014-09-19 10:04 - 00000004 _____ () C:\Users\Martin\AppData\Roaming\appdataFr2.bin

2014-08-26 10:16 - 2014-08-26 10:16 - 00000000 ____D () C:\OneDriveTemp

2014-08-25 16:39 - 2014-08-25 16:39 - 00000000 ___RD () C:\Users\Martin\Documents\HP Photo Creations

2014-08-25 16:39 - 2014-08-25 16:39 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Visan

2014-08-25 16:38 - 2014-08-25 16:38 - 02959504 _____ (Hewlett-Packard ) C:\Users\Martin\Downloads\hpusetup.exe

2014-08-25 16:38 - 2014-08-25 16:38 - 00000000 ____D () C:\Windows\Hewlett-Packard

2014-08-25 15:48 - 2014-08-25 15:48 - 00000000 ____D () C:\Users\Martin\AppData\Local\{BBD73DC1-3AF5-4DC4-AEFD-1DF4104BFCA8}

2014-08-25 15:46 - 2014-08-25 15:46 - 00000000 ____D () C:\ProgramData\ShoppingDealFactory

2014-08-25 09:47 - 2014-08-25 09:47 - 00000000 ____D () C:\ProgramData\ffd8e8a8a13f665b

2014-08-24 16:14 - 2014-09-20 22:26 - 00000340 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-08-24 16:14 - 2014-08-24 16:14 - 00003350 _____ () C:\Windows\System32\Tasks\HP Photo Creations Communicator

2014-08-24 16:13 - 2014-08-24 16:13 - 43243608 _____ (HP) C:\Users\Martin\Downloads\hpphotocreations.exe

2014-08-24 15:48 - 2014-09-03 18:53 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HpUpdate

2014-08-24 15:48 - 2014-08-25 16:39 - 00000000 ____D () C:\ProgramData\HP Photo Creations

2014-08-24 15:48 - 2014-08-25 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

2014-08-24 15:48 - 2014-08-24 16:14 - 00002172 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk

2014-08-24 15:48 - 2014-08-24 16:14 - 00000000 ____D () C:\ProgramData\Visan

2014-08-24 15:48 - 2014-08-24 15:48 - 00002248 _____ () C:\Users\Public\Desktop\HP Photosmart 6520 series.lnk

2014-08-24 15:48 - 2014-08-24 15:48 - 00001180 _____ () C:\Users\Public\Desktop\Shop for Supplies - HP Photosmart 6520 series.lnk

2014-08-24 15:48 - 2014-08-24 15:48 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations

2014-08-24 15:48 - 2012-10-17 04:31 - 00741480 _____ (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMAF11.dll

2014-08-24 15:47 - 2014-08-24 15:48 - 00000000 ____D () C:\Program Files (x86)\HP

2014-08-24 15:47 - 2014-08-24 15:47 - 00000057 _____ () C:\ProgramData\Ament.ini

2014-08-24 15:47 - 2014-08-24 15:47 - 00000000 ____D () C:\Program Files\HP

2014-08-24 15:45 - 2014-08-24 15:45 - 72558696 _____ () C:\Users\Martin\Downloads\PS6520_1315-1.exe

2014-08-24 15:42 - 2014-08-24 16:16 - 00000000 ____D () C:\Users\Martin\AppData\Local\HP

2014-08-24 15:40 - 2014-08-24 15:47 - 00000000 ____D () C:\ProgramData\HP

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-20 22:47 - 2014-09-20 22:46 - 00023501 _____ () C:\Users\Martin\Desktop\FRST.txt

2014-09-20 22:46 - 2014-09-20 22:46 - 00000000 ____D () C:\Users\Martin\Desktop\FRST-OlderVersion

2014-09-20 22:46 - 2014-08-26 19:14 - 00000000 ____D () C:\FRST

2014-09-20 22:46 - 2014-08-26 19:12 - 02105856 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe

2014-09-20 22:44 - 2014-03-31 17:15 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-09-20 22:31 - 2011-04-19 22:16 - 02069582 _____ () C:\Windows\WindowsUpdate.log

2014-09-20 22:26 - 2014-08-24 16:14 - 00000340 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job

2014-09-20 22:19 - 2011-05-23 19:38 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-20 22:18 - 2014-08-26 11:41 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-20 22:04 - 2013-11-23 13:27 - 00555619 _____ () C:\Windows\IE11_main.log

2014-09-20 22:03 - 2014-09-20 22:03 - 00000134 _____ () C:\Users\Martin\Desktop\Internet Explorer Troubleshooting.url

2014-09-20 21:53 - 2009-07-14 05:45 - 00022064 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-20 21:53 - 2009-07-14 05:45 - 00022064 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-20 21:33 - 2014-05-28 10:07 - 00000000 ____D () C:\Users\Martin\AppData\Local\E0E18595-2AAF-491D-BA98-806CD1D4784E.aplzod

2014-09-20 21:32 - 2014-09-20 21:32 - 00000000 ___RD () C:\Users\Martin\iCloudDrive

2014-09-20 21:32 - 2014-09-20 21:32 - 00000000 ____D () C:\Users\Martin\AppData\Local\Apple Inc

2014-09-20 21:32 - 2011-04-19 22:16 - 00000000 ____D () C:\Users\Martin

2014-09-20 21:17 - 2014-09-20 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2014-09-20 21:17 - 2014-04-20 15:58 - 00001844 _____ () C:\Users\Public\Desktop\BT NetProtect Plus.lnk

2014-09-20 21:16 - 2009-07-14 06:13 - 00880170 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-20 21:13 - 2011-05-23 19:38 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-20 21:13 - 2011-05-09 20:46 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Apple Computer

2014-09-20 21:11 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-20 21:11 - 2009-07-14 05:51 - 00186507 _____ () C:\Windows\setupact.log

2014-09-20 21:09 - 2014-09-20 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2014-09-20 21:08 - 2014-09-20 21:08 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\Program Files\iTunes

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\Program Files\iPod

2014-09-20 21:08 - 2014-09-20 21:08 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-09-20 20:37 - 2014-08-26 21:51 - 00000000 ____D () C:\AdwCleaner

2014-09-20 20:29 - 2010-11-21 04:47 - 02884290 _____ () C:\Windows\PFRO.log

2014-09-20 20:23 - 2014-09-20 20:23 - 01373475 _____ () C:\Users\Martin\Downloads\adwcleaner_3.310.exe

2014-09-20 20:20 - 2014-08-26 19:52 - 00000000 ____D () C:\Users\Martin\Documents\pc1

2014-09-20 17:18 - 2013-03-31 14:42 - 00000000 ___RD () C:\Users\Martin\SkyDrive

2014-09-20 17:08 - 2014-09-20 17:08 - 00000000 ____D () C:\Users\Martin\AppData\Local\Adobe

2014-09-20 17:02 - 2014-09-20 17:02 - 00002963 _____ () C:\Users\Martin\Desktop\HiJackThis.lnk

2014-09-20 17:02 - 2014-09-20 17:02 - 00000000 ____D () C:\Users\Martin\Desktop\Hijackthis

2014-09-20 17:02 - 2014-09-20 17:02 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

2014-09-20 16:47 - 2014-09-20 16:47 - 00000000 ____D () C:\Users\Martin\Downloads\Autoruns

2014-09-20 16:46 - 2014-09-20 16:46 - 00511633 _____ () C:\Users\Martin\Downloads\Autoruns.zip

2014-09-20 16:14 - 2014-09-20 16:14 - 00013638 _____ () C:\Users\Callum\Desktop\hijackthis.log

2014-09-20 16:13 - 2014-09-20 16:12 - 00013638 _____ () C:\Users\Callum\Downloads\hijackthis.log

2014-09-20 16:11 - 2014-09-20 16:11 - 00388608 _____ (Trend Micro Inc.) C:\Users\Callum\Downloads\HijackThis.exe

2014-09-20 14:19 - 2014-04-20 15:55 - 00000000 ____D () C:\Program Files (x86)\McAfee

2014-09-20 14:17 - 2014-09-20 14:17 - 07814408 _____ () C:\Users\Martin\Downloads\saSetup4.exe

2014-09-20 13:56 - 2013-09-20 22:02 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-09-20 13:12 - 2013-05-27 21:06 - 00551198 _____ () C:\Windows\IE10_main.log

2014-09-20 13:11 - 2014-09-20 13:11 - 44335120 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\IE10-Windows6.1-x64-en-us.exe

2014-09-20 12:33 - 2014-06-30 11:48 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-09-20 12:30 - 2014-09-20 12:30 - 00274672 _____ () C:\Windows\Minidump\092014-20014-01.dmp

2014-09-20 12:30 - 2011-04-20 15:32 - 664473650 _____ () C:\Windows\MEMORY.DMP

2014-09-20 12:30 - 2011-04-20 15:32 - 00000000 ____D () C:\Windows\Minidump

2014-09-20 12:05 - 2014-04-20 15:35 - 00000000 ____D () C:\Program Files\Common Files\McAfee

2014-09-20 11:50 - 2014-09-20 11:50 - 00002259 _____ () C:\Users\Conor\Desktop\Google Chrome.lnk

2014-09-20 11:50 - 2014-09-20 11:50 - 00000004 _____ () C:\Users\Conor\AppData\Roaming\appdataFr2.bin

2014-09-20 11:29 - 2012-11-28 19:19 - 00002259 _____ () C:\Users\Callum\Desktop\Google Chrome.lnk

2014-09-20 11:28 - 2011-04-22 07:23 - 00108816 _____ () C:\Users\Callum\AppData\Local\GDIPFONTCACHEV1.DAT

2014-09-20 11:27 - 2011-04-23 14:25 - 00000282 __RSH () C:\Users\Callum\ntuser.pol

2014-09-20 11:27 - 2011-04-22 07:23 - 00000000 ____D () C:\Users\Callum

2014-09-20 11:19 - 2014-09-20 11:19 - 00000004 _____ () C:\Users\Callum\AppData\Roaming\appdataFr2.bin

2014-09-20 11:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports

2014-09-19 22:23 - 2011-12-04 13:02 - 00000000 ____D () C:\Users\Conor\AppData\Roaming\Skype

2014-09-19 21:07 - 2014-09-19 21:07 - 12789816 _____ () C:\Users\Conor\Downloads\Warriors-MP3.zip

2014-09-19 20:52 - 2014-09-06 12:53 - 00000000 ____D () C:\Users\Conor\Documents\A2 College HW

2014-09-19 11:41 - 2014-09-19 11:41 - 00002259 _____ () C:\Users\Martin\Desktop\Google Chrome.lnk

2014-09-19 10:04 - 2014-08-26 10:44 - 00000004 _____ () C:\Users\Martin\AppData\Roaming\appdataFr2.bin

2014-09-19 09:38 - 2014-09-19 09:38 - 00347816 _____ (Microsoft Corporation) C:\Users\Martin\Desktop\MicrosoftFixit.IEPerformance.FISC.24833454657388370.1.1.Run.exe

2014-09-19 09:34 - 2014-09-19 09:34 - 00985600 _____ () C:\Users\Martin\Desktop\MicrosoftFixit50123.msi

2014-09-18 20:51 - 2011-04-22 07:21 - 00108816 _____ () C:\Users\Conor\AppData\Local\GDIPFONTCACHEV1.DAT

2014-09-18 18:21 - 2011-04-20 01:31 - 00108816 _____ () C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT

2014-09-18 18:20 - 2009-07-14 05:45 - 00415968 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-09-18 18:14 - 2009-07-14 03:34 - 00000514 _____ () C:\Windows\win.ini

2014-09-18 17:40 - 2014-09-18 17:40 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-FAMILY-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat

2014-09-18 17:39 - 2014-09-18 17:39 - 00000000 ____D () C:\RegBackup

2014-09-18 17:26 - 2013-05-13 20:01 - 00000000 ____D () C:\Windows\pss

2014-09-17 18:52 - 2014-09-12 19:03 - 00000000 ____D () C:\Users\Conor\Documents\Visual Studio 2010

2014-09-16 19:15 - 2011-07-23 16:12 - 00000000 ____D () C:\Users\Conor\AppData\Local\CrashDumps

2014-09-15 19:26 - 2014-09-15 19:26 - 00002334 _____ () C:\Users\Callum\Downloads\WCS (1).RDP

2014-09-15 19:25 - 2014-09-15 19:25 - 00002334 _____ () C:\Users\Callum\Downloads\WCS.RDP

2014-09-14 20:13 - 2014-09-14 20:12 - 00004871 _____ () C:\Users\Callum\Documents\What it was like to live in Mississippi in the 1930.odt

2014-09-14 16:45 - 2014-09-14 16:45 - 00023070 _____ () C:\Users\Callum\Documents\Profile of Emmeline Pankhurst and Millicent Fawcett.odt

2014-09-14 15:27 - 2014-09-14 15:27 - 00002163 _____ () C:\Users\Martin\Desktop\Tweaking.com - Windows Repair (All in One).lnk

2014-09-14 15:27 - 2014-09-14 15:27 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com

2014-09-14 15:27 - 2014-09-14 15:27 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com

2014-09-14 15:25 - 2014-09-14 15:25 - 09526552 _____ () C:\Users\Martin\Desktop\tweaking.com_windows_repair_aio_setup.exe

2014-09-14 14:28 - 2014-09-14 14:28 - 00000000 ____D () C:\Windows\CheckSur

2014-09-14 14:28 - 2014-09-14 14:25 - 551293744 _____ () C:\Users\Martin\Desktop\Windows6.1-KB947821-v33-x64.msuSurtool.msu

2014-09-14 13:05 - 2012-10-02 14:14 - 00000000 ____D () C:\ProgramData\Origin

2014-09-14 13:04 - 2014-09-14 13:04 - 00005461 _____ () C:\AdwCleaner[s1].txt

2014-09-14 13:03 - 2012-10-02 14:14 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-09-14 12:58 - 2014-09-14 12:58 - 01373475 _____ () C:\Users\Julie\Downloads\adwcleaner_3.310 (1).exe

2014-09-14 12:58 - 2014-09-14 12:57 - 01373475 _____ () C:\Users\Julie\Downloads\adwcleaner_3.310.exe

2014-09-14 12:48 - 2014-09-14 12:48 - 00918440 _____ (Oracle Corporation) C:\Users\Julie\Downloads\chromeinstall-7u67 (1).exe

2014-09-14 12:38 - 2014-09-14 12:38 - 00000000 ____D () C:\Windows\Sun

2014-09-14 12:38 - 2014-09-14 12:38 - 00000000 ____D () C:\Users\Julie\AppData\Roaming\Oracle

2014-09-14 12:37 - 2014-06-05 15:46 - 00000000 ____D () C:\ProgramData\Oracle

2014-09-14 12:36 - 2014-09-14 12:36 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-09-14 12:36 - 2014-09-14 12:36 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-09-14 12:36 - 2014-09-14 12:36 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-09-14 12:36 - 2014-09-14 12:36 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-09-14 12:36 - 2014-09-14 12:36 - 00000000 ____D () C:\Program Files (x86)\Java

2014-09-14 12:34 - 2014-09-14 12:34 - 00918440 _____ (Oracle Corporation) C:\Users\Julie\Downloads\chromeinstall-7u67.exe

2014-09-13 16:19 - 2014-07-01 20:10 - 00153786 _____ () C:\Users\Callum\Documents\The Rock Cycle.odt

2014-09-13 14:00 - 2014-05-28 10:07 - 00000000 ____D () C:\Users\Martin\Documents\Outlook Files

2014-09-13 13:53 - 2011-04-21 17:37 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-13 13:52 - 2014-09-12 09:15 - 00001343 _____ () C:\Users\Martin\Desktop\BT Cloud.lnk

2014-09-13 10:22 - 2014-09-13 10:22 - 00000000 ____D () C:\Program Files (x86)\MSECache

2014-09-13 10:20 - 2014-09-13 14:07 - 03326176 _____ (Microsoft Corporation) C:\Users\Martin\Documents\OutlookConnector.exe

2014-09-12 09:18 - 2013-10-27 15:07 - 00000000 ____D () C:\Users\Martin\Documents\TomTom

2014-09-12 09:18 - 2012-11-20 18:59 - 00000000 ____D () C:\Users\Martin\Documents\Visual Studio 2012

2014-09-12 09:18 - 2012-08-03 11:30 - 00000000 ____D () C:\Users\Martin\Documents\Electronic Arts

2014-09-12 09:15 - 2014-09-12 09:15 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Cloud

2014-09-12 09:15 - 2014-09-12 09:15 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\F-Secure

2014-09-12 09:15 - 2014-09-12 09:15 - 00000000 ____D () C:\ProgramData\F-Secure

2014-09-12 09:14 - 2014-09-12 09:14 - 29128240 _____ (F-Secure Corporation) C:\Users\Martin\Desktop\BTCloudWindows.exe

2014-09-12 09:14 - 2014-09-12 09:14 - 00000000 ____D () C:\Users\Martin\AppData\Local\F-Secure

2014-09-11 22:32 - 2014-09-11 22:32 - 00000000 ____D () C:\Users\Conor\Documents\7 Days To Die

2014-09-10 23:38 - 2012-11-20 10:22 - 00864036 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-09-10 23:28 - 2013-08-16 14:27 - 00000000 ____D () C:\Windows\system32\MRT

2014-09-10 23:28 - 2011-04-21 21:18 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-09-10 19:43 - 2014-09-10 19:43 - 00000000 ____D () C:\Users\Conor\AppData\Roaming\HpUpdate

2014-09-10 18:44 - 2014-09-10 18:44 - 00039222 _____ () C:\Users\Conor\Downloads\720720 UseDiagram.asta

2014-09-10 18:31 - 2014-09-10 18:31 - 00318890 _____ () C:\Users\Callum\Documents\Frecnh.odt

2014-09-10 11:25 - 2011-04-26 10:57 - 00000008 __RSH () C:\Users\Julie\ntuser.pol

2014-09-10 11:25 - 2011-04-22 07:18 - 00000000 ____D () C:\Users\Julie

2014-09-09 21:44 - 2014-03-31 17:15 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-09-09 20:44 - 2012-04-09 11:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-09 20:44 - 2012-01-28 13:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-09 08:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\schemas

2014-09-06 12:50 - 2011-04-22 12:53 - 00000008 __RSH () C:\Users\Conor\ntuser.pol

2014-09-06 12:50 - 2011-04-22 07:21 - 00000000 ____D () C:\Users\Conor

2014-09-06 12:49 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media

2014-09-05 08:55 - 2011-06-07 19:43 - 00000000 ____D () C:\Users\Martin\AppData\Local\CrashDumps

2014-09-03 21:59 - 2014-03-16 14:32 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-09-03 21:59 - 2011-04-23 03:38 - 00000008 __RSH () C:\Users\Martin\ntuser.pol

2014-09-03 21:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy

2014-09-03 21:50 - 2011-04-21 17:47 - 00000000 ____D () C:\Users\Martin\Downloads\Security Info

2014-09-03 21:32 - 2014-09-03 21:32 - 00245624 _____ (Software Installer ) C:\Users\Martin\Downloads\Setup.exe

2014-09-03 20:47 - 2013-06-25 23:14 - 00006656 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-09-03 20:22 - 2014-09-03 20:22 - 00415707 _____ () C:\Users\Martin\Downloads\Fix IE.zip

2014-09-03 20:21 - 2014-09-03 20:20 - 00014012 _____ () C:\Users\Martin\Downloads\iefix.zip

2014-09-03 20:13 - 2011-04-21 16:43 - 00659282 _____ () C:\Windows\IE9_main.log

2014-09-03 20:04 - 2014-09-03 20:04 - 00347816 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\MicrosoftFixit.wu.LB.132333201779340213.1.1.Run.exe

2014-09-03 19:59 - 2012-11-20 10:31 - 00000000 ____D () C:\Program Files\Microsoft SQL Server

2014-09-03 19:59 - 2012-11-20 10:31 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server

2014-09-03 19:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\L2Schemas

2014-09-03 19:49 - 2014-09-03 19:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 9.0

2014-09-03 19:49 - 2014-07-23 10:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008

2014-09-03 19:40 - 2014-09-03 19:40 - 00985600 _____ () C:\Users\Martin\Downloads\MicrosoftFixit50123 (2).msi

2014-09-03 19:36 - 2014-09-03 19:36 - 00347816 _____ (Microsoft Corporation) C:\Users\Martin\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.19933319997370014.4.1.Run.exe

2014-09-03 19:20 - 2011-04-19 22:23 - 00000000 ____D () C:\Program Files (x86)\InstallShield Installation Information

2014-09-03 19:16 - 2011-06-25 18:03 - 00000000 ____D () C:\Users\Martin\AppData\Local\Unity

2014-09-03 19:14 - 2014-09-03 19:14 - 00000869 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk

2014-09-03 19:14 - 2014-09-03 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-09-03 19:14 - 2014-09-03 19:14 - 00000000 ____D () C:\Program Files\CPUID

2014-09-03 19:13 - 2014-09-03 19:13 - 01500512 _____ ( ) C:\Users\Martin\Downloads\cpu-z_1.70-setup-en.exe

2014-09-03 18:53 - 2014-08-24 15:48 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\HpUpdate

2014-08-27 07:28 - 2014-08-27 07:28 - 02041176 _____ () C:\Users\Martin\Downloads\Windows6.1-KB2888049-x64.msu

2014-08-27 07:28 - 2014-08-27 07:28 - 01003796 _____ () C:\Users\Martin\Downloads\Windows6.1-KB2834140-v2-x64.msu

2014-08-26 22:17 - 2014-08-26 22:17 - 00000000 ____D () C:\Windows\ERUNT

2014-08-26 22:07 - 2013-07-08 13:30 - 00000000 ____D () C:\Users\Conor\AppData\Local\CRE

2014-08-26 21:46 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-08-26 19:47 - 2014-08-26 19:47 - 00110240 _____ () C:\Users\Martin\pc1.txt

2014-08-26 19:47 - 2014-08-26 19:44 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Notepad++

2014-08-26 18:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat

2014-08-26 12:43 - 2014-08-26 11:41 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-08-26 12:43 - 2014-08-26 11:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-26 12:43 - 2014-08-26 11:41 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-26 12:42 - 2014-08-26 12:42 - 17291904 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam_premium.exe

2014-08-26 11:41 - 2014-08-26 11:41 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-08-26 11:22 - 2014-08-26 11:22 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Martin\Downloads\mbam-setup-2.0.2.1012.exe

2014-08-26 11:10 - 2011-04-21 16:52 - 00000000 ____D () C:\ProgramData\Norton

2014-08-26 11:07 - 2014-08-26 11:07 - 00003110 _____ () C:\Windows\System32\Tasks\{48F43E3A-9C7A-4535-87A1-033D6EE7FF1F}

2014-08-26 11:06 - 2014-08-26 11:06 - 00003092 _____ () C:\Windows\System32\Tasks\{9D4A2211-7B31-4A21-8019-D4F06E80C889}

2014-08-26 11:06 - 2014-08-26 11:05 - 00000000 ____D () C:\Users\Martin\.nbi

2014-08-26 10:16 - 2014-08-26 10:16 - 00000000 ____D () C:\OneDriveTemp

2014-08-25 16:39 - 2014-08-25 16:39 - 00000000 ___RD () C:\Users\Martin\Documents\HP Photo Creations

2014-08-25 16:39 - 2014-08-25 16:39 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Visan

2014-08-25 16:39 - 2014-08-24 15:48 - 00000000 ____D () C:\ProgramData\HP Photo Creations

2014-08-25 16:38 - 2014-08-25 16:38 - 02959504 _____ (Hewlett-Packard ) C:\Users\Martin\Downloads\hpusetup.exe

2014-08-25 16:38 - 2014-08-25 16:38 - 00000000 ____D () C:\Windows\Hewlett-Packard

2014-08-25 16:38 - 2014-08-24 15:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

2014-08-25 15:48 - 2014-08-25 15:48 - 00000000 ____D () C:\Users\Martin\AppData\Local\{BBD73DC1-3AF5-4DC4-AEFD-1DF4104BFCA8}

2014-08-25 15:46 - 2014-08-25 15:46 - 00000000 ____D () C:\ProgramData\ShoppingDealFactory

2014-08-25 15:25 - 2014-07-23 10:26 - 00000000 ____D () C:\Users\Martin\Documents\Visual Studio 2010

2014-08-25 09:47 - 2014-08-25 09:47 - 00000000 ____D () C:\ProgramData\ffd8e8a8a13f665b

2014-08-24 16:16 - 2014-08-24 15:42 - 00000000 ____D () C:\Users\Martin\AppData\Local\HP

2014-08-24 16:14 - 2014-08-24 16:14 - 00003350 _____ () C:\Windows\System32\Tasks\HP Photo Creations Communicator

2014-08-24 16:14 - 2014-08-24 15:48 - 00002172 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk

2014-08-24 16:14 - 2014-08-24 15:48 - 00000000 ____D () C:\ProgramData\Visan

2014-08-24 16:13 - 2014-08-24 16:13 - 43243608 _____ (HP) C:\Users\Martin\Downloads\hpphotocreations.exe

2014-08-24 15:48 - 2014-08-24 15:48 - 00002248 _____ () C:\Users\Public\Desktop\HP Photosmart 6520 series.lnk

2014-08-24 15:48 - 2014-08-24 15:48 - 00001180 _____ () C:\Users\Public\Desktop\Shop for Supplies - HP Photosmart 6520 series.lnk

2014-08-24 15:48 - 2014-08-24 15:48 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations

2014-08-24 15:48 - 2014-08-24 15:47 - 00000000 ____D () C:\Program Files (x86)\HP

2014-08-24 15:47 - 2014-08-24 15:47 - 00000057 _____ () C:\ProgramData\Ament.ini

2014-08-24 15:47 - 2014-08-24 15:47 - 00000000 ____D () C:\Program Files\HP

2014-08-24 15:47 - 2014-08-24 15:40 - 00000000 ____D () C:\ProgramData\HP

2014-08-24 15:45 - 2014-08-24 15:45 - 72558696 _____ () C:\Users\Martin\Downloads\PS6520_1315-1.exe

2014-08-24 15:18 - 2014-04-20 15:49 - 00002182 _____ () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk

Some content of TEMP:

====================

C:\Users\Conor\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Julie\AppData\Local\Temp\Quarantine.exe

C:\Users\Martin\AppData\Local\Temp\Quarantine.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-09-18 19:05

==================== End Of Log ============================Addition.txt

David H. Lipman · September 20, 2014

Download Internet Explorer 10 64bit and install it.

Let's see how that goes.

After IE10 you will then update to IE11.

Martin7365 · September 21, 2014

Hi David,

IE 10 starts to install saying it is getting required updates, it then stops and directs me to go online to get an update.

support.microsoft.com/kb/2818833 is the page where prerequisite updates are located.

I try all 5 updates using x64 package and get the message every time that the update is not applicable to my computer.

This is as far as I can go.

Regards Martin.

David H. Lipman · September 21, 2014

When you ran the installer for IE10, did it ask you if it should install updates ?

If it does, run it again BUT.... uncheck the box or in some other way indicate that you do not want to install updates. Just install IE10 with no updates.

Martin7365 · September 21, 2014

When I Run IE10, it automatically starts to install updates, stops, and advises you to GET UPDATE or CANCEL, there is no other option given.

Regards Martin

David H. Lipman · September 21, 2014

Please see; Internet Explorer Setup Options

You'll find the /update-no command line switch to not install updates.

AdvancedSetup · September 21, 2014

Currently Windows Search is broken and should be fixed. You should also do some other clean up.

My recommendations.

STEP 1
Run the following fix from Microsoft
Fix Windows Desktop Search when it crashes or not showing results

STEP 2
Click on START and type in CMD.EXE and when it shows on the menu right click over it and choose "Run as administrator"
Then type the following and press the Enter key.

CHKDSK C: /R

It will say the following

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Press the Y key and then the Enter key and then restart the computer to run the disk check.
It should take at least 10 minutes to run but could take many hours to run depending on the size of the drive and how much data you have.

On Windows 7 the disk check log is in the Event Logs under Application with a heading source of Wininit
How to Read the Event Viewer Log for Check Disk (chkdsk) in Vista, Windows 7, and Windows 8

After the reboot look in the Event Logs and copy/paste back the results of the disk check.

STEP 3

Please go into Control Panel, Add/Remove and uninstall ALL versions of Java and then run the following.

Please download JavaRa-1.16 and save it to your computer.

Double click to open the zip file and then select all and choose Copy.
Create a new folder on your Desktop named RemoveJava and paste the files into this new folder.
Quit all browsers and other running applications.
Right-click on JavaRa.exe in RemoveJava folder and choose Run as administrator to start the program.
From the drop-down menu, choose English and click on Select.
JavaRa will open; click on Remove Older Versions to remove the older versions of Java installed on your computer.
Click Yes when prompted. When JavaRa is done, a notice will appear that a logfile has been produced. Click OK.
A logfile will pop up. Please save it to a convenient location and post it in your next reply.

Next:

STEP 4
Please Run TFC by OldTimer to clear temporary files:

Download TFC from here and save it to your desktop.
http://oldtimer.geekstogo.com/TFC.exe
Close any open programs and Internet browsers.
Double click TFC.exe to run it on XP (for Vista and Windows 7 right click and choose "Run as administrator") and once it opens click on the Start button on the lower left of the program to allow it to begin cleaning.
Please be patient as clearing out temp files may take a while.
Once it completes you may be prompted to restart your computer, please do so.
Once it's finished you may delete TFC.exe from your desktop or save it for later use for the cleaning of temporary files.

STEP 5
Please run FRST again. Temporarily disable your antivirus when you run it and re-enable your antivirus when done scanning.
Also make sure you place a check mark in the Additions.txt check box to get that new log too and post back both new logs when ready

Martin7365 · September 23, 2014

I hope I have done everything you needed, Good Luck.

Log Name: Application

Source: Microsoft-Windows-Wininit

Date: 22/09/2014 11:25:42

Event ID: 1001

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Family-PC

Description:

Checking file system on C:

The type of the file system is NTFS.

A disk check has been scheduled.

Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...

432640 file records processed.

File verification completed.

1957 large file records processed.

0 bad file records processed.

0 EA records processed.

109 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...

556662 index entries processed.

Index verification completed.

0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...

432640 file SDs/SIDs processed.

Cleaning up 1864 unused index entries from index $SII of file 0x9.

Cleaning up 1864 unused index entries from index $SDH of file 0x9.

Cleaning up 1864 unused security descriptors.

Security descriptor verification completed.

62012 data files processed.

CHKDSK is verifying Usn Journal...

36820776 USN bytes processed.

Usn Journal verification completed.

CHKDSK is verifying file data (stage 4 of 5)...

432624 files processed.

File data verification completed.

CHKDSK is verifying free space (stage 5 of 5)...

198370166 free clusters processed.

Free space verification is complete.

CHKDSK discovered free space marked as allocated in the

master file table (MFT) bitmap.

Windows has made corrections to the file system.

976663551 KB total disk space.

182449468 KB in 324288 files.

165880 KB in 62013 indexes.

0 KB in bad sectors.

567539 KB in use by the system.

65536 KB occupied by the log file.

793480664 KB available on disk.

4096 bytes in each allocation unit.

244165887 total allocation units on disk.

198370166 allocation units available on disk.

Internal Info:

00 9a 06 00 09 e5 05 00 30 d2 09 00 00 00 00 00 ........0.......

f1 08 00 00 6d 00 00 00 00 00 00 00 00 00 00 00 ....m...........

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.

Please wait while your computer restarts.

Event Xml:

<Channel>Application</Channel>

<Computer>Family-PC</Computer>

</System>

<Data>

Checking file system on C:

The type of the file system is NTFS.

A disk check has been scheduled.

Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...

432640 file records processed.

File verification completed.

1957 large file records processed.

0 bad file records processed.

0 EA records processed.

109 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...

556662 index entries processed.

Index verification completed.

0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...

432640 file SDs/SIDs processed.

Cleaning up 1864 unused index entries from index $SII of file 0x9.

Cleaning up 1864 unused index entries from index $SDH of file 0x9.

Cleaning up 1864 unused security descriptors.

Security descriptor verification completed.

62012 data files processed.

CHKDSK is verifying Usn Journal...

36820776 USN bytes processed.

Usn Journal verification completed.

CHKDSK is verifying file data (stage 4 of 5)...

432624 files processed.

File data verification completed.

CHKDSK is verifying free space (stage 5 of 5)...

198370166 free clusters processed.

Free space verification is complete.

CHKDSK discovered free space marked as allocated in the

master file table (MFT) bitmap.

Windows has made corrections to the file system.

976663551 KB total disk space.

182449468 KB in 324288 files.

165880 KB in 62013 indexes.

0 KB in bad sectors.

567539 KB in use by the system.

65536 KB occupied by the log file.

793480664 KB available on disk.

4096 bytes in each allocation unit.

244165887 total allocation units on disk.

198370166 allocation units available on disk.

Internal Info:

00 9a 06 00 09 e5 05 00 30 d2 09 00 00 00 00 00 ........0.......

f1 08 00 00 6d 00 00 00 00 00 00 00 00 00 00 00 ....m...........

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.

Please wait while your computer restarts.

</Data>

</EventData>

</Event>

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Tue Sep 23 10:10:57 2014

Found and removed: SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}

Found and removed: SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-DEC7-0000-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}

Found and removed: SOFTWARE\Classes\Interface\{5852F5EC-8BF4-11D4-A245-0080C6F74284}

Found and removed: SOFTWARE\Classes\MIME\Database\Content Type\application/java-deployment-toolkit

Found and removed: SOFTWARE\Classes\TypeLib\{5852F5E0-8BF4-11D4-A245-0080C6F74284}

Found and removed: SOFTWARE\Microsoft\Internet Explorer\Low Rights

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

Found and removed: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility\ATs

Found and removed: SOFTWARE\JavaSoft

Found and removed: SOFTWARE\JreMetrics

Found and removed: SOFTWARE\MozillaPlugins

------------------------------------

Finished reporting.

Martin7365 · September 23, 2014

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2014 01

Ran by Martin (administrator) on FAMILY-PC on 23-09-2014 11:01:28