Timmy_j

Hey Everyone,

so recently ive been trying to install a few programs to no avail. The progress bar gets so far before chucking up an error and then doing a rollback. Every program says a different error, but they all fail. This includes programs from the visual studio php IDE, AVG and Bit Defender. I figured maybe something was corrupt so i even tried unisstalling Visual studio, again to no avail, wont even start the uninstallation progress.
Also tried to do a system restore and it says its not working properly and corrupt.

Cause of these problems i guessed i had viruses etc, did a few prelim scans and found a few things, but no matter how many times i cleaned them, they still came back. Ive attached the logs so if any has any insight that would be great.




DDS (Ver_09-10-26.01) - NTFSX64
Run by Timmy J at 23:54:19.08 on Thu 05/11/2009
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_15
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.61.1033.18.12285.8993 [GMT 10:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k NetworkService
C:\Program Files (x86)\GIGABYTE\G.O.M\GCSVR.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Powerware\LanSafe\Bin\PowerMonitor.exe
C:\Program Files (x86)\Powerware\LanSafe\Bin\LSTrayAgent.exe
c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\snmp.exe
c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\SysWOW64\vmnat.exe
C:\Program Files (x86)\Blue Coat K9 Web Protection\k9filter.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
C:\Windows\SysWOW64\vmnetdhcp.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\UltraMon\UltraMon.exe
C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Program Files (x86)\Internet Content Filter\SafeEyes.exe
C:\Windows\SysWOW64\CtHelper.exe
C:\Windows\SysWOW64\Ctxfihlp.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files\UltraMon\UltraMonTaskbar.exe
C:\Windows\SysWOW64\CML.exe
C:\Program Files (x86)\X3watch\x3watch.exe
C:\Program Files (x86)\Stardock\ObjectDock\Dock64.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
C:\Windows\system32\mmc.exe
C:\Windows\system32\msiexec.exe
C:\Program Files\UltraMon\UltraMonUiAcc.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Timmy J\Desktop\gmer\gmer.exe
C:\Users\Timmy J\Desktop\dds.scr
C:\Windows\system32\conhost.exe

============== Pseudo HJT Report ===============

mLocal Page = c:\windows\syswow64\blank.htm
uInternet Settings,ProxyServer = http=127.0.0.1:6711
BHO: ContributeBHO Class: {074c1dc5-9320-4a9a-947d-c042949c6216} - c:\program files (x86)\adobe\/Adobe Contribute CS4/contributeieplugin.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files (x86)\windows live\family safety\fssbho.dll
BHO: Click-to-Call BHO: {5c255c8a-e604-49b4-9d64-90988571cecb} - c:\program files (x86)\windows live\messenger\wlchtc.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files (x86)\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll
BHO: Microsoft Web Test Recorder 9.0 Helper: {e31ce47f-c268-41ba-897b-b415e613947d} - c:\program files (x86)\microsoft visual studio 9.0\common7\ide\privateassemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO90.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - c:\program files (x86)\adobe\/Adobe Contribute CS4/contributeieplugin.dll
TB: Safe &Eyes Toolbar: {430ddb4f-38cc-4e91-af33-4157334ec937} - c:\program files (x86)\internet content filter\setoolbar.dll
EB: Web Test Recorder 9.0: {3c7adade-d1e8-45d2-bdcd-7f8d8b99b2a2} - mscoree.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [EVEREST AutoStart] c:\program files (x86)\lavalys\everest ultimate edition\everest_start.exe
uRun: [RocketDock] "c:\program files (x86)\rocketdock\RocketDock.exe"
uRun: [WindowsLivePhone] "c:\program files (x86)\windows live\device manager\msgrdvmn.exe" /AutoRun
mRun: [CTHelper] CTHELPER.EXE
mRun: [CTxfiHlp] CTXFIHLP.EXE
mRun: [<NO NAME>]
mRun: [Acrobat Assistant 8.0] "c:\program files (x86)\adobe\acrobat 9.0\acrobat\Acrotray.exe"
mRun: [Adobe Acrobat Speed Launcher] "c:\program files (x86)\adobe\acrobat 9.0\acrobat\Acrobat_sl.exe"
mRun: [AdobeCS4ServiceManager] "c:\program files (x86)\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [SunJavaUpdateSched] "c:\program files (x86)\java\jre6\bin\jusched.exe"
mRun: [tray2] c:\windows\system32\CML.exe
mRun: [VolPanel] "c:\program files (x86)\creative\sound blaster x-fi\volume panel\VolPanlu.exe" /r
mRun: [WindowsLivePhone] c:\program files (x86)\windows live\device manager\msgrdvmn.exe /AutoRun
mRun: [x3watch] c:\program files (x86)\x3watch\x3watch.exe
mRun: [Adobe_ID0ENQBO] c:\progra~2\common~1\adobe\adobev~1\server\bin\VERSIO~3.EXE
mRun: [ICF] "c:\program files (x86)\internet content filter\SafeEyes.exe"
mRun: [Adobe ARM] "c:\program files (x86)\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files (x86)\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
dRun: [DevconDefaultDB] c:\windows\system32\READREG /SILENT /FAIL=1
dRun: [CtxfiReg] CTXFIREG.exe /FAIL1
StartupFolder: c:\users\timmyj~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\stardo~1.lnk - c:\program files (x86)\stardock\objectdock\ObjectDock.exe
StartupFolder: c:\progra~3\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe
StartupFolder: c:\progra~3\micros~1\windows\startm~1\programs\startup\ultramon.lnk - c:\windows\installer\{20a36691-b09b-4ef2-a371-64a5bd265e20}\IcoUltraMon.ico
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append Link Target to Existing PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\mif5ba~1\office12\EXCEL.EXE/3000
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files (x86)\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~2\mif5ba~1\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~2\mif5ba~1\office12\REFIEBAR.DLL
LSP: c:\windows\syswow64\icf.dll
LSP: c:\program files (x86)\vmware\vmware workstation\vsocklib.dll
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files (x86)\microsoft office\office12\GrooveSystemServices.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files (x86)\microsoft office\office12\GrooveShellExtensions.dll
BHO-X64: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
BHO-X64: Windows Live Family Safety Browser Helper - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
TB-X64: Gigabyte Toolkit: {b681b554-3c5c-491c-b08e-35aebfd5b3bd} - mscoree.dll
TB-X64: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
mRun-x64: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun-x64: [fssui] "c:\program files (x86)\windows live\family safety\fsui.exe" -autorun
STS-X64: FencesShlExt Class: {1984DD45-52CF-49cd-AB77-18F378FEA264} - c:\program files (x86)\stardock\fences\FencesMenu64.dll
STS-X64: Deskscapes Class: {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - c:\program files (x86)\stardock\object desktop\deskscapes\deskscapes.dll
STS-X64: Stardock Vista ControlPanel Extension: {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - c:\program files (x86)\stardock\object desktop\deskscapes\DesktopControlPanel.dll
STS-X64: StardockDreamController: {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - c:\program files (x86)\stardock\object desktop\deskscapes\DreamControl.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\timmyj~1\appdata\roaming\mozilla\firefox\profiles\5m3ucyqi.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.au/|http://mail.live.com/default.aspx?wa...k.com/home.php
FF - plugin: c:\program files (x86)\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files (x86)\microsoft\office live\npOLW.dll
FF - plugin: c:\program files (x86)\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nppl3260.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprjplug.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprpjplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot64.sys [2009-11-5 33800]
R0 PxHlpa64;PxHlpa64;c:\windows\system32\drivers\PxHlpa64.sys [2009-5-1 54480]
R2 COM Service;COM Service;c:\program files (x86)\gigabyte\g.o.m\GCSVR.exe [2009-4-30 16384]
R2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\drivers\RtNdPt60.sys [2009-4-30 26624]
R2 UltraMonUtility;UltraMon Utility Driver;c:\program files (x86)\common files\realtime soft\ultramonmirrordrv\x64\UltraMonUtility.sys [2008-11-14 20512]
R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\common files\microsoft shared\windows live\WLIDSVC.EXE [2009-3-30 2297216]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files (x86)\lavalys\everest ultimate edition\kerneld.amd64 [2009-9-12 25216]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt64win7.sys [2009-6-11 187392]
S2 x3watch;x3watch;c:\program files (x86)\x3watch\rsicli.exe [2009-10-22 114688]
S3 AODDriver;AODDriver;c:\program files (x86)\gigabyte\et6\amd64\AODDriver.sys [2009-2-23 14904]
S3 ENTECH64;ENTECH64;c:\windows\system32\drivers\Entech64.sys [2009-5-3 12744]
S3 etdrv;etdrv;c:\windows\etdrv.sys [2009-5-1 25640]
S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2009-8-29 61280]
S3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2009-4-30 30528]
S3 RivaTuner64;RivaTuner64;c:\program files (x86)\rivatuner v2.24 msi master overclocking arena 2009 edition\RivaTuner64.sys [2009-8-23 19952]
S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0);c:\windows\system32\drivers\RtTeam60.sys [2009-4-30 50688]
S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.0);c:\windows\system32\drivers\RtVlan60.sys [2009-4-30 24064]
S3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.0);c:\windows\system32\drivers\RtTeam60.sys [2009-4-30 50688]
S3 VSPerfDrv90;Performance Tools Driver 9.0;c:\program files (x86)\microsoft visual studio 9.0\team tools\performance tools\x64\VSPerfDrv90.sys [2007-9-4 71024]
S4 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\common files\adobe\adobe version cue cs4\server\bin\VersionCueCS4.exe [2008-8-15 284016]
S4 Creative ALchemy AL1 Licensing Service;Creative ALchemy AL1 Licensing Service;c:\program files (x86)\common files\creative labs shared\service\AL1Licensing.exe [2009-5-1 79360]
S4 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\common files\macrovision shared\flexnet publisher\FNPLicensingService64.exe [2009-5-1 1038088]
S4 fsssvc;Windows Live Family Safety Service;c:\program files (x86)\windows live\family safety\fsssvc.exe [2009-8-5 704864]
S4 GEST Service;GEST Service for program management.;c:\program files (x86)\gigabyte\energysaver\GSvr.exe [2009-4-29 68136]
SUnknown BDFM;BDFM; [x]

============== File Associations ===============

vbefile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
vbsfile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
jsefile\shell\open2\command=c:\windows\system32\CScript.exe "%1" %*

=============== Created Last 30 ================

2009-11-05 13:44:32 18709 ----a-w- C:\BdUninstallTool2009.11.05-11.44.32.reg
2009-11-05 13:40:36 37683 ----a-w- C:\BdUninstallTool2009.11.05-11.40.36.reg
2009-11-05 12:55:59 2 ----a-w- c:\windows\wininit.ini
2009-11-05 11:48:21 33800 ----a-w- c:\windows\system32\drivers\pavboot64.sys
2009-11-05 11:47:42 0 d-----w- c:\program files (x86)\Panda Security
2009-11-05 11:41:37 0 d-----w- c:\programdata\Spybot - Search & Destroy
2009-11-05 11:41:37 0 d-----w- c:\program files (x86)\Spybot - Search & Destroy
2009-11-05 11:35:43 0 d-----w- c:\users\timmyj~1\appdata\roaming\Malwarebytes
2009-11-05 11:35:39 22104 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-05 11:35:39 0 d-----w- c:\programdata\Malwarebytes
2009-11-05 11:35:39 0 d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2009-11-05 11:19:46 0 d-----w- c:\program files (x86)\Windows Installer Clean Up
2009-11-05 06:57:01 35930 ----a-w- C:\BdUninstallTool2009.11.05-04.57.01.reg
2009-11-02 11:42:37 35949 ----a-w- C:\BdUninstallTool2009.11.02-09.42.37.reg
2009-11-02 05:44:53 21088 ----a-w- C:\BdUninstallTool2009.11.02-03.44.53.reg
2009-11-02 05:34:06 723095 ----a-w- C:\BdUninstallTool2009.11.02-03.34.06.reg
2009-11-02 04:27:40 38 ----a-w- C:\BdUninstallTool2009.11.02-02.27.40.reg
2009-11-01 15:49:48 62560 ----a-w- C:\crash.dmp
2009-11-01 00:56:44 0 d-----w- c:\program files (x86)\id Software
2009-10-29 00:20:10 0 d-----w- C:\Misc
2009-10-28 23:51:30 0 dc-h--w- c:\programdata\{2C0895CF-C7CF-4FF0-B3B8-C0518C9E3418}
2009-10-28 23:51:28 0 d-----w- c:\programdata\Stardock
2009-10-28 23:27:39 0 d-----w- c:\users\timmyj~1\appdata\roaming\Stardock
2009-10-28 23:27:36 0 dc-h--w- c:\programdata\{A87EB928-0C6C-4071-AEF1-59E32BAEDF1B}
2009-10-28 23:20:45 0 d-----w- c:\windows\Downloaded Installations
2009-10-28 07:58:01 0 d-----w- c:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2009-10-22 02:57:28 0 d-----w- c:\program files (x86)\RSI 1.002 Trial
2009-10-22 02:53:33 0 d-----w- c:\program files (x86)\Windows Resource Kits
2009-10-20 13:13:59 52568 ----a-r- c:\windows\system32\AdobePDF.dll
2009-10-20 13:13:59 24416 ----a-r- c:\windows\system32\AdobePDFUI.dll
2009-10-18 06:42:27 0 d-----w- c:\program files (x86)\LS_Duhem
2009-10-16 22:39:04 0 d-sh--w- C:\found.000
2009-10-16 06:08:09 65072 ----a-w- c:\windows\system32\drivers\vmci.sys
2009-10-16 06:08:06 76336 ----a-w- c:\windows\system32\drivers\vmx86.sys
2009-10-16 06:08:06 38448 ----a-w- c:\windows\system32\drivers\hcmon.sys
2009-10-16 06:07:31 53296 ----a-w- c:\windows\system32\vnetinst.dll
2009-10-16 06:07:31 20016 ----a-w- c:\windows\system32\drivers\vmnetadapter.sys
2009-10-16 06:07:27 326192 ----a-w- c:\windows\syswow64\vmnetdhcp.exe
2009-10-16 06:07:23 399920 ----a-w- c:\windows\syswow64\vmnat.exe
2009-10-16 06:07:23 30256 ----a-w- c:\windows\system32\drivers\vmnetuserif.sys
2009-10-16 06:07:22 56368 ----a-r- c:\windows\system32\vmnetbridge.dll
2009-10-16 06:07:22 38960 ----a-r- c:\windows\system32\drivers\vmnetbridge.sys
2009-10-16 06:07:22 24112 ----a-r- c:\windows\system32\drivers\vmnet.sys
2009-10-16 06:07:20 920112 ----a-w- c:\windows\system32\vnetlib64.dll
2009-10-16 06:07:08 29744 ----a-w- c:\windows\system32\drivers\VMkbd.sys
2009-10-16 06:05:51 0 d-----w- c:\programdata\VMware
2009-10-16 06:05:49 0 d-----w- c:\program files (x86)\VMware
2009-10-15 0711 0 d-----w- c:\users\timmyj~1\appdata\roaming\XNote Stopwatch
2009-10-15 0707 0 d-----w- c:\program files (x86)\XNote Stopwatch
2009-10-15 06:05:14 257024 ----a-w- c:\windows\syswow64\msv1_0.dll
2009-10-15 06:05:13 311808 ----a-w- c:\windows\system32\msv1_0.dll
2009-10-15 06:04:58 0 d-----w- c:\program files (x86)\MSXML 4.0
2009-10-15 06:04:25 0 d-----w- c:\windows\PCHEALTH
2009-10-15 06:00:21 0 d-----w- c:\windows\SQLTools9_KB970892_ENU
2009-10-15 05:56:17 0 d-----w- c:\windows\SQL9_KB970892_ENU
2009-10-15 05:33:57 5958656 ----a-w- c:\windows\syswow64\mshtml.dll
2009-10-15 05:33:57 46592 ----a-w- c:\windows\system32\msasn1.dll
2009-10-15 05:33:57 34816 ----a-w- c:\windows\syswow64\msasn1.dll
2009-10-15 05:33:56 64512 ----a-w- c:\windows\syswow64\msfeedsbs.dll
2009-10-12 06:31:31 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
2009-10-12 06:31:31 452440 ----a-w- c:\windows\syswow64\d3dx10_40.dll
2009-10-12 06:31:31 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2009-10-12 06:31:31 2036576 ----a-w- c:\windows\syswow64\D3DCompiler_40.dll
2009-10-12 06:31:30 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2009-10-12 06:31:30 4379984 ----a-w- c:\windows\syswow64\D3DX9_40.dll
2009-10-12 06:27:13 0 d-----w- c:\program files (x86)\SouthPeak Games
2009-10-08 03:34:03 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

==================== Find3M ====================

2009-10-29 00:07:21 30528 ----a-w- c:\windows\GVTDrv64.sys
2009-10-29 00:07:02 25640 ----a-w- c:\windows\gdrv.sys
2009-10-27 08:55:51 25640 ----a-w- c:\windows\etdrv.sys
2009-10-02 04:32:07 982600 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2009-10-01 00:29:14 238960 ------w- c:\windows\system32\MpSigStub.exe
2009-09-27 08:24:22 3778664 ----a-w- c:\windows\system32\nvcplui.exe
2009-09-27 08:23:00 4546152 ----a-w- c:\windows\system32\nvvitvs.dll
2009-09-27 08:23:00 3746920 ----a-w- c:\windows\system32\nvwss.dll
2009-09-27 08:23:00 289896 ----a-w- c:\windows\system32\nvmccss.dll
2009-09-27 08:23:00 1647720 ----a-w- c:\windows\system32\nvmobls.dll
2009-09-27 08:23:00 1646696 ----a-w- c:\windows\system32\nvsvs.dll
2009-09-27 08:22:00 991848 ----a-w- c:\windows\system32\nvsvc64.dll
2009-09-27 08:22:00 82536 ----a-w- c:\windows\system32\nvmctray.dll
2009-09-27 08:22:00 5426792 ----a-w- c:\windows\system32\nvdisps.dll
2009-09-27 08:22:00 5208168 ----a-w- c:\windows\system32\nvgames.dll
2009-09-27 08:22:00 383592 ----a-w- c:\windows\system32\nvvsvc.exe
2009-09-27 08:22:00 16666728 ----a-w- c:\windows\system32\nvcpl.dll
2009-09-17 14:07:03 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2009-09-17 02:49:03 23356 ----a-w- c:\windows\system32\emptyregdb.dat
2009-09-17 01:52:53 419840 ----a-w- c:\windows\system32\wrap_oal.dll
2009-09-17 01:52:53 413696 ----a-w- c:\windows\syswow64\wrap_oal.dll
2009-09-17 01:52:53 133632 ----a-w- c:\windows\system32\OpenAL32.dll
2009-09-17 01:52:53 110592 ----a-w- c:\windows\syswow64\OpenAL32.dll
2009-09-17 01:52:50 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
2009-09-17 01:52:46 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LHidFilt_01005.Wdf
2009-09-17 01:51:27 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_xusb21_01009.Wdf
2009-09-17 00:39:12 35602 ----a-w- c:\windows\syswow64\jcsball.dat
2009-09-17 00:39:12 11958 ----a-w- c:\windows\syswow64\jerror.dat
2009-09-09 08:26:13 43520 ----a-w- c:\windows\syswow64\CmdLineExt03.dll
2009-09-03 07:36:39 1975296 ----a-w- c:\windows\system32\CertEnroll.dll
2009-09-03 07:04:15 1320960 ----a-w- c:\windows\syswow64\CertEnroll.dll
2009-08-29 07:45:05 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2009-08-29 06:59:32 11406336 ----a-w- c:\windows\syswow64\wmp.dll
2009-08-29 06:54:52 12625408 ----a-w- c:\windows\syswow64\wmploc.DLL
2009-08-27 01:02:42 300248 ----a-w- c:\windows\syswow64\seinst.dll
2009-08-27 01:02:42 300240 ----a-w- c:\windows\syswow64\ICF.dll
2009-08-27 01:02:40 432856 ----a-w- c:\windows\system32\seinst.dll
2009-08-27 01:02:40 430808 ----a-w- c:\windows\sediag.exe
2009-08-27 01:02:40 401104 ----a-w- c:\windows\system32\ICF.dll
2009-08-17 13:33:52 1193832 ----a-w- c:\windows\syswow64\FM20.DLL
2009-08-14 03:36:18 70936 ----a-w- c:\windows\syswow64\PhysXLoader.dll
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:54:24 174 --sha-w- c:\program files\desktop.ini
2009-07-14 04:54:24 174 --sha-w- c:\program files (x86)\desktop.ini
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2006-03-20 05:37:52 5689344 ----a-w- c:\program files (x86)\mplayerc.exe
2009-06-10 20:44:08 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2009-08-02 01:22:57 17837628 --sha-w- c:\windows\system32\drivers\fidbox.dat
2009-08-02 01:22:57 1376316 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2009-07-14 04:55:03 16384 --sha-w- c:\windows\syswow64\config\systemprofile\appdata\local\microsoft\windows\history\history.ie5\index.dat
2009-07-14 04:55:03 32768 --sha-w- c:\windows\syswow64\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2009-07-14 04:55:03 16384 --sha-w- c:\windows\syswow64\config\systemprofile\appdata\roaming\microsoft\windows\cookies\index.dat
2009-07-14 01:39:53 398848 --sha-w- c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 23:55:22.96 ===============

Attached Files

	attatch.rar (12.0 KB, 0 views)
	DDS.txt (25.2 KB, 1 views)

Timmy_j

Just also found out that now task manager wont startup regardless of the multiple ways i try to get it running.