Cannot install any drivers, may be registry corruption

[QuicksilverFX]

2 days ago i went to upgrade my video driver for my graphics card and it will not let me install it. The installer opens and starts to install, gets to about 10% and says Failed to install. i also tried doing a clean install of the new driver and it gives me the same error. so i now have no video card driver installed. i have no restore points so im trying to fix this without having to do a fresh install of windows.

Im not sure if it is the cause but a few weeks ago i installed a program called "Speed up PC" (link from testmy.com) and it ran a registry scan and cleaned out some old/outdated entries, then a few days later when i rebooted my desktop i could not connect to my wireless router, after some google searching i fixed the problem, i had to edit an entry in the registry and start some services to get the wireless to work again.
Ive searched around for a few hours now with no results on a fix, and have posted my problem on a few sites, i'm just hoping to get some help here.


specs on my desktop:
Operating System: Windows 7 Ultimate 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.130318-1533)
BIOS Date: 02/05/10 19:13:52 Ver: 08.00.10
Processor: Intel Core i7-2600 CPU @ 3.40GHz (8 CPUs), ~3.4GHz
Memory: 8192MB RAM Available OS Memory: 8096MB RAM
NVIDIA GeForce GTX 560
please let me know if i need to post any more info

i have also tried to install some other drivers and they do the same thing, i can start the installation but it fails almost immediately saying the installation has failed, i think it may have to do with the registry.

i have ran a chkdsk, and memory test, tried disabling malwarebytes, run as admin with no results

 

[VistaKing]

QuicksilverFX welcome to SevenForums


Run

RogueKiller


RogueKiller for 32bit or RogueKiller for 64bit

:ar: Click on one of the links above that goes with your Windows 7 bit versions

:ar: Save to the Desktop.

:ar: Close all windows and browsers

:ar: Right click on

and choose Run as Administrator

:ar: Press: SCAN

:ar: provide the RKreport.txt (Mode: Scan) in your reply.

 

[QuicksilverFX]

driverproblem4 - Pastebin.com

 

[VistaKing]

Run RogueKiller once again . Click on Delete after the Prescan and then click on the Fix Proxy button .

Restart the PC and run Malwarebytes .

 

[VistaKing]

Also run tdsskiller

TDSSKiller

Description | Download
TDSSKILLER|
Download

Right-click the program and select: Extract to tdsskiller\


A TDSSKiller folder is found on your Desktop.
Open the folder, and right-click the TDSSKiller application choose rename and name it iexplore


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK


Press: Start Scan


If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_12.04.2013_15.31.43_log.txt


Please post the TDSSKiller log in your reply.

 

[QuicksilverFX]

no results on malwarebytes

here is the TDSSkiller log (no threats)
driverproblem5 - Pastebin.com

 

[VistaKing]

Did you do what I posted in Post # 4 ?

 

[VistaKing]

Reset DNS and Internet Settings

Copy and paste the highlighted code below into Notepad. To open Notepad, click on rb: . Inside

type notepad and then press <ENTER> button .

[hl]
@Echo off
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
cls
echo Script finished.
pause
del %0
[/hl]

In Notepad, click File and then Save. Type reset.bat inside file name section . Change Save as Type to All Files, and then save the file to your desktop. After the file is saved, right click on the RESET.bat choose

. Once it's finished running, restart your computer. Check to see if your Internet connection is restored.

 

[QuicksilverFX]

yes i followed what you said in post 4, ran the reset.bat and rebooted. now what?

 

[VistaKing]

See if your issue has been fixed .

If not download and run the program below

Farbar Recovery Scan Tool

32-bit Version OS :ar: http://download.bleepingcomputer.com/farbar/FRST.exe
Right click on FRST.exe and choose

64-Bit Version OS :ar: http://download.bleepingcomputer.com/farbar/FRST64.exe
Right click on FRST64.exe and choose

When the tool opens click Yes to disclaimer.

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file

   Note

The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)

 

[QuicksilverFX]

first.txt
driverproblem6 - Pastebin.com

addition.txt
driverproblem7 - Pastebin.com

 

[VistaKing]

Open notepad .

Copy and Paste the highlighted text into Notepad .


start
C:\Windows\Tasks\SA.DAT
C:\ProgramData\13412D80_S_drv [x]
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [97280 2009-07-13] ()
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [97280 2009-07-13] ()
testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!
nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!
end


Save the file as Fixlist.txt and save it to your Desktop . Open FRST64.exe once again and click on the Fix button.

Once completed it will create a Fixlog.txt file on the desktop. Upload Fixlog.txt with your reply.

 

[QuicksilverFX]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-06-2013 01
Ran by Quicksilver at 2013-06-24 22:05:27 Run:1
Running from C:\Users\Quicksilver\Desktop
Boot Mode: Normal
==============================================

C:\Windows\Tasks\SA.DAT => Moved successfully.
C:\ProgramData\13412D80_S_drv [x] => File/Directory not found.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.

An error occurred while attempting to delete the specified data element.
Element not found.

The operation completed successfully.

==== End of Fixlog ====

 

[VistaKing]

Run ESET Online Scanner

On

Hold down Control and click on ESET Online Scanner to open ESET OnlineScan in a new window
Click the

button
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.
On

or

Click on http://download.eset.com/special/eos/esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Right click on

choose

on your desktop
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

 

[VistaKing]

AdwCleaner

Click here AdwCleaner

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe and choose

:ar: Click the Search button

:ar: Upload the AdwCleaner[Rn].txt in your reply.

   Note

The log file is at C:\AdwCleaner[Rn].txt

Run

HitManPro

Download below

32-Bit Version OS :ar:
Download



64-Bit Version OS :ar:
Download



:ar: Save to the Desktop

:ar: Right click on HitmanPro.exe and choose

:ar: When HitmanPro opens up click on the Settings button uncheck Scan for Tracking cookies then click OK . Then on the Next button

:ar: Click on No, I only want to perform a one-time scan to check this computer on the Setup page . Click Next once done .

:ar: Let it scan the PC once its done Click Next

:ar: Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer then click Next

 

[QuicksilverFX]

When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

C:\Windows\Downloaded Installations\{570713D0-36B6-45A3-AB49-78451DBD2DC4}\PCmover.msi a variant of Win32/PSWTool.PWDump.A application deleted - quarantined
E:\Users\Quicksilver\AppData\Local\Torch\User Data\Default\Cache\f_000008 a variant of Win32/Adware.MediaFinder.F application cleaned by deleting - quarantined
E:\Users\Quicksilver\AppData\Local\Torch\User Data\Default\Cache\f_00000f a variant of Win32/Adware.MediaFinder.F application cleaned by deleting - quarantined
E:\Users\Quicksilver\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\5b481b3-49cef280 multiple threats cleaned by deleting - quarantined
E:\Users\Quicksilver\New Downloads\SetupImgBurn_2.5.7.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

 

[VistaKing]

Uninstall Registry Repair .

I recommend using Revo Uninstaller

RevoUninstaller Free Version
Download

For 32-bit OS
RevoUninstaller Pro 30-Day Trial Version
Download

For 64-Bit OS

Click on the app inside RevoUnistaller and choose uninstall
Click on Yes to agree you want to uninstall
If you get the builtin Uninstaller for the app use that and once you're done click Finish
Back inside RevoUninstaller click on Next
Let RevoUninstaller scan for left over registry keys . Click on Select All and choose Delete .
Once done click on Next.
Let the left over files and folders be locates then Click on Select All then click Delete then Next and you should be done .

Please download and install Revo Uninstaller Free
Double click Revo Uninstaller to run it.
From the list of programs double click on The Program to remove
When prompted if you want to uninstall click Yes.
Be sure the Advanced option is selected then click Next.
The program will run, If prompted again click Yes
when the built-in uninstaller is finished click on Next.
Once the program has searched for leftovers click Next.
Check/tick the bolded items only on the list then click Delete
when prompted click on Yes and then on next.
put a check on any folders that are found and select delete
when prompted select yes then on next
Once done click Finish.

   Note

If the free version of RevoUninstaller doesn't show the program you would need to download and install the 30-Day trial of RevoUninstaller Pro which will be able to remove 64-bit programs

 

[QuicksilverFX]

uninstalled

 

[VistaKing]

Did you do the Post 15 ?

 

[QuicksilverFX]

adwcleaner

# AdwCleaner v2.303 - Logfile created 06/25/2013 at 02:05:21
# Updated 08/06/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : Quicksilver - QUICKSILVER-PC
# Boot Mode : Normal
# Running from : C:\Users\Quicksilver\Desktop\AdwCleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Users\Quicksilver\AppData\Roaming\Mozilla\Firefox\Profiles\gcspxzfz.default\jetpack

***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16490

[OK] Registry is clean.

-\\ Mozilla Firefox v21.0 (en-US)

File : C:\Users\Quicksilver\AppData\Roaming\Mozilla\Firefox\Profiles\gcspxzfz.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [790 octets] - [25/06/2013 02:05:21]

########## EOF - C:\AdwCleaner[R1].txt - [849 octets] ##########

running hitman now