Solved Do I have the w32 Blaster?

[cottonball]

Post #95, partial quote:

Save as flush.bat to your desktop.

Double click on the flush.bat file to run it. Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

 

[Prescottbob]

I did #137 3 times just to make sure. NADA

I'll continue doing #140 Again, Thanks.

 

[VistaKing]

Prescottbob

Did you right-click on HOST file choose Properties . Inside the properties window click on the Unblock button ?

 

[Prescottbob]

I've done BAT, TFC,ESET,FRST and I don't remember doing Properties-unblock in HOST.

Here's FRST file----

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-05-2013
Ran by Binnie (administrator) on 09-05-2013 12:48:39
Running from C:\Users\Binnie\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\D-Link\SharePort Utility\Spnuhelper.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(SupportSoft, Inc.) C:\Program Files (x86)\Common Files\supportsoft\bin\sprtlisten.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
(Gemalto N.V.) C:\Users\Binnie\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingApp.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingBar.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_6_602_180_ActiveX.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingSurrogate.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingSurrogate.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingSurrogate.exe
(Sun Microsystems, Inc.) C:\Windows\System32\jusched.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(Farbar) C:\Users\Binnie\Downloads\FRST64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [8158240 2009-10-06] (Realtek Semiconductor)
HKLM\...\Run: [RunDLLEntry_THXCfg] TRY THXCFG64 [x]
HKLM\...\Run: [RunDLLEntry_EptMon] 64 [x]
HKLM\...\Run: [IntelliType Pro] TER\ITYPE.EXE" [x]
HKLM\...\Run: [IntelliPoint] T.EXE" [x]
HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [559616 2011-10-05] (Dell)
HKLM-x32\...\runonceex: [ContentMerger] c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-06-26] (Sonic Solutions)
HKCU\...\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4280184 2012-03-08] (Microsoft Corporation)
HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] C:\Users\Binnie\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-05-06] (Gemalto N.V.)
HKCU\...\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5663616 2012-09-06] (SUPERAntiSpyware.com)
HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [559616 2011-10-05] (Dell)
HKLM-x32\...\runonceex: [ContentMerger] c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-06-26] (Sonic Solutions)
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-10-02] (Intel Corporation)
HKLM-x32\...\Run: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [140520 2010-01-07] (CyberLink Corp.)
HKLM-x32\...\Run: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe" /r [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] C:\Windows\UpdReg.EXE [90112 2000-05-10] (Creative Technology Ltd.)
HKLM-x32\...\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter [x]
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [41208 2012-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKU\Administrator\...\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [4280184 2012-03-08] (Microsoft Corporation)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Binnie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
End Of Log ============================

 

[Prescottbob]

And the rest of FRSR------

I'm trying to break this thing up to send in ADVANCED---It's gigantic

 

[VistaKing]

Save the text file as FRST.txt and upload the file

How to upload the file :

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Addition Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

 

[Prescottbob]

==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
URLSearchHook: (No Name) - {e917fc61-7f80-4f1f-a882-cdffffbe4c8d} - No File
URLSearchHook: (No Name) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - No File
HKLM SearchScopes: DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = {searchTerms} - Bing?}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = {searchTerms} - Bing?}
HKLM-x32 SearchScopes: DefaultScope {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = AOL Search
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = AOL Search
SearchScopes: HKCU - {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = AOL Search
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredimail.com//?search={searchTerms}&loc=search_box&a=IAWxjqJm1X
SearchScopes: HKCU - {D53E2120-67B9-4E03-8E87-37DF2194B0A9} URL =
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll No File
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbIncr.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: D-Link Toolbar Loader - {f01858c7-2a68-4d93-9e22-502eae3917c2} - C:\Program Files (x86)\D-Link Toolbar\dlinktb.dll (AOL LLC.)
Toolbar: HKLM-x32 - D-Link Toolbar - {61874dfa-9adf-44e5-8e61-f3913707e7d7} - C:\Program Files (x86)\D-Link Toolbar\dlinktb.dll (AOL LLC.)
Toolbar: HKLM-x32 - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbIncr.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {61874DFA-9ADF-44E5-8E61-F3913707E7D7} - No File
PDF: HKLM-x32 {62789780-B744-11D0-986B-00609731A21D} http://gis.pima.gov/mapguide/viewer/ver65/mgaxctrl.cab
Winsock: Catalog5 09 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [20992] (Microsoft Corporation)
Winsock: Catalog5-x64 09 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 172.168.0.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.2.183.29\npGoogleOneClick8.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Binnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Binnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Binnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Binnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Gmail) - C:\Users\Binnie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
==================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 D-Link SharePort Helper; C:\Program Files\D-Link\SharePort Utility\Spnuhelper.exe [49152 2010-06-13] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 sprtlisten; C:\Program Files (x86)\Common Files\supportsoft\bin\sprtlisten.exe [1213728 2008-01-08] (SupportSoft, Inc.)
S3 SupportSoft RemoteAssist; C:\Program Files (x86)\Common Files\supportsoft\bin\ssrc.exe [394608 2008-01-08] (SupportSoft, Inc.)
S4 McMPFSvc; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [x]
S2 SessionLauncher; c:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe [x]
==================== Drivers (Whitelisted) ====================
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 sxuptp; C:\Windows\System32\DRIVERS\sxuptp.sys [291336 2010-06-13] (silex technology, Inc.)
S1 RxFilter; system32\DRIVERS\RxFilter.sys [x]
==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========
2013-05-09 12:40 - 2013-05-09 12:40 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-05-09 12:38 - 2013-05-09 12:39 - 04009167 ____A C:\Users\Binnie\Downloads\ServicesRepair (2).exe
2013-05-09 12:26 - 2013-05-09 12:26 - 00448512 ____A (OldTimer Tools) C:\Users\Binnie\Downloads\TFC.exe
2013-05-09 10:59 - 2013-05-09 10:59 - 00000000 ____A C:\move
2013-05-09 08:15 - 2013-05-09 08:16 - 04009167 ____A C:\Users\Binnie\Downloads\ServicesRepair (1).exe
2013-05-09 08:14 - 2013-05-09 08:15 - 04009167 ____A C:\Users\Binnie\Downloads\ServicesRepair.exe
201

 

[Prescottbob]

==================== One Month Created Files and Folders ========
2013-05-09 12:40 - 2013-05-09 12:40 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-05-09 12:38 - 2013-05-09 12:39 - 04009167 ____A C:\Users\Binnie\Downloads\ServicesRepair (2).exe
2013-05-09 12:26 - 2013-05-09 12:26 - 00448512 ____A (OldTimer Tools) C:\Users\Binnie\Downloads\TFC.exe
2013-05-09 10:59 - 2013-05-09 10:59 - 00000000 ____A C:\move
2013-05-09 08:15 - 2013-05-09 08:16 - 04009167 ____A C:\Users\Binnie\Downloads\ServicesRepair (1).exe
2013-05-09 08:14 - 2013-05-09 08:15 - 04009167 ____A C:\Users\Binnie\Downloads\ServicesRepair.exe
2013-05-09 07:51 - 2013-05-09 07:51 - 00000000 ____D C:\Users\Binnie\AppData\Local\{60AC3F47-08B2-44B7-9FFC-55CFBA88856C}
2013-05-08 19:50 - 2013-05-08 19:50 - 00000000 ____D C:\Users\Binnie\AppData\Local\{76ADCD7F-4CF7-4B41-B905-9FC0A3121E44}
2013-05-08 19:15 - 2013-05-08 19:15 - 00000194 ____A C:\Users\Binnie\Downloads\hosts-perm.bat
2013-05-08 17:52 - 2013-05-08 17:53 - 00004807 ____A C:\Users\Binnie\Downloads\FSS.txt
2013-05-08 17:51 - 2013-05-08 17:52 - 00354299 ____A (Farbar) C:\Users\Binnie\Downloads\FSS.exe
2013-05-08 17:42 - 2013-05-08 17:43 - 00016298 ____A C:\Users\Binnie\Downloads\Addition.txt
2013-05-08 17:40 - 2013-05-08 17:40 - 01874958 ____A (Farbar) C:\Users\Binnie\Downloads\FRST64 (1).exe
2013-05-08 13:40 - 2013-05-08 13:40 - 00000000 ____D C:\FRST
2013-05-08 13:36 - 2013-05-08 13:39 - 01874958 ____A (Farbar) C:\Users\Binnie\Downloads\FRST64.exe
2013-05-08 11:47 - 2013-05-08 13:01 - 00003022 ____A C:\Users\Binnie\Desktop\Rkill.txt
2013-05-08 11:47 - 2013-05-08 11:47 - 00000000 ____D C:\Users\Binnie\Desktop\rkill
2013-05-08 09:42 - 2013-05-08 13:11 - 00001111 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-05-08 09:42 - 2013-05-08 13:11 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-05-08 09:42 - 2013-05-08 09:42 - 00000000 ____D C:\Users\Binnie\AppData\Roaming\Malwarebytes
2013-05-08 09:42 - 2013-05-08 09:42 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-05-08 09:42 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-05-08 09:11 - 2013-05-08 10:13 - 00002051 ____A C:\Users\Binnie\Desktop\RKreport[14]_S_05082013_02d0911.txt
2013-05-08 07:50 - 2013-05-08 07:50 - 00000000 ____D C:\Users\Binnie\AppData\Local\{9ACA6345-A5A8-4BDC-9A91-5CF3B5F71EE7}
2013-05-07 17:01 - 2013-05-07 17:01 - 00001732 ____A C:\Users\Binnie\Desktop\RKreport[13]_D_05072013_02d1701.txt
2013-05-07 17:00 - 2013-05-07 17:00 - 00001575 ____A C:\Users\Binnie\Desktop\RKreport[9]_D_05072013_02d1700.txt
2013-05-07 17:00 - 2013-05-07 17:00 - 00001138 ____A C:\Users\Binnie\Desktop\RKreport[10]_H_05072013_02d1700.txt
2013-05-07 17:00 - 2013-05-07 17:00 - 00001069 ____A C:\Users\Binnie\Desktop\RKreport[12]_DN_05072013_02d1700.txt
2013-05-07 17:00 - 2013-05-07 17:00 - 00001032 ____A C:\Users\Binnie\Desktop\RKreport[11]_PR_05072013_02d1700.txt
2013-05-07 16:56 - 2013-05-07 16:56 - 00001716 ____A C:\Users\Binnie\Desktop\RKreport[8]_SC_05072013_02d1656.txt
2013-05-07 16:55 - 2013-05-07 16:55 - 00000875 ____A C:\Users\Binnie\Desktop\RKreport[7]_DN_05072013_02d1655.txt
2013-05-07 16:55 - 2013-05-07 16:55 - 00000839 ____A C:\Users\Binnie\Desktop\RKreport[6]_PR_05072013_02d1655.txt
2013-05-07 16:54 - 2013-05-07 16:54 - 00001362 ____A C:\Users\Binnie\Desktop\RKreport[4]_S_05072013_02d1654.txt
2013-05-07 16:54 - 2013-05-07 16:54 - 00000925 ____A C:\Users\Binnie\Desktop\RKreport[5]_H_05072013_02d1654.txt
2013-05-07 07:31 - 2013-05-07 07:31 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-05-07 01:10 - 2013-05-09 12:15 - 00000898 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-05-07 01:06 - 2013-05-07 13:06 - 00000000 ____D C:\Users\Binnie\AppData\Local\{CB09C1A3-3A26-4DD0-8B78-D57E72772B45}
2013-05-07 00:53 - 2013-05-07 00:58 - 00000019 ____A C:\Users\Binnie\Documents\~Untitled_mbw.chk
2013-05-06 16:50 - 2013-05-06 16:50 - 00002257 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-05-06 16:39 - 2013-05-09 12:46 - 00000894 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-06 16:39 - 2013-05-07 07:31 - 00001810 ____A C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2013-05-06 16:39 - 2013-05-06 16:50 - 00000000 ____D C:\Users\Binnie\AppData\Local\Google
2013-05-06 16:39 - 2013-05-06 16:50 - 00000000 ____D C:\Program Files (x86)\Google
2013-05-06 16:39 - 2013-05-06 16:39 - 00000000 ____D C:\Users\Binnie\AppData\Roaming\SUPERAntiSpyware.com
2013-05-06 16:39 - 2013-05-06 16:39 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2013-05-06 16:08 - 2013-05-06 16:08 - 00000000 ____D C:\Users\Binnie\AppData\Roaming\SanDisk
2013-05-06 16:06 - 2013-05-06 16:06 - 00000000 ____D C:\Users\Binnie\AppData\Roaming\SanDisk SecureAccess
2013-05-06 16:02 - 2013-05-06 16:02 - 00000288 ____A C:\Users\Binnie\AppData\Roaming\.backup.dm
2013-05-06 12:33 - 2013-05-06 12:33 - 00000000 ____D C:\Users\Binnie\AppData\Local\{508080C2-78AA-4EA6-AE1F-AD628EC88B09}
2013-05-06 11:33 - 2013-05-06 11:33 - 00002257 ____A C:\Users\Binnie\Desktop\RKreport[3]_D_05062013_02d1133.txt
2013-05-06 11:30 - 2013-05-06 11:30 - 00002464 ____A C:\Users\Binnie\Desktop\RKreport[2]_S_05062013_02d1130.txt
2013-05-06 09:00 - 2013-05-06 11:34 - 00002427 ____A C:\Users\Binnie\Documents\RKreport[1]_S_05062013_02d0850.txt
2013-05-06 08:50 - 2013-05-06 08:50 - 00002427 ____A C:\Users\Binnie\Desktop\RKreport[1]_S_05062013_02d0850.txt
2013-05-06 08:49 - 2013-05-08 09:10 - 00000000 ____D C:\Users\Binnie\Desktop\RK_Quarantine
2013-05-05 10:20 - 2013-05-05 10:20 - 00027143 ____A C:\Users\Binnie\Downloads\config (4).bin
2013-05-05 10:09 - 2013-05-05 10:09 - 00000000 ____D C:\Users\Binnie\Documents\dir825_revB_fw_203NA
2013-05-04 20:57 - 2013-05-05 08:58 - 00000000 ____D C:\Users\Binnie\AppData\Local\{12454734-C29B-48AD-A1FD-FD94357F28CE}
2013-05-04 14:37 - 2013-05-04 14:37 - 00027142 ____A C:\Users\Binnie\Downloads\config (3).bin
2013-05-04 14:29 - 2013-05-04 14:31 - 06291482 ____A C:\Users\Binnie\Downloads\DIR825B1_FW207NAB07 (1).bin
2013-05-04 14:16 - 2013-05-04 14:16 - 00027143 ____A C:\Users\Binnie\Downloads\config (2).bin
2013-05-04 14:08 - 2013-05-04 14:10 - 08453478 ____A C:\Users\Binnie\Downloads\dir825_revB_FW_205NA (1).zip
2013-05-04 14:04 - 2013-05-04 14:04 - 00027143 ____A C:\Users\Binnie\Downloads\config (1).bin
2013-05-04 14:01 - 2013-05-04 14:02 - 04173799 ____A C:\Users\Binnie\Downloads\dir825_revB_fw_203NA (1).zip
2013-05-04 13:52 - 2013-05-04 13:55 - 06291482 ____A C:\Users\Binnie\Downloads\DIR825B1_FW207NAB07.bin
2013-05-04 13:50 - 2013-05-04 13:50 - 00027143 ____A C:\Users\Binnie\Downloads\config.bin
2013-05-04 13:21 - 2013-05-04 13:22 - 04332302 ____A C:\Users\Binnie\Downloads\dir825_revB_FW_206NA.zip
2013-05-04 13:18 - 2013-05-04 13:21 - 08453478 ____A C:\Users\Binnie\Downloads\dir825_revB_FW_205NA.zip
2013-05-04 13:16 - 2013-05-04 13:18 - 06291482 ____A C:\Users\Binnie\Downloads\dir825_revB_fw_207.bin
2013-05-02 20:08 - 2013-05-04 08:52 - 00000000 ____D C:\Users\Binnie\AppData\Local\{8BD5EE9C-F962-4D96-AF4A-749C3D8DD938}
2013-04-24 19:39 - 2013-05-02 07:58 - 00000000 ____D C:\Users\Binnie\AppData\Local\{CAAEF7ED-B2B2-4587-9EE9-FE90767D3C93}
2013-04-24 08:22 - 2013-04-12 07:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-04-23 11:37 - 2013-04-23 11:37 - 00001847 ____A C:\Users\Public\Desktop\QuickTime Player.lnk
2013-04-23 11:37 - 2013-04-23 11:37 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-04-17 02:19 - 2013-04-24 07:19 - 00000000 ____D C:\Users\Binnie\AppData\Local\{84EF6CB8-CA76-48D8-8557-870A81101FBE}
2013-04-15 19:33 - 2013-04-16 07:34 - 00000000 ____D C:\Users\Binnie\AppData\Local\{57871A01-1633-4CC5-A841-548067EEB633}
2013-04-13 09:14 - 2013-04-24 13:04 - 00000000 ____D C:\Users\Binnie\AppData\Local\Apple Computer
2013-04-13 09:14 - 2013-04-22 18:01 - 00000000 ____D C:\Users\Binnie\AppData\Roaming\Apple Computer
2013-04-13 09:13 - 2013-04-13 09:13 - 00001785 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-04-13 09:13 - 2012-08-21 13:01 - 00033240 ____A (GEAR Software Inc.) C:\Windows\System32\Drivers\GEARAspiWDM.sys
2013-04-13 09:12 - 2013-04-13 09:13 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-04-13 09:12 - 2013-04-13 09:13 - 00000000 ____D C:\Program Files\iTunes
2013-04-13 09:12 - 2013-04-13 09:13 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-04-13 09:12 - 2013-04-13 09:12 - 00000000 ____D C:\Program Files\iPod
2013-04-13 09:11 - 2013-04-13 09:11 - 00000000 ____D C:\Users\Binnie\AppData\Local\Apple
2013-04-13 09:11 - 2013-04-13 09:11 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-04-13 09:10 - 2013-04-13 09:11 - 00000000 ____D C:\ProgramData\Apple
2013-04-13 09:10 - 2013-04-13 09:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-04-13 09:10 - 2013-04-13 09:10 - 00000000 ____D C:\Program Files\Bonjour
2013-04-13 09:10 - 2013-04-13 09:10 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-04-10 04:34 - 2013-04-15 06:53 - 00000000 ____D C:\Users\Binnie\AppData\Local\{B1B0B81A-88BC-49AA-9323-0631508CAF01}
2013-04-10 03:01 - 2013-02-21 03:30 - 01766912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-04-10 03:01 - 2013-02-21 03:30 - 01129984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 14323200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 13761024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 02046464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-04-10 03:01 - 2013-02-21 03:29 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-04-10 03:01 - 2013-02-21 03:15 - 02240512 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-04-10 03:01 - 2013-02-21 03:15 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-04-10 03:01 - 2013-02-21 03:14 - 19230208 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 02647040 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-04-10 03:01 - 2013-02-21 03:14 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-04-10 03:01 - 2013-02-19 05:01 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-04-10 03:01 - 2013-02-19 04:42 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-04-10 03:01 - 2013-02-19 04:10 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-04-10 03:01 - 2013-02-19 03:51 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-04-09 16:44 - 2013-02-14 23:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-04-09 16:44 - 2013-02-14 23:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-04-09 16:44 - 2013-02-14 23:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-04-09 16:44 - 2013-02-14 21:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-04-09 16:44 - 2013-02-14 21:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-04-09 16:44 - 2013-02-14 20:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-04-09 16:43 - 2013-02-28 20:36 - 03153408 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-04-09 16:39 - 2013-01-23 23:01 - 00223752 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fvevol.sys
2013-04-09 16:38 - 2013-03-18 23:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-04-09 16:38 - 2013-03-18 22:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-04-09 16:38 - 2013-03-18 22:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-04-09 16:38 - 2013-03-18 22:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-04-09 16:38 - 2013-03-18 21:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-04-09 16:38 - 2013-03-18 20:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
==================== One Month Modified Files and Folders =======
2013-05-09 12:46 - 2013-05-06 16:39 - 00000894 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-09 12:46 - 2010-12-10 17:59 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2013-05-09 12:46 - 2010-12-10 17:59 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2013-05-09 12:46 - 2010-12-10 17:56 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-05-09 12:46 - 2010-05-12 10:56 - 00000000 ____D C:\Users\Binnie\Tracing
2013-05-09 12:46 - 2009-07-13 22:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-05-09 12:46 - 2009-07-13 21:51 - 00039443 ____A C:\Windows\setupact.log
2013-05-09 12:45 - 2009-07-13 22:10 - 01426667 ____A C:\Windows\WindowsUpdate.log
2013-05-09 12:45 - 2009-07-13 21:45 - 00014240 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-05-09 12:45 - 2009-07-13 21:45 - 00014240 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-05-09 12:40 - 2013-05-09 12:40 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2013-05-09 12:39 - 2013-05-09 12:38 - 04009167 ____A C:\Users\Binnie\Downloads\ServicesRepair (2).exe
2013-05-09 12:36 - 2009-07-13 22:13 - 00726316 ____A C:\Windows\System32\PerfStringBackup.INI
2013-05-09 12:26 - 2013-05-09 12:26 - 00448512 ____A (OldTimer Tools) C:\Users\Binnie\Downloads\TFC.exe
2013-05-09 12:16 - 2012-07-24 08:56 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-05

 

[VistaKing]

Can you also upload the Addition.txt file ? It on your Downloads folder

C:\Users\Binnie\Downloads\Addition.txt

 

[Prescottbob]

FRST did not download Addition.txt like it did yesterday. 05/08/13 is the only one in downloads.

 

[VistaKing]

Addition.txt is only added if you run FRST First time .

 

[Prescottbob]

Am I supposed to redo the ESET with "unblock" ?

 

[VistaKing]

If you would like you could recreate a new HOST file

:ar: Hold the rb: on the keyboard and press the R key to open the Run window type %systemroot%\system32\drivers\etc, and then click OK.

:ar: Create a new default hosts file. To do this, follow these steps:

• 
  Right-click an open space in the %WinDir%\System32\Drivers\Etc folder, point to New, click Text Document, type Hosts, and then press Enter.
  Click Yes to confirm that the file name extension will not be .txt.
  Open the new Hosts file in a text editor. For example, open the file in Notepad.
  Copy the following text to the file:

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handle within DNS itself.
#       127.0.0.1       localhost
#       ::1                 localhost

:ar: Save and then close the file.

 

[Prescottbob]

There's already a "hosts" file with a lock symbol on it.

 

[VistaKing]

Is it inside C:\Windows\System32\Drivers\etc ?

 

[Prescottbob]

It comes up when I press ok in the search window.

 

[VistaKing]

If you right click on Hosts file when you search for it inside the start menu . Right click on the file and choose Open file location . What folder does it open up ?

 

[Prescottbob]

it brings up the "choose your program" window. I chose notepad. It show 127.0.0.1 Local Host.

 

[Prescottbob]

created at 12:17 today

 

[VistaKing]

Does it open the folder when you right click on the file and choose open file location ?