Can't Play Any Video Media, Having Trouble Updating Windows 7

[srcstcbstrd]

Hi - first time poster here. I have a problem that seems to have started with attempts to update my Windows 7 Home Premium on an HP desktop. Various 'important' updates have appeared and when trying to install them, they invariably fail. At the same time (and this just may be a coincidence), I can not play any video files either with any program on the desktop (WMP, VLC and Media Player Classic). I also cannot play any videos online - Flashback crashes every time. When I try and go into the Control Panel and 'System', I get booted out automatically. When I try and do a restore, I get booted out automatically. Something has taken control of these functions for some reason.
I followed the pinned topic on what to do before I post and here are the logs:

# AdwCleaner v4.101 - Report created 17/11/2014 at 19:15:28
# Updated 09/11/2014 by Xplode
# Database : 2014-11-16.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : srcstcbstrd - TIMS-COMPUTER
# Running from : C:\Users\srcstcbstrd\Desktop\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{442718d9-475e-452a-b3e1-fb1ee16b8e9f}]
Key Deleted : HKCU\Software\Google\Chrome\Extensions\mkjojgglmmcghgaiknnpgjgldgaocjfd

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.1 (x86 en-US)

[h7dij27t.default-1412713083351\prefs.js] - Line Deleted : user_pref("extensions.dashlane.safesearchcapable", false);

-\\ Google Chrome v


*************************

AdwCleaner[R10].txt - [10016 octets] - [14/09/2014 15:23:16]
AdwCleaner[R11].txt - [6407 octets] - [21/09/2014 12:51:51]
AdwCleaner[R12].txt - [3873 octets] - [09/11/2014 16:54:38]
AdwCleaner[R13].txt - [3415 octets] - [10/11/2014 19:25:44]
AdwCleaner[R8].txt - [2220 octets] - [24/07/2014 19:22:13]
AdwCleaner[R9].txt - [1443 octets] - [01/08/2014 15:25:16]
AdwCleaner[S10].txt - [10142 octets] - [14/09/2014 15:47:08]
AdwCleaner[S11].txt - [3210 octets] - [07/11/2014 04:53:34]
AdwCleaner[S12].txt - [3978 octets] - [10/11/2014 19:27:30]
AdwCleaner[S13].txt - [1515 octets] - [17/11/2014 19:15:28]
AdwCleaner[S8].txt - [2265 octets] - [24/07/2014 19:23:34]
AdwCleaner[S9].txt - [1510 octets] - [01/08/2014 15:29:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S13].txt - [1696 octets] ##########


 Results of screen317's Security Check version 0.99.90 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````[/u]
 Windows Firewall Enabled! 
Norton Internet Security   
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````[/u]
 SpywareBlaster 5.0   
 Secunia PSI (3.0.0.6001)   
 TuneUp Utilities 2011   
 TuneUp Utilities Language Pack (en-US)
 TuneUp Utilities 2011   
 Ashampoo Registry Cleaner v.1.00 
 JavaFX 2.1.1   
 Java 7 Update 67 
 Java version out of Date!
 Adobe Flash Player 15.0.0.223 
 Mozilla Firefox (33.1)
````````Process Check: objlist.exe by Laurent````````[/u] 
 Norton ccSvcHst.exe
 Symantec Norton Online Backup NOBuClient.exe 
 Symantec Norton Online Backup NOBuAgent.exe 
`````````````````System Health check`````````````````[/u]
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````[/u]


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 17/11/2014
Scan Time: 9:13:51 PM
Logfile: MWB.txt
Administrator: Yes

Version: 2.00.3.1025
Malware Database: v2014.11.18.01
Rootkit Database: v2014.11.12.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: srcstcbstrd

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 568463
Time Elapsed: 21 min, 17 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
Can you tell me the size of the harddrive and how much free space you have on it?

Click Start> Computer> right click the C Drive and choose Properties> enter


***************************************************************
Registry cleaners are extremely powerful applications and their potential for harming your OS far outweighs any small potential for improving your computer's performance.

There are a number of them available and some are more safe than others. Keep in mind that no two registry cleaners work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad" entry. One cleaner may find entries on your system that will not cause a problem when removed, another may not find the same entries, and still another may want to remove entries required for a program to work. Without research into what the registry entry selected for deletion is, a registry cleaner can end up being an automated method to cause problems with the registry.

For routine use by those not familiar with the registry, the benefits to your computer are negligible while the potential risks are great.

Further reading: XP Fixes Myth #1: Registry Cleaners
Ashampoo Registry Cleaner v.1.00   
*********************************************
Update Your Java (JRE)

Old versions of Java have vulnerabilities that malware can use to infect your system.

First Verify your Java Version

If there are any other version(s) installed then update now.

Get the new version (if needed)

If your version is out of date install the newest version of the Sun Java Runtime Environment.

Note: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

Be sure to close ALL open web browsers before starting the installation.

Remove any old versions

1. Download JavaRa and unzip the file to your Desktop.
2. Open JavaRA.exe and choose Remove Older Versions
3. Once complete exit JavaRA.

Additional Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and reboot your computer.
*************************************************
Please download Junkware Removal Tool to your desktop.

•Warning! Once the scan is complete JRT will shut down your browser with NO warning.

•Shut down your protection software now to avoid potential conflicts.

•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator

•The tool will open and start scanning your system.

•Please be patient as this can take a while to complete depending on your system's specifications.

•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

•Copy and Paste the JRT.txt log into your next message.
************************************************
Malwarebytes' Anti-Rootkit

Please download Malwarebytes' Anti-Rootkit and save it to your desktop.

• Be sure to print out and follow the instructions provided on that same page for performing a scan.
• Caution: This is a beta version so also read the disclaimer and back up all your data before using.
  
• When the scan completes, click on the Cleanup button to remove any threats found and reboot the computer if prompted to do so.
  
• Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
  
• If there are problems with Internet access, Windows Update, Windows Firewall or other system issues, run the fixdamage tool located in the folder Malwarebytes Anti-Rootkit was run from and reboot your computer.
  
• Two files (mbar-log-YYYY-MM-DD, system-log.txt) will be created and saved within that same folder.
• Copy and paste the contents of these two log files in your next reply.

[srcstcbstrd]

Hi SuperDave - thanks for taking the time to help me out. My 'C' drive is 1.5TB with 265GB free space.

As far as the Java version I have, that's part of the problem - I can't read what version it is because this bug or whatever it is won't allow me to access that on the web - by which I mean that the Java applet won't work for this or videos. So I downloaded the latest version anyway and tried to install it. After the install screen came up, it was just a blank field. When I closed the field, Java congratulated me on the install but I didn't have a chance to uncheck any other crappy extras. I ran it as the administrator with the Firefox closed as you suggested.

Ran the JavaRa.

Ran the Junk Removal Tool and Malwarebytes Anti-Rootkit (see logs below)


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.9 (11.15.2014:2)
OS: Windows 7 Home Premium x64
Ran by srcstcbstrd on 19/11/2014 at 16:56:12.97
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\Tasks\One-Click Optimizer.job



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\srcstcbstrd\appdata\local\{93D6AAE3-FB95-4F5F-AEE9-BE75BE2C5BD7}
Successfully deleted: [Empty Folder] C:\Users\srcstcbstrd\appdata\local\{F9F2DD8D-02A5-413B-B5AB-3B63A16C42D2}



~~~ FireFox

Emptied folder: C:\Users\srcstcbstrd\AppData\Roaming\mozilla\firefox\profiles\h7dij27t.default-1412713083351\minidumps [5 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19/11/2014 at 17:00:54.96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.08.1.1001

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.17420

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, E:\ DRIVE_FIXED
CPU speed: 2.700000 GHz
Memory total: 8589176832, free: 5753118720

Downloaded database version: v2014.11.19.07
Downloaded database version: v2014.11.18.01
=======================================
Initializing...
------------ Kernel report ------------
     11/19/2014 17:06:07
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_AuthenticAMD.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\system32\DRIVERS\vidsflt.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\DRIVERS\amd_sata.sys
\SystemRoot\system32\DRIVERS\storport.sys
\SystemRoot\system32\DRIVERS\amd_xata.sys
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\NISx64\1506000.020\SYMDS64.SYS
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\drivers\NISx64\1506000.020\SYMEFA64.SYS
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\DRIVERS\timntr.sys
\SystemRoot\system32\DRIVERS\vididr.sys
\SystemRoot\system32\DRIVERS\tib_mounter.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\system32\DRIVERS\tib.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\system32\DRIVERS\snapman.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\Drivers\MDFSYSNT.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\system32\DRIVERS\fltsrv.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\System32\drivers\BootDefragDriver.sys
\SystemRoot\system32\DRIVERS\AtiPcie64.sys
\SystemRoot\system32\DRIVERS\39594152.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys
\SystemRoot\system32\drivers\NISx64\1506000.020\ccSetx64.sys
\SystemRoot\system32\drivers\NSTx64\7DD04000.00A\ccSetx64.sys
\SystemRoot\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS
\SystemRoot\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS
\SystemRoot\system32\drivers\NISx64\1506000.020\Ironx64.SYS
\??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
\SystemRoot\system32\DRIVERS\3959415.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS
\??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
\??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\??\C:\Windows\System32\drivers\GUBootStartup.sys
\SystemRoot\System32\Drivers\ElbyCDIO.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
\??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\??\C:\Windows\system32\drivers\cbfs.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\39594151.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\amdppm.sys
\SystemRoot\system32\DRIVERS\atikmpag.sys
\SystemRoot\system32\DRIVERS\atikmdag.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\netr28x.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbfilter.sys
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\drivers\wmiacpi.sys
\SystemRoot\system32\DRIVERS\asvpndrv.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\drivers\dfx11_1x64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\drivers\WsAudio_DeviceS(1).sys
\SystemRoot\system32\drivers\WsAudio_DeviceS(2).sys
\SystemRoot\system32\drivers\WsAudio_DeviceS(3).sys
\SystemRoot\system32\drivers\WsAudio_DeviceS(4).sys
\SystemRoot\system32\drivers\WsAudio_DeviceS(5).sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\VClone.sys
\SystemRoot\system32\DRIVERS\SCSIPORT.SYS
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\drivers\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\AtihdW76.sys
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\System32\Drivers\RtsUStor.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_amd_sata.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
\SystemRoot\system32\DRIVERS\idmwfp.sys
\??\C:\Windows\system32\drivers\iPodDrv.sys
\SystemRoot\system32\DRIVERS\afcdp.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\system32\DRIVERS\udfs.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\system32\DRIVERS\psi_mf.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\??\C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\system32\DRIVERS\cdfs.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\drivers\WudfPf.sys
\SystemRoot\System32\ATMFD.DLL
\??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\IPSDefs\20141118.003\IDSvia64.sys
\??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\VirusDefs\20141118.050\EX64.SYS
\??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\VirusDefs\20141118.050\ENG64.SYS
\??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\BASHDefs\20141118.001\BHDrvx64.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xfffffa8007ae7790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\0000007e\
Lower Device Object: 0xfffffa80079659c0
Lower Device Driver Name: \Driver\amd_sata\
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8007af8790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\0000007d\
Lower Device Object: 0xfffffa80079639c0
Lower Device Driver Name: \Driver\amd_sata\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8007af8790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007998b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007af8790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80079958b0, DeviceName: Unknown, DriverName: \Driver\vidsflt\
DevicePointer: 0xfffffa800796bac0, DeviceName: Unknown, DriverName: \Driver\amd_xata\
DevicePointer: 0xfffffa80079639c0, DeviceName: \Device\0000007d\, DriverName: \Driver\amd_sata\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: B7ED5077

Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048  Numsec = 204800
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 206848  Numsec = 2901763905

    Partition 2 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 2901970753  Numsec = 28301312

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

Disk Size: 1500301910016 bytes
Sector size: 512 bytes

Done!
Physical Sector Size: 512
Drive: 1, DevicePointer: 0xfffffa8007ae7790, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007ae72c0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007ae7790, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8007998860, DeviceName: Unknown, DriverName: \Driver\vidsflt\
DevicePointer: 0xfffffa800796cac0, DeviceName: Unknown, DriverName: \Driver\amd_xata\
DevicePointer: 0xfffffa80079659c0, DeviceName: \Device\0000007e\, DriverName: \Driver\amd_sata\
------------ End ----------
Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 5C27753C

Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048  Numsec = 3907024896
    Partition file system is NTFS
    Partition is not bootable

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0

Disk Size: 2000398934016 bytes
Sector size: 512 bytes

Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
Removal finished


The Anit-Rootkit program did not find any malware. I did not run the fixdamage.

[SuperDave]

I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan

•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.

• Leave the check mark next to Remove found threats.
  

•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

[srcstcbstrd]

Hey SuperDave - ran ESET and saved the results to a .txt but do you think I could find the bloody thing after I hit save so I could include it here? 

Found the log under Programs and it looks to include the same info although a little more detailed:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=6fefafb7614aa5418622183009c5b71b
# engine=14752
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-08-13 07:09:25
# local_time=2013-08-13 03:09:25 (-0500, Eastern Daylight Time)
# country="Canada"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=3591 16777213 100 91 0 138884350 0 0
# compatibility_mode=5893 16776574 100 94 1927882 127921215 0 0
# scanned=326336
# found=17
# cleaned=17
# scan_time=29725
sh=1EBD938E07FFD1FE8D61576A69ED4D329F483881 ft=1 fh=e5fa4db611a76ae3 vn="a variant of MSIL/HackTool.IdleKMS.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\KMSpico\1L7X14.exe"
sh=1CD3339BFA397F18363CAC27F97B723AC62C1874 ft=1 fh=0e77d44e3a493c8f vn="a variant of Win32/HackTool.KMSAuto.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\KMSpico\7A2LE4BSH0R.exe"
sh=D64F3AE178BF6B9DAB3986072DE3AEB3BF285059 ft=1 fh=f3e29fe027250a81 vn="a variant of Win32/HackTool.KMSAuto.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\KMSpico\A5PFAUY8TJS.exe"
sh=7CC319C63E4CAE93C529B4462C93DD5AB9D811F0 ft=1 fh=8694618c27250a81 vn="a variant of Win32/HackTool.KMSAuto.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\KMSpico\NM4Z7O6H2L6.exe"
sh=DE6AF192DCA55D8ED8B8117F656E8E342D742C5A ft=1 fh=c67e1a899f871570 vn="a variant of Win32/HackTool.KMSAuto.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\KMSpico\XN2W3J8E0G6.exe"
sh=E1A0CCCD1A729E7D9C4A9A563CB4DAD8E5586E95 ft=1 fh=321f99703a493c8f vn="a variant of Win32/HackTool.KMSAuto.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files\KMSpico\YYD37OW5H6R.exe"
sh=DB5E733C80A9F9125478F939C94B3295A0B7036F ft=1 fh=36fc2114735cd03f vn="a variant of Win32/Packed.VMDetector.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files (x86)\Solid Savings\Uninstall.exe"
sh=A9BFA09044E90270939723184D08219EB110D3DE ft=0 fh=0000000000000000 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application (deleted - quarantined)" ac=C fn="C:\Torrents Complete\Smart Driver Updater 3.0 + Reg.iso"
sh=5FCF9DB122C04903B2407A5027782099D8A251B6 ft=1 fh=475041420d7baef6 vn="a variant of Win32/Toolbar.CrossRider.C application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\srcstcbstrd\AppData\Local\Updater26278\Updater26278.exe"
sh=FCD42701A1701A73EF2635AFA160307198AEF8A8 ft=0 fh=0000000000000000 vn="Win32/OpenCandy application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.50\agent\stub_data\stubinst_pkg_en-us.cab"
sh=6E30879097C72B4093F9037D58E9EB950395CD82 ft=0 fh=0000000000000000 vn="a variant of Win32/Keygen.DD application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\ALZip_7.52.0.1.zip"
sh=3DC71E97DC90B905991A8F6CD3B83BE2426BEA15 ft=0 fh=0000000000000000 vn="a variant of Win32/Bundled.Toolbar.Ask application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\FFSetup260.zip"
sh=0AAA6E7D019034C78ED7DF41015A0647F483922F ft=0 fh=0000000000000000 vn="multiple threats (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\FFSetup290.zip"
sh=25D2D351D1F97779DF2D9B8A61BA7EB1B9AAA230 ft=0 fh=0000000000000000 vn="multiple threats (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\FFSetup295.zip"
sh=210E43BE1A81AD5652960E5C2E9EE9E606B89E7E ft=0 fh=0000000000000000 vn="multiple threats (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\Uniblue PowerSuite 2010 2.1.10.17.rar"
sh=EC624227C6BBF5AEB26C3DE8DBF27050B9C7A1B0 ft=0 fh=0000000000000000 vn="multiple threats (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\Uniblue - PowerSuite 2010_\Uniblue - PowerSuite 2010.rar"
sh=F27A51138D02C8701172427C99FDD45B671D00D4 ft=0 fh=0000000000000000 vn="multiple threats (deleted - quarantined)" ac=C fn="E:\Most Recent Downloads\FFSetup3.0.1.1.zip"
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internet# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=6fefafb7614aa5418622183009c5b71b
# engine=18051
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-27 10:56:19
# local_time=2014-04-27 06:56:19 (-0500, Eastern Daylight Time)
# country="Canada"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=3591 16777213 100 91 603159 161145964 0 0
# compatibility_mode=5893 16776574 100 94 3703021 150182829 0 0
# scanned=353855
# found=1
# cleaned=1
# scan_time=8657
sh=FA31AF96DEB291C6C2CEE09E4E132FAFD9613A6B ft=1 fh=394f713fd0c4a198 vn="a variant of Win32/SpeedingUpMyPC.F application (cleaned by deleting - quarantined)" ac=C fn="C:\Program Files (x86)\Smart PC Solutions\Smart Driver Updater\SmartDriverUpdater.exe"
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=6fefafb7614aa5418622183009c5b71b
# engine=21191
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-21 06:38:46
# local_time=2014-11-21 01:38:46 (-0500, Eastern Standard Time)
# country="Canada"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Norton Internet Security'
# compatibility_mode=3597 16777213 100 100 2094630 179058511 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 0 168095376 0 0
# scanned=414762
# found=26
# cleaned=26
# scan_time=22070
sh=5339ABEE428B92A04DF04A1D1B81896A68CF7CBD ft=0 fh=0000000000000000 vn="Win32/DealPly.J potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPly\8708JGO6~DealPly.crx.vir~"
sh=5339ABEE428B92A04DF04A1D1B81896A68CF7CBD ft=0 fh=0000000000000000 vn="Win32/DealPly.J potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPly\DealPly.crx.vir"
sh=033736CF5EFB70477C757857F08649B4094F9E9C ft=1 fh=c6af5358d9a2bf2f vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\IObit\Driver Booster\DBPro.exe.vir"
sh=033736CF5EFB70477C757857F08649B4094F9E9C ft=1 fh=c6af5358d9a2bf2f vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\IObit\Driver Booster\ICOMUAEC~DBPro.exe~.vir"
sh=93510E07EBD463BE51052EC8114EC16C5423103E ft=0 fh=0000000000000000 vn="Win32/Conduit.SearchProtect.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\browser\nsprotector.js.vir"
sh=75F83D0E2071210C11B550863EC82F53D0E195A9 ft=1 fh=71573f5a1c96d142 vn="Win32/Toolbar.Conduit.AJ potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\Conduit\IE\CT3298573\R80KKBO0~UninstallerUI.exe.vir~"
sh=75F83D0E2071210C11B550863EC82F53D0E195A9 ft=1 fh=71573f5a1c96d142 vn="Win32/Toolbar.Conduit.AJ potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\Conduit\IE\CT3298573\UninstallerUI.exe.vir"
sh=E5A3C100D2D0FD94482783AF2B2FF94CDFC9923F ft=1 fh=a0ddd0619a504a2e vn="a variant of Win32/Hao123.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\1183J62F~hao123inst.exe~"
sh=E5A3C100D2D0FD94482783AF2B2FF94CDFC9923F ft=1 fh=a0ddd0619a504a2e vn="a variant of Win32/Hao123.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe"
sh=E618E799466D260BAF1B9ACE24765440A8F58DE3 ft=1 fh=5a138b81daee5b8e vn="a variant of Win32/Toolbar.Conduit.K potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\NCH Swift Sound\Stamp\MVUFBKHO~stampsetup_v2.32.exe~"
sh=B8B92A7D23DBAC2B21461FC20BD52D80B51418E5 ft=1 fh=a0a99892d46f4f18 vn="a variant of Win32/Toolbar.Conduit.K potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\NCH Swift Sound\Stamp\O97Q3QJJ~stamp.exe~"
sh=E361FF32BA76F7BE1EC5FEDA434BEE37A39B2EC0 ft=1 fh=5a97dc58d46f4f18 vn="a variant of Win32/Toolbar.Conduit.K potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\NCH Swift Sound\Stamp\P0FKTGCG~uninst.exe~"
sh=B8B92A7D23DBAC2B21461FC20BD52D80B51418E5 ft=1 fh=a0a99892d46f4f18 vn="a variant of Win32/Toolbar.Conduit.K potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\NCH Swift Sound\Stamp\stamp.exe"
sh=E618E799466D260BAF1B9ACE24765440A8F58DE3 ft=1 fh=5a138b81daee5b8e vn="a variant of Win32/Toolbar.Conduit.K potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\NCH Swift Sound\Stamp\stampsetup_v2.32.exe"
sh=E361FF32BA76F7BE1EC5FEDA434BEE37A39B2EC0 ft=1 fh=5a97dc58d46f4f18 vn="a variant of Win32/Toolbar.Conduit.K potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files (x86)\NCH Swift Sound\Stamp\uninst.exe"
sh=DA1DBF1BAFCD44E53E59C1A587BC2E1A8D453904 ft=1 fh=c71c001183df20df vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\Torrents Complete\DFX Audio Enhancer v11.200 - Final + Keygen-CORE\DFX Audio Enhancer v11.200 - Final + Keygen-CORE.exe"
sh=4370E4F60FB96627C6AD4F4820A4FA8A61F8EC29 ft=1 fh=3b60eb1472d7e959 vn="a variant of Win32/CNETInstaller.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Desktop\Disc Cleaners\cbsidlm-cbsi213-Smart_Toolbar_Remover-SEO-10972491.exe"
sh=9271AC56219EAA6E7C3BEB56DCF85B4B0C94BCBD ft=1 fh=01ecc5747fa432f4 vn="Win32/ELEX.Q potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Desktop\Disc Cleaners\isafedl.exe"
sh=0AE9EA41E2AD96BCEB05E511DD7E695B48136BE2 ft=0 fh=0000000000000000 vn="a variant of Win32/Toolbar.Conduit.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\AshampooHDDControl.zip"
sh=C5A07C6647A4228B39A382EE5246235CFDD94A82 ft=1 fh=1901ca3fd08316cd vn="a variant of Win32/CNETInstaller.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\cbsidlm-cbsi134-SpaceMonger-ORG-10050288.exe"
sh=B56B5771AA023A370CA6CA451F205C9BD5E12681 ft=1 fh=ad644d67f0cd6c0b vn="a variant of Win32/Complitly.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\Moo0 AudioTypeConverter 1.24 Installer.exe"
sh=E74FA086BBBAD71DC1D5D0C7A3318CD8668D6115 ft=1 fh=d3a5976dcefb8dbb vn="a variant of Win32/Complitly.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\Moo0 RightClicker 1.44 Installer.exe"
sh=E3D6EFE0B506F9C8CDA93F72EA8C4F8C994CF388 ft=1 fh=a5c543a71e9285f8 vn="a variant of Win32/Complitly.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\Moo0 RightClicker Pro 1.45 Installer.exe"
sh=1581FFD923E452064CC77096E0FF2C3A77715B46 ft=1 fh=788dee7a256dd793 vn="a variant of Win32/Complitly.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\Moo0 RightClicker Pro 1.47 Installer.exe"
sh=171C059174B038313C374731A2AFAC13B1AD2C7C ft=1 fh=ebd4c9b089c9e787 vn="a variant of Win32/Complitly.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\M_VideoConverter_1.10.setup.exe"
sh=C4068C7DF5DAA0FAC748AB0A9ABEDDA7F0F6C1A4 ft=1 fh=9a88bee7093cd2af vn="Win32/Toolbar.Conduit potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\srcstcbstrd\Downloads\Programs Downloaded\utorrentspeeduppro_setup.exe"

[srcstcbstrd]

SuperDave - just as an update - restarted the computer and tried to play a video - still the same result (tried VLC - program closed immediately). Tried System Restore and it only went back as far as the 19th of this month. Tried to get into 'System' and was immediately kicked out (screen came up for a millisecond and closed). Tried an online video and Flash crashed. There has been no change from the original problem. 

[SuperDave]

Please try this and tell me what happens.

To Run the SFC /SCANNOW Command in Windows 7
1. Open an elevated command prompt.

2. To Scan and Repair System Files
NOTE: Scans the integrity of all protected system files and repairs the system files if needed.
A) In the elevated command prompt, type sfc /scannow and press Enter. (see screenshot below)
NOTE: This may take some time to finish.



B) Go to step 4.

3. To Only Verify if the System Files are Corrupted
NOTE: Scans and only verifies the integrity of all proteced system files only.
A) In the elevated command prompt, type sfc /verifyonly and press Enter.

4. When the scan is complete, hopefully you will see all is ok like the screenshot below.
NOTE: If not, then you can attempt to run a System Restore using a restore point dated before the bad file occured to fix it. You may need to repeat doing a System Restore until you find a older restore point that may work.



5. When done, close the elevated command prompt.

[srcstcbstrd]

Ok SuperDave - I ran the scan and it came back with a lot of issues. I've tried twice to post the results here - first as a copy and paste and then as an attachment but neither is being accepted.

[SuperDave]

Did it ask for the OS disk? Do you have the OS disk?

[srcstcbstrd]

No - preloaded HP desktop. Windows 7 Home Premium.

[SuperDave]

Please check to see if you have the Recovery console on a partition of your hard drive. If it's there, you will be able to do a repair of the OS system.

[srcstcbstrd]

Ok - sounds easy but not for me. What steps do I need to make?

[SuperDave]

This should explain it very well.

[srcstcbstrd]

Thanks. Tried a System Repair. Got back in after the 'repair' (apparently not much could be done) and did a 'sfc' scan. Restarted and am trying a second go round. Would it help if I did the scan in safe mode?

[SuperDave]

Would it help if I did the scan in safe mode?

No, I don't think that will help much. Let's try this:

Download Combofix from any of the links below, and save it to your DESKTOP. 
If your version of Windows defaults to you download folder you will need to copy it to your desktop.

Link 1
Link 2
Link 3

To prevent your anti-virus application interfering with  ComboFix we need to disable it. See here for a tutorial regarding how to do so if you are unsure.

• Close any open windows and double click ComboFix.exe to run it.
  
  You will see the following image:
  

Click I Agree to start the program.

ComboFix will then extract the necessary files and you will see this:



As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to  have this pre-installed on your machine before doing any malware  removal. This will not occur in Windows Vista and 7

It will allow you to boot up into a special recovery/repair  mode that will allow us to more easily help you should your computer  have a problem after an attempted removal of malware.

If you did not have it installed, you will see the prompt below. Choose YES.



Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:



Click on Yes, to continue scanning for malware.

When finished, it will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).

Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.

Note: Please Do NOT mouseclick combofix's window while its running because it may cause it to stall.