Alright, so I used RougeKiller and it worked flawlessly. However due to my own idiocy, I deleted the first result sheet. However I remember it not finding anything problematic expect these quarantined registry files (which I have no idea what I'm suppose to do with them).
These are the items that have been quarantined:
Also I scanned again incase anything it found previously was still buried there. Only blimp seems to be those driver errors. Anyway, thank you for taking time out of your day to help, its much appreciated!
RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
mail :
http://www.adlice.com/contact/Feedback :
http://forum.adlice.comWebsite :
http://www.adlice.com/softwares/roguekiller/Blog :
http://www.adlice.comOperating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Steves [Admin rights]
Mode : Scan -- Date : 05/20/2014 15:52:06
| ARK || FAK || MBR |
¤¤¤ Bad processes : 0 ¤¤¤
¤¤¤ Registry Entries : 0 ¤¤¤
¤¤¤ Scheduled tasks : 0 ¤¤¤
¤¤¤ Startup Entries : 0 ¤¤¤
¤¤¤ Web browsers : 0 ¤¤¤
¤¤¤ Browser Addons : 0 ¤¤¤
¤¤¤ Particular Files / Folders: ¤¤¤
¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤
[Address] EAT @explorer.exe (BaseReportErrorA) : fwpuclnt.dll -> HOOKED (C:\Program Files\Windows Photo Viewer\PhotoBase.dll @ 0xFB691EF4)
[Address] EAT @explorer.exe (BaseReportErrorW) : fwpuclnt.dll -> HOOKED (C:\Program Files\Windows Photo Viewer\PhotoBase.dll @ 0xFB691EF4)
¤¤¤ External Hives: ¤¤¤
¤¤¤ Infection : ¤¤¤
¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 localhost
¤¤¤ MBR Check: ¤¤¤
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) TOSHIBA MK6465GSX ATA Device +++++
--- User ---
[MBR] 3fd064c478b7ab310b430a1e7e351dc6
[BSP] 1f2fe4cab813ca0ce788b0ddd18ea71a : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 80325 | Size: 15000 MB
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30800325 | Size: 595440 MB
User = LL1 ... OK!
User = LL2 ... OK!
Finished : << RKreport[0]_S_05202014_155206.txt >>
RKreport[0]_D_05202014_145346.txt;RKreport[0]_H_05202014_144931.txt;RKreport[0]_S_05202014_144849.txt
RKreport[0]_S_05202014_145122.txt;RKreport[0]_S_05202014_150914.txt