API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Mar 7th, 2014
70
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 104.99 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 3/7/2014 5:04:26 PM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jesse\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16736)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 7.86 Gb Total Physical Memory | 5.84 Gb Available Physical Memory | 74.27% Memory free
  8. 15.73 Gb Paging File | 13.10 Gb Available in Paging File | 83.29% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 420.56 Gb Total Space | 134.17 Gb Free Space | 31.90% Space Free | Partition Type: NTFS
  13. Drive D: | 25.47 Gb Total Space | 21.56 Gb Free Space | 84.67% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: JESSE-PC | User Name: Jesse | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2014/03/07 16:41:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jesse\Desktop\OTL.exe
  22. PRC - [2014/02/13 14:29:16 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
  23. PRC - [2014/02/08 15:53:13 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  24. PRC - [2013/12/31 14:13:45 | 004,739,392 | ---- | M] (Evernote) -- C:\Program Files (x86)\Evernote\Skitch\Skitch.exe
  25. PRC - [2013/12/18 14:51:44 | 001,103,712 | ---- | M] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) -- C:\Users\Jesse\AppData\Local\Apps\Evernote\EvernoteClipper.exe
  26. PRC - [2013/11/30 18:33:49 | 003,568,312 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  27. PRC - [2013/11/30 18:33:49 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  28. PRC - [2013/11/29 11:57:02 | 002,273,056 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  29. PRC - [2013/11/29 11:56:51 | 001,370,912 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  30. PRC - [2013/10/23 17:39:14 | 001,017,224 | ---- | M] (Flux Software LLC) -- C:\Users\Jesse\AppData\Local\FluxSoftware\Flux\flux.exe
  31. PRC - [2013/10/17 20:35:01 | 001,028,384 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
  32. PRC - [2013/09/22 10:27:44 | 000,119,000 | ---- | M] () -- C:\Program Files (x86)\WizMouse\WizMouse.exe
  33. PRC - [2013/08/16 16:38:08 | 003,161,088 | ---- | M] (Corsair Components Inc) -- C:\Program Files (x86)\Corsair\Corsair Headset Software\HeadsetControlPanel.exe
  34. PRC - [2013/04/04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  35. PRC - [2013/04/04 13:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  36. PRC - [2013/04/04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
  37. PRC - [2012/09/11 09:02:38 | 002,377,840 | ---- | M] (ROCCAT) -- C:\Program Files (x86)\ROCCAT\Lua Mouse\Lua Config.exe
  38. PRC - [2012/04/24 13:37:56 | 000,169,752 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
  39. PRC - [2012/04/16 02:17:10 | 000,362,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  40. PRC - [2012/04/16 02:17:06 | 000,276,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  41. PRC - [2012/04/16 02:17:02 | 000,127,320 | ---- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
  42. PRC - [2012/04/16 02:16:54 | 000,164,184 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
  43. PRC - [2012/02/27 06:01:58 | 000,291,608 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  44. PRC - [2012/02/20 18:08:36 | 000,066,608 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Lenovo Smart Update\LenovoSmartConnectService.exe
  45. PRC - [2012/02/16 20:35:18 | 001,876,992 | ---- | M] (LENOVO) -- C:\Program Files (x86)\Lenovo\Lenovo CAPOSD\CAPOSD.exe
  46. PRC - [2012/02/05 13:49:04 | 000,193,536 | ---- | M] (Intel Corporation) -- C:\Windows\SysWOW64\irstrtsv.exe
  47. PRC - [2012/02/01 18:29:58 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  48. PRC - [2011/12/08 13:12:40 | 000,291,272 | ---- | M] () -- C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
  49. PRC - [2011/01/28 22:29:36 | 000,136,488 | ---- | M] (CyberLink) -- c:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
  50. PRC - [2008/09/16 12:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
  51.  
  52.  
  53. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  54.  
  55. MOD - [2014/02/27 17:36:35 | 000,190,976 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\75b6a68103e1b76063d9f69b8275ae61\UIAutomationTypes.ni.dll
  56. MOD - [2014/02/26 14:33:20 | 018,813,440 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\a4b45c44490c75bc2fb22780e7ef087d\PresentationFramework.ni.dll
  57. MOD - [2014/02/26 14:33:11 | 001,889,792 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\3fe705796c6a41d4889d9001d1c56af8\System.Xaml.ni.dll
  58. MOD - [2014/02/26 14:33:08 | 012,894,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f4f6ee0df2aa4189bf36e6335cb92761\System.Windows.Forms.ni.dll
  59. MOD - [2014/02/26 14:33:00 | 011,025,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\a74542efbeb46445949a39026c501132\PresentationCore.ni.dll
  60. MOD - [2014/02/26 14:32:57 | 001,644,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5cd2aee5e7c07227c694d89219688ab3\System.Drawing.ni.dll
  61. MOD - [2014/02/26 14:32:51 | 007,662,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\bada32953bb6b16a53d653eae23d78dc\System.Xml.ni.dll
  62. MOD - [2014/02/26 14:32:51 | 006,990,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\dce99d8de14d8a015313db98c72552ee\System.Core.ni.dll
  63. MOD - [2014/02/26 14:32:48 | 003,950,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\acf97bfe2a931d4a47253b26b7218991\WindowsBase.ni.dll
  64. MOD - [2014/02/26 14:32:46 | 000,470,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\75f8bc4cf08030c4a53b6d5e0ae20046\PresentationFramework.Aero.ni.dll
  65. MOD - [2014/02/26 14:32:44 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bbc48ec4245e502ae19b0601d3799c9e\System.Configuration.ni.dll
  66. MOD - [2014/02/26 14:32:43 | 010,060,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff26cc03e6d57d8abd13b990332e67c6\System.ni.dll
  67. MOD - [2014/02/26 14:32:37 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll
  68. MOD - [2014/02/08 13:34:51 | 000,013,088 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
  69. MOD - [2013/12/30 11:44:13 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\Evernote\Skitch\libgcc_s_dw2-1.dll
  70. MOD - [2013/12/30 11:44:13 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\Evernote\Skitch\mingwm10.dll
  71. MOD - [2013/11/30 18:33:49 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  72. MOD - [2013/11/25 10:00:22 | 000,433,664 | ---- | M] () -- C:\Users\Jesse\AppData\Local\Apps\Evernote\libxml2.dll
  73. MOD - [2013/11/25 10:00:10 | 000,315,392 | ---- | M] () -- C:\Users\Jesse\AppData\Local\Apps\Evernote\libtidy.dll
  74. MOD - [2013/09/22 10:27:44 | 000,119,000 | ---- | M] () -- C:\Program Files (x86)\WizMouse\WizMouse.exe
  75. MOD - [2013/09/05 00:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
  76. MOD - [2011/12/08 13:12:40 | 000,291,272 | ---- | M] () -- C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
  77. MOD - [2011/06/28 01:28:38 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Lenovo CAPOSD\QTKB.dll
  78. MOD - [2010/10/20 15:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
  79.  
  80.  
  81. [color=#E56717]========== Services (SafeList) ==========[/color]
  82.  
  83. SRV:[b]64bit:[/b] - [2013/11/30 18:33:49 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  84. SRV:[b]64bit:[/b] - [2013/11/29 11:56:40 | 015,128,352 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
  85. SRV:[b]64bit:[/b] - [2013/05/27 00:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  86. SRV:[b]64bit:[/b] - [2013/04/18 17:15:18 | 003,388,144 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
  87. SRV:[b]64bit:[/b] - [2013/04/18 17:14:58 | 000,273,136 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
  88. SRV:[b]64bit:[/b] - [2013/04/18 17:14:46 | 000,621,296 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
  89. SRV:[b]64bit:[/b] - [2013/04/18 17:14:20 | 000,149,744 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
  90. SRV:[b]64bit:[/b] - [2013/04/11 01:12:50 | 000,772,064 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
  91. SRV:[b]64bit:[/b] - [2012/09/12 17:07:06 | 000,135,984 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
  92. SRV:[b]64bit:[/b] - [2012/07/30 16:13:04 | 008,515,544 | ---- | M] (DisplayLink Corp.) [Auto | Running] -- C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe -- (DisplayLinkService)
  93. SRV:[b]64bit:[/b] - [2012/03/07 04:00:46 | 000,629,984 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  94. SRV:[b]64bit:[/b] - [2012/02/06 15:55:34 | 000,123,952 | ---- | M] (Lenovo) [Auto | Stopped] -- C:\Windows\SysNative\BootShieldSvc.exe -- (BootShieldSvc)
  95. SRV:[b]64bit:[/b] - [2010/09/22 20:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  96. SRV - [2014/02/25 16:57:46 | 000,568,512 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  97. SRV - [2014/02/24 14:53:48 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  98. SRV - [2014/02/13 14:29:16 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
  99. SRV - [2014/02/08 15:53:13 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  100. SRV - [2013/11/29 11:56:51 | 001,370,912 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
  101. SRV - [2013/10/23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  102. SRV - [2013/09/11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  103. SRV - [2013/06/23 10:19:46 | 012,867,584 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.6.12\bin\mysqld.exe -- (wampmysqld)
  104. SRV - [2013/06/23 10:09:48 | 000,024,576 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- c:\wamp\bin\apache\Apache2.4.4\bin\httpd.exe -- (wampapache)
  105. SRV - [2013/06/05 16:47:52 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  106. SRV - [2013/04/04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  107. SRV - [2013/04/04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  108. SRV - [2013/03/01 20:13:27 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  109. SRV - [2012/04/24 13:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
  110. SRV - [2012/04/16 02:17:10 | 000,362,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  111. SRV - [2012/04/16 02:17:06 | 000,276,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  112. SRV - [2012/04/16 02:17:02 | 000,127,320 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
  113. SRV - [2012/04/16 02:16:54 | 000,164,184 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
  114. SRV - [2012/02/20 18:08:36 | 000,066,608 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Lenovo Smart Update\LenovoSmartConnectService.exe -- (LenovoSmartConnectService)
  115. SRV - [2012/02/05 13:49:04 | 000,193,536 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysWOW64\irstrtsv.exe -- (irstrtsv)
  116. SRV - [2012/02/01 18:29:58 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  117. SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  118. SRV - [2008/09/16 12:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor7.0)
  119.  
  120.  
  121. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  122.  
  123. DRV:[b]64bit:[/b] - [2014/02/08 13:34:51 | 000,032,544 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  124. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 001,032,416 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  125. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 000,409,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  126. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 000,205,320 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  127. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  128. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 000,084,328 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  129. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  130. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 000,065,264 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
  131. DRV:[b]64bit:[/b] - [2013/11/30 18:33:50 | 000,038,984 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  132. DRV:[b]64bit:[/b] - [2013/10/30 12:03:12 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
  133. DRV:[b]64bit:[/b] - [2013/07/30 22:44:00 | 000,101,376 | ---- | M] (Corsair) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\corsveng2kamd64.sys -- (CorsairAudioFilter)
  134. DRV:[b]64bit:[/b] - [2013/05/13 14:36:06 | 000,050,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
  135. DRV:[b]64bit:[/b] - [2013/05/07 16:25:24 | 000,442,368 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  136. DRV:[b]64bit:[/b] - [2013/05/07 16:22:42 | 004,431,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  137. DRV:[b]64bit:[/b] - [2013/04/18 06:31:40 | 011,524,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETwsw00.sys -- (NETwNs64)
  138. DRV:[b]64bit:[/b] - [2013/04/12 10:41:28 | 000,131,856 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  139. DRV:[b]64bit:[/b] - [2013/04/11 01:13:08 | 000,164,832 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
  140. DRV:[b]64bit:[/b] - [2013/04/11 01:13:08 | 000,164,832 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
  141. DRV:[b]64bit:[/b] - [2013/04/04 13:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  142. DRV:[b]64bit:[/b] - [2013/03/01 20:06:04 | 000,052,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
  143. DRV:[b]64bit:[/b] - [2013/02/22 02:17:04 | 000,188,232 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
  144. DRV:[b]64bit:[/b] - [2013/02/22 02:17:04 | 000,169,288 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus)
  145. DRV:[b]64bit:[/b] - [2013/02/22 02:17:04 | 000,158,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdserd.sys -- (sscdserd)
  146. DRV:[b]64bit:[/b] - [2013/02/22 02:17:04 | 000,021,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
  147. DRV:[b]64bit:[/b] - [2012/09/28 10:32:56 | 000,053,760 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  148. DRV:[b]64bit:[/b] - [2012/08/23 09:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  149. DRV:[b]64bit:[/b] - [2012/08/23 09:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  150. DRV:[b]64bit:[/b] - [2012/08/23 09:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  151. DRV:[b]64bit:[/b] - [2012/08/21 12:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  152. DRV:[b]64bit:[/b] - [2012/07/30 20:18:28 | 000,017,408 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DisplayLinkUsbPort_6.3.40660.0.sys -- (DisplayLinkUsbPort)
  153. DRV:[b]64bit:[/b] - [2012/07/30 16:13:23 | 000,318,840 | ---- | M] (DisplayLink Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dlkmd.sys -- (dlkmd)
  154. DRV:[b]64bit:[/b] - [2012/07/30 16:13:23 | 000,015,224 | ---- | M] (DisplayLink Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\dlkmdldr.sys -- (dlkmdldr)
  155. DRV:[b]64bit:[/b] - [2012/07/26 19:23:34 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr)
  156. DRV:[b]64bit:[/b] - [2012/07/26 19:23:34 | 000,030,816 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
  157. DRV:[b]64bit:[/b] - [2012/07/26 18:32:31 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  158. DRV:[b]64bit:[/b] - [2012/07/17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  159. DRV:[b]64bit:[/b] - [2012/04/16 19:18:18 | 000,031,536 | ---- | M] (Lenovo Corporation") [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootShield.sys -- (BootShield)
  160. DRV:[b]64bit:[/b] - [2012/02/27 06:01:00 | 000,788,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  161. DRV:[b]64bit:[/b] - [2012/02/27 06:01:00 | 000,356,120 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  162. DRV:[b]64bit:[/b] - [2012/02/27 06:01:00 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  163. DRV:[b]64bit:[/b] - [2012/02/16 11:28:38 | 000,061,744 | ---- | M] (Lenovo Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BootShieldfltr.sys -- (BootShieldfltr)
  164. DRV:[b]64bit:[/b] - [2012/02/11 06:59:34 | 000,334,936 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\RsFx0200.sys -- (RsFx0200)
  165. DRV:[b]64bit:[/b] - [2012/02/06 08:51:38 | 008,217,704 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc)
  166. DRV:[b]64bit:[/b] - [2012/02/06 05:49:04 | 000,026,504 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\irstrtdv.sys -- (irstrtdv)
  167. DRV:[b]64bit:[/b] - [2012/02/01 03:16:40 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  168. DRV:[b]64bit:[/b] - [2012/01/27 12:00:28 | 000,109,056 | ---- | M] (Ozmo Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hswpan.sys -- (hswpan)
  169. DRV:[b]64bit:[/b] - [2012/01/26 20:37:24 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
  170. DRV:[b]64bit:[/b] - [2012/01/26 20:37:24 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
  171. DRV:[b]64bit:[/b] - [2012/01/13 02:03:36 | 000,008,192 | ---- | M] (TODO: <Company name>) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LAD.sys -- (LAD)
  172. DRV:[b]64bit:[/b] - [2011/12/05 03:05:26 | 001,600,128 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
  173. DRV:[b]64bit:[/b] - [2011/11/17 16:08:16 | 000,029,288 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WsAudioDevice_383S(1).sys -- (WsAudioDevice_383S(1)
  174. DRV:[b]64bit:[/b] - [2011/11/10 07:40:26 | 000,401,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  175. DRV:[b]64bit:[/b] - [2011/10/10 02:56:15 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  176. DRV:[b]64bit:[/b] - [2011/10/10 02:56:15 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  177. DRV:[b]64bit:[/b] - [2011/08/23 08:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  178. DRV:[b]64bit:[/b] - [2011/08/11 12:46:46 | 000,694,376 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTL8192su.sys -- (RTL8192su)
  179. DRV:[b]64bit:[/b] - [2011/01/28 22:29:58 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
  180. DRV:[b]64bit:[/b] - [2011/01/10 02:42:06 | 000,045,704 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PcaSp60.sys -- (PcaSp60)
  181. DRV:[b]64bit:[/b] - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  182. DRV:[b]64bit:[/b] - [2010/09/23 02:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
  183. DRV:[b]64bit:[/b] - [2009/07/21 16:20:06 | 000,121,840 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)
  184. DRV:[b]64bit:[/b] - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  185. DRV:[b]64bit:[/b] - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  186. DRV:[b]64bit:[/b] - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  187. DRV:[b]64bit:[/b] - [2009/07/13 18:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  188. DRV:[b]64bit:[/b] - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  189. DRV:[b]64bit:[/b] - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  190. DRV:[b]64bit:[/b] - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  191. DRV:[b]64bit:[/b] - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  192. DRV - [2011/01/10 02:42:06 | 000,045,704 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\PcaSp60.sys -- (PcaSp60)
  193. DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  194.  
  195.  
  196. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  197.  
  198.  
  199. [color=#E56717]========== Internet Explorer ==========[/color]
  200.  
  201. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  202. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  203. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  204. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  205. IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  206. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  207. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  208.  
  209.  
  210. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  211.  
  212. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  213.  
  214.  
  215.  
  216. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  217. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
  218. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
  219. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
  220. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  221. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..\SearchScopes\{0795A977-4854-423D-BA80-1ECE7C0F5BB7}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=983D9A99-89EA-456B-8AC5-8D32CA7FDB12&apn_sauid=B86C8DA4-E6EA-46D7-A793-52BD29C183A8
  222. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN_enUS506
  223. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..\SearchScopes\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}: "URL" = Playbryte-fa-ptn/search/redirect/?type=default&user_id=1af2846f-eb99-4c3c-aa16-89825f6d0c07&query={searchTerms}
  224. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  225. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  226. IE - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 10.21.0.34:8080
  227.  
  228. IE - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
  229. IE - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com [binary data]
  230. IE - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
  231. IE - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  232. IE - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
  233.  
  234. [color=#E56717]========== FireFox ==========[/color]
  235.  
  236. FF - prefs.js..browser.search.defaultengine: "Google"
  237. FF - prefs.js..browser.search.selectedEngine: "Web Search"
  238. FF - prefs.js..browser.startup.homepage: "https://www.google.com/"
  239. FF - prefs.js..extensions.enabledAddons: %7Bc45c406e-ab73-11d8-be73-000a95be3b12%7D:1.2.5
  240. FF - prefs.js..extensions.enabledAddons: firequery%40binaryage.com:1.4.1
  241. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
  242. FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=US&userid=d0834b7d-d15e-7452-7abe-972cc2d3e3bd&searchtype=ds&installDate={installDate}&q="
  243.  
  244.  
  245. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll File not found
  246. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  247. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
  248. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  249. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  250. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  251. FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
  252. FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.3.0: C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
  253. FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.2: C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
  254. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  255. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  256. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  257. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  258. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  259. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  260. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
  261. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  262. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  263. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  264. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  265. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  266. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  267. FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Jesse\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
  268. FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Jesse\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
  269. FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Jesse\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
  270. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Jesse\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  271. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Jesse\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  272. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Jesse\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  273. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
  274.  
  275. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
  276. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/12/20 15:36:39 | 000,000,000 | ---D | M]
  277. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  278. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  279.  
  280. [2012/10/05 15:01:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jesse\AppData\Roaming\Mozilla\Extensions
  281. [2014/02/24 14:55:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\eb6e1ck8.default\extensions
  282. [2014/02/24 14:54:15 | 002,197,828 | ---- | M] () (No name found) -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\eb6e1ck8.default\extensions\firebug@software.joehewitt.com.xpi
  283. [2014/02/24 14:55:13 | 000,116,414 | ---- | M] () (No name found) -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\eb6e1ck8.default\extensions\firequery@binaryage.com.xpi
  284. [2014/02/24 14:55:13 | 001,360,435 | ---- | M] () (No name found) -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\eb6e1ck8.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi
  285. [2013/03/19 12:16:22 | 000,002,308 | ---- | M] () -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\eb6e1ck8.default\searchplugins\askcom.xml
  286. [2013/08/09 15:26:32 | 000,006,547 | ---- | M] () -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\eb6e1ck8.default\searchplugins\babylon.xml
  287. [2013/02/02 13:04:13 | 000,001,300 | ---- | M] () -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\eb6e1ck8.default\searchplugins\claro.xml
  288. [2014/02/24 14:53:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  289. [2014/02/24 14:53:50 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  290.  
  291. [color=#E56717]========== Chrome ==========[/color]
  292.  
  293. CHR - default_search_provider: Google (Enabled)
  294. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  295. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  296. CHR - homepage: chrome://apps/
  297. CHR - plugin: Widevine Content Decryption Module (Enabled) = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll
  298. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll
  299. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  300. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
  301. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
  302. CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
  303. CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
  304. CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
  305. CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
  306. CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
  307. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
  308. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
  309. CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll
  310. CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
  311. CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
  312. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll
  313. CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
  314. CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
  315. CHR - plugin: Java Deployment Toolkit 7.0.450.18 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll
  316. CHR - plugin: Java(TM) Platform SE 7 U45 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
  317. CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  318. CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
  319. CHR - plugin: RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
  320. CHR - plugin: RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
  321. CHR - plugin: RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
  322. CHR - plugin: RealDownloader Plugin (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
  323. CHR - plugin: Unity Player (Enabled) = C:\Users\Jesse\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
  324. CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll
  325. CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll
  326. CHR - plugin: RealPlayer Download Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll
  327. CHR - Extension: Google Drive = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  328. CHR - Extension: YouTube Center = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcegdpionpopahcglnfiiioapcclamdj\2.1.0_0\
  329. CHR - Extension: Session Buddy = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko\3.2.7_0\
  330. CHR - Extension: Free Rider 3 = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\efgciaombdjbpmepfcndmfidlklafhcc\3.83_0\
  331. CHR - Extension: YouTube Center = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gabnjlibfmlilpljjkkbkebfaopgpjmk\1.0.1_0\
  332. CHR - Extension: Facebook\u2122 Chat Privacy = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfpgaanechfneiboempkfjghninbibjn\0.0.15_0\
  333. CHR - Extension: The Camelizer - Amazon Price Tracker = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghnomdcacenbmilgjigehppbamfndblo\2.4.2_0\
  334. CHR - Extension: AdBlock = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.18_0\
  335. CHR - Extension: LastPass: Free Password Manager = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd\3.1.1_0\
  336. CHR - Extension: Windows Media Player Extension for HTML5 = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0\
  337. CHR - Extension: Zinc Save = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilhdgckadlnbjppaaeinaekjcoanhbce\0.1.3_0\
  338. CHR - Extension: Reddit Enhancement Suite = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb\4.3.1.2_0\
  339. CHR - Extension: The Great Suspender = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg\4.74_0\
  340. CHR - Extension: Spelunky HTML5 = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhagnkphcmpkmabhocgimoncfaihkpof\2_0\
  341. CHR - Extension: Google Wallet = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  342. CHR - Extension: Recently Closed Tabs = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\opefiliglgllmponlmoajkfbcaigocfc\1.3.0.2_0\
  343. CHR - Extension: Click&Clean App = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.5_0\
  344. CHR - Extension: Evernote Web Clipper = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\6.1_0\
  345. CHR - Extension: Canvas Rider = C:\Users\Jesse\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk\0.71_0\
  346.  
  347. O1 HOSTS File: ([2014/03/07 14:58:23 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  348. O1 - Hosts: 127.0.0.1 localhost
  349. O2:[b]64bit:[/b] - BHO: (UTubeNoAds) - {1B734709-D7D9-AB6E-A41A-01D1C9472391} - C:\ProgramData\UTubeNoAds\FAP8wPB.x64.dll File not found
  350. O2:[b]64bit:[/b] - BHO: (no name) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - No CLSID value found.
  351. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  352. O2:[b]64bit:[/b] - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
  353. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
  354. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  355. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  356. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  357. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  358. O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  359. O3 - HKLM\..\Toolbar: (no name) - {b278d9f8-0fa9-465e-9938-0c392605d8e3} - No CLSID value found.
  360. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  361. O3 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
  362. O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.)
  363. O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc.)
  364. O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
  365. O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
  366. O4:[b]64bit:[/b] - HKLM..\Run: [ForteConfig] C:\Program Files\CONEXANT\ForteConfig\fmapp.exe ()
  367. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  368. O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
  369. O4:[b]64bit:[/b] - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
  370. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  371. O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
  372. O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.)
  373. O4:[b]64bit:[/b] - HKLM..\Run: [SynLenovoGestureMgr] C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Synaptics)
  374. O4:[b]64bit:[/b] - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
  375. O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  376. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  377. O4 - HKLM..\Run: [CAPOSD] C:\Program Files (x86)\Lenovo\Lenovo CAPOSD\CAPOSD.exe (LENOVO)
  378. O4 - HKLM..\Run: [Corsair Headset Software] C:\Program Files (x86)\Corsair\Corsair Headset Software\HeadsetControlPanel.exe (Corsair Components Inc)
  379. O4 - HKLM..\Run: [Intelligent Touchpad] C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe ()
  380. O4 - HKLM..\Run: [Lenovo Registration] C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe (Lenovo, Inc.)
  381. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  382. O4 - HKLM..\Run: [YouCam Mirage] c:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink)
  383. O4 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001..\Run: [f.lux] C:\Users\Jesse\AppData\Local\FluxSoftware\Flux\flux.exe (Flux Software LLC)
  384. O4 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001..\Run: [Skitch] C:\Program Files (x86)\Evernote\Skitch\Skitch.exe (Evernote)
  385. O4 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001..\Run: [WizMouse] C:\Program Files (x86)\WizMouse\WizMouse.exe ()
  386. O4 - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  387. O4 - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  388. O4 - Startup: C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk = C:\Users\Jesse\AppData\Local\Apps\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
  389. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
  390. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  391. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  392. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  393. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  394. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  395. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  396. O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  397. O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  398. O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  399. O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  400. O7 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  401. O7 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  402. O7 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  403. O7 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\SearchExtensions: InternetExtensionName = Google Search
  404. O7 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\SearchExtensions: InternetExtensionAction = http://www.google.com/search?q=%w
  405. O7 - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  406. O8:[b]64bit:[/b] - Extra context menu item: Clip Image - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
  407. O8:[b]64bit:[/b] - Extra context menu item: Clip selection - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
  408. O8:[b]64bit:[/b] - Extra context menu item: Clip this page - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
  409. O8:[b]64bit:[/b] - Extra context menu item: Clip URL - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
  410. O8:[b]64bit:[/b] - Extra context menu item: New Note - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\NewNote.html ()
  411. O8 - Extra context menu item: Clip Image - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
  412. O8 - Extra context menu item: Clip selection - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
  413. O8 - Extra context menu item: Clip this page - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
  414. O8 - Extra context menu item: Clip URL - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
  415. O8 - Extra context menu item: New Note - C:\Users\Jesse\AppData\Local\Apps\Evernote\\EvernoteIERes\NewNote.html ()
  416. O9:[b]64bit:[/b] - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - Reg Error: Key error. File not found
  417. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  418. O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  419. O13 - gopher Prefix: missing
  420. O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  421. O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  422. O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
  423. O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
  424. O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  425. O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  426. O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
  427. O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
  428. O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
  429. O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
  430. O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
  431. O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
  432. O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
  433. O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
  434. O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
  435. O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
  436. O15 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  437. O15 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  438. O15 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..Trusted Domains: soe.com ([]* in Trusted sites)
  439. O15 - HKU\S-1-5-21-474631609-1521078636-1054246077-1001\..Trusted Domains: sony.com ([]* in Trusted sites)
  440. O15 - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..Trusted Domains: clonewarsadventures.com ([]* in )
  441. O15 - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..Trusted Domains: freerealms.com ([]* in )
  442. O15 - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..Trusted Domains: soe.com ([]* in )
  443. O15 - HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\..Trusted Domains: sony.com ([]* in )
  444. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Reg Error: Key error.)
  445. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Java Plug-in 1.7.0_45)
  446. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.75.75.75 75.75.76.76
  447. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1F7F7D31-A85F-4C33-A15F-3CE95C3A7C1C}: DhcpNameServer = 8.8.8.8 8.8.4.4
  448. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7172CB2D-B7D9-427E-A89B-A36AF35A6014}: DhcpNameServer = 75.75.75.75 75.75.76.76
  449. O18:[b]64bit:[/b] - Protocol\Handler\linkscanner - No CLSID value found
  450. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  451. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  452. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  453. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  454. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  455. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  456. O18 - Protocol\Handler\linkscanner - No CLSID value found
  457. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  458. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  459. O20 - AppInit_DLLs: (c:\Windows\SysWOW64\nvinit.dll) - c:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  460. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  461. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  462. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  463. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  464. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  465. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  466. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  467. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  468. O32 - HKLM CDRom: AutoRun - 1
  469. O34 - HKLM BootExecute: (autocheck autochk *)
  470. O34 - HKLM BootExecute: (/sync /restart)
  471. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  472. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  473. O35 - HKLM\..comfile [open] -- "%1" %*
  474. O35 - HKLM\..exefile [open] -- "%1" %*
  475. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  476. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  477. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  478. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  479. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  480. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  481. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  482.  
  483.  
  484. CREATERESTOREPOINT
  485. Restore point Set: OTL Restore Point
  486.  
  487. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  488.  
  489. [2014/03/07 16:41:14 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jesse\Desktop\OTL.exe
  490. [2014/03/07 15:39:22 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
  491. [2014/03/07 14:47:55 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
  492. [2014/03/07 14:47:55 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
  493. [2014/03/07 14:47:55 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
  494. [2014/03/07 14:47:02 | 000,000,000 | ---D | C] -- C:\Qoobox
  495. [2014/03/07 14:46:38 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
  496. [2014/02/26 17:16:01 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\Sublime Text 3
  497. [2014/02/26 17:16:01 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\Sublime Text 3
  498. [2014/02/26 17:15:48 | 000,000,000 | ---D | C] -- C:\Program Files\Sublime Text 3
  499. [2014/02/26 14:31:31 | 000,000,000 | ---D | C] -- C:\Config.Msi
  500. [2014/02/25 16:20:34 | 000,000,000 | ---D | C] -- C:\Windows\Migration
  501. [2014/02/24 17:52:45 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Aptana Rubles
  502. [2014/02/24 17:51:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aptana
  503. [2014/02/24 14:53:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  504. [2014/02/19 10:24:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
  505. [2014/02/19 10:24:06 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\NV
  506. [2014/02/19 10:24:06 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\NV
  507. [2014/02/19 10:18:50 | 031,432,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
  508. [2014/02/19 10:18:50 | 025,256,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
  509. [2014/02/19 10:18:50 | 023,683,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
  510. [2014/02/19 10:18:50 | 018,257,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
  511. [2014/02/19 10:18:50 | 017,715,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
  512. [2014/02/19 10:18:50 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
  513. [2014/02/19 10:18:50 | 015,740,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
  514. [2014/02/19 10:18:50 | 011,636,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
  515. [2014/02/19 10:18:50 | 011,589,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
  516. [2014/02/19 10:18:50 | 009,728,064 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
  517. [2014/02/19 10:18:50 | 009,690,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
  518. [2014/02/19 10:18:50 | 003,142,432 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
  519. [2014/02/19 10:18:50 | 002,956,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
  520. [2014/02/19 10:18:50 | 002,782,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
  521. [2014/02/19 10:18:50 | 002,410,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
  522. [2014/02/19 10:18:50 | 001,885,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6433489.dll
  523. [2014/02/19 10:18:50 | 001,515,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6433489.dll
  524. [2014/02/19 10:18:50 | 000,892,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
  525. [2014/02/19 10:18:50 | 000,875,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
  526. [2014/02/19 10:18:50 | 000,863,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
  527. [2014/02/19 10:18:50 | 000,844,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
  528. [2014/02/19 10:18:50 | 000,353,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
  529. [2014/02/19 10:18:50 | 000,305,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
  530. [2014/02/19 10:18:50 | 000,032,544 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
  531. [2014/02/18 15:21:08 | 000,000,000 | ---D | C] -- C:\Users\Jesse\.gradle
  532. [2014/02/18 08:55:36 | 000,000,000 | ---D | C] -- C:\Users\Jesse\.idlerc
  533. [2014/02/18 08:55:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7
  534. [2014/02/13 22:15:28 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\Packages
  535. [2014/02/13 14:20:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
  536. [2014/02/12 23:58:09 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\steamvr
  537. [2014/02/12 23:37:19 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\dvdcss
  538. [2014/02/12 21:38:59 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
  539. [2014/02/12 21:38:58 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
  540. [2014/02/12 21:38:38 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
  541. [2014/02/12 21:38:37 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
  542. [2014/02/12 21:38:37 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
  543. [2014/02/12 21:38:36 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
  544. [2014/02/12 21:38:36 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
  545. [2014/02/12 21:38:34 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
  546. [2014/02/12 21:38:33 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
  547. [2014/02/12 21:38:33 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
  548. [2014/02/12 21:38:33 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
  549. [2014/02/12 21:38:33 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
  550. [2014/02/12 21:38:33 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
  551. [2014/02/12 21:38:33 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
  552. [2014/02/12 21:38:31 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
  553. [2014/02/12 21:38:31 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
  554. [2014/02/12 21:38:30 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
  555. [2014/02/12 21:38:30 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
  556. [2014/02/12 21:38:30 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
  557. [2014/02/12 21:38:15 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
  558. [2014/02/12 21:38:14 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
  559. [2014/02/09 09:25:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitFilm 2 Express
  560. [2014/02/09 09:25:04 | 000,000,000 | ---D | C] -- C:\Program Files\FXhome
  561. [2014/02/06 22:13:19 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Documents\Rainmeter
  562. [2014/02/06 19:45:15 | 000,000,000 | ---D | C] -- C:\ProgramData\SetApp
  563. [2014/02/06 19:44:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GS Supporter
  564. [2014/02/06 19:44:10 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
  565. [2014/02/05 22:02:24 | 000,000,000 | -HSD | C] -- C:\Users\Jesse\AppData\Roaming\Common
  566. [2014/02/05 22:01:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Binary Fortress Software
  567. [2014/02/05 22:01:04 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Documents\DisplayFusion Backups
  568. [2014/02/05 21:58:12 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
  569. [2014/02/05 21:58:10 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\FluxSoftware
  570. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  571. [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  572.  
  573. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  574.  
  575. [2014/03/07 16:41:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jesse\Desktop\OTL.exe
  576. [2014/03/07 16:31:00 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  577. [2014/03/07 16:15:00 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-474631609-1521078636-1054246077-1001UA.job
  578. [2014/03/07 15:45:51 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  579. [2014/03/07 15:45:51 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  580. [2014/03/07 15:44:21 | 000,911,078 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  581. [2014/03/07 15:44:21 | 000,752,550 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  582. [2014/03/07 15:44:21 | 000,158,204 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  583. [2014/03/07 15:38:13 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  584. [2014/03/07 15:37:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  585. [2014/03/07 14:58:23 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
  586. [2014/03/07 10:15:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-474631609-1521078636-1054246077-1001Core.job
  587. [2014/03/03 17:04:54 | 000,000,600 | ---- | M] () -- C:\Users\Jesse\AppData\Local\PUTTY.RND
  588. [2014/02/26 14:30:36 | 000,903,692 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  589. [2014/02/13 22:15:11 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol
  590. [2014/02/13 14:29:16 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
  591. [2014/02/13 14:29:06 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
  592. [2014/02/12 21:46:56 | 002,601,752 | ---- | M] () -- C:\Windows\SysWow64\pbsvc_moh.exe
  593. [2014/02/09 21:58:20 | 000,290,184 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
  594. [2014/02/08 15:53:13 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
  595. [2014/02/08 13:34:51 | 031,432,480 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
  596. [2014/02/08 13:34:51 | 025,256,224 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
  597. [2014/02/08 13:34:51 | 023,683,360 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
  598. [2014/02/08 13:34:51 | 018,257,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
  599. [2014/02/08 13:34:51 | 017,715,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
  600. [2014/02/08 13:34:51 | 017,560,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
  601. [2014/02/08 13:34:51 | 015,740,232 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
  602. [2014/02/08 13:34:51 | 014,669,032 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
  603. [2014/02/08 13:34:51 | 011,636,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
  604. [2014/02/08 13:34:51 | 011,589,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
  605. [2014/02/08 13:34:51 | 009,728,064 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
  606. [2014/02/08 13:34:51 | 009,690,424 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
  607. [2014/02/08 13:34:51 | 003,142,432 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
  608. [2014/02/08 13:34:51 | 003,090,184 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
  609. [2014/02/08 13:34:51 | 002,956,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
  610. [2014/02/08 13:34:51 | 002,782,496 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
  611. [2014/02/08 13:34:51 | 002,713,728 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
  612. [2014/02/08 13:34:51 | 002,410,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
  613. [2014/02/08 13:34:51 | 001,885,472 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6433489.dll
  614. [2014/02/08 13:34:51 | 001,515,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6433489.dll
  615. [2014/02/08 13:34:51 | 000,947,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
  616. [2014/02/08 13:34:51 | 000,892,192 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
  617. [2014/02/08 13:34:51 | 000,875,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
  618. [2014/02/08 13:34:51 | 000,863,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
  619. [2014/02/08 13:34:51 | 000,844,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
  620. [2014/02/08 13:34:51 | 000,832,424 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
  621. [2014/02/08 13:34:51 | 000,353,504 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
  622. [2014/02/08 13:34:51 | 000,305,600 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
  623. [2014/02/08 13:34:51 | 000,174,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
  624. [2014/02/08 13:34:51 | 000,148,528 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
  625. [2014/02/08 13:34:51 | 000,032,544 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
  626. [2014/02/08 13:34:51 | 000,024,544 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
  627. [2014/02/08 12:42:36 | 006,712,608 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
  628. [2014/02/08 12:42:36 | 003,498,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
  629. [2014/02/08 12:42:32 | 002,559,776 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
  630. [2014/02/08 12:42:32 | 001,075,488 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll
  631. [2014/02/08 12:42:32 | 000,607,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\oemdspif.dll
  632. [2014/02/08 12:42:32 | 000,386,336 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
  633. [2014/02/08 12:42:32 | 000,067,072 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll
  634. [2014/02/08 12:42:32 | 000,063,776 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
  635. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  636. [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  637.  
  638. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  639.  
  640. [2014/03/07 14:47:55 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
  641. [2014/03/07 14:47:55 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
  642. [2014/03/07 14:47:55 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
  643. [2014/03/07 14:47:55 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
  644. [2014/03/07 14:47:55 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
  645. [2014/02/26 17:15:49 | 000,001,049 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text 3.lnk
  646. [2014/02/13 22:15:11 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  647. [2014/02/06 22:13:16 | 000,001,869 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
  648. [2014/02/02 10:44:15 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  649. [2014/02/02 10:44:07 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  650. [2014/01/21 22:23:48 | 000,017,408 | ---- | C] () -- C:\Users\Jesse\AppData\Local\WebpageIcons.db
  651. [2014/01/06 21:27:37 | 000,000,000 | ---- | C] () -- C:\Users\Jesse\.drjava
  652. [2013/10/31 13:27:48 | 000,012,005 | ---- | C] () -- C:\Users\Jesse\AppData\Roaming\alsoft.ini
  653. [2013/09/30 16:12:49 | 000,000,053 | ---- | C] () -- C:\Users\Jesse\.hgrc
  654. [2013/09/30 15:49:27 | 000,000,057 | ---- | C] () -- C:\Users\Jesse\.gitconfig
  655. [2013/09/25 14:23:42 | 000,000,600 | ---- | C] () -- C:\Users\Jesse\AppData\Local\PUTTY.RND
  656. [2013/09/02 09:41:51 | 000,005,650 | ---- | C] () -- C:\Users\Jesse\AppData\Local\recently-used.xbel
  657. [2013/08/28 18:05:56 | 000,000,108 | ---- | C] () -- C:\Windows\VSWizard.ini
  658. [2013/08/25 23:43:13 | 002,601,752 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_moh.exe
  659. [2013/07/20 14:51:14 | 000,018,526 | ---- | C] () -- C:\Users\Jesse\AppData\Roaming\UserTile.png
  660. [2013/07/19 19:50:14 | 000,013,381 | ---- | C] () -- C:\Users\Jesse\AppData\Local\WiDiSetupLog.20130719.205014.wdl
  661. [2013/07/09 08:54:31 | 000,007,600 | ---- | C] () -- C:\Users\Jesse\AppData\Local\Resmon.ResmonCfg
  662. [2013/05/07 16:20:26 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  663. [2013/05/07 16:20:24 | 000,103,936 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll
  664. [2013/05/07 16:16:22 | 019,587,072 | ---- | C] () -- C:\Windows\SysWow64\igdfcl32.dll
  665. [2013/03/20 14:16:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\dlumdfb9.dll
  666. [2013/03/20 14:16:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\dlumdfb11.dll
  667. [2013/03/20 14:16:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\dlumdfb10.dll
  668. [2013/03/20 14:16:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\dlumd9.dll
  669. [2013/03/20 14:16:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\dlumd11.dll
  670. [2013/03/20 14:16:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\dlumd10.dll
  671. [2013/03/01 22:40:08 | 000,037,854 | ---- | C] () -- C:\Users\Jesse\AppData\Roaming\Comma Separated Values (Windows).ADR
  672. [2013/01/27 13:23:33 | 000,000,134 | ---- | C] () -- C:\Users\Jesse\AppData\Roaming\AbsoluteReminder.xml
  673. [2013/01/24 23:18:17 | 000,005,632 | ---- | C] () -- C:\Users\Jesse\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  674. [2013/01/16 13:59:17 | 000,703,104 | ---- | C] () -- C:\Users\Jesse\AppData\Roaming\technic-launcher.jar.bak
  675. [2012/10/10 02:22:32 | 000,598,780 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin
  676. [2012/10/10 02:22:16 | 000,755,048 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
  677. [2012/08/26 17:51:07 | 000,000,000 | ---- | C] () -- C:\Windows\firstboot.dat
  678. [2012/07/26 19:14:45 | 001,500,512 | ---- | C] () -- C:\Windows\SysWow64\Apblend.dll
  679. [2012/07/26 19:14:45 | 001,171,456 | ---- | C] () -- C:\Windows\SysWow64\PicNotify.dll
  680. [2012/07/26 19:14:22 | 001,044,480 | ---- | C] () -- C:\Windows\SysWow64\3DImageRenderer.dll
  681. [2012/07/26 19:12:13 | 000,903,692 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  682. [2012/03/22 15:03:54 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\drivers\ProtInstall.exe
  683. [2012/03/11 21:00:49 | 000,735,796 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin
  684. [2012/03/11 21:00:43 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin
  685.  
  686. [color=#E56717]========== ZeroAccess Check ==========[/color]
  687.  
  688. [2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  689.  
  690. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  691.  
  692. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  693.  
  694. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  695.  
  696. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  697.  
  698. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  699. "" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 21:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
  700. "ThreadingModel" = Apartment
  701.  
  702. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  703. "" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 20:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  704. "ThreadingModel" = Apartment
  705.  
  706. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  707. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  708. "ThreadingModel" = Free
  709.  
  710. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  711. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  712. "ThreadingModel" = Free
  713.  
  714. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  715. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  716. "ThreadingModel" = Both
  717.  
  718. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  719.  
  720. [color=#E56717]========== LOP Check ==========[/color]
  721.  
  722. [2013/01/31 15:09:27 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
  723. [2013/01/31 15:09:27 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
  724. [2014/02/28 20:06:03 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\.minecraft
  725. [2013/11/27 12:17:13 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Actual Tools
  726. [2013/12/20 18:30:42 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Audacity
  727. [2013/11/30 22:28:19 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\AVAST Software
  728. [2013/01/11 21:24:14 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\AVG
  729. [2013/02/10 20:27:24 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\BANDISOFT
  730. [2013/12/25 12:08:36 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Bioshock
  731. [2013/11/18 20:20:05 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Bitcoin
  732. [2013/01/18 18:09:36 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Blender Foundation
  733. [2012/10/17 18:42:03 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\CoffeeCup Software
  734. [2014/02/05 22:02:24 | 000,000,000 | -HSD | M] -- C:\Users\Jesse\AppData\Roaming\Common
  735. [2013/04/22 14:32:28 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\DAEMON Tools Ultra
  736. [2014/01/01 21:47:58 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Dexpot
  737. [2013/09/29 20:24:42 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Dropbox
  738. [2013/11/27 12:21:54 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Dual Monitor
  739. [2014/01/07 13:58:00 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\FEZ
  740. [2014/03/07 11:34:59 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\FileZilla
  741. [2013/04/24 14:09:25 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\FreeScreenToVideo
  742. [2014/02/16 17:06:11 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\ftblauncher
  743. [2013/05/01 14:14:25 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\GameSalad
  744. [2014/03/07 11:34:55 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\GitHub
  745. [2012/08/26 17:53:56 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Leadertech
  746. [2013/03/07 17:06:26 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\LibreOffice
  747. [2013/02/17 11:30:37 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\logs
  748. [2013/03/28 17:26:08 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\LogSys
  749. [2014/03/02 21:51:29 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\MediaMonkey
  750. [2013/11/23 22:15:33 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\MotioninJoy
  751. [2013/10/29 08:08:56 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Mumble
  752. [2013/11/16 11:23:08 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Need for Speed World
  753. [2013/07/19 19:39:07 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Notepad++
  754. [2013/11/08 21:11:55 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\OBS
  755. [2013/03/02 09:52:50 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\ooVoo Details
  756. [2014/01/02 21:48:30 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\openvr
  757. [2013/08/05 03:00:29 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Origin
  758. [2013/01/21 13:47:27 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Participatory Culture Foundation
  759. [2013/07/20 14:51:13 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\PeerNetworking
  760. [2013/03/01 19:55:46 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Pegtop
  761. [2012/12/30 12:13:04 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Rainmeter
  762. [2012/08/25 18:39:11 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\SecondLife
  763. [2013/10/26 11:13:45 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\skyz
  764. [2013/10/16 20:13:41 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\SplitMediaLabs
  765. [2014/02/12 23:58:10 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\steamvr
  766. [2013/07/27 08:30:19 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Sublime Text 2
  767. [2014/02/26 17:16:01 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Sublime Text 3
  768. [2013/03/11 14:21:13 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Subversion
  769. [2013/11/23 12:11:15 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\SumatraPDF
  770. [2013/09/30 16:11:54 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\syntevo
  771. [2014/02/28 20:38:27 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TS3Client
  772. [2012/09/27 14:25:03 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TuneUp Software
  773. [2013/03/23 21:46:05 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TunkDesign
  774. [2012/12/27 21:19:51 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Ubisoft
  775. [2012/11/30 15:21:35 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Unity
  776. [2012/09/19 14:16:01 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\wargaming.net
  777. [2013/10/02 17:03:19 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Wings3D
  778. [2013/01/12 16:08:14 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Wondershare
  779. [2013/03/03 13:52:48 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\WorldPainter
  780.  
  781. [color=#E56717]========== Purity Check ==========[/color]
  782.  
  783.  
  784.  
  785. [color=#E56717]========== Custom Scans ==========[/color]
  786.  
  787. [color=#E56717]========== Base Services ==========[/color]
  788. SRV:[b]64bit:[/b] - [2009/07/13 20:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
  789. SRV:[b]64bit:[/b] - [2013/02/27 00:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
  790. SRV:[b]64bit:[/b] - [2009/07/13 20:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
  791. SRV:[b]64bit:[/b] - [2010/11/20 22:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
  792. SRV:[b]64bit:[/b] - [2010/11/20 22:24:00 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
  793. SRV:[b]64bit:[/b] - [2013/09/24 20:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
  794. SRV:[b]64bit:[/b] - [2009/07/13 20:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
  795. SRV - [2009/07/13 20:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
  796. SRV:[b]64bit:[/b] - [2012/07/04 17:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\browser.dll -- (Browser)
  797. SRV:[b]64bit:[/b] - [2013/07/09 00:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
  798. SRV - [2013/07/08 23:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
  799. SRV:[b]64bit:[/b] - [2010/11/20 22:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
  800. SRV:[b]64bit:[/b] - [2010/11/20 22:24:00 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
  801. SRV - [2010/11/20 22:24:09 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
  802. SRV:[b]64bit:[/b] - [2011/10/10 02:51:58 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
  803. SRV:[b]64bit:[/b] - [2009/07/13 20:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
  804. SRV:[b]64bit:[/b] - [2009/07/13 20:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
  805. SRV - [2009/07/13 20:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
  806. SRV:[b]64bit:[/b] - [2009/07/13 20:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
  807. SRV:[b]64bit:[/b] - [2010/11/20 22:23:48 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
  808. No service found with a name of MsMpSvc
  809. No service found with a name of NisSrv
  810. SRV:[b]64bit:[/b] - [2009/07/13 20:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\swprv.dll -- (swprv)
  811. SRV:[b]64bit:[/b] - [2009/07/13 20:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
  812. SRV:[b]64bit:[/b] - [2009/07/13 20:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
  813. SRV:[b]64bit:[/b] - [2009/07/13 20:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
  814. SRV - [2009/07/13 20:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
  815. SRV:[b]64bit:[/b] - [2012/10/03 12:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
  816. SRV:[b]64bit:[/b] - [2009/07/13 20:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
  817. SRV:[b]64bit:[/b] - [2011/10/10 02:54:35 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
  818. SRV:[b]64bit:[/b] - [2012/02/11 01:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
  819. SRV:[b]64bit:[/b] - [2013/09/24 20:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
  820. No service found with a name of EMDMgmt
  821. SRV:[b]64bit:[/b] - [2009/07/13 20:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
  822. SRV:[b]64bit:[/b] - [2010/11/20 22:24:17 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
  823. SRV:[b]64bit:[/b] - [2010/11/20 22:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
  824. SRV:[b]64bit:[/b] - [2010/11/20 22:24:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
  825. SRV:[b]64bit:[/b] - [2013/09/24 20:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
  826. SRV:[b]64bit:[/b] - [2009/07/13 20:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
  827. SRV:[b]64bit:[/b] - [2010/11/20 22:23:48 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
  828. SRV:[b]64bit:[/b] - [2010/11/20 22:23:55 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
  829. SRV - [2010/11/20 22:24:03 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
  830. No service found with a name of slsvc
  831. SRV:[b]64bit:[/b] - [2010/11/20 22:24:16 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
  832. SRV:[b]64bit:[/b] - [2010/11/20 22:24:32 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
  833. SRV - [2010/11/20 22:24:00 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
  834. SRV:[b]64bit:[/b] - [2009/07/13 20:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
  835. SRV:[b]64bit:[/b] - [2012/05/01 00:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
  836. SRV:[b]64bit:[/b] - [2010/11/20 22:23:55 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
  837. SRV:[b]64bit:[/b] - [2010/11/20 22:24:32 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
  838. SRV:[b]64bit:[/b] - [2010/11/20 22:24:32 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
  839. SRV:[b]64bit:[/b] - [2010/11/20 22:25:06 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
  840. SRV:[b]64bit:[/b] - [2013/05/27 00:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  841. SRV:[b]64bit:[/b] - [2010/11/20 22:23:55 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
  842. SRV:[b]64bit:[/b] - [2010/11/20 22:24:28 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
  843. SRV:[b]64bit:[/b] - [2010/11/20 22:24:48 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
  844. SRV:[b]64bit:[/b] - [2010/11/20 22:24:15 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
  845. SRV - [2010/11/20 22:24:28 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
  846. SRV:[b]64bit:[/b] - [2009/07/13 20:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
  847. SRV:[b]64bit:[/b] - [2012/06/02 17:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
  848. SRV:[b]64bit:[/b] - [2010/11/20 22:24:09 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
  849. SRV:[b]64bit:[/b] - [2009/07/13 20:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
  850. SRV:[b]64bit:[/b] - [2010/11/20 22:24:32 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
  851.  
  852. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  853. [2013/04/22 15:55:34 | 005,156,352 | ---- | M] (Geza Kovacs) -- C:\unetbtin.exe
  854.  
  855. [color=#A23BEC]< c:\program files (x86)\Google\Desktop >[/color]
  856. [2009/07/14 00:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
  857. [2009/07/14 00:08:49 | 000,032,550 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  858. [2012/07/26 19:17:55 | 000,000,908 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  859. [2012/07/26 19:17:56 | 000,000,912 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  860. [2014/01/20 18:53:31 | 000,000,856 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-474631609-1521078636-1054246077-1001Core.job
  861. [2014/01/20 18:53:36 | 000,000,908 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-474631609-1521078636-1054246077-1001UA.job
  862.  
  863. [color=#A23BEC]< c:\program files\Google\Desktop >[/color]
  864.  
  865. [color=#A23BEC]< dir "%systemdrive%\*" /S /A:L /C >[/color]
  866. Volume in drive C is Local Disk
  867. Volume Serial Number is 049C-BEFC
  868. Directory of C:\
  869. 07/14/2009 12:08 AM <JUNCTION> Documents and Settings [C:\Users]
  870. 0 File(s) 0 bytes
  871. Directory of C:\ProgramData
  872. 07/14/2009 12:08 AM <JUNCTION> Application Data [C:\ProgramData]
  873. 07/14/2009 12:08 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
  874. 07/14/2009 12:08 AM <JUNCTION> Documents [C:\Users\Public\Documents]
  875. 07/14/2009 12:08 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
  876. 07/14/2009 12:08 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
  877. 07/14/2009 12:08 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
  878. 0 File(s) 0 bytes
  879. Directory of C:\Users
  880. 07/14/2009 12:08 AM <SYMLINKD> All Users [C:\ProgramData]
  881. 07/14/2009 12:08 AM <JUNCTION> Default User [C:\Users\Default]
  882. 0 File(s) 0 bytes
  883. Directory of C:\Users\All Users
  884. 07/14/2009 12:08 AM <JUNCTION> Application Data [C:\ProgramData]
  885. 07/14/2009 12:08 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
  886. 07/14/2009 12:08 AM <JUNCTION> Documents [C:\Users\Public\Documents]
  887. 07/14/2009 12:08 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
  888. 07/14/2009 12:08 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
  889. 07/14/2009 12:08 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
  890. 0 File(s) 0 bytes
  891. Directory of C:\Users\Default
  892. 07/14/2009 12:08 AM <JUNCTION> Application Data [C:\Users\Default\AppData\Roaming]
  893. 07/14/2009 12:08 AM <JUNCTION> Local Settings [C:\Users\Default\AppData\Local]
  894. 07/14/2009 12:08 AM <JUNCTION> My Documents [C:\Users\Default\Documents]
  895. 07/14/2009 12:08 AM <JUNCTION> NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
  896. 07/14/2009 12:08 AM <JUNCTION> PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
  897. 07/14/2009 12:08 AM <JUNCTION> Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
  898. 07/14/2009 12:08 AM <JUNCTION> SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
  899. 07/14/2009 12:08 AM <JUNCTION> Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
  900. 07/14/2009 12:08 AM <JUNCTION> Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
  901. 0 File(s) 0 bytes
  902. Directory of C:\Users\Default\AppData\Local
  903. 07/14/2009 12:08 AM <JUNCTION> Application Data [C:\Users\Default\AppData\Local]
  904. 07/14/2009 12:08 AM <JUNCTION> History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
  905. 07/14/2009 12:08 AM <JUNCTION> Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
  906. 0 File(s) 0 bytes
  907. Directory of C:\Users\Default\Documents
  908. 07/14/2009 12:08 AM <JUNCTION> My Music [C:\Users\Default\Music]
  909. 07/14/2009 12:08 AM <JUNCTION> My Pictures [C:\Users\Default\Pictures]
  910. 07/14/2009 12:08 AM <JUNCTION> My Videos [C:\Users\Default\Videos]
  911. 0 File(s) 0 bytes
  912. Directory of C:\Users\Jesse
  913. 08/26/2012 05:49 PM <JUNCTION> Application Data [C:\Users\Jesse\AppData\Roaming]
  914. 08/26/2012 05:49 PM <JUNCTION> Cookies [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Cookies]
  915. 08/26/2012 05:49 PM <JUNCTION> Local Settings [C:\Users\Jesse\AppData\Local]
  916. 08/26/2012 05:49 PM <JUNCTION> My Documents [C:\Users\Jesse\Documents]
  917. 08/26/2012 05:49 PM <JUNCTION> NetHood [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
  918. 08/26/2012 05:49 PM <JUNCTION> PrintHood [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
  919. 08/26/2012 05:49 PM <JUNCTION> Recent [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Recent]
  920. 08/26/2012 05:49 PM <JUNCTION> SendTo [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\SendTo]
  921. 08/26/2012 05:49 PM <JUNCTION> Start Menu [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu]
  922. 08/26/2012 05:49 PM <JUNCTION> Templates [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Templates]
  923. 0 File(s) 0 bytes
  924. Directory of C:\Users\Jesse\AppData\Local
  925. 08/26/2012 05:49 PM <JUNCTION> Application Data [C:\Users\Jesse\AppData\Local]
  926. 08/26/2012 05:49 PM <JUNCTION> History [C:\Users\Jesse\AppData\Local\Microsoft\Windows\History]
  927. 08/26/2012 05:49 PM <JUNCTION> Temporary Internet Files [C:\Users\Jesse\AppData\Local\Microsoft\Windows\Temporary Internet Files]
  928. 0 File(s) 0 bytes
  929. Directory of C:\Users\Jesse\AppData\LocalLow
  930. 12/11/2012 05:52 PM <JUNCTION> PlayReady [C:\ProgramData\Microsoft\PlayReady]
  931. 0 File(s) 0 bytes
  932. Directory of C:\Users\Jesse\Documents
  933. 08/26/2012 05:49 PM <JUNCTION> My Music [C:\Users\Jesse\Music]
  934. 08/26/2012 05:49 PM <JUNCTION> My Pictures [C:\Users\Jesse\Pictures]
  935. 08/26/2012 05:49 PM <JUNCTION> My Videos [C:\Users\Jesse\Videos]
  936. 0 File(s) 0 bytes
  937. Directory of C:\Users\MSSQL$SQLEXPRESS
  938. 11/03/2012 10:16 AM <JUNCTION> Application Data [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming]
  939. 11/03/2012 10:16 AM <JUNCTION> Cookies [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Cookies]
  940. 11/03/2012 10:16 AM <JUNCTION> Local Settings [C:\Users\MSSQL$SQLEXPRESS\AppData\Local]
  941. 11/03/2012 10:16 AM <JUNCTION> My Documents [C:\Users\MSSQL$SQLEXPRESS\Documents]
  942. 11/03/2012 10:16 AM <JUNCTION> NetHood [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
  943. 11/03/2012 10:16 AM <JUNCTION> PrintHood [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
  944. 11/03/2012 10:16 AM <JUNCTION> Recent [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Recent]
  945. 11/03/2012 10:16 AM <JUNCTION> SendTo [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\SendTo]
  946. 11/03/2012 10:16 AM <JUNCTION> Start Menu [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Start Menu]
  947. 11/03/2012 10:16 AM <JUNCTION> Templates [C:\Users\MSSQL$SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Templates]
  948. 0 File(s) 0 bytes
  949. Directory of C:\Users\MSSQL$SQLEXPRESS\AppData\Local
  950. 11/03/2012 10:16 AM <JUNCTION> Application Data [C:\Users\MSSQL$SQLEXPRESS\AppData\Local]
  951. 11/03/2012 10:16 AM <JUNCTION> History [C:\Users\MSSQL$SQLEXPRESS\AppData\Local\Microsoft\Windows\History]
  952. 11/03/2012 10:16 AM <JUNCTION> Temporary Internet Files [C:\Users\MSSQL$SQLEXPRESS\AppData\Local\Microsoft\Windows\Temporary Internet Files]
  953. 0 File(s) 0 bytes
  954. Directory of C:\Users\MSSQL$SQLEXPRESS\Documents
  955. 11/03/2012 10:16 AM <JUNCTION> My Music [C:\Users\MSSQL$SQLEXPRESS\Music]
  956. 11/03/2012 10:16 AM <JUNCTION> My Pictures [C:\Users\MSSQL$SQLEXPRESS\Pictures]
  957. 11/03/2012 10:16 AM <JUNCTION> My Videos [C:\Users\MSSQL$SQLEXPRESS\Videos]
  958. 0 File(s) 0 bytes
  959. Directory of C:\Users\Public\Documents
  960. 07/14/2009 12:08 AM <JUNCTION> My Music [C:\Users\Public\Music]
  961. 07/14/2009 12:08 AM <JUNCTION> My Pictures [C:\Users\Public\Pictures]
  962. 07/14/2009 12:08 AM <JUNCTION> My Videos [C:\Users\Public\Videos]
  963. 0 File(s) 0 bytes
  964. Total Files Listed:
  965. 0 File(s) 0 bytes
  966. 66 Dir(s) 143,453,282,304 bytes free
  967.  
  968. [color=#A23BEC]< MD5 for: RPCSS.DLL >[/color]
  969. [2010/11/20 22:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=5C627D1B1138676C0A7AB2C2C190D123 -- C:\Windows\erdnt\cache64\rpcss.dll
  970. [2010/11/20 22:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=5C627D1B1138676C0A7AB2C2C190D123 -- C:\Windows\SysNative\rpcss.dll
  971. [2010/11/20 22:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=5C627D1B1138676C0A7AB2C2C190D123 -- C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d\rpcss.dll
  972.  
  973. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!