API tools faq
paste
Advertisement
Guest User

FRST

a guest
Jan 29th, 2015
433
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 45.32 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-01-2015
  2. Ran by Joe (administrator) on JOE-PC on 29-01-2015 21:46:09
  3. Running from C:\Users\Joe\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBY0JJYM
  4. Loaded Profiles: Joe (Available profiles: UpdatusUser & Joe)
  5. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
  6. Internet Explorer Version 10 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
  16. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  17. (Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe
  18. (Microsoft Corporation) C:\Windows\System32\wlanext.exe
  19. (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
  20. (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  21. (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
  22. (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  23. (Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.6.0.32\NAV.exe
  24. (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.8.23\NST.exe
  25. (Symantec Corporation) C:\Program Files (x86)\PC Checkup\SymcPCCULaunchSvc.exe
  26. (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.10.26\ccSvcHst.exe
  27. () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
  28. (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
  29. () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
  30. (Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe
  31. (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  32. (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
  33. (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
  34. (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
  35. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
  36. (Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
  37. (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
  38. (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe
  39. (Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.8.23\NST.exe
  40. (Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.10.26\ccSvcHst.exe
  41. (Intel Corporation) C:\Windows\System32\igfxtray.exe
  42. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  43. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  44. (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
  45. (TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
  46. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  47. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
  48. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  49. (TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
  50. (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
  51. (TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
  52. (TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
  53. () C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
  54. (Jackpot Rewards) C:\Program Files (x86)\Shop To Win\ShopToWin.exe
  55. (Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\21.6.0.32\NAV.exe
  56. (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Utilities\KeNotify.exe
  57. (TOSHIBA) C:\Program Files (x86)\Toshiba\TOSHIBA Sleep Utility\TSleepSrv.exe
  58. (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
  59. (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
  60. (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
  61. (Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JamUI\Pulse.exe
  62. (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
  63. (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  64. (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
  65. () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
  66. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  67. (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe
  68. (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
  69. (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
  70. (TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\widimon\widimon.exe
  71. (Intel Corporation) C:\Windows\System32\igfxext.exe
  72. (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
  73. (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
  74. (TOSHIBA Corporation) C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\TMachInfo.exe
  75. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  76. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  77. (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_16_0_0_296_ActiveX.exe
  78. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  79. (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
  80. (Google Inc.) C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
  81. (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
  82.  
  83.  
  84. ==================== Registry (Whitelisted) ==================
  85.  
  86. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  87.  
  88. HKLM\...\Run: [] => [X]
  89. HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation)
  90. HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [296824 2010-09-25] (TOSHIBA Corporation)
  91. HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [973176 2010-12-15] (TOSHIBA Corporation)
  92. HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-26] (Realtek Semiconductor)
  93. HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor)
  94. HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-03] (Synaptics Incorporated)
  95. HKLM\...\Run: [ThpSrv] => C:\windows\system32\thpsrv /logon
  96. HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1519016 2011-01-28] (TOSHIBA Corporation)
  97. HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
  98. HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
  99. HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711576 2010-12-20] (TOSHIBA Corporation)
  100. HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
  101. HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2010-04-23] (TOSHIBA Corporation)
  102. HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation)
  103. HKLM-x32\...\Run: [SVPWUTIL] => C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [532480 2010-11-09] (TOSHIBA CORPORATION)
  104. HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)
  105. HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-16] (TOSHIBA CORPORATION)
  106. HKLM-x32\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252792 2010-06-04] (TOSHIBA)
  107. HKLM-x32\...\Run: [ToshibaAppPlace] => C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe [552960 2010-09-23] (Toshiba)
  108. HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Toshiba\Toshiba Online Backup\Activation\TOBuActivation.exe [3218792 2010-08-17] (Toshiba)
  109. HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1295736 2011-02-11] (TOSHIBA Corporation)
  110. HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
  111. HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [358336 2011-08-11] (Citrix Systems, Inc.)
  112. HKLM-x32\...\Run: [JunosPulse] => C:\Program Files (x86)\Common Files\Juniper Networks\JamUI\Pulse.exe [2128944 2014-04-09] (Juniper Networks, Inc.)
  113. HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2039192 2014-11-24] (APN)
  114. HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
  115. HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
  116. HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-11-24] (RealNetworks, Inc.)
  117. HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [560192 2014-10-29] ()
  118. Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
  119. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-07-20] (Google Inc.)
  120. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\...\Run: [DW6] => "C:\Program Files (x86)\The Weather Channel FW\Desktop\DesktopWeather.exe"
  121. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\...\Run: [DW7] => "C:\Program Files (x86)\The Weather Channel\The Weather Channel App\TWCApp.exe"
  122. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\...\Run: [Shop To Win] => C:\Program Files (x86)\Shop To Win\ShopToWin.exe [2231808 2012-07-05] (Jackpot Rewards)
  123. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\...\Policies\system: [LogonHoursAction] 2
  124. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
  125. AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [247144 2012-10-02] (NVIDIA Corporation)
  126. AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [202600 2012-10-02] (NVIDIA Corporation)
  127. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
  128. ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (McAfee, Inc.)
  129. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Online plug-in.lnk
  130. ShortcutTarget: Online plug-in.lnk -> C:\Windows\Installer\{E7C5763F-948D-453B-9138-4A8F552B3CE3}\pnaico.exe.20FBBF0A_A7E5_4BDE_9798_9811C3D135AC.exe ()
  131. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
  132. ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
  133. Startup: C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\361144EAB.lnk
  134. ShortcutTarget: 361144EAB.lnk -> C:\PROGRA~3\BAE441163.cpp (No File)
  135. Startup: C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
  136. ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
  137. GroupPolicyUsers\S-1-5-21-382555602-2160579598-2407463604-1000\User: Group Policy restriction detected <======= ATTENTION
  138. CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
  139.  
  140. ==================== Internet (Whitelisted) ====================
  141.  
  142. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  143.  
  144. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.unmc.edu/audience/students.html
  145. HKU\S-1-5-21-382555602-2160579598-2407463604-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.toshiba.com/
  146. URLSearchHook: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
  147. SearchScopes: HKLM -> DefaultScope {3A2F01C2-4A25-4D75-B4C8-D5BACD2D01C1} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
  148. SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  149. SearchScopes: HKLM -> {3A2F01C2-4A25-4D75-B4C8-D5BACD2D01C1} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
  150. SearchScopes: HKLM-x32 -> DefaultScope {A0B1253F-0B52-4530-9006-58BD999DC737} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
  151. SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  152. SearchScopes: HKLM-x32 -> {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=843&q={searchTerms}&s_it=adknowledgeaol-ie&s_qt=sb&tb_uuid=20130408103132437&tb_oid=08-04-2013
  153. &tb_mrud=08-04-2013
  154.  
  155. SearchScopes: HKLM-x32 -> {A0B1253F-0B52-4530-9006-58BD999DC737} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
  156. SearchScopes: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  157. SearchScopes: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> {33908916-6B34-4CAD-8AF6-29BE4E9A8ACC} URL = http://www.search.ask.com/web?tpid=ORJ&o=100000031&pf=V7&p2=^TV^YYYYYY^YY^US&gct=&itbv=12.10.3.24&apn_uid=F84F84EE-B39C-4CEE-B2DB-E62305441B19&apn_ptnrs=^TV&apn_dtid=^YYYYYY^YY^US&apn_dbr=ff_12.0&doi=2014-02-05&trgb=IE,FF&q={searchTerms}&psv=&pt=tb
  158. SearchScopes: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> {3A2F01C2-4A25-4D75-B4C8-D5BACD2D01C1} URL =
  159. SearchScopes: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=843&q={searchTerms}&s_it=adknowledgeaol-ie&s_qt=sb&tb_uuid=20130408103132437&tb_oid=08-04-2013
  160. &tb_mrud=08-04-2013
  161.  
  162. SearchScopes: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> {A0B1253F-0B52-4530-9006-58BD999DC737} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
  163. SearchScopes: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> {AD8BD7AA-0F58-4D2F-97F7-369CEEC0466F} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF_enUS443
  164. SearchScopes: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> {DA235131-CA83-46FD-960F-5CA970FF1E37} URL = http://www.mysearchresults.com/search?c=4205&t=20&q={searchTerms}
  165. BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
  166. BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
  167. BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  168. BHO: Norton Identity Protection -> {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} -> C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.7.8.23\coIEPlg.dll (Symantec Corporation)
  169. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
  170. BHO: Ask Shopping Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport_x64.dll (APN LLC.)
  171. BHO: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (TOSHIBA Corporation)
  172. BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
  173. BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
  174. BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
  175. BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton AntiVirus\Engine\21.6.0.32\IPS\IPSBHO.DLL (Symantec Corporation)
  176. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
  177. BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
  178. BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
  179. BHO-x32: Norton Identity Protection -> {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} -> C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll (Symantec Corporation)
  180. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
  181. BHO-x32: Ask Shopping Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll (APN LLC.)
  182. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
  183. BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (TOSHIBA Corporation)
  184. Toolbar: HKLM - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport_x64.dll (APN LLC.)
  185. Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  186. Toolbar: HKLM - Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.7.8.23\coIEPlg.dll (Symantec Corporation)
  187. Toolbar: HKLM-x32 - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll (APN LLC.)
  188. Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
  189. Toolbar: HKLM-x32 - Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.8.23\coIEPlg.dll (Symantec Corporation)
  190. Toolbar: HKU\S-1-5-21-382555602-2160579598-2407463604-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  191. DPF: HKLM {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://qtinstall.apple.com/qtactivex/qtplugin.cab
  192. DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} https://juniper.net/dana-cached/sc/JuniperSetupClient64.cab
  193. DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://secure.unmc.edu/dana-cached/sc/JuniperSetupClient.cab
  194. Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  195. Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  196. Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  197. Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  198. Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  199. Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  200. Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  201. Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  202. Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  203. Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  204. Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  205. Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  206. Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  207. Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  208. Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  209. Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  210. Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
  211. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
  212. Tcpip\..\Interfaces\{075BFD43-00E5-4017-94CC-F3AFF2B8C0FC}: [NameServer] 10.8.10.10,10.16.10.10
  213. Tcpip\..\Interfaces\{3A0262B7-1228-492E-8330-6BAE16D6E59D}: [NameServer] 10.8.10.10,10.16.10.10
  214. Tcpip\..\Interfaces\{A1D5F740-08A3-4B66-93E9-3F864416D565}: [NameServer] 10.8.10.10,10.16.10.10
  215.  
  216. FireFox:
  217. ========
  218. FF ProfilePath: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default
  219. FF DefaultSearchEngine: Ask Search
  220. FF SearchEngineOrder.1: Ask.com
  221. FF SelectedSearchEngine: Ask Search
  222. FF Homepage: hxxp://www.mysearchresults.com/?c=9001&t=03
  223. FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
  224. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  225. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
  226. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  227. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
  228. FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  229. FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  230. FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
  231. FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
  232. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  233. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
  234. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  235. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  236. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  237. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  238. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  239. FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  240. FF Plugin-x32: @real.com/nppl3260;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  241. FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.15 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
  242. FF Plugin-x32: @real.com/nprpplugin;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
  243. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  244. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  245. FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  246. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  247. FF user.js: detected! => C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\user.js
  248. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CCMSDK.dll (Citrix Systems, Inc.)
  249. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CgpCore.dll (Citrix Systems, Inc.)
  250. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\confmgr.dll (Citrix Systems, Inc.)
  251. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctxlogging.dll (Citrix Systems, Inc.)
  252. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctxmui.dll (Citrix Systems, Inc.)
  253. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\icafile.dll (Citrix Systems, Inc.)
  254. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\icalogon.dll (Citrix Systems, Inc.)
  255. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
  256. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npicaN.dll (Citrix Systems, Inc.)
  257. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
  258. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
  259. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
  260. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
  261. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
  262. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
  263. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
  264. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer Cloud)
  265. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\sslsdk_b.dll (Citrix Systems, Inc.)
  266. FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\TcpPServ.dll (Citrix Systems, Inc.)
  267. FF SearchPlugin: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\searchplugins\ask-search.xml
  268. FF SearchPlugin: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\searchplugins\askcom.xml
  269. FF SearchPlugin: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\searchplugins\babylon1.xml
  270. FF SearchPlugin: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\searchplugins\safesearch.xml
  271. FF SearchPlugin: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\searchplugins\search-here.xml
  272. FF SearchPlugin: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\searchplugins\search.xml
  273. FF Extension: Solid Savings - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\9518042e-7ad6-4dac-b377-056e28d00c8f@f1cc0a13-4df1-4d66-938f-088db8838882.com [2013-04-08]
  274. FF Extension: Search-Results Toolbar - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0} [2013-02-14]
  275. FF Extension: Yahoo! Toolbar - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014-11-02]
  276. FF Extension: Search-Results Toolbar - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\{f34c9277-6577-4dff-b2d7-7d58092f272f} [2013-01-12]
  277. FF Extension: Default Tab - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\addon@defaulttab.com.xpi [2013-04-08]
  278. FF Extension: Ask Toolbar - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\toolbar@ask.com.xpi [2014-04-10]
  279. FF Extension: Torntv - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\torntv@torntv.com.xpi [2013-01-12]
  280. FF Extension: Shop to Win 31 - C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\b0ethott.default\Extensions\{678881e1-5812-e8d4-c5b3-5902ec5dbf68}.xpi [2014-02-05]
  281. FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-06-09]
  282. FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-06-09]
  283. FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-06-09]
  284. FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
  285. FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-11-24]
  286. FF HKLM-x32\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.8.23\coFFPlgn
  287. FF Extension: Norton Identity Safe Toolbar - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.8.23\coFFPlgn [2015-01-29]
  288. FF HKLM-x32\...\Firefox\Extensions: [{338950EA-82DB-44C1-930D-0C28E023C9F0}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
  289. FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
  290.  
  291. Chrome:
  292. =======
  293. CHR HomePage: Default -> hxxp://www.google.com/
  294. CHR StartupUrls: Default -> "hxxp://www.google.com/"
  295. CHR Profile: C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default
  296. CHR Extension: (Ask Toolbar) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2014-07-31]
  297. CHR Extension: (Google Docs) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
  298. CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-07]
  299. CHR Extension: (Google Wallet) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]
  300. CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
  301. CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.8.23\Exts\Chrome.crx [2014-10-05]
  302. CHR HKLM-x32\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\Users\Joe\AppData\Local\APN\GoogleCRXs\apnorjtoolbar.crx [2013-02-08]
  303. CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
  304. CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.8.23\Exts\Chrome.crx [2014-10-05]
  305.  
  306. ==================== Services (Whitelisted) =================
  307.  
  308. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  309.  
  310. R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-10-30] (APN LLC.)
  311. S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
  312. S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
  313. R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\21.6.0.32\NAV.exe [262968 2014-09-21] (Symantec Corporation)
  314. R2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.8.23\NST.exe [130104 2014-09-20] (Symantec Corporation)
  315. R2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\PC Checkup\SymcPCCULaunchSvc.exe [132056 2013-01-23] (Symantec Corporation)
  316. R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.10.26\ccSvcHst.exe [126392 2011-02-03] (Symantec Corporation)
  317. R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-10-26] ()
  318. R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-11-24] (RealNetworks, Inc.)
  319. R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2014-10-30] ()
  320. R2 Thpsrv; C:\windows\system32\ThpSrv.exe [526848 2010-12-24] (TOSHIBA Corporation) [File not signed]
  321. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)
  322. S2 Winmgmt; C:\PROGRA~3\361144EAB.zot [X]
  323.  
  324. ==================== Drivers (Whitelisted) ====================
  325.  
  326. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  327.  
  328. R1 BHDrvx64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.6.0.32\Definitions\BASHDefs\20150106.001\BHDrvx64.sys [1622744 2015-01-06] (Symantec Corporation)
  329. R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1506000.020\ccSetx64.sys [162392 2014-02-20] (Symantec Corporation)
  330. R1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DE07080.017\ccSetx64.sys [162392 2013-09-27] (Symantec Corporation)
  331. R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-12-11] (Symantec Corporation)
  332. R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-12-11] (Symantec Corporation)
  333. R1 IDSVia64; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.6.0.32\Definitions\IPSDefs\20150129.001\IDSvia64.sys [668888 2015-01-13] (Symantec Corporation)
  334. R3 JNPRNA; C:\Windows\System32\DRIVERS\jnprna6.sys [522544 2014-01-20] (Juniper Networks)
  335. S4 jnprTdi_749_45013; C:\windows\system32\Drivers\jnprTdi_749_45013.sys [108344 2014-04-09] (Juniper Networks, Inc.)
  336. S3 jnprva; C:\Windows\System32\DRIVERS\jnprva.sys [30072 2014-01-20] (Juniper Networks, Inc.)
  337. R3 JnprVaMgr; C:\Windows\System32\DRIVERS\jnprvamgr.sys [45352 2013-03-22] (Juniper Networks, Inc.)
  338. R3 NAVENG; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.6.0.32\Definitions\VirusDefs\20150129.001\ENG64.SYS [129752 2015-01-29] (Symantec Corporation)
  339. R3 NAVEX15; C:\Program Files (x86)\Norton AntiVirus\NortonData\21.6.0.32\Definitions\VirusDefs\20150129.001\EX64.SYS [2137304 2015-01-29] (Symantec Corporation)
  340. R1 NEOFLTR_720_22807; C:\windows\system32\Drivers\NEOFLTR_720_22807.SYS [100728 2012-11-29] (Juniper Networks)
  341. R1 SRTSP; C:\Windows\system32\drivers\NAVx64\1506000.020\SRTSP64.SYS [876248 2014-08-25] (Symantec Corporation)
  342. R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1506000.020\SRTSPX64.SYS [37592 2014-08-25] (Symantec Corporation)
  343. R0 SymDS; C:\Windows\System32\drivers\NAVx64\1506000.020\SYMDS64.SYS [493656 2014-08-25] (Symantec Corporation)
  344. R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1506000.020\SYMEFA64.SYS [1148120 2014-08-25] (Symantec Corporation)
  345. R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-10-05] (Symantec Corporation)
  346. R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
  347. R1 SymNetS; C:\Windows\system32\drivers\NAVx64\1506000.020\SYMNETS.SYS [593112 2014-08-25] (Symantec Corporation)
  348.  
  349. ==================== NetSvcs (Whitelisted) ===================
  350.  
  351. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  352.  
  353.  
  354. ==================== One Month Created Files and Folders ========
  355.  
  356. (If an entry is included in the fixlist, the file\folder will be moved.)
  357.  
  358. 2015-01-29 21:45 - 2015-01-29 21:46 - 00000000 ____D () C:\FRST
  359. 2015-01-29 16:11 - 2015-01-29 16:11 - 00000000 ____D () C:\Users\Joe\AppData\Local\{ABB2B559-FD2B-45A0-ADAB-B81F7FA723A8}
  360. 2015-01-29 13:50 - 2015-01-29 16:47 - 00000368 _____ () C:\windows\Tasks\RNUpgradeHelperLogonPrompt_Joe.job
  361. 2015-01-29 13:50 - 2015-01-29 14:31 - 00000362 _____ () C:\windows\Tasks\ReclaimerUpdateFiles_Joe.job
  362. 2015-01-29 13:50 - 2015-01-29 14:31 - 00000358 _____ () C:\windows\Tasks\ReclaimerUpdateXML_Joe.job
  363. 2015-01-29 13:50 - 2015-01-29 13:50 - 00003600 _____ () C:\windows\System32\Tasks\RNUpgradeHelperResumePrompt_Joe
  364. 2015-01-29 13:50 - 2015-01-29 13:50 - 00002944 _____ () C:\windows\System32\Tasks\ReclaimerUpdateFiles_Joe
  365. 2015-01-29 13:50 - 2015-01-29 13:50 - 00002940 _____ () C:\windows\System32\Tasks\ReclaimerUpdateXML_Joe
  366. 2015-01-29 13:50 - 2015-01-29 13:50 - 00002648 _____ () C:\windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Joe
  367. 2015-01-13 21:23 - 2014-12-18 21:06 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
  368. 2015-01-13 21:23 - 2014-12-18 19:46 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
  369. 2015-01-13 21:23 - 2014-12-11 23:35 - 05553592 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
  370. 2015-01-13 21:23 - 2014-12-11 23:31 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
  371. 2015-01-13 21:23 - 2014-12-11 23:31 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
  372. 2015-01-13 21:23 - 2014-12-11 23:31 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
  373. 2015-01-13 21:23 - 2014-12-11 23:11 - 03971512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
  374. 2015-01-13 21:23 - 2014-12-11 23:11 - 03916728 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
  375. 2015-01-13 21:23 - 2014-12-11 23:07 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
  376. 2015-01-13 21:23 - 2014-12-11 11:47 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
  377. 2015-01-13 21:23 - 2014-12-05 22:17 - 00303616 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
  378. 2015-01-13 21:23 - 2014-12-05 21:50 - 00156672 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncsi.dll
  379. 2015-01-13 21:23 - 2014-12-05 21:50 - 00052224 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
  380.  
  381. ==================== One Month Modified Files and Folders =======
  382.  
  383. (If an entry is included in the fixlist, the file\folder will be moved.)
  384.  
  385. 2015-01-29 21:44 - 2011-07-20 05:58 - 00000898 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  386. 2015-01-29 21:10 - 2012-04-04 20:07 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
  387. 2015-01-29 20:44 - 2011-07-20 05:58 - 00000894 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  388. 2015-01-29 20:30 - 2011-07-20 05:35 - 01396569 _____ () C:\windows\WindowsUpdate.log
  389. 2015-01-29 16:54 - 2009-07-13 22:45 - 00025120 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  390. 2015-01-29 16:54 - 2009-07-13 22:45 - 00025120 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  391. 2015-01-29 16:51 - 2012-01-08 20:59 - 00000000 ____D () C:\Users\Joe\AppData\Local\CrashDumps
  392. 2015-01-29 16:47 - 2013-06-07 11:50 - 00000350 _____ () C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
  393. 2015-01-29 16:47 - 2013-06-03 13:43 - 00000350 _____ () C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
  394. 2015-01-29 16:46 - 2009-07-13 23:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
  395. 2015-01-29 16:46 - 2009-07-13 22:51 - 00128780 _____ () C:\windows\setupact.log
  396. 2015-01-29 12:10 - 2012-04-04 20:07 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
  397. 2015-01-29 12:10 - 2012-04-04 20:07 - 00003768 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
  398. 2015-01-29 12:10 - 2011-08-07 12:46 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
  399. 2015-01-29 11:52 - 2014-07-30 12:52 - 00002154 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
  400. 2015-01-23 16:35 - 2009-07-13 21:20 - 00000000 ____D () C:\windows\system32\NDF
  401. 2015-01-22 23:05 - 2014-03-18 19:15 - 00000000 ____D () C:\Users\Joe\AppData\Local\NPE
  402. 2015-01-22 22:55 - 2014-08-08 20:10 - 00000000 ____D () C:\NPE
  403. 2015-01-22 22:52 - 2013-10-21 19:20 - 00000000 ____D () C:\ProgramData\Oracle
  404. 2015-01-22 22:52 - 2011-04-06 20:52 - 00000000 ____D () C:\Program Files (x86)\Java
  405. 2015-01-22 22:48 - 2014-10-19 13:11 - 00272296 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
  406. 2015-01-22 22:48 - 2014-10-19 13:10 - 00176552 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
  407. 2015-01-22 22:48 - 2014-10-19 13:10 - 00176552 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
  408. 2015-01-22 22:48 - 2014-10-19 13:10 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
  409. 2015-01-22 13:28 - 2009-07-13 23:13 - 00782510 _____ () C:\windows\system32\PerfStringBackup.INI
  410. 2015-01-21 17:12 - 2010-11-20 21:47 - 02079286 _____ () C:\windows\PFRO.log
  411. 2015-01-20 13:24 - 2014-06-09 18:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
  412. 2015-01-13 23:02 - 2013-08-13 22:02 - 00000000 ____D () C:\windows\system32\MRT
  413. 2015-01-13 22:53 - 2011-08-04 10:02 - 113365784 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
  414. 2015-01-12 16:42 - 2011-08-04 01:47 - 00000000 ____D () C:\windows\System32\Tasks\Games
  415. 2015-01-07 16:00 - 2014-12-13 20:11 - 00003332 _____ () C:\windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-382555602-2160579598-2407463604-1001
  416. 2015-01-07 16:00 - 2014-05-02 07:55 - 00003194 _____ () C:\windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-382555602-2160579598-2407463604-1001
  417.  
  418. Some content of TEMP:
  419. ====================
  420. C:\Users\Joe\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
  421. C:\Users\Joe\AppData\Local\Temp\jre-8u31-windows-au.exe
  422. C:\Users\Joe\AppData\Local\Temp\lowproc.exe
  423. C:\Users\Joe\AppData\Local\Temp\stubhelper.dll
  424.  
  425.  
  426. ==================== Bamital & volsnap Check =================
  427.  
  428. (There is no automatic fix for files that do not pass verification.)
  429.  
  430. C:\Windows\System32\winlogon.exe => File is digitally signed
  431. C:\Windows\System32\wininit.exe => File is digitally signed
  432. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  433. C:\Windows\explorer.exe => File is digitally signed
  434. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  435. C:\Windows\System32\svchost.exe => File is digitally signed
  436. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  437. C:\Windows\System32\services.exe => File is digitally signed
  438. C:\Windows\System32\User32.dll => File is digitally signed
  439. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  440. C:\Windows\System32\userinit.exe => File is digitally signed
  441. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  442. C:\Windows\System32\rpcss.dll => File is digitally signed
  443. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  444.  
  445.  
  446. LastRegBack: 2015-01-20 18:53
  447.  
  448. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!