OTL logfile created on: 6/15/2012 5:13:07 PM - Run 3 OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\Chris\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 4.00 Gb Total Physical Memory | 2.08 Gb Available Physical Memory | 51.95% Memory free 8.00 Gb Paging File | 5.68 Gb Available in Paging File | 71.02% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 279.47 Gb Total Space | 217.04 Gb Free Space | 77.66% Space Free | Partition Type: NTFS Drive F: | 465.76 Gb Total Space | 364.24 Gb Free Space | 78.20% Space Free | Partition Type: NTFS Drive G: | 931.51 Gb Total Space | 607.23 Gb Free Space | 65.19% Space Free | Partition Type: NTFS Computer Name: EVGA780ISLI | User Name: Chris | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Users\Chris\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Users\Chris\AppData\Local\MediaFire Express\mf_systray.exe (MediaFire LLC) PRC - C:\Users\Chris\AppData\Local\MediaFire Express\mf_status.exe () PRC - C:\Users\Chris\AppData\Local\MediaFire Express\mf_services.exe (MediaFire) PRC - C:\Users\Chris\AppData\Local\MediaFire Express\mf_daemon.exe () PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe (Adobe Systems, Inc.) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Windows\SysWOW64\PnkBstrA.exe () PRC - C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) PRC - C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) PRC - F:\Program Files (x86)\vmware-tray.exe (VMware, Inc.) PRC - F:\Program Files (x86)\vmware-authd.exe (VMware, Inc.) PRC - C:\Program Files (x86)\EVGA Precision X\Bundle\OSDServer\RTSS.exe () PRC - C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe () PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) PRC - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.) PRC - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.) PRC - C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe () PRC - C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe () PRC - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe () PRC - C:\Windows\SysWOW64\Ctxfihlp.exe (Creative Technology Ltd) PRC - C:\Windows\SysWOW64\CTxfispi.exe (Creative Technology Ltd) PRC - C:\Program Files (x86)\DisplayFusion\DisplayFusionHookx86.exe (Binary Fortress Software) PRC - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd) [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - C:\Users\Chris\AppData\Local\MediaFire Express\mf_status.exe () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\mf_daemon.exe () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\QtGui4.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\mediafire_api_connect.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\libstdc++-6.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\QtNetwork4.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\QtXml4.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\libexpat-1.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\libgcc_s_dw2-1.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\QtCore4.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\imageformats\qjpeg4.dll () MOD - C:\Users\Chris\AppData\Local\MediaFire Express\imageformats\qgif4.dll () MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll () MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll () MOD - C:\Program Files (x86)\EVGA Precision X\Bundle\OSDServer\RTSS.exe () MOD - C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe () MOD - C:\Program Files (x86)\EVGA Precision X\RTMUI.dll () MOD - C:\Program Files (x86)\EVGA Precision X\RTHAL.dll () MOD - C:\Program Files (x86)\EVGA Precision X\RTCore.dll () MOD - C:\Program Files (x86)\EVGA Precision X\RTUI.dll () MOD - C:\Program Files (x86)\EVGA Precision X\RTFC.dll () MOD - C:\Program Files (x86)\EVGA Precision X\Bundle\OSDServer\RTMUI.dll () MOD - C:\Program Files (x86)\EVGA Precision X\Bundle\OSDServer\RTSSHooks.dll () MOD - C:\Program Files (x86)\EVGA Precision X\Bundle\OSDServer\RTUI.dll () MOD - C:\Program Files (x86)\EVGA Precision X\Bundle\OSDServer\RTFC.dll () MOD - C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTGui4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTXml4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTCore4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe () MOD - C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe () MOD - C:\Program Files (x86)\EVGA Precision X\RTTSH.dll () MOD - C:\Program Files (x86)\EVGA Precision X\Bundle\OSDServer\RTTSH.dll () MOD - C:\Windows\SysWOW64\CTXFIRES.DLL () MOD - C:\Windows\SysWOW64\APOMngr.DLL () [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software, Inc.) SRV:[b]64bit:[/b] - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) SRV:[b]64bit:[/b] - (!SASCORE) -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com) SRV:[b]64bit:[/b] - (Diskeeper) -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe (Diskeeper Corporation) SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV:[b]64bit:[/b] - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies) SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe () SRV - (LMIMaint) -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe (LogMeIn, Inc.) SRV - (LMIGuardianSvc) -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.) SRV - (Creative ALchemy AL6 Licensing Service) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe (Creative Labs) SRV - (Creative Audio Engine Licensing Service) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe (Creative Labs) SRV - (VMnetDHCP) -- C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) SRV - (VMware NAT Service) -- C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) SRV - (VMwareHostd) -- F:\Program Files (x86)\vmware-hostd.exe () SRV - (VMAuthdService) -- F:\Program Files (x86)\vmware-authd.exe (VMware, Inc.) SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (LogMeIn) -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.) SRV - (UMVPFSrv) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.) SRV - (VMUSBArbService) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe (VMware, Inc.) SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (Autodesk Content Service) -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe () SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (CTAudSvcService) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - (LMIRfsClientNP) -- C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.) DRV:[b]64bit:[/b] - (vmx86) -- C:\Windows\SysNative\drivers\vmx86.sys (VMware, Inc.) DRV:[b]64bit:[/b] - (VMnetuserif) -- C:\Windows\SysNative\drivers\vmnetuserif.sys (VMware, Inc.) DRV:[b]64bit:[/b] - (VMnetBridge) -- C:\Windows\SysNative\drivers\vmnetbridge.sys (VMware, Inc.) DRV:[b]64bit:[/b] - (VMnetAdapter) -- C:\Windows\SysNative\drivers\vmnetadapter.sys (VMware, Inc.) DRV:[b]64bit:[/b] - (SCDEmu) -- C:\Windows\SysNative\drivers\scdemu.sys (Power Software Ltd) DRV:[b]64bit:[/b] - (LMIRfsDriver) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.) DRV:[b]64bit:[/b] - (lmimirr) -- C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.) DRV:[b]64bit:[/b] - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software) DRV:[b]64bit:[/b] - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software) DRV:[b]64bit:[/b] - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software) DRV:[b]64bit:[/b] - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software) DRV:[b]64bit:[/b] - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software) DRV:[b]64bit:[/b] - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software) DRV:[b]64bit:[/b] - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (LVUVC64) Logitech Webcam Pro 9000(UVC) -- C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.) DRV:[b]64bit:[/b] - (LVRS64) -- C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.) DRV:[b]64bit:[/b] - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Rovi Corporation) DRV:[b]64bit:[/b] - (hcmon) -- C:\Windows\SysNative\drivers\hcmon.sys (VMware, Inc.) DRV:[b]64bit:[/b] - (vmusb) -- C:\Windows\SysNative\drivers\vmusb.sys (VMware, Inc.) DRV:[b]64bit:[/b] - (vmci) -- C:\Windows\SysNative\drivers\vmci.sys (VMware, Inc.) DRV:[b]64bit:[/b] - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:[b]64bit:[/b] - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:[b]64bit:[/b] - (DKRtWrt) -- C:\Windows\SysNative\drivers\DKRtWrt.sys (Diskeeper Corporation) DRV:[b]64bit:[/b] - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (tsusbhub) -- C:\Windows\SysNative\drivers\tsusbhub.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (Synth3dVsc) -- C:\Windows\SysNative\drivers\Synth3dVsc.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:[b]64bit:[/b] - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation) DRV:[b]64bit:[/b] - (pbfilter) -- C:\Program Files\PeerBlock\pbfilter.sys () DRV:[b]64bit:[/b] - (ha20x2k) -- C:\Windows\SysNative\drivers\ha20x2k.sys (Creative Technology Ltd) DRV:[b]64bit:[/b] - (emupia) -- C:\Windows\SysNative\drivers\emupia2k.sys (Creative Technology Ltd) DRV:[b]64bit:[/b] - (ctsfm2k) -- C:\Windows\SysNative\drivers\ctsfm2k.sys (Creative Technology Ltd) DRV:[b]64bit:[/b] - (ctprxy2k) -- C:\Windows\SysNative\drivers\ctprxy2k.sys (Creative Technology Ltd) DRV:[b]64bit:[/b] - (ossrv) -- C:\Windows\SysNative\drivers\ctoss2k.sys (Creative Technology Ltd.) DRV:[b]64bit:[/b] - (ctaud2k) Creative Audio Driver (WDM) -- C:\Windows\SysNative\drivers\ctaud2k.sys (Creative Technology Ltd) DRV:[b]64bit:[/b] - (ctac32k) -- C:\Windows\SysNative\drivers\ctac32k.sys (Creative Technology Ltd) DRV:[b]64bit:[/b] - (CTEXFIFX.SYS) -- C:\Windows\SysNative\drivers\CTEXFIFX.sys (Creative Technology Ltd.) DRV:[b]64bit:[/b] - (CTEXFIFX) -- C:\Windows\SysNative\drivers\CTEXFIFX.sys (Creative Technology Ltd.) DRV:[b]64bit:[/b] - (CTHWIUT.SYS) -- C:\Windows\SysNative\drivers\CTHWIUT.sys (Creative Technology Ltd.) DRV:[b]64bit:[/b] - (CTHWIUT) -- C:\Windows\SysNative\drivers\CTHWIUT.sys (Creative Technology Ltd.) DRV:[b]64bit:[/b] - (CT20XUT.SYS) -- C:\Windows\SysNative\drivers\CT20XUT.sys (Creative Technology Ltd.) DRV:[b]64bit:[/b] - (CT20XUT) -- C:\Windows\SysNative\drivers\CT20XUT.sys (Creative Technology Ltd.) DRV:[b]64bit:[/b] - (LGVirHid) -- C:\Windows\SysNative\drivers\LGVirHid.sys (Logitech Inc.) DRV:[b]64bit:[/b] - (LGBusEnum) -- C:\Windows\SysNative\drivers\LGBusEnum.sys (Logitech Inc.) DRV:[b]64bit:[/b] - (NVNET) -- C:\Windows\SysNative\drivers\nvmf6264.sys (NVIDIA Corporation) DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:[b]64bit:[/b] - (NVENETFD) -- C:\Windows\SysNative\drivers\nvm62x64.sys (NVIDIA Corporation) DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:[b]64bit:[/b] - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (RTCore64) -- C:\Program Files (x86)\EVGA Precision X\RTCore64.sys () DRV - (LMIInfo) -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 40 43 CE A2 02 2B CD 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_257.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll () FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/05/06 13:42:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/06/06 02:47:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/05/05 17:06:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions [2012/06/15 15:48:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\op8t70tb.default\extensions [2012/05/19 11:36:44 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\op8t70tb.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2012/05/05 17:06:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012/05/06 13:42:05 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2012/05/06 12:58:21 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\CHRIS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OP8T70TB.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2012/05/06 12:58:21 | 000,118,971 | ---- | M] () (No name found) -- C:\USERS\CHRIS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\OP8T70TB.DEFAULT\EXTENSIONS\ADBLOCKPOPUPS@JESSEHAKANEN.NET.XPI [2012/06/05 14:55:21 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/04/20 21:18:25 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/04/20 21:18:25 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Java(TM) Platform SE 7 U4 (Enabled) = C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 7.0.40.255 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll CHR - Extension: YouTube = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: Google Search = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: avast! WebRep = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\ CHR - Extension: Gmail = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ O1 HOSTS File: ([2012/06/15 16:33:26 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [NVRaidService] C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe (NVIDIA Corporation) O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [vmware-tray] F:\Program Files (x86)\vmware-tray.exe (VMware, Inc.) O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [DisplayFusion] C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe (Binary Fortress Software) O4 - HKCU..\Run: [MediaFire Tray] C:\Users\Chris\AppData\Local\MediaFire Express\mf_systray.exe (MediaFire LLC) O4 - HKCU..\Run: [PeerBlock] C:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC) O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2) O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{54A1932A-8881-4B3D-A903-BE292766DBB4}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\I\Shell - "" = AutoRun O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\autorun.exe -auto O33 - MountPoints2\J\Shell - "" = AutoRun O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\SETUP.EXE O33 - MountPoints2\J\Shell\dinstall\command - "" = J:\DirectX\dxsetup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/06/15 15:48:02 | 000,000,000 | ---D | C] -- C:\_OTL [2012/06/15 08:57:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phyxion.net [2012/06/15 08:57:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Phyxion.net [2012/06/15 06:02:22 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe [2012/06/14 18:53:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2012/06/14 18:48:50 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\SUPERAntiSpyware.com [2012/06/14 18:48:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2012/06/14 18:48:41 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2012/06/14 18:48:41 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2012/06/14 18:45:46 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Malwarebytes [2012/06/14 18:45:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012/06/14 18:45:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012/06/14 18:45:40 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012/06/14 18:45:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2012/06/14 07:05:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack [2012/06/14 07:05:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Combined Community Codec Pack [2012/06/13 18:53:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games [2012/06/13 18:41:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EA Games [2012/06/12 13:38:56 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2012/06/12 13:38:56 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2012/06/12 13:38:53 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2012/06/12 09:14:11 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess [2012/06/12 09:13:49 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaFire Express [2012/06/12 09:13:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MediaFire Express [2012/06/12 09:13:46 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\MediaFire Express [2012/06/11 18:41:29 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012/06/11 18:22:09 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Macromedia [2012/06/11 01:53:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp [2012/06/11 01:53:23 | 000,000,000 | ---D | C] -- C:\Program Files\Core Temp [2012/06/10 14:36:40 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\DisplayFusion [2012/06/07 19:57:47 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\PACE Anti-Piracy [2012/06/07 19:57:47 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\PACE Anti-Piracy [2012/06/07 19:57:47 | 000,000,000 | ---D | C] -- C:\ProgramData\PACE Anti-Piracy [2012/06/07 19:57:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PACE Anti-Piracy [2012/06/07 19:57:45 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Adobe [2012/06/07 19:48:56 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Apple Computer [2012/06/07 19:41:06 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\LogMeIn [2012/06/07 19:40:55 | 000,034,688 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIport.dll [2012/06/07 19:40:54 | 000,087,456 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIRfsClientNP.dll [2012/06/07 19:40:54 | 000,072,216 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys [2012/06/07 19:40:52 | 000,080,768 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIinit.dll [2012/06/07 19:40:49 | 000,000,000 | ---D | C] -- C:\ProgramData\LogMeIn [2012/06/07 19:40:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn [2012/06/07 18:48:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS6 [2012/06/06 18:07:00 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\HandBrake [2012/06/06 18:06:47 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake [2012/06/06 18:06:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake [2012/06/06 17:55:34 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps [2012/06/06 07:35:47 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Publish Providers [2012/06/06 07:31:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony [2012/06/06 07:31:16 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Sony [2012/06/06 07:31:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony [2012/06/06 07:31:16 | 000,000,000 | ---D | C] -- C:\Program Files\Sony [2012/06/06 07:31:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony [2012/06/06 07:30:15 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Sony [2012/06/06 05:18:02 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2012/06/06 05:17:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2012/06/06 05:17:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2012/06/06 05:17:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle [2012/06/06 05:16:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2012/06/06 02:49:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2012/06/06 02:47:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Google [2012/06/06 02:47:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2012/06/06 02:47:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2012/06/06 02:47:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2012/06/06 02:47:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2012/06/06 02:46:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2012/06/06 02:46:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Apple [2012/06/06 02:46:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2012/06/06 02:46:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2012/06/05 19:43:03 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed [2012/06/05 19:15:49 | 000,000,000 | ---D | C] -- C:\Windows\AutoKMS [2012/06/05 14:58:17 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\ElevatedDiagnostics [2012/06/05 14:42:27 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Adobe Scripts [2012/06/05 12:25:24 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Frameworkx.com [2012/06/05 12:24:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frameworkx [2012/06/05 12:24:23 | 000,000,000 | ---D | C] -- C:\Program Files\Frameworkx [2012/06/05 11:46:34 | 000,056,208 | ---- | C] (Rovi Corporation) -- C:\Windows\SysNative\drivers\PxHlpa64.sys [2012/06/05 11:46:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sonic Shared [2012/06/05 11:46:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine [2012/06/05 11:46:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\My Company Name [2012/06/05 11:44:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2012/06/05 11:44:03 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2012/06/05 11:43:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2012/06/04 02:12:25 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Skyrim [2012/06/03 22:18:34 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2012/06/02 01:59:52 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\StarCraft VISTA-WIN7 PLAYFIX [2012/06/02 01:46:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games [2012/06/02 01:40:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft [2012/06/02 01:40:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2012/05/27 23:05:44 | 000,000,000 | -HSD | C] -- C:\Diskeeper [2012/05/26 15:25:43 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\My Games [2012/05/26 15:25:41 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gears of War [2012/05/26 15:25:14 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive [2012/05/26 02:42:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2012/05/26 02:12:59 | 000,044,624 | ---- | C] (Diskeeper Corporation) -- C:\Windows\SysNative\drivers\DKRtWrt.sys [2012/05/26 02:12:59 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE [2012/05/26 02:12:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diskeeper Corporation [2012/05/26 02:12:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Diskeeper Corporation [2012/05/26 02:12:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Diskeeper Corporation [2012/05/26 02:12:57 | 000,000,000 | ---D | C] -- C:\Program Files\Diskeeper Corporation [2012/05/26 01:25:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\BFBC2 [2012/05/25 13:52:48 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Ubisoft Game Launcher [2012/05/25 13:52:46 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Assassin's Creed Revelations [2012/05/25 13:42:33 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\PunkBuster [2012/05/22 17:43:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\PunkBuster [2012/05/22 17:43:18 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Battlefield 3 [2012/05/22 17:42:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins [2012/05/22 17:39:05 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core [2012/05/22 17:39:04 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs [2012/05/22 09:52:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 [2012/05/22 09:13:45 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Origin [2012/05/22 09:13:42 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Origin [2012/05/22 09:13:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin [2012/05/22 09:13:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin [2012/05/22 09:13:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts [2012/05/22 00:52:32 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\SniperV2 [2012/05/22 00:51:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\SKIDROW [2012/05/22 00:49:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rebellion [2012/05/22 00:37:51 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\URSoft [2012/05/22 00:37:51 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2012/05/22 00:37:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7 [2012/05/22 00:37:46 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Babylon [2012/05/22 00:37:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon [2012/05/22 00:37:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Your Uninstaller! 7 [2012/05/21 09:39:00 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC [2012/05/21 09:38:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XBMC [2012/05/20 16:36:55 | 000,063,088 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\vmx86.sys [2012/05/20 16:36:32 | 000,354,416 | ---- | C] (VMware, Inc.) -- C:\Windows\SysWow64\vmnetdhcp.exe [2012/05/20 16:36:31 | 000,433,264 | ---- | C] (VMware, Inc.) -- C:\Windows\SysWow64\vmnat.exe [2012/05/20 16:36:30 | 000,030,320 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\vmnetuserif.sys [2012/05/20 16:36:28 | 000,942,192 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\vnetlib64.dll [2012/05/20 16:36:27 | 000,039,024 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\hcmon.sys [2012/05/20 16:36:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware [2012/05/20 16:36:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VMware [2012/05/20 16:36:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\VMware [2012/05/20 16:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\VMware [2012/05/20 01:03:00 | 000,000,000 | ---D | C] -- C:\ProgramData\vsosdk [2012/05/19 23:14:33 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\ConvertXToDVD [2012/05/19 22:24:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Vso [2012/05/19 22:23:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VSO [2012/05/19 22:23:26 | 000,626,688 | ---- | C] (On2.com) -- C:\Windows\SysWow64\vp7vfw.dll [2012/05/19 22:23:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VSO [2012/05/19 22:03:06 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\New folder [2012/05/19 17:48:03 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\VMware [2012/05/19 17:48:02 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\VMware [2012/05/19 17:44:06 | 000,000,000 | ---D | C] -- C:\ProgramData\VMware [2012/05/19 17:44:06 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Shared Virtual Machines [2012/05/19 17:40:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DisplayFusion [2012/05/19 17:40:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DisplayFusion [2012/05/19 17:39:03 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2012/05/19 17:38:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2012/05/19 17:38:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVSMedia [2012/05/19 17:38:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVS4YOU [2012/05/19 17:36:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 8 Qt [2012/05/19 17:36:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDFab 8 Qt [2012/05/19 13:37:35 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Skype [2012/05/19 13:37:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2012/05/19 13:37:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2012/05/19 13:37:24 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2012/05/19 13:37:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2012/05/17 18:50:06 | 000,071,680 | ---- | C] (Beepa P/L) -- C:\Windows\SysNative\frapsv64.dll [2012/05/17 18:50:04 | 000,065,536 | ---- | C] (Beepa P/L) -- C:\Windows\SysWow64\frapsvid.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/06/15 17:10:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/06/15 16:52:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/06/15 16:40:28 | 000,783,066 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/06/15 16:40:28 | 000,662,790 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012/06/15 16:40:28 | 000,122,244 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012/06/15 16:36:14 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/06/15 16:35:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/06/15 16:35:42 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2012/06/15 16:35:36 | 3220,074,496 | -HS- | M] () -- C:\hiberfil.sys [2012/06/15 16:34:31 | 000,061,000 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000009-00001102-00000005-002F1102}.rfx [2012/06/15 16:34:31 | 000,061,000 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000005-00000000-00000009-00001102-00000005-002F1102}.rfx [2012/06/15 16:34:31 | 000,000,788 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000005-00000000-00000009-00001102-00000005-002F1102}.rfx [2012/06/15 16:34:30 | 000,026,112 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/06/15 16:34:30 | 000,026,112 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/06/15 16:33:26 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts [2012/06/15 16:32:28 | 000,161,994 | ---- | M] () -- C:\Users\Chris\Desktop\HD Audio Disabled.jpg [2012/06/15 10:48:00 | 000,000,510 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 04473816-6e27-4631-acf8-c3e8fcc46d17.job [2012/06/15 08:58:04 | 000,001,189 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\vso_ts_preview.xml [2012/06/15 08:57:55 | 000,001,233 | ---- | M] () -- C:\Users\Public\Desktop\Driver Sweeper.lnk [2012/06/15 06:45:47 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk [2012/06/15 06:45:46 | 000,001,885 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2012/06/15 06:45:46 | 000,001,780 | ---- | M] () -- C:\Users\Chris\Desktop\PeerBlock.lnk [2012/06/15 06:45:46 | 000,000,992 | ---- | M] () -- C:\Users\Chris\Desktop\Core Temp.lnk [2012/06/15 06:02:29 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe [2012/06/15 02:00:00 | 000,000,510 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task baa33615-1683-4ed8-9c55-f2402230ad40.job [2012/06/14 18:53:13 | 000,002,255 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2012/06/14 18:53:13 | 000,002,239 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2012/06/14 18:45:41 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/06/14 16:06:11 | 032,922,451 | ---- | M] () -- C:\Users\Chris\Desktop\WHAS11Geckos....mp4 [2012/06/14 11:09:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012/06/14 07:00:10 | 005,110,112 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/06/13 18:53:24 | 000,001,232 | ---- | M] () -- C:\Users\Public\Desktop\Command & Conquer The First Decade.lnk [2012/06/12 19:59:45 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2012/06/12 19:59:45 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012/06/12 16:15:15 | 000,001,437 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2012/06/12 15:54:30 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf [2012/06/12 15:54:30 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf [2012/06/12 15:01:40 | 000,181,696 | ---- | M] () -- C:\Users\Chris\Documents\direct deposit form for tradesman.pdf [2012/06/12 14:39:59 | 000,008,794 | ---- | M] () -- C:\Users\Chris\Documents\LWSLogFiles.zip [2012/06/12 09:42:11 | 001,006,395 | ---- | M] () -- C:\Users\Chris\Desktop\MediaFire tutorial.mp4 [2012/06/11 18:49:47 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2012/06/11 03:54:59 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012/06/11 03:00:29 | 000,000,362 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2012/06/07 19:57:47 | 000,000,021 | ---- | M] () -- C:\Windows\SurCode.INI [2012/06/07 19:40:51 | 000,001,024 | ---- | M] () -- C:\.rnd [2012/06/06 18:06:47 | 000,000,690 | ---- | M] () -- C:\Users\Chris\Desktop\Handbrake.lnk [2012/06/06 17:55:34 | 000,000,519 | ---- | M] () -- C:\Users\Chris\Desktop\Fraps.lnk [2012/06/06 07:31:30 | 000,001,038 | ---- | M] () -- C:\Users\Public\Desktop\Vegas Pro 11.0 (64-bit).lnk [2012/06/06 03:25:27 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2012/06/06 02:49:56 | 000,002,212 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2012/06/06 02:47:15 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2012/06/05 19:16:28 | 000,000,768 | ---- | M] () -- C:\Windows\SysWow64\Settings.ini [2012/06/05 08:59:56 | 000,000,136 | ---- | M] () -- C:\Users\Chris\Desktop\The Elder Scrolls V Skyrim - Shortcut.lnk [2012/06/02 01:45:54 | 000,000,738 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft - Brood War.lnk [2012/05/28 21:28:10 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012/05/26 16:11:45 | 000,000,136 | ---- | M] () -- C:\Users\Chris\Desktop\Assassin's Creed II - Shortcut.lnk [2012/05/26 02:12:58 | 000,002,595 | ---- | M] () -- C:\Users\Public\Desktop\Diskeeper 2011.lnk [2012/05/25 13:46:39 | 000,000,136 | ---- | M] () -- C:\Users\Chris\Desktop\Assassin's Creed Revelations - Shortcut.lnk [2012/05/22 18:45:12 | 000,000,136 | ---- | M] () -- C:\Users\Chris\Desktop\Battlefield Bad Company™ 2 - Shortcut.lnk [2012/05/22 18:44:11 | 002,434,856 | ---- | M] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2012/05/22 09:52:35 | 000,000,854 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk [2012/05/22 09:13:36 | 000,000,692 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk [2012/05/22 00:49:03 | 000,001,090 | ---- | M] () -- C:\Users\Public\Desktop\Sniper Elite V2.lnk [2012/05/22 00:38:00 | 000,000,059 | ---- | M] () -- C:\user.js [2012/05/22 00:37:48 | 000,001,072 | ---- | M] () -- C:\Users\Chris\Desktop\Your Unin-staller!.lnk [2012/05/21 09:39:35 | 000,001,873 | ---- | M] () -- C:\Users\Chris\Desktop\XBMC.lnk [2012/05/20 16:36:58 | 000,000,545 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\VMware Workstation.lnk [2012/05/20 16:36:24 | 000,795,928 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/05/20 16:36:24 | 000,001,590 | ---- | M] () -- C:\Users\Public\Desktop\VMware Workstation.lnk [2012/05/19 22:23:40 | 000,001,228 | ---- | M] () -- C:\Users\Chris\Desktop\ConvertXtoDVD 4.lnk [2012/05/19 17:40:47 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\DisplayFusion.lnk [2012/05/19 17:38:51 | 000,001,244 | ---- | M] () -- C:\Users\Chris\Desktop\AVS Video Converter 6.lnk [2012/05/19 17:36:26 | 000,001,040 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 8 Qt.lnk [2012/05/19 17:36:26 | 000,001,016 | ---- | M] () -- C:\Users\Chris\Desktop\DVDFab 8 Qt.lnk [2012/05/19 13:37:28 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2012/05/17 18:50:06 | 000,071,680 | ---- | M] (Beepa P/L) -- C:\Windows\SysNative\frapsv64.dll [2012/05/17 18:50:04 | 000,065,536 | ---- | M] (Beepa P/L) -- C:\Windows\SysWow64\frapsvid.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/06/15 16:35:42 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2012/06/15 16:32:28 | 000,161,994 | ---- | C] () -- C:\Users\Chris\Desktop\HD Audio Disabled.jpg [2012/06/15 08:57:55 | 000,001,233 | ---- | C] () -- C:\Users\Public\Desktop\Driver Sweeper.lnk [2012/06/15 06:41:07 | 000,356,805 | ---- | C] () -- C:\Users\Chris\Desktop\Picture of me 1.png [2012/06/14 18:53:13 | 000,002,255 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2012/06/14 18:53:13 | 000,002,239 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2012/06/14 18:48:54 | 000,000,510 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 04473816-6e27-4631-acf8-c3e8fcc46d17.job [2012/06/14 18:48:53 | 000,000,510 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task baa33615-1683-4ed8-9c55-f2402230ad40.job [2012/06/14 18:48:46 | 000,001,852 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk [2012/06/14 18:45:41 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/06/14 16:05:33 | 032,922,451 | ---- | C] () -- C:\Users\Chris\Desktop\WHAS11Geckos....mp4 [2012/06/14 11:09:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012/06/13 18:53:24 | 000,001,232 | ---- | C] () -- C:\Users\Public\Desktop\Command & Conquer The First Decade.lnk [2012/06/12 15:54:30 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf [2012/06/12 15:54:30 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf [2012/06/12 15:01:40 | 000,181,696 | ---- | C] () -- C:\Users\Chris\Documents\direct deposit form for tradesman.pdf [2012/06/12 14:40:04 | 000,008,794 | ---- | C] () -- C:\Users\Chris\Documents\LWSLogFiles.zip [2012/06/12 13:39:03 | 002,621,723 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin [2012/06/12 13:38:38 | 000,014,324 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb [2012/06/12 12:27:31 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/06/12 09:41:50 | 001,006,395 | ---- | C] () -- C:\Users\Chris\Desktop\MediaFire tutorial.mp4 [2012/06/11 18:49:47 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2012/06/11 18:49:47 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2012/06/11 03:54:59 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012/06/11 03:00:29 | 000,000,362 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2012/06/11 01:53:23 | 000,000,992 | ---- | C] () -- C:\Users\Chris\Desktop\Core Temp.lnk [2012/06/07 19:57:47 | 000,000,021 | ---- | C] () -- C:\Windows\SurCode.INI [2012/06/07 19:40:45 | 000,000,988 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn.lnk [2012/06/06 18:06:47 | 000,000,690 | ---- | C] () -- C:\Users\Chris\Desktop\Handbrake.lnk [2012/06/06 17:55:34 | 000,000,519 | ---- | C] () -- C:\Users\Chris\Desktop\Fraps.lnk [2012/06/06 07:31:30 | 000,001,038 | ---- | C] () -- C:\Users\Public\Desktop\Vegas Pro 11.0 (64-bit).lnk [2012/06/06 02:49:56 | 000,002,212 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2012/06/06 02:47:40 | 000,000,896 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/06/06 02:47:39 | 000,000,892 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/06/06 02:47:15 | 000,001,845 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2012/06/06 02:46:36 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2012/06/05 19:15:21 | 000,000,768 | ---- | C] () -- C:\Windows\SysWow64\Settings.ini [2012/06/05 08:59:56 | 000,000,136 | ---- | C] () -- C:\Users\Chris\Desktop\The Elder Scrolls V Skyrim - Shortcut.lnk [2012/06/02 01:40:03 | 000,000,738 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft - Brood War.lnk [2012/05/26 02:13:07 | 000,002,595 | ---- | C] () -- C:\Users\Public\Desktop\Diskeeper 2011.lnk [2012/05/25 13:46:39 | 000,000,136 | ---- | C] () -- C:\Users\Chris\Desktop\Assassin's Creed Revelations - Shortcut.lnk [2012/05/22 18:45:12 | 000,000,136 | ---- | C] () -- C:\Users\Chris\Desktop\Battlefield Bad Company™ 2 - Shortcut.lnk [2012/05/22 18:44:11 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2012/05/22 17:44:45 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2012/05/22 09:52:35 | 000,000,854 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk [2012/05/22 09:52:03 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012/05/22 09:52:03 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2012/05/22 09:51:55 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012/05/22 09:13:36 | 000,000,692 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk [2012/05/22 00:49:03 | 000,001,090 | ---- | C] () -- C:\Users\Public\Desktop\Sniper Elite V2.lnk [2012/05/22 00:38:00 | 000,000,059 | ---- | C] () -- C:\user.js [2012/05/22 00:37:48 | 000,001,072 | ---- | C] () -- C:\Users\Chris\Desktop\Your Unin-staller!.lnk [2012/05/21 09:39:35 | 000,001,873 | ---- | C] () -- C:\Users\Chris\Desktop\XBMC.lnk [2012/05/20 16:36:58 | 000,000,545 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\VMware Workstation.lnk [2012/05/20 16:36:24 | 000,001,590 | ---- | C] () -- C:\Users\Public\Desktop\VMware Workstation.lnk [2012/05/19 22:24:19 | 000,001,189 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\vso_ts_preview.xml [2012/05/19 22:23:39 | 000,001,228 | ---- | C] () -- C:\Users\Chris\Desktop\ConvertXtoDVD 4.lnk [2012/05/19 17:45:13 | 000,001,024 | ---- | C] () -- C:\.rnd [2012/05/19 17:40:47 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\DisplayFusion.lnk [2012/05/19 17:38:51 | 000,001,244 | ---- | C] () -- C:\Users\Chris\Desktop\AVS Video Converter 6.lnk [2012/05/19 17:36:26 | 000,001,040 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 8 Qt.lnk [2012/05/19 17:36:26 | 000,001,016 | ---- | C] () -- C:\Users\Chris\Desktop\DVDFab 8 Qt.lnk [2012/05/19 13:37:28 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2012/05/06 15:28:17 | 000,795,928 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/05/05 19:29:41 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2012/05/05 19:29:41 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2012/02/29 13:26:56 | 000,416,064 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2012/01/18 06:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll [2012/01/18 06:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll [2012/01/18 06:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe [color=#E56717]========== LOP Check ==========[/color] [2012/06/05 15:35:47 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Autodesk [2012/06/10 15:27:34 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DisplayFusion [2012/06/14 16:05:33 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\HandBrake [2012/05/06 16:37:24 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ImgBurn [2012/05/06 19:51:07 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Leadertech [2012/05/22 09:21:06 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Origin [2012/06/07 19:57:47 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\PACE Anti-Piracy [2012/06/06 07:35:47 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Publish Providers [2012/05/25 13:42:33 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\PunkBuster [2012/06/08 17:00:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Sony [2012/05/06 19:05:09 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Ubisoft [2012/05/22 00:37:51 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\URSoft [2012/06/15 06:01:08 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\uTorrent [2012/06/15 08:58:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Vso [2009/07/14 01:08:49 | 000,020,088 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2012/06/15 10:48:00 | 000,000,510 | ---- | M] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 04473816-6e27-4631-acf8-c3e8fcc46d17.job [2012/06/15 02:00:00 | 000,000,510 | ---- | M] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task baa33615-1683-4ed8-9c55-f2402230ad40.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 163 bytes -> C:\ProgramData\TEMP:1CE11B51 < End of report >