I love Geeks!!!!
Hey ya'll. I need some help. I am either completely paranoid and just need to commit suicide or my bf 45yrs old, is way smarter than I am and is able to see everything I am doing online and on my phone (his phone) and I can't prove it nor do I know how he is doing it. I know he has (i think) verizon's family locator? maybe? I never thought he'd know how to use it but evidently he does because he always knows where I am and what I talk to my friends about online. i've put up with it for a year because we were both in [bleep] past relationships and figured if this was what he needed to trust me then It didn't bother me because I wasn't doing anything wrong. But now, it's seriously got me confused and when I get confused I get self destructive. Please is there a way I can copy something for you to see what is up on the computer? and is there a way for me to track his phone the same way? 







OTL logfile created on: 11/13/2012 1:56:08 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Daves\Downloads
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
2.99 Gb Total Physical Memory | 1.81 Gb Available Physical Memory | 60.56% Memory free
5.98 Gb Paging File | 4.54 Gb Available in Paging File | 75.92% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298.08 Gb Total Space | 219.41 Gb Free Space | 73.61% Space Free | Partition Type: NTFS
 
Computer Name: DAVES-PC | User Name: Daves | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012/11/13 13:55:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Daves\Downloads\OTL.exe
PRC - [2012/11/07 00:54:24 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
PRC - [2012/10/24 09:50:37 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012/09/12 16:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\NisSrv.exe
PRC - [2012/09/12 16:25:22 | 000,280,088 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MpCmdRun.exe
PRC - [2012/09/12 16:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2012/09/12 16:19:44 | 000,947,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2012/05/09 14:25:58 | 000,152,152 | ---- | M] (Microsoft Corporation) -- C:\emet\EMET_notifier.exe
PRC - [2011/02/24 21:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 13:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012/11/07 00:54:21 | 014,586,808 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_110.dll
MOD - [2012/10/31 00:45:14 | 000,015,848 | ---- | M] () -- C:\Program Files\Java\jre7\bin\jp2native.dll
MOD - [2012/10/24 09:50:39 | 002,295,264 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012/02/20 20:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/02/20 20:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2012/11/07 00:54:25 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/10/31 20:45:52 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2012/10/24 09:50:38 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/09/12 16:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012/09/12 16:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2009/07/13 17:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009/07/13 17:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 17:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 17:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2012/08/30 21:03:50 | 000,099,272 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2010/11/20 13:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 13:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 13:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 13:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 13:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 13:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 13:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 13:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 13:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/10/01 01:07:44 | 000,052,096 | ---- | M] (Generic USB smartcard reader) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MHIKEY10.sys -- (MHIKEY10)
DRV - [2009/07/13 15:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/07/13 14:02:50 | 000,211,456 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-4138588775-197094456-905458756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-4138588775-197094456-905458756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-4138588775-197094456-905458756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2C 44 65 DA C7 B8 CD 01  [binary data]
IE - HKU\S-1-5-21-4138588775-197094456-905458756-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-4138588775-197094456-905458756-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-4138588775-197094456-905458756-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4138588775-197094456-905458756-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.11
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/11/11 22:27:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2012/10/31 00:21:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daves\AppData\Roaming\Mozilla\Extensions
[2012/11/07 00:49:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daves\AppData\Roaming\Mozilla\Firefox\Profiles\0elbepg3.default\extensions
[2012/10/31 19:51:09 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Daves\AppData\Roaming\Mozilla\Firefox\Profiles\0elbepg3.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/11/07 00:49:09 | 000,213,316 | ---- | M] () (No name found) -- C:\Users\Daves\AppData\Roaming\Mozilla\Firefox\Profiles\0elbepg3.default\extensions\torntv@torntv.com.xpi
[2012/10/31 00:20:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/10/24 09:50:58 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/10/24 09:50:17 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/10/24 09:50:17 | 000,002,058 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
 
O1 HOSTS File: ([2009/06/10 13:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [EMET Notifier] C:\emet\EMET_notifier.exe (Microsoft Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 205.171.2.25
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{23AF665E-83AD-47F6-9C79-5ABC2750B65F}: DhcpNameServer = 192.168.0.1 205.171.2.25
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 13:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]
 
[2012/11/13 12:43:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enhanced Mitigation Experience Toolkit
[2012/11/13 12:43:08 | 000,000,000 | ---D | C] -- C:\emet
[2012/11/13 07:23:47 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Diagnostics
[2012/11/12 06:47:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[2012/11/11 22:27:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012/11/11 22:27:23 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2012/11/07 00:53:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2012/11/07 00:49:08 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
[2012/11/07 00:49:05 | 000,000,000 | ---D | C] -- C:\Program Files\TornTV.com
[2012/11/04 22:45:08 | 000,000,000 | R--D | C] -- C:\Users\Daves\Documents\Scanned Documents
[2012/11/04 22:45:08 | 000,000,000 | ---D | C] -- C:\Users\Daves\Documents\Fax
[2012/11/03 21:18:24 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Publish Providers
[2012/11/03 20:57:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
[2012/11/03 20:57:45 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Sony
[2012/11/03 20:57:45 | 000,000,000 | ---D | C] -- C:\Program Files\Sony
[2012/11/03 20:56:11 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Sony
[2012/11/02 23:45:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/11/02 23:45:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2012/11/02 23:44:54 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012/11/02 23:44:53 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012/11/02 23:44:53 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012/11/02 23:43:36 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012/11/02 11:47:35 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Audacity
[2012/11/02 11:47:21 | 000,000,000 | ---D | C] -- C:\Program Files\Audacity
[2012/11/01 22:18:51 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Apple Computer
[2012/11/01 22:12:53 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Apple Computer
[2012/11/01 21:00:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012/11/01 20:57:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2012/11/01 20:57:22 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Apple
[2012/11/01 20:57:14 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2012/11/01 20:57:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2012/11/01 19:52:51 | 000,000,000 | ---D | C] -- C:\Users\Daves\dwhelper
[2012/11/01 17:00:50 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2012/11/01 17:00:50 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2012/11/01 17:00:47 | 000,148,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2012/11/01 17:00:47 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2012/11/01 08:17:04 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2012/11/01 08:09:37 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2012/10/31 20:48:35 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012/10/31 20:48:35 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2012/10/31 20:48:35 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2012/10/31 20:48:35 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2012/10/31 20:48:35 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2012/10/31 20:48:35 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2012/10/31 20:48:35 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2012/10/31 20:48:35 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2012/10/31 20:48:35 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/10/31 20:48:35 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2012/10/31 20:48:35 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2012/10/31 20:48:35 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2012/10/31 20:48:34 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2012/10/31 20:48:34 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/10/31 20:48:34 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012/10/31 20:48:34 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012/10/31 20:48:34 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2012/10/31 20:48:34 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2012/10/31 20:48:34 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2012/10/31 20:48:34 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2012/10/31 20:48:34 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/10/31 20:48:34 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2012/10/31 20:48:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2012/10/31 20:48:34 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2012/10/31 20:48:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2012/10/31 20:48:34 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2012/10/31 20:48:34 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2012/10/31 20:48:34 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2012/10/31 20:48:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2012/10/31 20:48:33 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012/10/31 20:48:33 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2012/10/31 20:48:33 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2012/10/31 20:48:33 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012/10/31 20:48:33 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2012/10/31 20:48:33 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2012/10/31 20:48:33 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2012/10/31 20:48:33 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2012/10/31 20:06:13 | 000,000,000 | ---D | C] -- C:\Program Files\ConvertHelper
[2012/10/31 02:19:10 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2012/10/31 02:18:38 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2012/10/31 02:18:37 | 000,240,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2012/10/31 02:18:37 | 000,187,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2012/10/31 02:18:12 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012/10/31 02:18:04 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2012/10/31 02:18:01 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2012/10/31 02:18:01 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2012/10/31 02:18:01 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2012/10/31 02:17:55 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2012/10/31 02:17:55 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2012/10/31 02:17:55 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2012/10/31 02:17:55 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2012/10/31 02:17:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2012/10/31 02:17:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2012/10/31 02:17:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2012/10/31 02:17:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2012/10/31 02:17:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2012/10/31 02:17:54 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2012/10/31 02:17:54 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2012/10/31 02:17:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2012/10/31 02:17:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2012/10/31 02:17:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2012/10/31 02:17:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2012/10/31 02:17:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2012/10/31 02:17:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2012/10/31 02:17:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2012/10/31 02:17:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2012/10/31 02:17:19 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
[2012/10/31 02:17:13 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2012/10/31 02:17:13 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2012/10/31 02:17:11 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2012/10/31 02:16:59 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2012/10/31 02:16:56 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2012/10/31 02:16:36 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2012/10/31 02:16:35 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2012/10/31 02:16:35 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2012/10/31 02:16:34 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2012/10/31 02:16:34 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2012/10/31 02:16:25 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2012/10/31 02:16:25 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2012/10/31 02:16:23 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2012/10/31 02:16:14 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2012/10/31 02:16:13 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2012/10/31 02:16:10 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2012/10/31 02:16:08 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2012/10/31 02:16:05 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2012/10/31 02:16:01 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2012/10/31 02:16:00 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2012/10/31 02:15:57 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2012/10/31 02:15:57 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2012/10/31 02:15:57 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2012/10/31 02:15:55 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2012/10/31 02:15:55 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2012/10/31 02:15:40 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2012/10/31 02:15:22 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012/10/31 02:15:22 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012/10/31 02:15:14 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2012/10/31 02:15:10 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2012/10/31 02:15:09 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2012/10/31 02:15:07 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2012/10/31 02:15:07 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2012/10/31 02:15:07 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2012/10/31 02:15:07 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2012/10/31 02:15:07 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2012/10/31 02:15:04 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2012/10/31 02:15:02 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2012/10/31 02:15:02 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2012/10/31 02:15:02 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
[2012/10/31 02:14:52 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012/10/31 02:14:47 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2012/10/31 02:14:42 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2012/10/31 02:14:42 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2012/10/31 02:14:38 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2012/10/31 02:14:37 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2012/10/31 02:10:22 | 000,219,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2012/10/31 02:06:53 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Macromedia
[2012/10/31 02:06:53 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Macromedia
[2012/10/31 02:06:53 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Adobe
[2012/10/31 02:06:39 | 000,697,272 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/10/31 02:06:39 | 000,073,656 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012/10/31 02:06:38 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2012/10/31 01:55:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
[2012/10/31 00:45:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2012/10/31 00:45:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012/10/31 00:45:29 | 000,821,736 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012/10/31 00:45:29 | 000,746,984 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2012/10/31 00:45:29 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/10/31 00:45:22 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/10/31 00:45:22 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/10/31 00:45:22 | 000,093,672 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2012/10/31 00:45:10 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012/10/31 00:44:27 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2012/10/31 00:21:11 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Mozilla
[2012/10/31 00:21:11 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Mozilla
[2012/10/31 00:20:59 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012/10/31 00:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012/10/31 00:20:58 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012/10/31 00:20:37 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2012/10/31 00:20:37 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2012/10/31 00:08:35 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2012/10/31 00:08:20 | 000,000,000 | -HSD | C] -- C:\Boot
[2012/10/31 00:01:31 | 000,237,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2012/10/31 00:00:41 | 000,000,000 | ---D | C] -- C:\Windows.old
[2012/10/30 23:43:55 | 000,398,336 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\TVWizudlg.exe
[2012/10/30 23:43:55 | 000,000,000 | ---D | C] -- C:\Windows\System32\Lang
[2012/10/30 23:43:54 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2012/10/30 23:41:34 | 001,002,008 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igxpun.exe
[2012/10/30 23:41:34 | 000,000,000 | ---D | C] -- C:\Windows\System32\x64
[2012/10/30 23:40:47 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2012/10/30 23:37:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012/10/30 23:37:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Searches
[2012/10/30 23:37:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012/10/30 23:37:40 | 000,000,000 | -H-D | C] -- C:\Users\Daves\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2012/10/30 23:37:24 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012/10/30 23:37:24 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012/10/30 23:37:20 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Identities
[2012/10/30 23:37:14 | 000,000,000 | R--D | C] -- C:\Users\Daves\Contacts
[2012/10/30 23:37:10 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2012/10/30 23:37:10 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2012/10/30 23:37:10 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2012/10/30 23:36:51 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\VirtualStore
[2012/10/30 23:36:46 | 000,000,000 | -HSD | C] -- C:\Users\Daves\AppData\Local\Temporary Internet Files
[2012/10/30 23:36:46 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Templates
[2012/10/30 23:36:46 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Start Menu
[2012/10/30 23:36:46 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Local Settings
[2012/10/30 23:36:46 | 000,000,000 | -HSD | C] -- C:\Users\Daves\AppData\Local\History
[2012/10/30 23:36:46 | 000,000,000 | -HSD | C] -- C:\Users\Daves\AppData\Local\Application Data
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\SendTo
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Recent
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\PrintHood
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\NetHood
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Documents\My Videos
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Documents\My Pictures
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Documents\My Music
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\My Documents
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Cookies
[2012/10/30 23:36:45 | 000,000,000 | -HSD | C] -- C:\Users\Daves\Application Data
[2012/10/30 23:36:43 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012/10/30 23:36:43 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2012/10/30 23:36:41 | 000,000,000 | --SD | C] -- C:\Users\Daves\AppData\Roaming\Microsoft
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Videos
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Saved Games
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Pictures
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Music
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Links
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Favorites
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Downloads
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Documents
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\Desktop
[2012/10/30 23:36:41 | 000,000,000 | R--D | C] -- C:\Users\Daves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012/10/30 23:36:41 | 000,000,000 | -H-D | C] -- C:\Users\Daves\AppData
[2012/10/30 23:36:41 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Temp
[2012/10/30 23:36:41 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Local\Microsoft
[2012/10/30 23:36:41 | 000,000,000 | ---D | C] -- C:\Users\Daves\AppData\Roaming\Media Center Programs
[2012/10/30 23:35:58 | 000,000,000 | -HSD | C] -- C:\Recovery
[2012/10/30 23:26:41 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012/10/30 23:23:33 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2012/10/25 03:12:26 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2012/10/25 03:12:26 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2012/10/24 13:58:48 | 000,000,000 | -HSD | C] -- C:\found.000
[2012/10/19 21:04:47 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2012/10/13 20:17:34 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2012/10/01 06:57:49 | 000,000,000 | -H-D | C] -- C:\$AVG
 
[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]
 
[2012/11/13 13:58:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/11/13 12:54:08 | 000,016,880 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/11/13 12:54:08 | 000,016,880 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/11/13 11:19:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/11/13 06:48:25 | 000,623,940 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/11/13 06:48:25 | 000,106,316 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/11/12 20:33:03 | 2407,403,520 | -HS- | M] () -- C:\hiberfil.sys
[2012/11/11 22:27:39 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012/11/10 19:16:52 | 000,450,084 | ---- | M] () -- C:\Users\Daves\Documents\bedtime.sfk
[2012/11/10 19:16:50 | 230,409,336 | ---- | M] () -- C:\Users\Daves\Documents\bedtime.wav
[2012/11/07 02:51:18 | 000,000,431 | ---- | M] () -- C:\Users\Daves\Desktop\CD Drive - Shortcut (2).lnk
[2012/11/07 02:50:27 | 000,000,431 | ---- | M] () -- C:\Users\Daves\Desktop\CD Drive - Shortcut.lnk
[2012/11/07 00:54:23 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/11/07 00:54:23 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012/11/05 07:04:17 | 000,002,058 | ---- | M] () -- C:\Users\Daves\Documents\Document.rtf
[2012/11/04 07:12:56 | 000,342,892 | ---- | M] () -- C:\Users\Daves\Documents\123456789.sfk
[2012/11/04 07:12:48 | 175,526,244 | ---- | M] () -- C:\Users\Daves\Documents\123456789.wav
[2012/11/03 20:57:55 | 000,001,173 | ---- | M] () -- C:\Users\Public\Desktop\Sound Forge Audio Studio.lnk
[2012/11/02 23:45:49 | 000,001,753 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/11/02 11:47:29 | 000,000,965 | ---- | M] () -- C:\Users\Daves\Desktop\Audacity.lnk
[2012/11/01 08:13:06 | 000,001,407 | ---- | M] () -- C:\Users\Daves\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/11/01 08:11:52 | 000,266,808 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/10/31 20:48:35 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012/10/31 20:48:35 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2012/10/31 20:48:35 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2012/10/31 20:48:35 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2012/10/31 20:48:35 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2012/10/31 20:48:35 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2012/10/31 20:48:35 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2012/10/31 20:48:35 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2012/10/31 20:48:35 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/10/31 20:48:35 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2012/10/31 20:48:35 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2012/10/31 20:48:35 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2012/10/31 20:48:34 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2012/10/31 20:48:34 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/10/31 20:48:34 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012/10/31 20:48:34 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012/10/31 20:48:34 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2012/10/31 20:48:34 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2012/10/31 20:48:34 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2012/10/31 20:48:34 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2012/10/31 20:48:34 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/10/31 20:48:34 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2012/10/31 20:48:34 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2012/10/31 20:48:34 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2012/10/31 20:48:34 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012/10/31 20:48:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2012/10/31 20:48:34 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2012/10/31 20:48:34 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2012/10/31 20:48:34 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2012/10/31 20:48:34 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2012/10/31 20:48:34 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2012/10/31 20:48:33 | 001,800,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012/10/31 20:48:33 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2012/10/31 20:48:33 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2012/10/31 20:48:33 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2012/10/31 20:48:33 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2012/10/31 20:48:33 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2012/10/31 20:48:33 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2012/10/31 06:44:15 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012/10/31 01:55:15 | 000,001,333 | ---- | M] () -- C:\Users\Daves\Application Data\Microsoft\Internet Explorer\Quick Launch\Wondershare Photo Recovery.lnk
[2012/10/31 01:55:15 | 000,001,289 | ---- | M] () -- C:\Users\Public\Desktop\Wondershare Photo Recovery.lnk
[2012/10/31 01:43:49 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/10/31 00:45:16 | 000,093,672 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2012/10/31 00:45:13 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/10/31 00:45:13 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/10/31 00:45:13 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/10/31 00:45:12 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012/10/31 00:45:12 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2012/10/31 00:21:06 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/10/31 00:21:01 | 000,001,105 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/10/31 00:08:23 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012/10/31 00:08:21 | 000,000,355 | RHS- | M] () -- C:\Boot.ini.saved
[2012/10/30 23:28:11 | 000,122,093 | ---- | M] () -- C:\Windows\System32\license.rtf
[2012/10/25 03:12:26 | 000,094,208 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2012/10/25 03:12:26 | 000,069,632 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2012/10/24 23:27:54 | 000,000,211 | -H-- | M] () -- C:\Boot.BAK
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/11/11 22:27:39 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012/11/10 19:16:50 | 000,450,084 | ---- | C] () -- C:\Users\Daves\Documents\bedtime.sfk
[2012/11/10 19:16:38 | 230,409,336 | ---- | C] () -- C:\Users\Daves\Documents\bedtime.wav
[2012/11/07 02:51:18 | 000,000,431 | ---- | C] () -- C:\Users\Daves\Desktop\CD Drive - Shortcut (2).lnk
[2012/11/07 02:50:27 | 000,000,431 | ---- | C] () -- C:\Users\Daves\Desktop\CD Drive - Shortcut.lnk
[2012/11/05 07:04:17 | 000,002,058 | ---- | C] () -- C:\Users\Daves\Documents\Document.rtf
[2012/11/04 07:12:48 | 000,342,892 | ---- | C] () -- C:\Users\Daves\Documents\123456789.sfk
[2012/11/04 07:12:44 | 175,526,244 | ---- | C] () -- C:\Users\Daves\Documents\123456789.wav
[2012/11/03 20:57:55 | 000,001,173 | ---- | C] () -- C:\Users\Public\Desktop\Sound Forge Audio Studio.lnk
[2012/11/02 23:45:49 | 000,001,753 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/11/02 11:47:29 | 000,000,977 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
[2012/11/02 11:47:29 | 000,000,965 | ---- | C] () -- C:\Users\Daves\Desktop\Audacity.lnk
[2012/11/01 20:57:17 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012/10/31 20:48:34 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2012/10/31 06:44:15 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012/10/31 02:06:41 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/10/31 01:55:15 | 000,001,333 | ---- | C] () -- C:\Users\Daves\Application Data\Microsoft\Internet Explorer\Quick Launch\Wondershare Photo Recovery.lnk
[2012/10/31 01:55:15 | 000,001,289 | ---- | C] () -- C:\Users\Public\Desktop\Wondershare Photo Recovery.lnk
[2012/10/31 01:43:49 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/10/31 00:21:06 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012/10/31 00:21:01 | 000,001,117 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012/10/31 00:21:01 | 000,001,105 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/10/31 00:20:49 | 000,002,117 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012/10/31 00:14:14 | 000,001,407 | ---- | C] () -- C:\Users\Daves\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/10/31 00:08:23 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2012/10/31 00:08:21 | 000,000,211 | -H-- | C] () -- C:\Boot.BAK
[2012/10/31 00:08:20 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2012/10/30 23:43:55 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2012/10/30 23:43:55 | 000,121,232 | ---- | C] () -- C:\Windows\System32\IScrNB.bmp
[2012/10/30 23:37:42 | 000,001,413 | ---- | C] () -- C:\Users\Daves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012/10/30 23:36:42 | 000,000,290 | ---- | C] () -- C:\Users\Daves\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2012/10/30 23:36:42 | 000,000,272 | ---- | C] () -- C:\Users\Daves\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2012/10/30 23:27:58 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012/10/30 23:27:43 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012/10/30 23:23:25 | 2407,403,520 | -HS- | C] () -- C:\hiberfil.sys
[2010/11/20 13:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009/07/13 20:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 20:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 13:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 17:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >