Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-02-2014
Ran by blade (ATTENTION: The logged in user is not administrator) on FRANK-PC on 20-02-2014 11:26:14
Running from C:\Users\blade\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Support.com, Inc.) C:\Program Files\AOL Computer Checkup\sdcCont.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files\RocketDock\RocketDock.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(IDEVFH) C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\extensions\{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B}\components\afom.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [MakiwaraNotify] - C:\Program Files\AOL Computer Checkup\sdccont.exe [40384 2012-11-05] (Support.com, Inc.)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2013-12-29] (RealNetworks, Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKLM\...\Run: [Windows COM Host] - C:\{$3639-2282-3518-6023$}\iexplorer_.exe -rundll32 /SYSTEM32 "C:\Windows\System32\taskmgr.exe" "C:\Program Files\Microsoft\Windows"
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-appf?lic=NFVZOVgtTlNWVkwtTzRCWlEtUUlNQ0wtUVREQ0gtNElKTUg"&"inst=NzctNjMyMjAyOTkxLVhPMTArMTItRjEwTTEwRCsxLUxJQysyMi1TUDErMS1TUDFUQisxLUZMMTArMS1TUDFTMisxLVNVRCsxLVMxSSsxLVNVMysxLUREVCs0Mjk0OTE5ODIzLUxTRCsyLUREMTBGKzEtU1QxMEZBUFArMQ"&"prod=90"&"ver=10.0.1410
HKU\S-1-5-21-1427241637-3662617669-1930280946-1008\...\Run: [RocketDock] - C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1427241637-3662617669-1930280946-1008\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1427241637-3662617669-1930280946-1008\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
IFEO\avcenter.exe: [Debugger] nsjw.exe
IFEO\avguard.exe: [Debugger] nsjw.exe
IFEO\avp.exe: [Debugger] nsjw.exe
IFEO\bdagent.exe: [Debugger] nsjw.exe
IFEO\ccuac.exe: [Debugger] nsjw.exe
IFEO\ComboFix.exe: [Debugger] nsjw.exe
IFEO\egui.exe: [Debugger] nsjw.exe
IFEO\hijackthis.exe: [Debugger] nsjw.exe
IFEO\keyscrambler.exe: [Debugger] nsjw.exe
IFEO\mbam.exe: [Debugger] nsjw.exe
IFEO\MpCmdRun.exe: [Debugger] nsjw.exe
IFEO\MSASCui.exe: [Debugger] nsjw.exe
IFEO\MsMpEng.exe: [Debugger] nsjw.exe
IFEO\msseces.exe: [Debugger] nsjw.exe
IFEO\spybotsd.exe: [Debugger] nsjw.exe
IFEO\wireshark.exe: [Debugger] nsjw.exe
IFEO\zlclient.exe: [Debugger] nsjw.exe
GroupPolicyUsers\S-1-5-21-1427241637-3662617669-1930280946-1008\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x960F9FB2162ECF01
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.myheritage.com
URLSearchHook: HKLM - AOL Toolbar Search Class - {f0e98552-8e47-4c6c-9b3a-11ab0549f94d} - C:\Program Files\AOL Toolbar\aoltb.dll (AOL Inc.)
SearchScopes: HKLM - DefaultScope {BE28C22E-F666-424d-B5FD-125C4AFEE34E} URL = http://search.myheritage.com?orig=ds&q={searchTerms}
SearchScopes: HKLM - {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=843&query={searchTerms}&invocationType=tb50-ie-aolrt-chromesbox-en-us&tb_uuid=20130105061243968&tb_oid=05-01-2013&tb_mrud=05-01-2013
SearchScopes: HKLM - {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm0039Nus&ptb=E3C13CCC-C3D4-4C98-AF44-517A76638301&psa=&ind=2011101519&ptnrS=XPxdm0039Nus&si=CKyhvZ3d6asCFRVOgwodjlz9wQ&st=sb&n=77def94f&searchfor={searchTerms}
SearchScopes: HKLM - {BE28C22E-F666-424d-B5FD-125C4AFEE34E} URL = http://search.myheritage.com?orig=ds&q={searchTerms}
SearchScopes: HKCU - Yahoo! URL = http://us.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=iobit-trans
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: MHTBPos00 Class - {0C37B053-FD68-456a-82E1-D788EE342E6F} - C:\Program Files\Family Toolbar\tbcore3.dll ()
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll No File
BHO: AOL Toolbar Loader - {3ef64538-8b54-4573-b48f-4d34b0238ab2} - C:\Program Files\AOL Toolbar\aoltb.dll (AOL Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Family Toolbar - {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - C:\Program Files\Family Toolbar\tbcore3.dll ()
Toolbar: HKLM - AOL Toolbar - {ba00b7b1-0351-477a-b948-23e3ee5a73d4} - C:\Program Files\AOL Toolbar\aoltb.dll (AOL Inc.)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1244983639212
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1244983679197
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Windows\system32\Sendori.dll [321384] (Sendori)
Winsock: Catalog9 02 C:\Windows\system32\Sendori.dll [321384] (Sendori)
Winsock: Catalog9 03 C:\Windows\system32\Sendori.dll [321384] (Sendori)
Winsock: Catalog9 04 C:\Windows\system32\Sendori.dll [321384] (Sendori)
Winsock: Catalog9 27 C:\Windows\system32\Sendori.dll [321384] (Sendori)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @ei.VideoScavenger_1e.com/Plugin - C:\Program Files\VideoScavenger_1eEI\Installr\1.bin\NP1eEISB.dll (VideoScavenger)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdnu.dll (AOL LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdnupdater2.dll (AOL LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF SearchPlugin: C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\searchplugins\torrentz-search.xml
FF SearchPlugin: C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\searchplugins\youtube-video-search.xml
FF Extension: Memory Fox - C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\Extensions\{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B} [2013-03-31]
FF Extension: MEGA - C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\Extensions\firefox@mega.co.nz.xpi [2013-12-07]
FF Extension: UnloadTab - C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\Extensions\unloadtab@firefox.ext.xpi [2013-08-30]
FF Extension: Easy YouTube Video Downloader - C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-03-29]
FF Extension: Adblock Plus - C:\Users\blade\AppData\Roaming\Mozilla\Firefox\Profiles\27tbs75q.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-03-29]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-16]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-01]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-07-05]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-07-05]

========================== Services (Whitelisted) =================

S4 AOL Computer Checkup; C:\Program Files\AOL Computer Checkup\SDCService.exe [406976 2012-11-05] (Support.com, Inc.)
S4 Application Sendori; C:\Program Files\Sendori\SendoriSvc.exe [118632 2012-12-10] (Sendori, Inc.)
R2 lmhosts; C:\Windows\system32\svchost.exe [20992 2009-07-13] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [20992 2009-07-13] (Microsoft Corporation)
S4 npggsvc; C:\Windows\system32\GameMon.des [3110016 2009-06-29] (INCA Internet Co., Ltd.)
R2 nsi; C:\Windows\system32\svchost.exe [20992 2009-07-13] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S4 Service Sendori; C:\Program Files\Sendori\Sendori.Service.exe [14696 2012-12-10] (sendori)
S4 sndappv2; C:\Program Files\Sendori\sndappv2.exe [3569512 2012-12-10] (Sendori)
R2 Skype C2C Service; "C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe" [X]

==================== Drivers (Whitelisted) ====================

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [428088 2012-01-10] ()
U3 avi49oxn; C:\Windows\system32\Drivers\avi49oxn.sys [0 ] (Microsoft Corporation)
S2 adfs; No ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-20 11:26 - 2014-02-20 11:26 - 00018121 _____ () C:\Users\blade\Downloads\FRST.txt
2014-02-20 11:06 - 2014-02-20 11:06 - 05183886 _____ (Swearware) C:\Users\blade\Desktop\gotcha.exe
2014-02-20 10:17 - 2014-02-20 10:17 - 00000000 ____D () C:\_OTL
2014-02-20 10:16 - 2014-02-20 10:16 - 00000128 _____ () C:\Users\blade\Desktop\free resources.txt
2014-02-20 10:02 - 2014-02-20 10:35 - 00080110 _____ () C:\Users\blade\Downloads\OTL.Txt
2014-02-20 10:02 - 2014-02-20 10:35 - 00066474 _____ () C:\Users\blade\Downloads\Extras.Txt
2014-02-20 09:43 - 2014-02-20 09:43 - 00602112 _____ (OldTimer Tools) C:\Users\blade\Downloads\OTL.exe
2014-02-20 08:53 - 2014-02-20 08:54 - 00027400 _____ () C:\Users\blade\Downloads\Addition.txt
2014-02-20 08:50 - 2014-02-20 11:26 - 00000000 ____D () C:\FRST
2014-02-20 08:50 - 2014-02-20 08:50 - 01142784 _____ (Farbar) C:\Users\blade\Downloads\FRST.exe
2014-02-20 03:47 - 2014-02-20 03:47 - 00002468 _____ () C:\Users\blade\Downloads\HOW_NONVIOLENCE_PROTECTS_THE_STATE_-_Peter_Gelderloos.4355288.TPB.torrent
2014-02-20 01:48 - 2014-02-20 01:50 - 00000000 ____D () C:\VIPRERESCUE
2014-02-20 01:41 - 2014-02-20 01:46 - 151138304 _____ () C:\Users\blade\Downloads\VIPRERescue26626.exe
2014-02-20 01:06 - 2014-02-20 01:06 - 00000194 _____ () C:\Users\blade\Downloads\hosts-perm.bat
2014-02-20 01:03 - 2014-02-20 01:29 - 00006494 _____ () C:\Users\blade\Desktop\Rkill.txt
2014-02-20 01:03 - 2014-02-20 01:27 - 00000000 ____D () C:\Users\blade\Desktop\rkill
2014-02-20 01:02 - 2014-02-20 01:02 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\blade\Downloads\rkill.exe
2014-02-20 00:50 - 2014-02-20 00:50 - 04721920 _____ (Piriform Ltd) C:\Users\blade\Downloads\ccsetup410.exe
2014-02-20 00:49 - 2014-02-20 00:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\blade\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-19 22:44 - 2014-02-19 22:46 - 127631360 _____ () C:\Users\blade\Downloads\avg_arl_cdi_all_120_140203a7055.iso
2014-02-19 22:35 - 2014-02-19 22:35 - 00000000 ____D () C:\Users\blade\AppData\Roaming\RealNetworks
2014-02-19 20:42 - 2014-02-19 21:16 - 00003032 _____ () C:\Users\Mike\AppData\Roaming\msconfig.ini
2014-02-19 20:10 - 2014-02-19 20:10 - 00000000 ____D () C:\Adobe Photoshop CS6 Extended
2014-02-19 19:54 - 2014-02-19 20:06 - 1396346733 ____R () C:\Users\blade\Downloads\Adobe Photoshop CS6 Extended.exe
2014-02-19 19:38 - 2014-02-19 19:38 - 00005401 _____ () C:\Users\blade\Downloads\front_page_news.zip
2014-02-19 18:22 - 2014-02-19 18:22 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ANDROIDUSB_01007.Wdf
2014-02-19 17:07 - 2014-02-19 20:36 - 00012800 _____ () C:\Users\Frank\AppData\Roaming\msconfig.ini
2014-02-19 16:13 - 2014-02-19 16:13 - 06663680 _____ () C:\Users\blade\Desktop\RemoveWAT.exe
2014-02-19 16:13 - 2014-02-19 16:13 - 04609827 _____ () C:\Users\blade\Downloads\Win 7 Recorret 2.ZIP
2014-02-19 15:58 - 2014-02-19 14:45 - 00000000 ____D () C:\Users\blade\Downloads\Windows 7 Activation Program
2014-02-19 15:57 - 2014-02-19 15:57 - 00157391 _____ () C:\Users\blade\Downloads\Windows 7 Activation Program.zip
2014-02-16 13:02 - 2014-02-16 13:02 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-05 16:34 - 2014-02-05 16:34 - 00000000 ____D () C:\Program Files\File Shredder
2014-02-05 16:33 - 2014-02-05 16:33 - 02317839 _____ (PowTools ) C:\Users\blade\Downloads\file_shredder_setup.exe
2014-01-30 18:20 - 2014-01-30 18:20 - 00001789 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-30 18:20 - 2012-08-21 13:01 - 00026840 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-01-30 18:19 - 2014-01-30 18:20 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-24 23:41 - 2014-01-24 23:41 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Real
2014-01-24 14:09 - 2014-01-24 14:09 - 00000000 ____D () C:\Users\brent.Frank-PC\AppData\Roaming\Malwarebytes

==================== One Month Modified Files and Folders =======

2014-02-20 11:26 - 2014-02-20 11:26 - 00018121 _____ () C:\Users\blade\Downloads\FRST.txt
2014-02-20 11:26 - 2014-02-20 08:50 - 00000000 ____D () C:\FRST
2014-02-20 11:25 - 2013-03-29 17:04 - 00016016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-20 11:25 - 2013-03-29 17:04 - 00016016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-20 11:06 - 2014-02-20 11:06 - 05183886 _____ (Swearware) C:\Users\blade\Desktop\gotcha.exe
2014-02-20 10:35 - 2014-02-20 10:02 - 00080110 _____ () C:\Users\blade\Downloads\OTL.Txt
2014-02-20 10:35 - 2014-02-20 10:02 - 00066474 _____ () C:\Users\blade\Downloads\Extras.Txt
2014-02-20 10:25 - 2011-09-19 22:10 - 38037273 _____ () C:\Windows\setupact.log
2014-02-20 10:24 - 2010-03-15 00:55 - 01973512 _____ () C:\Windows\WindowsUpdate.log
2014-02-20 10:17 - 2014-02-20 10:17 - 00000000 ____D () C:\_OTL
2014-02-20 10:16 - 2014-02-20 10:16 - 00000128 _____ () C:\Users\blade\Desktop\free resources.txt
2014-02-20 09:43 - 2014-02-20 09:43 - 00602112 _____ (OldTimer Tools) C:\Users\blade\Downloads\OTL.exe
2014-02-20 08:54 - 2014-02-20 08:53 - 00027400 _____ () C:\Users\blade\Downloads\Addition.txt
2014-02-20 08:50 - 2014-02-20 08:50 - 01142784 _____ (Farbar) C:\Users\blade\Downloads\FRST.exe
2014-02-20 03:53 - 2013-03-31 20:31 - 00000000 ____D () C:\Users\blade\AppData\Roaming\uTorrent
2014-02-20 03:47 - 2014-02-20 03:47 - 00002468 _____ () C:\Users\blade\Downloads\HOW_NONVIOLENCE_PROTECTS_THE_STATE_-_Peter_Gelderloos.4355288.TPB.torrent
2014-02-20 03:46 - 2012-01-24 01:41 - 00000000 ____D () C:\Users\blade\AppData\Local\PMB Files
2014-02-20 03:46 - 2012-01-24 01:41 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-20 01:50 - 2014-02-20 01:48 - 00000000 ____D () C:\VIPRERESCUE
2014-02-20 01:46 - 2014-02-20 01:41 - 151138304 _____ () C:\Users\blade\Downloads\VIPRERescue26626.exe
2014-02-20 01:29 - 2014-02-20 01:03 - 00006494 _____ () C:\Users\blade\Desktop\Rkill.txt
2014-02-20 01:27 - 2014-02-20 01:03 - 00000000 ____D () C:\Users\blade\Desktop\rkill
2014-02-20 01:06 - 2014-02-20 01:06 - 00000194 _____ () C:\Users\blade\Downloads\hosts-perm.bat
2014-02-20 01:02 - 2014-02-20 01:02 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\blade\Downloads\rkill.exe
2014-02-20 00:52 - 2012-01-10 22:26 - 00000000 ____D () C:\Users\blade\AppData\Roaming\Mumble
2014-02-20 00:50 - 2014-02-20 00:50 - 04721920 _____ (Piriform Ltd) C:\Users\blade\Downloads\ccsetup410.exe
2014-02-20 00:50 - 2014-02-20 00:49 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\blade\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-19 22:46 - 2014-02-19 22:44 - 127631360 _____ () C:\Users\blade\Downloads\avg_arl_cdi_all_120_140203a7055.iso
2014-02-19 22:41 - 2012-01-10 17:28 - 00000000 ____D () C:\Users\blade\AppData\Roaming\DAEMON Tools Lite
2014-02-19 22:35 - 2014-02-19 22:35 - 00000000 ____D () C:\Users\blade\AppData\Roaming\RealNetworks
2014-02-19 22:31 - 2010-03-29 18:06 - 00001232 __RSH () C:\Users\blade\ntuser.pol
2014-02-19 22:31 - 2010-03-14 23:37 - 00000000 ____D () C:\Users\blade
2014-02-19 21:17 - 2010-05-11 15:54 - 00000632 __RSH () C:\Users\Mike\ntuser.pol
2014-02-19 21:17 - 2010-05-11 15:54 - 00000000 ____D () C:\Users\Mike
2014-02-19 21:16 - 2014-02-19 20:42 - 00003032 _____ () C:\Users\Mike\AppData\Roaming\msconfig.ini
2014-02-19 21:14 - 2011-07-24 17:54 - 00000000 ____D () C:\Users\Frank\AppData\Roaming\Skype
2014-02-19 21:13 - 2010-03-16 15:47 - 00001232 __RSH () C:\Users\Frank\ntuser.pol
2014-02-19 21:13 - 2010-03-14 23:37 - 00000000 ____D () C:\Users\Frank
2014-02-19 20:36 - 2014-02-19 17:07 - 00012800 _____ () C:\Users\Frank\AppData\Roaming\msconfig.ini
2014-02-19 20:26 - 2009-06-13 22:28 - 00000000 ____D () C:\Users\Frank\AppData\Roaming\Adobe
2014-02-19 20:23 - 2009-06-13 22:28 - 00000000 ____D () C:\Program Files\Adobe
2014-02-19 20:21 - 2009-09-28 18:57 - 00000000 ____D () C:\Users\blade\AppData\Local\Adobe
2014-02-19 20:10 - 2014-02-19 20:10 - 00000000 ____D () C:\Adobe Photoshop CS6 Extended
2014-02-19 20:06 - 2014-02-19 19:54 - 1396346733 ____R () C:\Users\blade\Downloads\Adobe Photoshop CS6 Extended.exe
2014-02-19 19:58 - 2009-06-13 22:28 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-19 19:47 - 2010-03-29 18:07 - 00071824 _____ () C:\Users\blade\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-19 19:46 - 2009-07-13 18:33 - 02255904 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-19 19:38 - 2014-02-19 19:38 - 00005401 _____ () C:\Users\blade\Downloads\front_page_news.zip
2014-02-19 18:44 - 2010-03-14 23:36 - 00739790 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-19 18:22 - 2014-02-19 18:22 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ANDROIDUSB_01007.Wdf
2014-02-19 16:13 - 2014-02-19 16:13 - 06663680 _____ () C:\Users\blade\Desktop\RemoveWAT.exe
2014-02-19 16:13 - 2014-02-19 16:13 - 04609827 _____ () C:\Users\blade\Downloads\Win 7 Recorret 2.ZIP
2014-02-19 15:57 - 2014-02-19 15:57 - 00157391 _____ () C:\Users\blade\Downloads\Windows 7 Activation Program.zip
2014-02-19 15:52 - 2013-01-24 12:51 - 00000342 _____ () C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job
2014-02-19 15:52 - 2011-04-03 13:47 - 00000880 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-19 15:52 - 2009-07-13 18:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-19 14:45 - 2014-02-19 15:58 - 00000000 ____D () C:\Users\blade\Downloads\Windows 7 Activation Program
2014-02-18 19:47 - 2012-08-25 19:42 - 00000946 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1427241637-3662617669-1930280946-1007UA.job
2014-02-18 19:47 - 2012-08-25 19:42 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1427241637-3662617669-1930280946-1007Core.job
2014-02-18 19:40 - 2012-05-19 11:23 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-18 19:22 - 2011-04-03 13:47 - 00000884 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-17 16:52 - 2012-05-11 17:42 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-16 13:02 - 2014-02-16 13:02 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-16 12:37 - 2011-09-19 22:09 - 00060298 _____ () C:\Windows\PFRO.log
2014-02-14 21:40 - 2013-01-04 20:10 - 00000000 ____D () C:\Program Files\AOL Computer Checkup
2014-02-14 21:39 - 2013-01-04 20:16 - 00000000 ____D () C:\Windows\SystemRepair
2014-02-09 14:56 - 2009-06-24 08:49 - 00000000 ____D () C:\Users\Frank\AppData\Roaming\Real
2014-02-05 16:34 - 2014-02-05 16:34 - 00000000 ____D () C:\Program Files\File Shredder
2014-02-05 16:33 - 2014-02-05 16:33 - 02317839 _____ (PowTools ) C:\Users\blade\Downloads\file_shredder_setup.exe
2014-01-30 18:20 - 2014-01-30 18:20 - 00001789 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-01-30 18:20 - 2014-01-30 18:19 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-30 18:20 - 2010-08-04 19:27 - 00000000 ____D () C:\Program Files\iTunes
2014-01-30 18:19 - 2010-08-04 19:27 - 00000000 ____D () C:\Program Files\iPod
2014-01-30 18:17 - 2010-08-04 19:24 - 00000000 ____D () C:\Program Files\Bonjour
2014-01-30 18:17 - 2009-06-29 08:16 - 00000000 ____D () C:\Program Files\Apple Software Update
2014-01-30 18:16 - 2009-06-29 08:16 - 00000000 ____D () C:\ProgramData\Apple
2014-01-26 19:42 - 2010-03-16 12:08 - 00004584 __RSH () C:\Users\brent.Frank-PC\ntuser.pol
2014-01-26 19:42 - 2010-03-14 23:37 - 00000000 ____D () C:\Users\brent.Frank-PC
2014-01-24 23:41 - 2014-01-24 23:41 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Real
2014-01-24 16:20 - 2012-04-17 02:10 - 00000000 ____D () C:\Users\brent.Frank-PC\AppData\Roaming\MyHeritage
2014-01-24 14:09 - 2014-01-24 14:09 - 00000000 ____D () C:\Users\brent.Frank-PC\AppData\Roaming\Malwarebytes

Files to move or delete:
====================
C:\Users\Frank\AppData\Roaming\msconfig.ini
C:\Users\Mike\AppData\Roaming\msconfig.ini
C:\ProgramData\PKP_DLdu.DAT


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================