OTL logfile created on: 08/06/2014 23:00:25 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Steven White\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17041)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
 
15.94 Gb Total Physical Memory | 14.14 Gb Available Physical Memory | 88.70% Memory free
31.89 Gb Paging File | 30.12 Gb Available in Paging File | 94.45% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 1862.92 Gb Total Space | 1509.95 Gb Free Space | 81.05% Space Free | Partition Type: NTFS
Drive D: | 384.75 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive G: | 1863.01 Gb Total Space | 492.81 Gb Free Space | 26.45% Space Free | Partition Type: NTFS
Drive H: | 1862.98 Gb Total Space | 984.41 Gb Free Space | 52.84% Space Free | Partition Type: NTFS
 
Computer Name: STEVENWHITE-PC | User Name: Steven White | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014/06/08 22:58:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Steven White\Downloads\OTL.exe
PRC - [2014/05/14 20:44:15 | 001,863,856 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
PRC - [2014/05/11 00:13:18 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014/05/14 20:44:14 | 016,361,136 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
MOD - [2014/05/11 00:13:17 | 003,839,088 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2014/06/08 18:49:57 | 000,127,752 | ---- | M] (SurfRight B.V.) [Auto | Stopped] -- C:\Program Files\HitmanPro\hmpsched.exe -- (HitmanProScheduler)
SRV:[b]64bit:[/b] - [2014/03/06 09:29:14 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2013/12/11 19:03:14 | 000,513,736 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareService.exe -- (LavasoftAdAwareService11)
SRV:[b]64bit:[/b] - [2013/05/27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2010/11/29 15:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2014/05/29 18:36:52 | 000,543,424 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014/05/14 20:44:16 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/05/11 07:52:43 | 000,265,040 | R--- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe -- (N360)
SRV - [2014/05/11 00:13:17 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/05/09 16:39:04 | 001,042,808 | R--- | M] (Western Digital Technologies, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe -- (WDBackup)
SRV - [2014/05/09 16:21:56 | 000,295,800 | R--- | M] (Western Digital Technologies, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe -- (WDDriveService)
SRV - [2014/03/06 21:13:45 | 000,477,960 | ---- | M] (BitRaider, LLC) [On_Demand | Stopped] -- C:\ProgramData\BitRaider\BRSptSvc.exe -- (BRSptSvc)
SRV - [2014/03/04 12:32:56 | 000,411,936 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013/12/21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/11/30 20:26:34 | 000,075,136 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013/10/01 13:14:40 | 005,087,584 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2013/09/05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/08/14 16:19:22 | 000,039,056 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013/06/26 20:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 20:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2013/03/15 16:07:56 | 000,395,640 | ---- | M] (Eastman Kodak Company) [Auto | Stopped] -- C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe -- (Kodak AiO Network Discovery Service)
SRV - [2013/01/15 14:07:42 | 000,780,152 | ---- | M] (Eastman Kodak Company) [Auto | Stopped] -- C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe -- (Kodak AiO Status Monitor Service)
SRV - [2011/12/02 07:14:16 | 000,007,168 | R--- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2011/05/24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011/04/26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2014/05/12 07:26:10 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:[b]64bit:[/b] - [2014/05/12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2014/04/24 22:14:00 | 000,138,664 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AnyDVD.sys -- (AnyDVD)
DRV:[b]64bit:[/b] - [2014/04/20 11:45:44 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:[b]64bit:[/b] - [2014/03/20 23:02:52 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2014/03/04 05:18:12 | 001,148,120 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\symefa64.sys -- (SymEFA)
DRV:[b]64bit:[/b] - [2014/02/18 02:32:41 | 000,593,112 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\symnets.sys -- (SymNetS)
DRV:[b]64bit:[/b] - [2014/02/13 02:59:49 | 000,875,736 | ---- | M] (Symantec Corporation) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\srtsp64.sys -- (SRTSP)
DRV:[b]64bit:[/b] - [2014/02/08 00:52:00 | 000,177,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:[b]64bit:[/b] - [2013/10/02 03:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2013/09/27 03:45:56 | 000,264,280 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\ironx64.sys -- (SymIRON)
DRV:[b]64bit:[/b] - [2013/09/26 03:50:25 | 000,162,392 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\ccsetx64.sys -- (ccSet_N360)
DRV:[b]64bit:[/b] - [2013/09/10 03:47:26 | 000,493,656 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\symds64.sys -- (SymDS)
DRV:[b]64bit:[/b] - [2013/09/10 02:49:49 | 000,036,952 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\srtspx64.sys -- (SRTSPX)
DRV:[b]64bit:[/b] - [2013/07/17 18:10:52 | 000,329,800 | ---- | M] (BitDefender S.R.L.) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Trufos.sys -- (Trufos)
DRV:[b]64bit:[/b] - [2013/07/10 14:20:44 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:[b]64bit:[/b] - [2013/06/26 20:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:[b]64bit:[/b] - [2013/06/26 20:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:[b]64bit:[/b] - [2013/06/26 20:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:[b]64bit:[/b] - [2013/06/26 20:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:[b]64bit:[/b] - [2013/03/04 13:24:27 | 000,040,344 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:[b]64bit:[/b] - [2012/08/23 15:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2012/08/23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2012/08/23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2012/03/01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012/02/03 14:01:20 | 000,677,480 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2012/01/06 10:44:12 | 000,049,760 | ---- | M] (Asmedia Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\asahci64.sys -- (asahci64)
DRV:[b]64bit:[/b] - [2011/12/02 07:06:04 | 000,023,832 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorF.sys -- (iaStorF)
DRV:[b]64bit:[/b] - [2011/12/02 07:06:00 | 000,565,528 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:[b]64bit:[/b] - [2011/11/03 11:10:42 | 000,395,752 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmtxhci.sys -- (asmtxhci)
DRV:[b]64bit:[/b] - [2011/11/03 11:10:42 | 000,130,536 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmthub3.sys -- (asmthub3)
DRV:[b]64bit:[/b] - [2011/09/22 09:49:56 | 000,056,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2011/09/05 10:28:16 | 000,178,176 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010/11/29 15:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:[b]64bit:[/b] - [2010/11/21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:[b]64bit:[/b] - [2010/11/21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2010/11/21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2010/11/21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009/08/21 01:52:10 | 000,079,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:[b]64bit:[/b] - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/07/14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2009/07/14 01:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2009/07/14 01:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2009/07/13 22:59:33 | 005,020,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2009/06/10 21:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:[b]64bit:[/b] - [2009/06/10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:[b]64bit:[/b] - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2014/06/07 10:10:06 | 002,099,288 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140607.001_3ff\ex64.sys -- (NAVEX15)
DRV - [2014/06/07 10:10:06 | 000,126,040 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140607.001_3ff\eng64.sys -- (NAVENG)
DRV - [2014/05/10 02:07:23 | 001,530,160 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2014/05/09 16:15:12 | 000,525,016 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20140606.002_430\IDSviA64.sys -- (IDSVia64)
DRV - [2014/04/24 22:14:00 | 000,138,664 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2014/03/06 22:36:54 | 000,075,048 | ---- | M] (BitRaider) [File_System | On_Demand | Stopped] -- C:\ProgramData\BitRaider\BRDriver64.sys -- (BRDriver64)
DRV - [2014/02/07 02:00:00 | 000,484,952 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {21A51130-7285-49FE-B3F6-2385CC71CDEA}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{21A51130-7285-49FE-B3F6-2385CC71CDEA}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}: "URL" = http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_wnzp_14_22_ff&cd=2XzuyEtN2Y1L1Qzu0CzzyCtDtDtD0C0C0D0CyByDyE0Azz0AtN0D0Tzu0SzzyBzztN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtC0EyBzztCtAzytGyD0B0EyDtGyDtAtDtDtG0DtDzytDtGtCyDyDzz0EtC0A0FzytCtB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0DtAtAtAzztByDtGyCtDyE0FtGyE0F0FyCtGtC0F0F0CtGtB0E0CtDtD0AyE0CyE0A0EyB2Q&cr=718745324&ir=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{21A51130-7285-49FE-B3F6-2385CC71CDEA}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=ds&q={searchTerms}&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=ds&q={searchTerms}&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=hp&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=ds&q={searchTerms}&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=ds&q={searchTerms}&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKCU\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=ds&q={searchTerms}&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000
IE - HKCU\..\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}: "URL" = http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_wnzp_14_22_ff&cd=2XzuyEtN2Y1L1Qzu0CzzyCtDtDtD0C0C0D0CyByDyE0Azz0AtN0D0Tzu0SzzyBzztN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtC0EyBzztCtAzytGyD0B0EyDtGyDtAtDtDtG0DtDzytDtGtCyDyDzz0EtC0A0FzytCtB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0DtAtAtAzztByDtGyCtDyE0FtGyE0F0FyCtGtC0F0F0CtGtB0E0CtDtD0AyE0CyE0A0EyB2Q&cr=718745324&ir=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.search.useDBForOrder: false
FF - prefs.js..browser.startup.homepage: "http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=hp&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000"
FF - prefs.js..extensions.enabledAddons: %7B2D3F3651-74B9-4795-BDEC-6DA2F431CB62%7D:2014.7.0.46
FF - prefs.js..extensions.enabledAddons: TidyNetwork%40TidyNetwork:5.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
FF - prefs.js..keyword.URL: "http://feed.helperbar.com/?publisher=YahooTR&dpid=YahooTR_PKR&co=GB&userid=76e441d1-df2a-40eb-b564-1420c5ab8fe6&searchtype=ds&fr=linkury-tb&installDate={installDate}&barcodeid={barcodeID}&um={UM}&type=hp2000&q="
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/12/30 17:10:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/12/30 17:10:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2014/06/08 02:42:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ [2014/06/08 18:45:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2013/10/20 18:53:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steven White\AppData\Roaming\mozilla\Extensions
[2014/06/08 19:58:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steven White\AppData\Roaming\mozilla\Firefox\Profiles\8dypnmou.default\extensions
[2014/06/08 19:58:35 | 000,000,000 | ---D | M] (TidyNetwork) -- C:\Users\Steven White\AppData\Roaming\mozilla\Firefox\Profiles\8dypnmou.default\extensions\TidyNetwork@TidyNetwork
[2014/06/08 19:58:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steven White\AppData\Roaming\mozilla\Firefox\Profiles\l19cn9z0.default-1402173125062\extensions
[2014/06/08 19:58:36 | 000,000,000 | ---D | M] (TidyNetwork) -- C:\Users\Steven White\AppData\Roaming\mozilla\Firefox\Profiles\l19cn9z0.default-1402173125062\extensions\TidyNetwork@TidyNetwork
[2014/06/08 19:58:07 | 000,002,763 | ---- | M] () -- C:\Users\Steven White\AppData\Roaming\mozilla\firefox\profiles\8dypnmou.default\searchplugins\Web Search.xml
[2014/03/20 11:57:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014/05/11 00:13:20 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014/05/10 12:19:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\updated\browser\extensions
[2014/05/10 12:19:40 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\updated\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014/06/08 18:45:55 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\COFFPLGN
 
O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (TidyNetwork) - {1E802885-BA64-379F-DA16-7F20C5AB8FE6} - C:\Program Files (x86)\TidyNetwork\petn64.dll ()
O2:[b]64bit:[/b] - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O2:[b]64bit:[/b] - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coieplg.dll (Symantec Corporation)
O2 - BHO: (TidyNetwork) - {1E802885-BA64-379F-DA16-7F20C5AB8FE6} - C:\Program Files (x86)\TidyNetwork\petn.dll ()
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coieplg.dll (Symantec Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: []  File not found
O4:[b]64bit:[/b] - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Conime] %windir%\system32\conime.exe File not found
O4 - HKLM..\Run: [FastAccess Web Alert] C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FAtry.exe (Microsoft)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [Live! Central 3] C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe (Western Digital Technologies, Inc.)
O4 - HKLM..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe (Western Digital Technologies, Inc.)
O4 - HKCU..\Run: [AnyDVD] C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe (SlySoft, Inc.)
O4 - Startup: C:\Users\Steven White\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.0.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{220435A1-7876-470D-B72A-9470CFEE9301}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4212C13F-19E7-49F1-B36E-92590DB997E9}: DhcpNameServer = 192.168.1.254
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2014/06/07 16:54:00 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010/02/15 05:53:50 | 000,000,027 | ---- | M] () - G:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{99f24939-2f4b-11e3-8b92-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{99f24939-2f4b-11e3-8b92-806e6f6e6963}\Shell\AutoRun\command - "" = E:\.\Bin\ASSETUP.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014/06/08 21:27:33 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
[2014/06/08 20:07:06 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\ImgBurn
[2014/06/08 19:58:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
[2014/06/08 19:58:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ImgBurn
[2014/06/08 19:58:35 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\TidyNetwork
[2014/06/08 19:58:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TidyNetwork
[2014/06/08 19:58:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KNCTR
[2014/06/08 19:58:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Itibiti Soft Phone
[2014/06/08 19:25:48 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DAEMON Tools Images
[2014/06/08 19:00:35 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\virus reports
[2014/06/08 18:49:55 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro
[2014/06/08 18:49:04 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2014/06/08 18:31:21 | 000,122,584 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/06/08 18:31:06 | 000,091,352 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/06/08 18:31:06 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2014/06/08 18:31:06 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014/06/08 03:27:34 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\AUTORUNS
[2014/06/08 03:14:00 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/06/08 02:13:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STOPzilla
[2014/06/07 23:24:38 | 000,000,000 | ---D | C] -- C:\NPE
[2014/06/07 21:32:11 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Desktop\Old Firefox Data
[2014/06/07 17:21:28 | 000,000,000 | ---D | C] -- C:\EEK
[2014/06/07 16:53:12 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2014/06/07 15:23:08 | 000,000,000 | ---D | C] -- C:\ProgramData\STOPzilla!
[2014/06/07 15:23:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\STOPzilla!
[2014/06/07 14:53:08 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\NPE
[2014/06/07 01:35:18 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\RBs
[2014/06/06 21:36:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Greener Web
[2014/06/06 16:29:47 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\3AB026C7-EBCA-4166-8855-A697D8B6E2EB
[2014/06/06 16:16:21 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\Malware Logs
[2014/06/06 16:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
[2014/06/06 16:06:32 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2014/06/06 15:24:12 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\Acronis
[2014/06/06 15:18:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Acronis
[2014/06/06 15:18:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
[2014/06/06 15:17:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Acronis
[2014/06/06 15:17:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acronis
[2014/06/06 15:00:54 | 000,000,000 | ---D | C] -- C:\ProgramData\AomeiBR
[2014/06/06 14:59:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper Standard Edition 2.0
[2014/06/06 14:59:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AOMEI Backupper Standard Edition 2.0
[2014/06/06 13:42:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/06/06 13:42:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2014/06/06 13:42:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/06/06 13:21:37 | 000,000,000 | ---D | C] -- C:\StevenWhite-PC
[2014/06/06 13:10:46 | 000,000,000 | ---D | C] -- C:\SUPERDelete
[2014/06/06 13:02:44 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\SUPERAntiSpyware.com
[2014/06/06 13:01:50 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2014/06/06 13:01:50 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2014/06/06 12:00:58 | 000,000,000 | ---D | C] -- C:\temp
[2014/06/06 12:00:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JFileManager
[2014/06/06 12:00:31 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\JFileManager
[2014/06/06 12:00:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JFileManager
[2014/06/06 11:46:24 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll
[2014/06/06 11:46:05 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/06/06 00:43:34 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\My CamStudio Videos
[2014/06/06 00:43:03 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\My CamStudio Temp Files
[2014/06/06 00:42:03 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\Weather_Warnings_LLC
[2014/06/06 00:41:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio 2.7
[2014/06/06 00:41:52 | 000,000,000 | ---D | C] -- C:\Program Files\CamStudio 2.7
[2014/06/02 12:27:15 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\Sims 3 mods
[2014/06/02 11:12:17 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\Peter_L_Jones
[2014/06/02 11:03:09 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
[2014/06/02 11:03:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2014/06/02 11:03:07 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\Notepad++
[2014/06/02 11:03:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++
[2014/06/02 10:48:09 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\Peter L Jones
[2014/06/02 10:47:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\s3pe
[2014/06/02 10:47:33 | 000,000,000 | ---D | C] -- C:\Program Files\s3pe
[2014/06/02 10:09:33 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Explorer Suite Signatures
[2014/06/02 10:09:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Explorer Suite
[2014/06/02 10:09:32 | 000,000,000 | ---D | C] -- C:\Program Files\NTCore
[2014/06/01 22:56:19 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\AfterDuskSims0.7
[2014/06/01 22:32:42 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\fruit
[2014/05/29 17:22:37 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Desktop\Tor Browser
[2014/05/29 00:16:48 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\MTS_bootsbrisket_47122_bootsbrisketscage
[2014/05/28 10:45:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lepid Llama Tools
[2014/05/28 10:44:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Postal
[2014/05/28 10:42:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2014/05/28 10:42:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2014/05/28 10:41:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2014/05/28 10:41:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014/05/28 10:41:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2014/05/28 10:34:34 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MilkShape 3D 1.8.5
[2014/05/28 10:34:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MilkShape 3D 1.8.5
[2014/05/28 10:20:28 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\MilkShape 3D 1.x.x
[2014/05/28 10:16:58 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MilkShape 3D 1.8.4
[2014/05/28 10:16:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MilkShape 3D 1.8.4
[2014/05/28 10:15:36 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\TSR Workshop
[2014/05/28 10:15:27 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\Ibibi_HB
[2014/05/28 10:15:26 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\TSRWorkshop
[2014/05/28 10:15:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TSR Workshop
[2014/05/28 10:15:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\The Sims Resource
[2014/05/28 10:13:15 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Roaming\The Sims Resource
[2014/05/27 19:48:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2014/05/27 19:48:04 | 000,000,000 | ---D | C] -- C:\Users\Steven White\AppData\Local\WinZip
[2014/05/27 19:47:57 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip
[2014/05/27 19:47:57 | 000,000,000 | ---D | C] -- C:\Program Files\WinZip
[2014/05/23 08:11:09 | 000,000,000 | ---D | C] -- C:\Users\Steven White\Documents\Stories
[2014/05/16 16:45:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2014/05/15 20:08:22 | 000,000,000 | ---D | C] -- C:\Program Files\Western Digital
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014/06/08 22:50:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/06/08 22:50:31 | 4250,304,510 | -HS- | M] () -- C:\hiberfil.sys
[2014/06/08 19:58:53 | 000,001,889 | ---- | M] () -- C:\Users\Steven White\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2014/06/08 19:58:53 | 000,001,865 | ---- | M] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2014/06/08 19:58:22 | 000,001,094 | ---- | M] () -- C:\Users\Steven White\Application Data\Microsoft\Internet Explorer\Quick Launch\KNCTR.lnk
[2014/06/08 19:58:22 | 000,001,070 | ---- | M] () -- C:\Users\Public\Desktop\KNCTR.lnk
[2014/06/08 19:57:59 | 000,002,592 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\smartbar_3312014.exe.lnk
[2014/06/08 19:44:13 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/06/08 19:15:47 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/06/08 19:05:23 | 000,000,546 | ---- | M] () -- C:\Users\Steven White\Desktop\Emsisoft Emergency Kit.lnk
[2014/06/08 18:54:39 | 000,025,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/06/08 18:54:39 | 000,025,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/06/08 18:49:57 | 000,001,893 | ---- | M] () -- C:\Users\Public\Desktop\HitmanPro.lnk
[2014/06/08 18:47:54 | 000,122,584 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/06/08 18:47:47 | 000,000,440 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics
[2014/06/08 18:47:14 | 000,008,192 | ---- | M] () -- C:\Windows\SysWow64\WDPABKP.dat
[2014/06/08 18:45:51 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/06/08 18:31:10 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/06/08 16:44:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/06/08 03:26:32 | 000,511,782 | ---- | M] () -- C:\Users\Steven White\Documents\Autoruns.zip
[2014/06/07 16:54:00 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[2014/06/06 20:50:16 | 000,000,096 | ---- | M] () -- C:\Users\Steven White\AppData\Roaming\version2.xml
[2014/06/06 15:00:57 | 000,001,024 | -H-- | M] () -- C:\SYSTAG.BIN
[2014/06/06 12:00:57 | 000,001,161 | ---- | M] () -- C:\Users\Public\Desktop\JFileManager.lnk
[2014/06/06 11:01:45 | 000,004,565 | ---- | M] () -- C:\Users\Steven White\AppData\Roaming\CamStudio.cfg
[2014/06/06 11:01:45 | 000,000,408 | ---- | M] () -- C:\Users\Steven White\AppData\Roaming\CamShapes.ini
[2014/06/06 11:01:45 | 000,000,408 | ---- | M] () -- C:\Users\Steven White\AppData\Roaming\CamLayout.ini
[2014/06/06 11:01:45 | 000,000,135 | ---- | M] () -- C:\Users\Steven White\AppData\Roaming\Camdata.ini
[2014/06/04 20:14:44 | 000,038,119 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\VT20140604.020
[2014/06/02 12:51:35 | 000,002,230 | ---- | M] () -- C:\Users\Public\Desktop\The Sims™ 3 Into the Future.lnk
[2014/06/02 11:03:10 | 000,001,059 | ---- | M] () -- C:\Users\Steven White\Desktop\Notepad++.lnk
[2014/05/29 00:42:32 | 000,001,201 | ---- | M] () -- C:\Users\Steven White\Desktop\Uplay.lnk
[2014/05/28 22:43:13 | 000,000,222 | ---- | M] () -- C:\Users\Steven White\Desktop\Watch_Dogs.url
[2014/05/28 10:34:39 | 000,001,055 | ---- | M] () -- C:\Users\Steven White\Desktop\MilkShape 3D 1.8.5.lnk
[2014/05/28 10:17:08 | 000,001,055 | ---- | M] () -- C:\Users\Steven White\Desktop\MilkShape 3D 1.8.4.lnk
[2014/05/28 10:15:16 | 000,002,545 | ---- | M] () -- C:\Users\Public\Desktop\TSR Workshop.lnk
[2014/05/27 19:48:10 | 000,002,277 | ---- | M] () -- C:\Users\Public\Desktop\WinZip.lnk
[2014/05/20 12:20:57 | 001,842,774 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\Cat.DB
[2014/05/16 19:59:19 | 000,000,043 | -HS- | M] () -- C:\ProgramData\.zreglib
[2014/05/15 18:05:23 | 000,001,101 | ---- | M] () -- C:\Users\Public\Desktop\AnyDVD.lnk
[2014/05/12 07:26:10 | 000,063,704 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2014/05/12 07:26:00 | 000,091,352 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/05/12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014/05/11 07:52:10 | 000,000,172 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\1503000.00C\isolate.ini
[2014/05/11 00:01:56 | 000,001,197 | ---- | M] () -- C:\Users\Public\Desktop\WD Security.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014/06/08 19:58:53 | 000,001,889 | ---- | C] () -- C:\Users\Steven White\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2014/06/08 19:58:53 | 000,001,865 | ---- | C] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2014/06/08 19:58:22 | 000,001,094 | ---- | C] () -- C:\Users\Steven White\Application Data\Microsoft\Internet Explorer\Quick Launch\KNCTR.lnk
[2014/06/08 19:58:22 | 000,001,070 | ---- | C] () -- C:\Users\Public\Desktop\KNCTR.lnk
[2014/06/08 19:57:59 | 000,002,592 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\smartbar_3312014.exe.lnk
[2014/06/08 19:44:13 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/06/08 19:05:23 | 000,000,546 | ---- | C] () -- C:\Users\Steven White\Desktop\Emsisoft Emergency Kit.lnk
[2014/06/08 18:49:57 | 000,001,893 | ---- | C] () -- C:\Users\Public\Desktop\HitmanPro.lnk
[2014/06/08 18:31:10 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/06/08 03:26:29 | 000,511,782 | ---- | C] () -- C:\Users\Steven White\Documents\Autoruns.zip
[2014/06/07 16:54:00 | 000,000,000 | ---- | C] () -- C:\autoexec.bat
[2014/06/06 15:00:57 | 000,001,024 | -H-- | C] () -- C:\SYSTAG.BIN
[2014/06/06 12:00:56 | 000,001,161 | ---- | C] () -- C:\Users\Public\Desktop\JFileManager.lnk
[2014/06/06 11:59:29 | 000,034,376 | ---- | C] () -- C:\Windows\Launcher.exe
[2014/06/06 01:14:06 | 000,004,565 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\CamStudio.cfg
[2014/06/06 01:14:06 | 000,000,408 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\CamShapes.ini
[2014/06/06 01:14:06 | 000,000,408 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\CamLayout.ini
[2014/06/06 01:14:06 | 000,000,135 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\Camdata.ini
[2014/06/06 00:42:47 | 000,000,096 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\version2.xml
[2014/06/02 12:51:35 | 000,002,230 | ---- | C] () -- C:\Users\Public\Desktop\The Sims™ 3 Into the Future.lnk
[2014/06/02 11:03:10 | 000,001,059 | ---- | C] () -- C:\Users\Steven White\Desktop\Notepad++.lnk
[2014/05/29 00:42:31 | 000,001,201 | ---- | C] () -- C:\Users\Steven White\Desktop\Uplay.lnk
[2014/05/28 22:43:13 | 000,000,222 | ---- | C] () -- C:\Users\Steven White\Desktop\Watch_Dogs.url
[2014/05/28 10:34:39 | 000,001,055 | ---- | C] () -- C:\Users\Steven White\Desktop\MilkShape 3D 1.8.5.lnk
[2014/05/28 10:17:07 | 000,001,055 | ---- | C] () -- C:\Users\Steven White\Desktop\MilkShape 3D 1.8.4.lnk
[2014/05/28 10:15:16 | 000,002,545 | ---- | C] () -- C:\Users\Public\Desktop\TSR Workshop.lnk
[2014/05/27 19:48:08 | 000,002,277 | ---- | C] () -- C:\Users\Public\Desktop\WinZip.lnk
[2014/05/26 17:51:31 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\WDPABKP.dat
[2014/05/15 18:05:22 | 000,001,101 | ---- | C] () -- C:\Users\Public\Desktop\AnyDVD.lnk
[2014/05/11 00:01:54 | 000,001,197 | ---- | C] () -- C:\Users\Public\Desktop\WD Security.lnk
[2014/05/01 20:17:57 | 000,003,584 | ---- | C] () -- C:\Users\Steven White\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/12/27 21:40:02 | 000,000,107 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\WB.CFG
[2013/11/30 20:26:35 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013/11/30 20:26:34 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013/11/30 20:26:33 | 003,123,272 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2013/10/20 18:32:09 | 000,000,043 | -HS- | C] () -- C:\ProgramData\.zreglib
[2013/10/18 18:12:42 | 000,000,282 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\GPU MeterV2_Settings.ini
[2013/10/18 18:12:08 | 000,000,624 | ---- | C] () -- C:\Users\Steven White\AppData\Roaming\All CPU MeterV3_Settings.ini
[2013/10/07 14:35:28 | 000,793,164 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/10/07 14:21:41 | 000,053,053 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2013/10/07 13:52:42 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2013/10/07 13:52:32 | 000,036,118 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009/07/14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/03/25 03:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/03/25 03:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014/06/06 16:29:47 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\3AB026C7-EBCA-4166-8855-A697D8B6E2EB
[2014/06/07 14:16:47 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Abine
[2014/06/06 15:24:12 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Acronis
[2014/06/08 02:37:13 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Azureus
[2014/06/08 19:22:22 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\DAEMON Tools Lite
[2013/11/08 10:35:37 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\FreeSmith
[2014/06/08 20:09:38 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\ImgBurn
[2014/04/16 10:17:09 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\MAGIX
[2014/05/28 11:27:28 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\MilkShape 3D 1.x.x
[2014/06/02 11:12:22 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Notepad++
[2013/10/21 12:05:58 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Origin
[2014/06/02 10:48:09 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Peter L Jones
[2014/06/08 02:37:48 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\SoftGrid Client
[2014/06/08 02:44:51 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Spotify
[2013/11/29 10:50:31 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\Temp
[2013/11/09 22:38:16 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\The Creative Assembly
[2014/05/28 10:13:15 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\The Sims Resource
[2014/03/04 19:06:22 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\TP
[2014/05/28 10:15:26 | 000,000,000 | ---D | M] -- C:\Users\Steven White\AppData\Roaming\TSRWorkshop
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >