Please help me, it is getting worse by the minute...I type a letter and it takes 8 seconds to appear now. Finally was able to run OTL
OTL logfile created on: 8/11/2012 10:37:35 AM - Run 2
OTL by OldTimer - Version 3.2.57.0 Folder = C:\Users\Jerry\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.80 Gb Total Physical Memory | 1.92 Gb Available Physical Memory | 50.56% Memory free
7.60 Gb Paging File | 5.33 Gb Available in Paging File | 70.18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 280.47 Gb Total Space | 95.26 Gb Free Space | 33.96% Space Free | Partition Type: NTFS
Drive E: | 3.68 Gb Total Space | 0.00 Gb Free Space | 0.13% Space Free | Partition Type: FAT32
Computer Name: JERRY-PC | User Name: Jerry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/08/11 10:36:46 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Jerry\Desktop\OTL.exe
PRC - [2012/08/02 20:16:04 | 000,408,944 | ---- | M] (AnchorFree Inc.) -- C:\Program Files (x86)\Hotspot Shield\HssWPR\HssSrv.exe
PRC - [2012/08/02 20:12:18 | 000,387,440 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
PRC - [2012/08/02 20:10:40 | 000,476,016 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
PRC - [2012/07/09 21:57:46 | 001,240,944 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\openvpntray.exe
PRC - [2012/07/08 18:23:24 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/03/27 18:14:06 | 000,138,232 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.2.1.5\ccSvcHst.exe
PRC - [2012/01/03 08:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/10/01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011/10/01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011/09/29 13:11:30 | 000,052,664 | ---- | M] () -- C:\Program Files (x86)\Tether\TBService.exe
PRC - [2011/09/15 13:06:04 | 000,088,576 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011/04/19 01:44:40 | 000,993,848 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psia.exe
PRC - [2011/04/19 01:44:40 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\sua.exe
PRC - [2010/08/20 15:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
PRC - [2009/09/30 07:01:32 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2009/09/30 07:01:30 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2009/06/09 09:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
========== Modules (No Company Name) ==========
MOD - [2012/08/02 20:19:06 | 000,009,584 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\lang\gui-eng.dll
MOD - [2012/07/09 23:09:00 | 000,438,296 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppgooglenaclpluginchrome.dll
MOD - [2012/07/09 23:08:59 | 003,972,120 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll
MOD - [2012/07/09 23:07:39 | 000,554,520 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\libglesv2.dll
MOD - [2012/07/09 23:07:37 | 000,117,784 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\libegl.dll
MOD - [2012/07/09 23:07:22 | 000,140,328 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\avutil-51.dll
MOD - [2012/07/09 23:07:21 | 000,262,184 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\avformat-54.dll
MOD - [2012/07/09 23:07:19 | 002,386,984 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\avcodec-54.dll
MOD - [2012/07/09 21:57:46 | 001,240,944 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\openvpntray.exe
MOD - [2012/07/09 21:17:27 | 009,255,112 | ---- | M] () -- C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
MOD - [2012/07/08 21:00:39 | 000,561,992 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]\components\afurladvisor12.dll
MOD - [2012/07/08 18:23:24 | 001,952,696 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011/09/27 18:44:05 | 006,277,280 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
========== Win32 Services (SafeList) ==========
SRV:64bit: - [2012/04/23 19:10:06 | 000,008,704 | ---- | M] (Box, Inc.) [Auto | Running] -- C:\Program Files\Box Sync\UpdateService.exe -- (#UpdateService)
SRV:64bit: - [2012/04/08 01:25:40 | 002,195,456 | ---- | M] (Proxy Labs) [Auto | Running] -- C:\Program Files\Proxy Labs\ProxyCap\pcapsvc.exe -- (pcapsvc)
SRV:64bit: - [2010/01/20 15:10:00 | 000,244,736 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\stacsv64.exe -- (STacSV)
SRV:64bit: - [2009/09/21 15:24:40 | 001,420,560 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2009/09/21 15:03:06 | 000,315,664 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2009/09/21 15:00:44 | 000,831,760 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2009/08/17 21:09:52 | 000,868,128 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/06/09 09:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV:64bit: - [2009/03/02 13:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe -- (AESTFilters)
SRV - [2012/08/02 20:20:24 | 000,078,072 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Hotspot Shield\bin\HSSTrayService.exe -- (HssTrayService)
SRV - [2012/08/02 20:16:04 | 000,408,944 | ---- | M] (AnchorFree Inc.) [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\HssWPR\HssSrv.exe -- (HssSrv)
SRV - [2012/08/02 20:12:18 | 000,387,440 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe -- (HssWd)
SRV - [2012/08/02 20:10:40 | 000,476,016 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe -- (hshld)
SRV - [2012/07/08 18:23:24 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/07/03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/07/03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/04/22 12:13:11 | 000,253,600 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/03/27 18:14:06 | 000,138,232 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.2.1.5\ccSvcHst.exe -- (N360)
SRV - [2012/01/03 08:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/10/01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011/10/01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011/09/29 13:11:30 | 000,052,664 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Tether\TBService.exe -- (Tether)
SRV - [2011/09/15 13:06:04 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011/04/19 01:44:40 | 000,993,848 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\psia.exe -- (Secunia PSI Agent)
SRV - [2011/04/19 01:44:40 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2010/08/20 15:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe -- (SftService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/20 15:10:00 | 000,244,736 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe -- (STacSV)
SRV - [2009/09/30 07:01:32 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2009/09/30 07:01:30 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2009/09/26 00:32:18 | 000,189,736 | ---- | M] (Seagate Technology LLC) [Disabled | Stopped] -- C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service)
SRV - [2009/06/23 16:02:42 | 000,060,928 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\STMicroelectronics\Accelerometer\InstallFilterService.exe -- (InstallFilterService)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/03/02 13:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe -- (AESTFilters)
SRV - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2012/07/09 21:48:18 | 000,041,704 | ---- | M] (AnchorFree Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\hssdrv6.sys -- (HssDRV6)
DRV:64bit: - [2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/06/05 12:53:05 | 000,175,736 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2012/05/15 20:10:14 | 000,038,632 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2012/03/29 01:28:38 | 000,405,624 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0602010.005\symnets.sys -- (SymNetS)
DRV:64bit: - [2012/03/29 01:28:30 | 001,092,728 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0602010.005\SymEFA64.sys -- (SymEFA)
DRV:64bit: - [2012/03/29 01:28:25 | 000,451,192 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0602010.005\SymDS64.sys -- (SymDS)
DRV:64bit: - [2012/03/29 01:06:25 | 000,190,072 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0602010.005\Ironx64.sys -- (SymIRON)
DRV:64bit: - [2012/03/29 01:03:27 | 000,737,912 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\N360x64\0602010.005\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2012/03/29 01:03:27 | 000,037,496 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0602010.005\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/12/07 23:22:38 | 000,203,320 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2011/12/07 23:22:38 | 000,098,616 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2011/11/29 17:44:29 | 000,167,048 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0602010.005\ccSetx64.sys -- (ccSet_N360)
DRV:64bit: - [2011/10/21 18:30:04 | 012,310,112 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/10/01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011/10/01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011/10/01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011/10/01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011/07/06 12:44:00 | 000,034,288 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2011/06/10 07:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/05/22 16:44:12 | 000,020,752 | ---- | M] (Mobile Stream) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\easytthr.sys -- (easytether)
DRV:64bit: - [2011/05/10 09:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/17 19:34:58 | 000,025,072 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- c:\Program Files\Dell Support Center\pcdsrvc_x64.pkms -- (PCDSRVC{1E208CE0-FB7451FF-06020101}_0)
DRV:64bit: - [2010/11/03 09:23:57 | 000,230,352 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\truecrypt.sys -- (truecrypt)
DRV:64bit: - [2010/09/03 13:26:24 | 000,050,768 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uimx64.sys -- (UimBus)
DRV:64bit: - [2010/09/03 13:26:22 | 000,566,864 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Uim_IMx64.sys -- (Uim_IM)
DRV:64bit: - [2010/09/03 13:26:22 | 000,037,456 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hotcore3.sys -- (hotcore3)
DRV:64bit: - [2010/09/01 03:30:58 | 000,017,976 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)
DRV:64bit: - [2010/06/25 17:08:10 | 000,036,928 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010/04/14 01:01:44 | 000,054,824 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt)
DRV:64bit: - [2010/02/10 03:01:58 | 000,158,720 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2010/01/20 15:10:00 | 000,505,856 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2010/01/07 15:51:38 | 000,271,872 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2009/10/26 17:54:22 | 000,032,768 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009/10/16 10:23:00 | 000,050,856 | ---- | M] (Tether) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qrkis.sys -- (qrkis)
DRV:64bit: - [2009/09/16 23:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
DRV:64bit: - [2009/09/15 11:40:42 | 006,952,960 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64)
DRV:64bit: - [2009/08/23 22:20:22 | 000,285,744 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2009/07/24 01:13:02 | 000,023,912 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Acceler.sys -- (Acceler)
DRV:64bit: - [2009/07/23 12:57:48 | 000,018,792 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdflt.sys -- (stdflt)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 19:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/07/13 19:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/07/13 19:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/07/04 06:27:02 | 000,055,808 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpe64.sys -- (rixdpcie)
DRV:64bit: - [2009/07/01 19:54:52 | 000,060,416 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspe64.sys -- (rimspci)
DRV:64bit: - [2009/07/01 05:31:58 | 000,080,896 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdpe64.sys -- (risdpcie)
DRV:64bit: - [2009/06/30 23:46:52 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2009/06/30 23:46:48 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2009/06/30 23:46:40 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2009/06/25 04:04:20 | 000,067,584 | ---- | M] (REDC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rimmpx64.sys -- (rimmptsk)
DRV:64bit: - [2009/06/25 03:38:52 | 000,057,856 | ---- | M] (REDC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rixdpx64.sys -- (rismxdp)
DRV:64bit: - [2009/06/25 03:13:44 | 000,055,296 | ---- | M] (REDC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rimspx64.sys -- (rimsptsk)
DRV:64bit: - [2009/06/15 13:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/04/07 02:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2009/01/09 15:02:08 | 000,031,744 | ---- | M] (Research in Motion Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort)
DRV:64bit: - [2006/11/01 12:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2012/08/11 07:36:54 | 002,068,600 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\VirusDefs\20120810.035\ex64.sys -- (NAVEX15)
DRV - [2012/08/11 07:36:54 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2012/08/11 07:36:54 | 000,120,440 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\VirusDefs\20120810.035\eng64.sys -- (NAVENG)
DRV - [2012/08/11 00:01:31 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012/08/10 07:05:28 | 000,509,088 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\IPSDefs\20120810.001\IDSviA64.sys -- (IDSVia64)
DRV - [2012/08/04 00:16:10 | 001,161,376 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\BASHDefs\20120804.001_6b2\BHDrvx64.sys -- (BHDrvx64)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {B608EA6B-BD29-4F0D-ACC9-42FCF5730279}
IE:64bit: - HKLM\..\SearchScopes\{B608EA6B-BD29-4F0D-ACC9-42FCF5730279}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
IE - HKLM\..\SearchScopes\{2B1CDA87-2E27-4959-B974-8E7255C44B63}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.condui...&ctid=CT2801948
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.condui...&ctid=CT2801948
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com/
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {2B1CDA87-2E27-4959-B974-8E7255C44B63}
IE - HKCU\..\SearchScopes\{44816E91-C68A-2FF3-3D8F-8970062E5600}: "URL" = http://www.bing.com/...UGO&form=ZGAIDF
IE - HKCU\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://www.ask.com/w...il&geo=US&ver=4
IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.condui...&ctid=CT2801948
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:8118
========== FireFox ==========
FF - prefs.js..browser.search.defaultthis.engineName: "NCH EN Customized Web Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.selectedEngine: "NCH EN Customized Web Search"
FF - prefs.js..extensions.enabledItems: [email protected]:3.6.5.0
FF - prefs.js..extensions.enabledItems: Eraser@vikram:1.03
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9
FF - prefs.js..extensions.enabledItems: {3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.14.2
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:3.2
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.3.5.20110120033202
FF - prefs.js..extensions.enabledItems: {e0204bd5-9d31-402b-a99d-a6aa8ffebdca}:1.2.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:2011.7.2.3
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: C:\Windows\system32\npdeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@onlive.com/OlGameDetect,version=1.1.0.72956: C:\Program Files (x86)\OnLive\FirefoxPlugin\npolgdet.dll File not found
FF - HKLM\Software\MozillaPlugins\@qq.com/npqscall,version=1.0.0: %commonprogramfiles%\tencent\NPQSCALL\npqscall.dll File not found
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Jerry\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Jerry\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Jerry\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Jerry\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Jerry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\facebook.com/PhotoUploaderPlugin: C:\Users\Jerry\AppData\Local\Facebook\PhotoUploader\1.0.0.2001\npFacebookPhotoUploader.dll (Facebook)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\IPSFFPlgn\ [2012/08/10 23:55:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\coFFPlgn\ [2012/08/11 10:23:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/08 18:23:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/05/06 13:26:02 | 000,000,000 | ---D | M]
[2010/08/23 18:29:53 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Jerry\AppData\Roaming\Mozilla\Extensions
[2012/07/08 18:28:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jerry\AppData\Roaming\Mozilla\Firefox\Profiles\s1px82gm.default\extensions
[2012/07/08 18:23:40 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Jerry\AppData\Roaming\Mozilla\Firefox\Profiles\s1px82gm.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/11/27 17:31:01 | 000,000,000 | ---D | M] (Torbutton) -- C:\Users\Jerry\AppData\Roaming\Mozilla\Firefox\Profiles\s1px82gm.default\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
[2012/07/08 18:23:37 | 000,000,000 | ---D | M] (Click&Clean) -- C:\Users\Jerry\AppData\Roaming\Mozilla\Firefox\Profiles\s1px82gm.default\extensions\[email protected]
[2012/02/14 12:30:20 | 000,000,000 | ---D | M] (Eraser) -- C:\Users\Jerry\AppData\Roaming\Mozilla\Firefox\Profiles\s1px82gm.default\extensions\Eraser@vikram
[2012/07/02 14:55:58 | 000,000,000 | ---D | M] (Facebook Translate) -- C:\Users\Jerry\AppData\Roaming\Mozilla\Firefox\Profiles\s1px82gm.default\extensions\[email protected]
[2011/09/29 14:52:42 | 000,002,469 | -H-- | M] () -- C:\Users\Jerry\AppData\Roaming\Mozilla\Firefox\Profiles\s1px82gm.default\searchplugins\safesearch.xml
[2012/07/08 18:23:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/08/10 23:55:31 | 000,000,000 | ---D | M] (Hotspot Shield Helper (Please allow this installation)) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
[2012/08/11 10:23:58 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\COFFPLGN
[2012/08/10 23:55:31 | 000,000,000 | ---D | M] (Norton Vulnerability Protection) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\IPSFFPLGN
[2012/02/14 12:30:20 | 000,097,169 | ---- | M] () (No name found) -- C:\USERS\JERRY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S1PX82GM.DEFAULT\EXTENSIONS\{3D7EB24F-2740-49DF-8937-200B1CC08F8A}.XPI
[2012/07/08 18:23:25 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/07/08 18:23:22 | 000,001,525 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012/07/08 18:23:22 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/07/08 18:23:22 | 000,000,935 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\chambers-en-GB.xml
[2012/07/08 18:23:22 | 000,001,166 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-en-GB.xml
[2012/07/08 18:23:22 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
[2012/07/08 18:23:22 | 000,001,121 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-en-GB.xml
========== Chrome ==========
CHR - homepage: http://www.google.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Jerry\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\NPAPIFlash\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Mixesoft Click&Clean Plug-In (Enabled) = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\7.9_0\plugin/npccch32.dll
CHR - plugin: Bitdefender QuickScan (Enabled) = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\7.9_0\plugin/npqscan.dll
CHR - plugin: Norton Confidential (Enabled) = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.4.6_0\npcoplgn.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Jerry\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Jerry\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL
CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - plugin: Java Platform SE 6 U32 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.320.5 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Jerry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Facebook Photo Uploader (Enabled) = C:\Users\Jerry\AppData\Local\Facebook\PhotoUploader\1.0.0.2001\npFacebookPhotoUploader.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Adblock Plus (Beta) = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.2_0\
CHR - Extension: Webpage Screenshot = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki\5.5.3_0\
CHR - Extension: Private Browsing = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbhgehldmbojedoeglnclpglgoggonjg\0.1_0\
CHR - Extension: Click&Clean = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\7.9_0\
CHR - Extension: FlashBlock = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\gofhjkjmkpinhpoiabjplobcaignabnl\0.9.31_1\
CHR - Extension: Quick Note = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\mijlebbfndhelmdpmllgcfadlkankhok\1.4.1_0\
CHR - Extension: Norton Identity Protection = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.4.6_0\
CHR - Extension: Google Chrome to Phone Extension = C:\Users\Jerry\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco\2.3.1_0\
O1 HOSTS File: ([2011/11/06 11:07:11 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2:64bit: - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll (AnchorFree Inc.)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.2.1.5\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.2.1.5\IPS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.2.1.5\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [] ctfmon = CTFMON.EXE File not found
O4:64bit: - HKLM..\Run: [BoxSyncHelper] C:\Program Files\Box Sync\BoxSyncHelper.exe (Box, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [New Value #1] File not found
O4:64bit: - HKLM..\Run: [New Value #2] File not found
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Download with FLV Blaster - C:\Program Files (x86)\FLV Blaster\Addons\Internet Explorer\script.htm File not found
O8:64bit: - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download with FLV Blaster - C:\Program Files (x86)\FLV Blaster\Addons\Internet Explorer\script.htm File not found
O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Windows\SysNative\pcapwsp.dll (Proxy Labs)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - ppcapwsp.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - ppcapwsp.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - ppcapwsp.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - ppcapwsp.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000016 - ppcapwsp.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Windows\SysWow64\pcapwsp.dll (Proxy Labs)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - pcapwsp.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - pcapwsp.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - pcapwsp.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - pcapwsp.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - pcapwsp.dll File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_32)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_32)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://utilities.pcp...ols/pcmatic.cab (PCPitstop Utility)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 97.64.183.164 97.64.209.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6054CEFB-1D8D-4BD4-966D-22D2402B80C2}: DhcpNameServer = 97.64.183.164 97.64.209.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6F0FEA09-EE42-438C-A399-52D9CFE899C2}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BA898F0A-7A42-4A1E-BEB6-1002CD186739}: NameServer = 10.92.80.1
O18:64bit: - Protocol\Handler\cozi - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\cozi - No CLSID value found
O18 - Protocol\Handler\gopher - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3d44ed00-3a05-11e1-8e8e-5cac4cd7f23d}\Shell - "" = AutoRun
O33 - MountPoints2\{3d44ed00-3a05-11e1-8e8e-5cac4cd7f23d}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{58d9399b-3ded-11e1-b6ac-5cac4cd7f23d}\Shell - "" = AutoRun
O33 - MountPoints2\{58d9399b-3ded-11e1-b6ac-5cac4cd7f23d}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{7524162a-ff29-11e0-a49d-f04da2457981}\Shell - "" = AutoRun
O33 - MountPoints2\{7524162a-ff29-11e0-a49d-f04da2457981}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{752416aa-ff29-11e0-a49d-f04da2457981}\Shell - "" = AutoRun
O33 - MountPoints2\{752416aa-ff29-11e0-a49d-f04da2457981}\Shell\AutoRun\command - "" = F:\TL-Bootstrap.exe
O33 - MountPoints2\{91d93bf6-2fd4-11e0-99fe-5cac4cd7f23d}\Shell - "" = AutoRun
O33 - MountPoints2\{91d93bf6-2fd4-11e0-99fe-5cac4cd7f23d}\Shell\AutoRun\command - "" = E:\TL-Bootstrap.exe
O33 - MountPoints2\{d80b7387-6845-11e0-bcb9-5cac4cd7f23d}\Shell - "" = AutoRun
O33 - MountPoints2\{d80b7387-6845-11e0-bcb9-5cac4cd7f23d}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...com [@ = comfile] -- Reg Error: Key error. File not found
O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2012/08/11 10:36:45 | 000,596,992 | ---- | C] (OldTimer Tools) -- C:\Users\Jerry\Desktop\OTL.exe
[2012/08/11 10:36:21 | 000,596,992 | ---- | C] (OldTimer Tools) -- C:\Users\Jerry\Desktop\Unconfirmed 29331.crdownload
[2012/08/11 07:50:46 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{A904287F-E72A-4E1B-BA6F-69D68FBAA8C6}
[2012/08/11 07:50:23 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{51D5474F-7357-4242-9E20-40982BF67742}
[2012/08/09 20:52:16 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{C5906BBE-8935-4CC0-B6B9-EB9FA946015A}
[2012/08/09 20:51:54 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{9957813A-BA81-4415-8F96-3F9CD54790AA}
[2012/08/08 13:40:16 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{A95406A5-F8BF-4D54-A2F1-C89DBC308065}
[2012/08/08 13:39:53 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{D96C22BE-945C-4777-AC16-BC539624B1F4}
[2012/08/07 11:05:30 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{DC04C67F-1A27-405D-BAD7-4CB82FDAB1C2}
[2012/08/07 11:05:02 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{E1D3F4E8-42E0-47DD-BD1C-4E7F7A81AFB0}
[2012/08/06 20:14:30 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{79418507-630C-4043-8076-E76CD399D1D7}
[2012/08/06 20:14:07 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{AA7725A0-4F4B-4B09-A887-394F64C04A1B}
[2012/08/05 22:55:15 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{C5C7B23A-2FE5-42C7-B278-CDF8DB1DBB30}
[2012/08/05 22:54:53 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{2EECD9C1-94E3-4DD6-9D3D-F87102561073}
[2012/08/04 15:53:11 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{8C4B4FCB-5D74-4A85-B323-9C132510B112}
[2012/08/04 15:52:49 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{59D6C762-AA07-4A99-B34B-4932EDB2A913}
[2012/08/01 23:06:35 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{D5918270-F436-4DEA-89A8-003E7ABAD5C9}
[2012/08/01 23:06:23 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{E2BC9A31-266D-4A95-9782-D1F3AADA7E9B}
[2012/08/01 23:06:09 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{A9654859-092B-4D45-8915-211FBF7164B4}
[2012/07/30 21:52:43 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{986BC93E-8F7C-465C-93D3-7992140C9429}
[2012/07/30 21:52:20 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{63282E7A-60A5-4C5F-9D1A-F862474EF67B}
[2012/07/30 07:39:03 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{7A511F06-6E4E-41E2-8295-A80C01A1D2CB}
[2012/07/30 07:38:41 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{164BF91F-EF5D-4286-87CB-F2D40D3DF3FD}
[2012/07/27 23:01:58 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{C8763DC8-4400-4297-A698-2E9860F8C815}
[2012/07/27 23:01:34 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{A8A550B8-BF3C-411E-8286-6813DDEC6C76}
[2012/07/27 21:34:04 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Roaming\Windows Live Writer
[2012/07/27 21:34:04 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\Windows Live Writer
[2012/07/26 17:22:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle
[2012/07/26 17:17:40 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{B364DF7F-5B33-461A-8709-05C7AC50CDF8}
[2012/07/26 17:17:17 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{0491B6BB-7374-43BE-8C40-289656694CBF}
[2012/07/25 21:21:41 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{7C218B34-33F3-4F93-89B2-6B27C1E616EF}
[2012/07/25 21:21:18 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{EB470650-2DB6-4E19-88AF-E9C68FE9645A}
[2012/07/24 21:40:13 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{C47D902E-A5A3-4102-B369-4063E4B3F4C2}
[2012/07/24 21:39:49 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{A8BAB639-1D45-4551-B573-4B545CABC0BB}
[2012/07/24 17:11:57 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Roaming\Xilisoft
[2012/07/24 17:11:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
[2012/07/24 17:11:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Xilisoft
[2012/07/24 17:11:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xilisoft
[2012/07/23 17:56:31 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{7DC3B0EA-C4F2-431C-8219-02A3963B489E}
[2012/07/23 17:56:08 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{A79FB13D-D394-4386-96FF-F259F40633E3}
[2012/07/22 10:31:30 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{EC4CECCE-002C-4153-A156-584148E75611}
[2012/07/22 10:31:18 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{BE8A57B8-4515-4A06-91AC-B7758369DC43}
[2012/07/21 20:44:39 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{5AB5CAAB-0317-426F-94DA-E8603411E1C6}
[2012/07/21 20:44:27 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{08D763E1-96BD-4579-A61A-A89AAFC47653}
[2012/07/20 16:35:00 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{B20F2A31-1FDB-4DB6-B48A-2D854B47816F}
[2012/07/20 16:34:48 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{AC4094C0-C9C5-4BD5-975F-FB17C23D4DC5}
[2012/07/19 21:46:53 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{73B9AB0E-F65F-458E-BD96-F678F36CB76D}
[2012/07/19 21:46:29 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{24F274B0-0002-4C82-949B-ED93654B8E3F}
[2012/07/19 09:46:02 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{1CEB6C9F-4D71-42D4-81F6-83F244EAC706}
[2012/07/19 09:45:40 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{D1646025-D65D-4C3A-B838-D50034B62CA3}
[2012/07/18 21:22:51 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{7A4927F0-8667-4872-8F36-0A2319AC0285}
[2012/07/18 21:22:28 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{481C6B08-EFA9-4FCB-907C-665622916D5E}
[2012/07/15 23:29:03 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{D359AB7D-1564-44C1-AAD0-EE6E7ECF3E5B}
[2012/07/15 23:28:40 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{56A285FE-8A4B-47A3-8DAE-B19A0A451BF6}
[2012/07/15 09:18:46 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{6CD9838F-3B8F-4ED2-B2D3-F92FD69E9084}
[2012/07/15 09:18:13 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{29C77733-E920-4A2B-90C3-889CCF5E108A}
[2012/07/14 08:32:26 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{806627CC-3E6A-43AB-A89D-8A87D28C8B49}
[2012/07/14 08:31:52 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{069603F3-B4D9-46F3-94D2-25E90A835712}
[2012/07/13 13:08:41 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{C18048E4-8FBA-4E6C-AFCB-5FCB71C4DC31}
[2012/07/13 13:08:07 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{61C94367-BB81-4BA2-959B-50048C09A5B2}
[2012/07/12 20:33:32 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{03895273-CC35-43E7-85F1-4246401A46DD}
[2012/07/12 20:32:59 | 000,000,000 | ---D | C] -- C:\Users\Jerry\AppData\Local\{063CBF70-1F57-41F9-9736-CC71BB9E488A}
[2012/07/12 11:24:20 | 000,000,000 | ---D | C] -- C:\ProgramData\hssff
========== Files - Modified Within 30 Days ==========
[2012/08/11 10:36:46 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Jerry\Desktop\OTL.exe
[2012/08/11 10:36:23 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Jerry\Desktop\Unconfirmed 29331.crdownload
[2012/08/11 10:30:31 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/08/11 10:30:31 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/08/11 10:22:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/08/11 10:22:35 | 3061,202,944 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/26 11:00:54 | 000,002,405 | ---- | M] () -- C:\Users\Jerry\Desktop\Google Chrome.lnk
[2012/07/26 08:18:26 | 000,780,156 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/26 08:18:26 | 000,660,982 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/07/26 08:18:26 | 000,121,620 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/07/24 17:17:52 | 001,922,877 | ---- | M] () -- C:\Users\Jerry\Desktop\trumpet solo mpe.mp3
[2012/07/24 17:17:02 | 001,922,876 | ---- | M] () -- C:\Users\Jerry\Desktop\3a Ashoken Farewell mp3.mp3
[2012/07/24 17:11:44 | 000,002,081 | ---- | M] () -- C:\Users\Public\Desktop\Xilisoft Audio Converter 6.lnk
[2012/07/24 17:09:52 | 027,125,512 | ---- | M] () -- C:\Users\Jerry\Desktop\x-audio-converter6.exe
[2012/07/21 14:12:50 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/07/14 23:02:20 | 000,016,174 | ---- | M] () -- C:\Users\Jerry\Desktop\blue.jpg
[2012/07/12 12:36:57 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cd6054ef766d44.job
========== Files Created - No Company Name ==========
[2012/07/24 17:17:35 | 001,922,877 | ---- | C] () -- C:\Users\Jerry\Desktop\trumpet solo mpe.mp3
[2012/07/24 17:16:47 | 001,922,876 | ---- | C] () -- C:\Users\Jerry\Desktop\3a Ashoken Farewell mp3.mp3
[2012/07/24 17:11:44 | 000,002,081 | ---- | C] () -- C:\Users\Public\Desktop\Xilisoft Audio Converter 6.lnk
[2012/07/24 17:09:15 | 027,125,512 | ---- | C] () -- C:\Users\Jerry\Desktop\x-audio-converter6.exe
[2012/07/22 17:19:48 | 004,194,653 | ---- | C] () -- C:\Users\Jerry\Desktop\trumpet solo.wma
[2012/07/22 17:15:22 | 003,555,185 | ---- | C] () -- C:\Users\Jerry\Desktop\3a Ashoken Farewell - Copy.wma
[2012/07/21 08:33:32 | 000,057,877 | ---- | C] () -- C:\Users\Jerry\Desktop\MOM1 (2).jpg
[2012/07/14 23:02:27 | 000,016,174 | ---- | C] () -- C:\Users\Jerry\Desktop\blue.jpg
[2012/07/12 12:36:57 | 000,000,894 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cd6054ef766d44.job
[2012/04/20 15:20:50 | 000,000,017 | ---- | C] () -- C:\Users\Jerry\AppData\Local\resmon.resmoncfg
[2012/04/08 01:26:42 | 000,315,392 | ---- | C] ( ) -- C:\Windows\SysWow64\sbcrreag.dll
[2011/10/31 12:22:42 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011/10/31 12:22:40 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011/10/31 12:22:40 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011/10/31 12:22:40 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011/10/31 12:22:38 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011/10/21 18:03:04 | 013,903,872 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011/08/31 20:51:16 | 000,867,020 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2011/08/31 20:51:16 | 000,128,204 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
[2011/08/31 20:51:16 | 000,105,608 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2011/08/31 10:12:37 | 000,002,544 | ---- | C] () -- C:\Windows\SysWow64\EasyRedirect.ini
[2011/08/31 10:12:37 | 000,001,248 | ---- | C] () -- C:\Windows\SysWow64\EasyRedirectOff.ini
[2011/08/09 18:17:59 | 000,018,760 | ---- | C] () -- C:\Windows\SysWow64\QQVistaHelper.dll
[2011/04/12 22:48:41 | 000,002,496 | ---- | C] () -- C:\Windows\SysWow64\AVRedirector.ini
[2011/04/12 22:48:41 | 000,001,248 | ---- | C] () -- C:\Windows\SysWow64\AVRedirectorOff.ini
[2010/12/11 13:55:46 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/11/14 15:43:09 | 000,031,767 | ---- | C] () -- C:\Windows\maxlink.ini
[2010/10/10 14:27:14 | 000,010,752 | ---- | C] () -- C:\Users\Jerry\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/13 04:15:40 | 000,774,372 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/08/23 23:08:00 | 000,000,916 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2010/08/23 23:08:00 | 000,000,112 | ---- | C] () -- C:\Windows\brpcfx.ini
[2010/08/23 23:07:36 | 000,000,419 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010/08/23 23:06:44 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\BrMuSNMP.dll
[2010/08/23 23:06:43 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2010/08/23 23:06:43 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2010/08/23 15:27:17 | 000,103,784 | ---- | C] () -- C:\Users\Jerry\GoToAssistDownloadHelper.exe
========== LOP Check ==========
[2011/08/14 11:42:06 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\AnvSoft
[2011/11/27 17:30:55 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\AVSoftware
[2011/11/27 17:30:55 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Blackberry Desktop
[2011/08/15 16:04:54 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Blueberry
[2012/05/12 19:41:15 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Box Desktop
[2012/06/07 07:52:11 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Box Sync
[2011/11/27 17:28:25 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Dropbox
[2011/03/18 18:50:21 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\FLV Blaster
[2011/11/27 17:30:59 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Foxit Software
[2012/01/05 15:56:16 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\HandBrake
[2012/01/19 20:15:50 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\HTC
[2012/01/07 12:29:59 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2011/11/27 17:28:34 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\IObit
[2010/08/23 16:59:57 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Leadertech
[2011/06/12 14:14:57 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\LogSys
[2011/12/19 22:36:39 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Mobile Action
[2011/02/21 16:42:10 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\OnLive App
[2011/03/03 22:58:03 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\ooVoo Details
[2011/11/27 17:28:41 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\OpenOffice.org
[2011/11/27 17:31:01 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\PC-FAX TX
[2011/11/27 17:28:41 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\PCDr
[2011/11/27 17:28:43 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Research In Motion
[2011/11/28 20:15:03 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Samsung
[2011/11/27 17:28:44 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\ScanSoft
[2011/06/12 13:28:21 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\SMRecorder
[2012/02/19 23:50:24 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Softarium.com
[2012/07/03 19:22:43 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\SoftGrid Client
[2011/08/24 22:51:15 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Solveig Multimedia
[2011/11/27 17:31:02 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\SystemRequirementsLab
[2011/01/31 13:06:18 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Teleca
[2011/11/27 17:28:44 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Tencent
[2012/01/13 11:27:08 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Tether
[2010/10/20 20:14:19 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Tific
[2010/10/16 22:52:17 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\TP
[2012/01/31 15:08:47 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\TrueCrypt
[2010/08/23 22:06:11 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Unity
[2012/07/27 21:34:04 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Windows Live Writer
[2010/12/14 11:56:58 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\WinPatrol
[2011/06/06 15:58:39 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\WirelessManager
[2012/07/24 17:11:57 | 000,000,000 | ---D | M] -- C:\Users\Jerry\AppData\Roaming\Xilisoft
[2011/05/08 17:53:12 | 000,000,000 | -H-D | M] -- C:\Users\Jerry\AppData\Roaming\Zeon
[2011/07/05 12:30:21 | 000,000,906 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2982078996-2158721695-3169103491-1001Core.job
[2012/01/19 15:48:04 | 000,000,384 | ---- | M] () -- C:\Windows\Tasks\Launch HTC Sync Loader.job
[2011/03/02 13:02:11 | 000,000,564 | ---- | M] () -- C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2010/10/17 11:34:07 | 000,031,664 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU(46).TXT
[2011/09/18 07:58:59 | 000,032,548 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011/03/02 13:02:11 | 000,000,422 | ---- | M] () -- C:\Windows\Tasks\SystemToolsDailyTest.job
[2012/01/31 14:41:31 | 000,000,204 | ---- | M] () -- C:\Windows\Tasks\TaskAt107311028.job
[2012/03/04 11:29:19 | 000,000,256 | ---- | M] () -- C:\Windows\Tasks\TaskAt167412753.job
[2012/02/11 17:15:54 | 000,000,256 | ---- | M] () -- C:\Windows\Tasks\TaskAt29154902.job
[2011/11/22 13:00:51 | 000,000,204 | ---- | M] () -- C:\Windows\Tasks\TaskAt55605495.job
[2012/01/16 13:37:59 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{0AB1C02B-BAA6-4E9F-96CC-801070FA3540}.job
[2011/12/10 09:11:39 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{0B96DBFB-C085-41AB-AF04-2FDCBACBA6F5}.job
[2012/01/06 13:43:22 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{194A7FFF-E947-4054-9E6E-C7B89797E767}.job
[2012/01/26 10:48:16 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{1D024612-FBEF-4980-A480-8CAB952F14E3}.job
[2011/12/20 11:59:39 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{26B2A4E1-F528-49CC-886F-B87715B5E595}.job
[2012/01/16 13:37:38 | 000,000,614 | ---- | M] () -- C:\Windows\Tasks\{2D7E32F3-89C9-49C2-89BD-1064B814780A}.job
[2011/12/29 09:32:47 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{351D4B04-39FB-4CB9-B850-8247AFAD99B4}.job
[2012/01/09 14:53:12 | 000,000,608 | ---- | M] () -- C:\Windows\Tasks\{3848F32C-903F-4512-9600-7C85B52D15B6}.job
[2011/12/10 09:50:54 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{3929CF25-587A-4EFC-B35B-71F821E607B2}.job
[2011/12/29 12:32:29 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{39C70E49-EA4F-4B87-9E0B-CD33616955B5}.job
[2012/01/09 16:06:59 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{4563DC4E-F4EF-4D7C-8DA7-3A0F4CEDD170}.job
[2012/01/06 15:37:46 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{4617E142-9831-4DE1-9172-C1B9C9BC2F71}.job
[2011/12/29 11:48:38 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{4840318C-8383-49E8-93F4-BA8297517368}.job
[2011/12/21 21:57:43 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{4DAB277E-D7A2-4C0F-B797-970284E8FC07}.job
[2012/01/09 14:52:09 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{55DD688E-C38B-4ADE-987F-B90FDC6515F4}.job
[2011/11/16 18:10:01 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{57F4E4D0-AFBB-4E70-8DB4-AF70CF4AE586}.job
[2011/11/20 13:12:10 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{641BA5B5-A0DB-4F8A-9A37-0F902A8628ED}.job
[2011/12/29 13:07:19 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{6830B972-0FE9-44D9-8D2E-7783622C81AE}.job
[2012/01/09 14:53:45 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{73F4C45A-4764-48A7-8FB5-80771BC13CBD}.job
[2011/10/15 14:28:15 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{7409E8DD-5286-49F0-9D5F-4FDD1FF4DC88}.job
[2011/12/21 13:25:37 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{85D811F1-4CD2-40F9-AC88-F65677972781}.job
[2011/12/16 12:48:29 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{8CF78A6A-8835-400D-93D1-7157FD1C8C7E}.job
[2011/12/16 12:49:15 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{A30D47F6-5B9B-4AE5-BBE3-6A829F01F5E4}.job
[2011/12/20 12:49:35 | 000,000,820 | ---- | M] () -- C:\Windows\Tasks\{A5F3C2D6-E29D-4A03-8A12-2B95F80B39B6}.job
[2011/12/16 11:59:40 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{A7E6F1E1-D91B-40A3-A2F8-7C52918E4BC4}.job
[2011/12/21 21:55:43 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{B6439423-44D6-41C7-B363-A1E0646C86EE}.job
[2012/01/16 15:18:38 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{C384EE8B-BB8D-48D9-B535-6AC7540864D2}.job
[2012/01/16 13:40:14 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{CB338BE6-6E0B-4892-83D0-A32EA43086A5}.job
[2012/01/19 23:33:15 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{CFECC5F7-F937-48B2-BAA9-A202A20B63C0}.job
[2012/01/17 12:57:04 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{D3C3F103-08C2-42EE-AA7D-CB989D6C6DB2}.job
[2011/12/16 11:53:57 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{D5AC8E3C-46A2-4A7A-B6C9-936F0BE79D27}.job
[2011/11/20 13:10:21 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{D90DEE06-8B8F-4952-869C-8E7A8134164C}.job
[2011/12/10 09:51:40 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{E0466489-083A-461E-BD28-34185DAE89D1}.job
[2011/12/20 12:48:25 | 000,000,820 | ---- | M] () -- C:\Windows\Tasks\{E4CE4979-57FD-4313-B66A-945F22033728}.job
[2011/12/16 11:56:05 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{EA3839A2-CB9B-4107-A3BF-3627F788DF9E}.job
[2012/01/13 14:42:24 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{F6F5EDB6-4334-463C-957B-A1DDFBF8D6FF}.job
[2012/01/13 14:43:51 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{F970626B-F777-4741-A92A-52D9954D5313}.job
[2011/12/10 09:13:21 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{F9E8A50B-60A6-4AEE-9EC9-428286C26A94}.job
[2011/11/20 13:11:23 | 000,000,818 | ---- | M] () -- C:\Windows\Tasks\{FBF09B8D-B0A5-48BE-BE8E-AE3E00D847ED}.job
========== Purity Check ==========
< End of report >
Edited by Jerry67, 11 August 2012 - 03:25 PM.