The virus I have is a virus that mimics the svchost system in windows. I have tried many different virus scanners and nothing removes it,The virus itself tries to compete with the other svchost files and causes my computer to run much slower. I can end its process constantly but it just pops back up. It takes up to 70% of my CPU. Any help will be greatly appreciated.
svchost.exe*32 virus [Solved]
Started by
jeffNL
, Feb 23 2013 05:36 AM
-
This topic is locked
#1
Posted 23 February 2013 - 05:36 AM
jeffNL
-
- Member
-
- 5 posts
New Member
The virus I have is a virus that mimics the svchost system in windows. I have tried many different virus scanners and nothing removes it,The virus itself tries to compete with the other svchost files and causes my computer to run much slower. I can end its process constantly but it just pops back up. It takes up to 70% of my CPU. Any help will be greatly appreciated.
#2
Posted 23 February 2013 - 06:00 AM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
Hi there I will need a look at the system first
Download OTL to your Desktop
Secondary link
THEN
Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan
On completion of the scan click save log, save it to your desktop and post in your next reply
Download OTL to your Desktop
Secondary link
- Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- Select All Users
- Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
winsock.*
/md5stop
CREATERESTOREPOINT
- Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Post both logs
THEN
Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan
On completion of the scan click save log, save it to your desktop and post in your next reply
#3
Posted 23 February 2013 - 07:47 AM
jeffNL
- Topic Starter
-
- Member
-
- 5 posts
New Member
Thanks for the quick reply! For some reason the aswMBR keep crashing while scanning. OTL had no problems and copieed the log reports
OTL scan:
OTL logfile created on: 23-2-2013 14:37:29 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\jeff\Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16484)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
7,96 Gb Total Physical Memory | 4,77 Gb Available Physical Memory | 60,01% Memory free
15,96 Gb Paging File | 10,84 Gb Available in Paging File | 67,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,69 Gb Total Space | 19,49 Gb Free Space | 17,45% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 69,52 Mb Free Space | 69,52% Space Free | Partition Type: NTFS
Drive E: | 910,41 Gb Total Space | 485,76 Gb Free Space | 53,36% Space Free | Partition Type: NTFS
Drive F: | 20,00 Gb Total Space | 19,89 Gb Free Space | 99,46% Space Free | Partition Type: NTFS
Drive H: | 931,51 Gb Total Space | 567,31 Gb Free Space | 60,90% Space Free | Partition Type: NTFS
Computer Name: JEFF-PC | User Name: jeff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013-02-23 14:36:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\jeff\Downloads\OTL.exe
PRC - [2013-02-21 12:23:58 | 003,494,992 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\Origin.exe
PRC - [2013-02-20 12:25:52 | 000,008,192 | RH-- | M] (Microsoft Corporation) -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe
PRC - [2013-02-20 12:18:21 | 010,201,600 | RH-- | M] () -- C:\Users\jeff\AppData\Local\Temp\BioCredProv.exe
PRC - [2013-02-17 12:51:20 | 000,526,247 | -H-- | M] () -- C:\Temporary\iehighutil.exe
PRC - [2013-02-12 16:34:32 | 033,082,632 | ---- | M] (Crytek GmbH) -- E:\games\Crysis 3\Bin32\Crysis3.exe
PRC - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
PRC - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013-02-08 10:46:24 | 001,320,768 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
PRC - [2013-02-08 07:12:46 | 000,140,288 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\svchost.exe
PRC - [2013-01-26 03:35:08 | 001,248,208 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013-01-19 03:51:31 | 001,129,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013-01-19 03:50:07 | 001,071,392 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
PRC - [2013-01-15 18:47:12 | 000,491,840 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
PRC - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
PRC - [2012-12-25 15:11:24 | 001,611,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
PRC - [2012-11-07 16:42:09 | 001,199,576 | ---- | M] (Spotify Ltd) -- C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012-10-17 11:21:02 | 000,553,800 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
PRC - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
========== Modules (No Company Name) ==========
MOD - [2013-02-21 18:57:15 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d9b1eab5c18e51eaf4acc4894df0f223\System.ServiceProcess.ni.dll
MOD - [2013-02-21 18:57:14 | 000,141,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\a7dd657846daf68d3f6750ccad627628\System.Configuration.Install.ni.dll
MOD - [2013-02-21 18:57:13 | 001,711,616 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\4e0b80cd44dbb1d3b283aea5496da8e9\Microsoft.VisualBasic.ni.dll
MOD - [2013-02-21 12:23:58 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\Origin\tufao.dll
MOD - [2013-02-20 14:27:28 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65220f0f32ec84454f9a811fba883c2e\System.Windows.Forms.ni.dll
MOD - [2013-02-20 12:18:21 | 010,201,600 | RH-- | M] () -- C:\Users\jeff\AppData\Local\Temp\BioCredProv.exe
MOD - [2013-02-17 12:51:20 | 000,526,247 | -H-- | M] () -- C:\Temporary\iehighutil.exe
MOD - [2013-02-14 11:56:30 | 012,638,576 | ---- | M] () -- C:\Users\jeff\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll
MOD - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
MOD - [2013-02-08 07:12:46 | 000,140,288 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\svchost.exe
MOD - [2013-02-08 07:12:46 | 000,013,824 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libblkmaker-0.1-0.dll
MOD - [2013-02-08 07:12:46 | 000,013,312 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libblkmaker_jansson-0.1-0.dll
MOD - [2013-02-08 07:11:58 | 000,228,352 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libcurl-4.dll
MOD - [2013-02-08 07:11:58 | 000,092,672 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\pdcurses.dll
MOD - [2013-02-08 07:11:58 | 000,088,576 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\zlib1.dll
MOD - [2013-02-08 07:11:58 | 000,052,736 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libjansson-4.dll
MOD - [2013-01-31 14:03:56 | 000,345,600 | ---- | M] () -- E:\games\Crysis 3\Bin32\nvDXTLibrary.dll
MOD - [2013-01-31 14:03:56 | 000,078,848 | ---- | M] () -- E:\games\Crysis 3\Bin32\Txaa.win32.dll
MOD - [2013-01-26 03:35:06 | 000,460,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll
MOD - [2013-01-26 03:35:04 | 004,012,496 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013-01-26 03:34:19 | 000,597,968 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013-01-26 03:34:18 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013-01-26 03:34:16 | 001,552,848 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2013-01-16 11:08:25 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e2f7dbe3bf08df200a4cdcf2e0eb82fa\System.Runtime.Remoting.ni.dll
MOD - [2013-01-16 11:08:21 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\cf561d65486360afb324d26c80b9aac2\System.Configuration.ni.dll
MOD - [2013-01-16 11:07:00 | 005,453,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\ae31f7dc9817e359d05c9c8efdd5f359\System.Xml.ni.dll
MOD - [2013-01-16 11:06:54 | 006,656,512 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\644cb8dc7b37a1eec15f542da9846d0c\System.Data.ni.dll
MOD - [2013-01-16 11:06:54 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7e6b074d3f3e3cc8e0270a3552c47aaa\System.Drawing.ni.dll
MOD - [2013-01-16 11:06:37 | 007,988,736 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\28c2c6e7f48ff80c680a97b08df66a72\System.ni.dll
MOD - [2013-01-16 11:06:34 | 011,494,912 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\8d2929ad589e1092eb62a43424361465\mscorlib.ni.dll
MOD - [2013-01-15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madexcept_.bpl
MOD - [2013-01-15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\maddisAsm_.bpl
MOD - [2013-01-15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madbasic_.bpl
MOD - [2012-11-29 22:59:32 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2012-10-17 11:21:02 | 000,553,800 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
MOD - [2012-09-13 23:03:56 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_nl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2012-07-06 03:01:13 | 002,972,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2012-06-30 05:18:08 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTMUI.dll
MOD - [2012-06-30 05:18:04 | 000,335,872 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTHAL.dll
MOD - [2012-06-30 05:17:48 | 000,225,280 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTCore.dll
MOD - [2012-06-30 05:17:40 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTUI.dll
MOD - [2012-06-30 05:17:34 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTFC.dll
MOD - [2011-08-19 16:33:28 | 000,047,960 | ---- | M] () -- C:\Program Files (x86)\IObit\Smart Defrag 2\NtfsData.dll
MOD - [2011-05-01 07:04:54 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTTSH.dll
========== Services (SafeList) ==========
SRV:64bit: - [2013-01-10 00:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2013-01-10 00:22:53 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2013-01-10 00:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2012-12-06 05:23:00 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2012-12-06 05:22:59 | 000,178,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2012-11-06 05:17:41 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2012-10-24 00:26:36 | 000,423,496 | ---- | M] () [Auto | Running] -- C:\Program Files\Synergy\synergyd.exe -- (Synergy)
SRV:64bit: - [2012-09-20 10:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2012-09-20 07:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2012-09-20 07:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2012-07-26 04:17:59 | 000,015,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2012-07-26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2012-07-26 04:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2012-07-26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2012-07-26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2012-07-26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2012-07-26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2012-07-26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2012-07-26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2012-07-26 04:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2012-07-26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2012-07-26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
SRV:64bit: - [2012-07-26 04:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013-01-23 18:02:43 | 000,541,608 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe -- (AdvancedSystemCareService6)
SRV - [2013-01-08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012-07-26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2013-01-10 02:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2013-01-10 02:39:29 | 000,194,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2012-12-19 06:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012-11-27 04:56:29 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2012-11-27 04:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2012-11-20 05:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2012-11-07 08:49:46 | 000,113,664 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rzudd.sys -- (rzudd)
DRV:64bit: - [2012-11-06 08:52:07 | 000,445,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2012-11-06 08:36:23 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
DRV:64bit: - [2012-11-06 04:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2012-10-12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012-10-11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2012-10-11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
DRV:64bit: - [2012-09-20 08:55:33 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2012-09-20 08:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2012-09-20 08:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2012-09-20 08:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2012-09-20 08:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2012-09-20 08:03:08 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
DRV:64bit: - [2012-09-19 10:02:08 | 000,102,368 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012-09-19 10:02:06 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012-07-26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012-07-26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
DRV:64bit: - [2012-07-26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2012-07-26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2012-07-26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2012-07-26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2012-07-26 06:00:55 | 000,283,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2012-07-26 06:00:55 | 000,077,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
DRV:64bit: - [2012-07-26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2012-07-26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2012-07-26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2012-07-26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2012-07-26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2012-07-26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2012-07-26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2012-07-26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2012-07-26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
DRV:64bit: - [2012-07-26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2012-07-26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2012-07-26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2012-07-26 05:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2012-07-26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
DRV:64bit: - [2012-07-26 05:44:30 | 000,258,288 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2012-07-26 05:36:15 | 000,034,216 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2012-07-26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012-07-26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2012-07-26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2012-07-26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2012-07-26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2012-07-26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2012-07-26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2012-07-26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2012-07-26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2012-07-26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2012-07-26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2012-07-26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2012-07-26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2012-07-26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2012-07-26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012-07-26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2012-07-26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2012-07-26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012-07-26 03:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid)
DRV:64bit: - [2012-07-26 03:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp)
DRV:64bit: - [2012-07-26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp)
DRV:64bit: - [2012-07-26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2012-07-26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2012-07-26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2012-07-17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012-06-02 15:31:56 | 000,589,824 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
DRV:64bit: - [2010-11-26 18:02:18 | 000,017,720 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:64bit: - [2009-11-18 07:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\MBfilt64.sys -- (MBfilt)
DRV - [2012-11-13 21:53:00 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2012-10-17 11:21:00 | 000,015,176 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\EVGA Precision X\RTCore64.sys -- (RTCore64)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://nl.search.yah...r=spigot-yhp-ie
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nl-NL,nl;q=0.8,en-US;q=0.5,en;q=0.3
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3C EA C2 B8 29 F7 CD 01 [binary data]
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\URLSearchHook: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes,DefaultScope = {C34CA07A-74EF-4CBD-8F67-A805395AC575}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...q={searchTerms}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes\{C34CA07A-74EF-4CBD-8F67-A805395AC575}: "URL" = http://nl.search.yah...p={searchTerms}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nl-NL,nl;q=0.8,en-US;q=0.5,en;q=0.3
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 21 3A A5 35 04 D7 CD 01 [binary data]
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...q={searchTerms}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
========== Chrome ==========
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - Extension: YouTube = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google Zoeken = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Ebay Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.0_0\
CHR - Extension: Domain Error Assistant = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.1_0\
CHR - Extension: Savings-Slider = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0\
CHR - Extension: Amazon Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\
CHR - Extension: Gmail = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2012-07-26 06:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O4:64bit: - HKLM..\Run: [Fences] C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [AdobeUpdate] C:\Users\jeff\AppData\Roaming\Adobe32\invis.vbs ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Advanced SystemCare 6] C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [iehighutil] C:\Temporary\iehighutil.exe ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Microsoft Routing Utilities] C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [puush] C:\Program Files (x86)\puush\puush.exe ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Spotify Web Helper] C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [Spotify] C:\Users\jeff\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [Spotify Web Helper] C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - Startup: C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk = C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: sony.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E96A4FF6-3529-4BB1-B665-F131F45343C8}: DhcpNameServer = 192.168.2.254
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000 Winlogon: Shell - (C:\WINDOWS\explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000 Winlogon: Shell - (C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe) - C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-07-26 07:52:25 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
NetSvcs:64bit: wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:64bit: DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:64bit: NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:64bit: SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2013-02-23 12:05:15 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013-02-22 14:07:27 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\NVIDIA
[2013-02-22 14:06:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2013-02-22 14:06:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013-02-22 14:05:28 | 026,947,360 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2013-02-22 14:05:28 | 020,534,560 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2013-02-22 14:05:28 | 017,987,192 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2013-02-22 14:05:28 | 015,275,744 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2013-02-22 14:05:28 | 015,038,296 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2013-02-22 14:05:28 | 012,862,400 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2013-02-22 14:05:28 | 009,422,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2013-02-22 14:05:28 | 007,964,680 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2013-02-22 14:05:28 | 007,569,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2013-02-22 14:05:28 | 006,267,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2013-02-22 14:05:28 | 002,911,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2013-02-22 14:05:28 | 002,726,176 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2013-02-22 14:05:28 | 002,350,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvenc.dll
[2013-02-22 14:05:28 | 001,990,944 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvenc.dll
[2013-02-22 14:05:28 | 001,807,136 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6420294.dll
[2013-02-22 14:05:28 | 001,510,328 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdagenco6420103.dll
[2013-02-22 14:05:28 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6420162.dll
[2013-02-22 14:05:28 | 001,114,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvumdshimx.dll
[2013-02-22 14:05:28 | 000,963,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2013-02-22 14:05:28 | 000,250,504 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2013-02-22 14:05:28 | 000,205,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2013-02-22 14:05:28 | 000,194,488 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvhda64v.sys
[2013-02-22 14:05:28 | 000,031,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdap64.dll
[2013-02-22 14:05:27 | 025,256,736 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2013-02-22 14:05:27 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2013-02-22 14:05:27 | 002,854,344 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2013-02-22 14:05:27 | 002,528,840 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2013-02-20 23:43:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3
[2013-02-20 18:39:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2013-02-20 18:39:53 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\SystemRequirementsLab
[2013-02-20 12:23:56 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Adobe32
[2013-02-20 12:22:03 | 000,000,000 | ---D | C] -- C:\Temporary
[2013-02-20 12:22:03 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\AppName
[2013-02-20 04:50:31 | 000,692,576 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2013-02-20 04:50:31 | 000,078,176 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2013-02-19 13:31:55 | 001,690,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
[2013-02-19 13:31:55 | 001,437,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
[2013-02-19 13:31:53 | 002,094,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmc.exe
[2013-02-19 13:31:53 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2013-02-19 13:31:53 | 001,886,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setupapi.dll
[2013-02-19 13:31:53 | 001,611,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmc.exe
[2013-02-19 13:31:53 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll
[2013-02-19 13:31:53 | 000,820,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpprefcl.dll
[2013-02-19 13:31:53 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netprofmsvc.dll
[2013-02-19 13:31:53 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmstormod.dll
[2013-02-19 13:31:52 | 000,728,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samsrv.dll
[2013-02-19 13:31:52 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MP4SDECD.DLL
[2013-02-19 13:31:52 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
[2013-02-19 13:31:52 | 000,582,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gpprefcl.dll
[2013-02-19 13:31:52 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsm.dll
[2013-02-19 13:31:52 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MP4SDECD.DLL
[2013-02-19 13:31:52 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
[2013-02-19 13:31:52 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2013-02-19 13:31:52 | 000,303,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2013-02-19 13:31:52 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm.dll
[2013-02-19 13:31:52 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm.dll
[2013-02-19 13:31:52 | 000,261,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2013-02-19 13:31:52 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSDMon.dll
[2013-02-19 13:31:52 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmstormod.dll
[2013-02-19 13:31:52 | 000,194,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys
[2013-02-19 13:31:52 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncbservice.dll
[2013-02-19 13:31:52 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetpp.dll
[2013-02-19 13:31:52 | 000,124,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys
[2013-02-19 13:31:52 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\httpprxm.dll
[2013-02-19 13:31:52 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wiaacmgr.exe
[2013-02-19 13:31:52 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wiaacmgr.exe
[2013-02-19 13:31:52 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adhsvc.dll
[2013-02-19 13:31:52 | 000,028,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys
[2013-02-19 13:31:52 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adhapi.dll
[2013-02-19 13:31:52 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\httpprxp.dll
[2013-02-19 13:31:52 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\keepaliveprovider.dll
[2013-02-19 13:31:19 | 006,967,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2013-02-19 13:31:16 | 003,966,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2013-02-19 13:31:16 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2013-02-19 13:31:15 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2013-02-19 13:31:15 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2013-02-19 13:31:15 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2013-02-19 13:31:15 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesysprep.dll
[2013-02-19 13:31:15 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesysprep.dll
[2013-02-19 13:31:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll
[2013-02-19 13:31:15 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll
[2013-02-19 13:31:15 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2013-02-19 13:31:15 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll
[2013-02-19 13:31:15 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll
[2013-02-17 20:26:28 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Mumble
[2013-02-17 20:26:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
[2013-02-17 20:26:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mumble
[2013-02-16 20:33:14 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\FLT
[2013-02-16 19:45:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aliens Colonial Marines
[2013-02-14 14:28:39 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Skyrim
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit Apps Toolbar
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2013-02-11 16:05:48 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\Electronic Arts
[2013-02-11 16:05:10 | 000,447,752 | R--- | C] (On2.com) -- C:\WINDOWS\SysWow64\vp6vfw.dll
[2013-02-11 16:05:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
[2013-02-11 16:03:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2013-02-10 20:51:04 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\puush
[2013-02-09 18:43:52 | 000,555,808 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvStreaming.exe
[2013-02-02 20:53:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\Desktop\ZygorGuidesViewer
[2013-02-02 20:51:11 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\CAPCOM
[2013-02-01 18:36:02 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Spotnet
[2013-02-01 09:25:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spotnet
[2013-01-31 12:46:47 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\LolClient
[2013-01-30 21:02:35 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_39.dll
[2013-01-30 21:02:35 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_39.dll
[2013-01-30 21:02:35 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_39.dll
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\Riot Games
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewFeature1
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\PMB Files
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2013-01-30 20:00:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2013-01-30 20:00:00 | 000,000,000 | ---D | C] -- C:\Users\jeff\.swt
[2013-01-29 16:24:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2013-01-29 16:06:45 | 000,000,000 | ---D | C] -- C:\Program Files\Synergy
[2013-01-28 18:45:37 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\StarCraft II
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2013-01-26 12:55:38 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Red 5 Studios
[2013-01-26 01:55:03 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\NAMCO
[2013-01-26 01:44:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Programs
[2013-01-25 21:15:17 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\StartIsBack
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraUXThemePatcher
[2013-01-25 21:00:49 | 002,884,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themeui.dll.backup
[2013-01-25 21:00:49 | 002,884,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themeui.dll
[2013-01-25 21:00:49 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxinit.dll.backup
[2013-01-25 21:00:48 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll.backup
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\e-academy Inc
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\e-academy Inc
[2013-01-25 19:54:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\TaskDisabled
[2013-01-25 18:31:31 | 000,032,600 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\SmartDefragBootTime.exe
[2013-01-25 18:26:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 2
[2013-01-25 18:26:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
[2013-01-25 18:23:57 | 000,026,432 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\RegistryDefragBootTime.exe
[2013-01-25 18:17:38 | 000,000,000 | ---D | C] -- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013-01-25 18:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\{BDDB56DE-AE4E-48A2-B856-FB60C8498453}
[2013-01-25 18:17:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 6
[2013-01-25 18:17:05 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
[2013-01-25 17:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013-02-23 14:27:00 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-02-23 12:31:51 | 001,792,392 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2013-02-23 12:31:51 | 000,795,678 | ---- | M] () -- C:\WINDOWS\SysNative\perfh013.dat
[2013-02-23 12:31:51 | 000,710,046 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2013-02-23 12:31:51 | 000,158,970 | ---- | M] () -- C:\WINDOWS\SysNative\perfc013.dat
[2013-02-23 12:31:51 | 000,132,416 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2013-02-23 12:26:01 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-23 12:25:49 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2013-02-23 12:25:47 | 2538,635,263 | -HS- | M] () -- C:\hiberfil.sys
[2013-02-22 14:07:13 | 000,001,371 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | M] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 12:58:39 | 000,199,936 | ---- | M] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:35 | 004,920,600 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-17 20:28:50 | 000,002,379 | ---- | M] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | M] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | M] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:38 | 000,458,906 | ---- | M] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | M] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-10 04:25:27 | 026,947,360 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2013-02-10 04:25:27 | 025,256,736 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2013-02-10 04:25:27 | 020,534,560 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2013-02-10 04:25:27 | 017,987,192 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2013-02-10 04:25:27 | 017,560,352 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2013-02-10 04:25:27 | 015,275,744 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2013-02-10 04:25:27 | 015,038,296 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2013-02-10 04:25:27 | 012,862,400 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2013-02-10 04:25:27 | 009,422,672 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2013-02-10 04:25:27 | 007,964,680 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2013-02-10 04:25:27 | 007,569,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2013-02-10 04:25:27 | 006,267,240 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2013-02-10 04:25:27 | 002,911,008 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2013-02-10 04:25:27 | 002,854,344 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2013-02-10 04:25:27 | 002,726,176 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2013-02-10 04:25:27 | 002,528,840 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2013-02-10 04:25:27 | 002,350,368 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvenc.dll
[2013-02-10 04:25:27 | 001,990,944 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvenc.dll
[2013-02-10 04:25:27 | 001,807,136 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6420294.dll
[2013-02-10 04:25:27 | 001,510,176 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6420162.dll
[2013-02-10 04:25:27 | 001,114,144 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvumdshimx.dll
[2013-02-10 04:25:27 | 000,963,776 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2013-02-10 04:25:27 | 000,250,504 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2013-02-10 04:25:27 | 000,205,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2013-02-10 04:25:27 | 000,017,738 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-10 02:04:31 | 006,393,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2013-02-10 02:04:31 | 003,472,672 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2013-02-10 02:04:29 | 002,555,680 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2013-02-10 02:04:29 | 000,237,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2013-02-10 02:04:29 | 000,063,776 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2013-02-09 18:43:52 | 000,555,808 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvStreaming.exe
[2013-02-09 14:25:36 | 003,035,306 | ---- | M] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2013-02-09 11:46:28 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-02-07 00:06:14 | 000,692,576 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2013-02-07 00:06:14 | 000,078,176 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2013-02-04 10:52:39 | 000,460,855 | ---- | M] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:56:00 | 012,629,031 | ---- | M] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | M] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | M] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | M] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.xtr
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:31 | 000,280,904 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | M] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | M] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:13:07 | 000,000,180 | ---- | M] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 21:00:49 | 002,884,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themeui.dll
[2013-01-25 18:26:45 | 000,001,182 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | M] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | M] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013-02-22 14:07:13 | 000,001,371 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | C] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 14:05:28 | 000,017,738 | ---- | C] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-22 12:58:39 | 000,199,936 | ---- | C] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:31 | 004,920,600 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-19 13:31:52 | 000,386,577 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2013-02-17 20:28:50 | 000,002,379 | ---- | C] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | C] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | C] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:29 | 000,458,906 | ---- | C] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | C] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-04 10:52:39 | 000,460,855 | ---- | C] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:55:58 | 012,629,031 | ---- | C] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | C] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | C] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | C] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:59 | 000,281,520 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:35 | 000,280,904 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | C] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | C] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:08:58 | 000,000,180 | ---- | C] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 18:26:45 | 000,017,720 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\SmartDefragDriver.sys
[2013-01-25 18:26:45 | 000,001,182 | ---- | C] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | C] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | C] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2012-12-27 18:03:51 | 003,123,272 | R--- | C] () -- C:\WINDOWS\SysWow64\pbsvc.exe
[2012-11-17 11:20:43 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
[2012-11-02 23:14:16 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
[2012-07-26 09:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2012-07-26 09:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2012-07-26 08:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-07-26 02:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2012-07-25 21:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2012-07-25 21:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2012-06-02 15:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\WINDOWS\SysWow64\xlive.dll.cat
========== ZeroAccess Check ==========
[2013-01-14 19:02:25 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-01-10 00:23:07 | 019,791,360 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-01-10 00:26:23 | 017,560,576 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== Custom Scans ==========
========== Base Services ==========
SRV:64bit: - [2012-09-20 07:30:35 | 000,190,976 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:64bit: - [2012-07-26 04:05:04 | 000,069,632 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:64bit: - [2012-07-26 04:08:16 | 000,094,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:64bit: - [2012-07-26 04:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:64bit: - [2012-11-27 05:17:32 | 000,718,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:64bit: - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV - [2012-07-26 04:18:47 | 000,043,520 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\keyiso.dll -- (KeyIso)
SRV:64bit: - [2012-07-26 04:05:36 | 000,507,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2012-07-26 04:18:26 | 000,394,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:64bit: - [2012-07-26 04:05:12 | 000,134,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:64bit: - [2012-07-26 04:05:21 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV:64bit: - [2012-07-26 04:07:06 | 000,817,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:64bit: - [2012-10-11 06:43:40 | 000,331,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2012-10-11 06:06:02 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2012-09-20 07:31:07 | 000,210,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:64bit: - [2012-07-26 04:05:34 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\eapsvc.dll -- (Eaphost)
SRV:64bit: - [2012-07-26 04:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2012-07-26 04:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:64bit: - [2012-07-26 04:05:51 | 000,438,784 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:64bit: - [2012-07-26 04:05:51 | 000,474,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:64bit: - [2012-07-26 04:07:25 | 000,502,784 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:64bit: - [2012-09-20 07:31:57 | 000,080,896 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:64bit: - [2012-07-26 04:06:34 | 000,255,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:64bit: - [2013-01-10 00:22:53 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2012-09-20 07:32:17 | 000,356,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:64bit: - [2012-07-26 06:26:47 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:64bit: - [2012-09-20 07:33:04 | 000,107,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:64bit: - [2012-07-26 04:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
No service found with a name of ProtectedStorage
No service found with a name of EMDMgmt
SRV:64bit: - [2012-07-26 04:07:03 | 000,099,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:64bit: - [2012-07-26 04:07:03 | 000,358,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:64bit: - [2012-07-26 04:07:06 | 000,817,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:64bit: - [2012-07-26 04:07:09 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:64bit: - [2012-09-20 07:33:39 | 000,035,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:64bit: - [2012-07-26 04:08:12 | 000,099,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:64bit: - [2012-07-26 04:07:23 | 000,309,248 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:64bit: - [2012-07-26 04:07:16 | 000,565,760 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2012-07-26 04:19:59 | 000,506,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:64bit: - [2012-07-26 04:07:08 | 001,282,560 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:64bit: - [2012-07-26 04:07:28 | 000,305,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2012-07-26 04:20:06 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:64bit: - [2012-07-26 04:07:30 | 000,047,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2012-07-26 04:07:00 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:64bit: - [2012-07-26 04:08:49 | 001,482,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:64bit: - [2012-11-06 05:17:42 | 000,785,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (Audiosrv)
SRV:64bit: - [2012-11-06 05:17:41 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2012-07-26 04:07:08 | 000,148,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:64bit: - [2012-07-26 04:17:59 | 000,015,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2012-07-26 04:07:47 | 001,731,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (EventLog)
SRV:64bit: - [2012-10-11 06:44:35 | 000,904,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:64bit: - [2012-07-26 04:07:47 | 000,570,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:64bit: - [2012-07-26 04:08:34 | 000,124,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\msiexec.exe -- (msiserver)
SRV - [2012-07-26 04:20:50 | 000,062,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysWow64\msiexec.exe -- (msiserver)
SRV:64bit: - [2012-07-26 04:08:06 | 000,219,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:64bit: - [2012-11-27 05:19:52 | 003,345,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:64bit: - [2012-07-26 04:05:31 | 000,252,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:64bit: - [2012-11-06 05:19:59 | 001,386,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlansvc.dll -- (WlanSvc)
SRV:64bit: - [2012-07-26 04:08:02 | 000,191,488 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
< %SYSTEMDRIVE%\*.exe >
< MD5 for: EXPLORER.EXE >
[2012-10-11 06:53:24 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=0AD19A3CA61271BA872AD90771BA47DC -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_b592a71650d677ed\explorer.exe
[2012-10-11 09:09:58 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=0DDFEAA2AA18D4295EF220EB666B2312 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_ab3dfcc41c75b5f2\explorer.exe
[2012-07-26 04:50:01 | 002,114,936 | ---- | M] (Microsoft Corporation) MD5=5B6ED1B57DBFF18D405A0260559B571E -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_b4d2f8c937e166b1\explorer.exe
[2012-07-26 05:49:13 | 002,380,440 | ---- | M] (Microsoft Corporation) MD5=928791755FDDEA721B053535EF84FA17 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_aa7e4e770380a4b6\explorer.exe
[2012-10-11 06:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=953ADECFF08202A01EFC6110214FDE02 -- C:\Windows\SysWOW64\explorer.exe
[2012-10-11 06:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=953ADECFF08202A01EFC6110214FDE02 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_b5080a0137b9becc\explorer.exe
[2012-10-11 08:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=E13A31D5254C25406A7946BDD9B06364 -- C:\Windows\explorer.exe
[2012-10-11 08:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=E13A31D5254C25406A7946BDD9B06364 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_aab35faf0358fcd1\explorer.exe
< MD5 for: SERVICES >
[2012-07-26 06:26:47 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..ucture-other-minwin_31bf3856ad364e35_6.2.9200.16384_none_8e0944daeed62829\services
< MD5 for: SERVICES.EXE >
[2012-09-20 07:33:11 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=581190907DA1CF8CB7B87B35FFE64A07 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.20521_none_98a9ea2e9f571eb2\services.exe
[2012-07-26 06:26:45 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=754A2CC1F32107EA87CBD305ABE3E618 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.16384_none_97e26cd38667756c\services.exe
[2012-09-20 07:33:46 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=8F226143046435C75C033B0C52E90FFE -- C:\WINDOWS\SysNative\services.exe
[2012-09-20 07:33:46 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=8F226143046435C75C033B0C52E90FFE -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.16420_none_981f4d19863a6591\services.exe
< MD5 for: SERVICES.EXE.MUI >
[2012-07-26 10:49:08 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=66953EC2CD8E0D23434AAF943BA60219 -- C:\WINDOWS\SysNative\nl-NL\services.exe.mui
[2012-07-26 10:49:08 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=66953EC2CD8E0D23434AAF943BA60219 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.2.9200.16384_nl-nl_7bd2dfda38c15fbf\services.exe.mui
< MD5 for: SERVICES.INI >
[2005-09-26 14:16:00 | 000,003,813 | ---- | M] () MD5=34E5D0BEBEF501D89F3266DA0FC92A83 -- C:\Users\jeff\AppData\Roaming\25Assist\armyops\System\Services.ini
< MD5 for: SERVICES.JS >
[2012-11-01 23:01:20 | 000,068,829 | ---- | M] () MD5=1AB92C1174BFBEC4E1624827E4267BB1 -- C:\Program Files\WindowsApps\Microsoft.BingTravel_1.5.1.248_x64__8wekyb3d8bbwe\Common\js\services.js
[2012-11-01 23:01:27 | 000,068,829 | ---- | M] () MD5=22256B41BB42C30B2160C2AEB4770C37 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.5.1.409_x64__8wekyb3d8bbwe\common\js\services.js
[2012-07-26 10:54:56 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:54:48 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:54:45 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:55:25 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingTravel_1.2.0.145_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:54:51 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingWeather_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-11-01 22:59:49 | 000,068,829 | ---- | M] () MD5=68C59AF6D4279C824FF57FC385F65503 -- C:\Program Files\WindowsApps\Microsoft.BingWeather_1.5.1.245_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:04 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:04 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.7.0.29_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:04 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.7.0.38_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.27_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.31_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.38_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:36 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:04:02 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingTravel_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:49 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingWeather_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-11-01 23:03:00 | 000,068,829 | ---- | M] () MD5=800D2A62D8022E1725A6F28FAD7DC025 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.5.1.406_x64__8wekyb3d8bbwe\common\js\services.js
[2012-11-01 23:00:57 | 000,068,829 | ---- | M] () MD5=800D2A62D8022E1725A6F28FAD7DC025 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.5.1.249_x64__8wekyb3d8bbwe\common\js\services.js
[2013-01-25 18:23:05 | 000,069,359 | ---- | M] () MD5=80CE8A6918A7BDB5328F93F4A3BB26B0 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.8.0.51_x64__8wekyb3d8bbwe\common\js\services.js
< MD5 for: SERVICES.LNK >
[2012-07-25 21:19:37 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2012-07-25 21:19:37 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2012-07-25 21:19:37 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_282d8a08cf7f1ada\services.lnk
< MD5 for: SERVICES.MOF >
[2012-06-02 15:35:05 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\WINDOWS\SysNative\wbem\services.mof
[2012-06-02 15:35:05 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.2.9200.16384_none_282967cc570d3701\services.mof
< MD5 for: SERVICES.MSC >
[2012-06-02 15:31:20 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\WINDOWS\SysNative\services.msc
[2012-06-02 15:31:13 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysWOW64\services.msc
[2012-06-02 15:31:20 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_282d8a08cf7f1ada\services.msc
[2012-06-02 15:31:13 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\wow64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_3282345b03dfdcd5\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\WINDOWS\SysNative\nl-NL\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\Windows\SysWOW64\nl-NL\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.2.9200.16384_nl-nl_b614afc60f2af9b2\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\Windows\WinSxS\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.2.9200.16384_nl-nl_59f6144256cd887c\services.msc
< MD5 for: SERVICES.PTXML >
[2012-07-25 21:30:54 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\WINDOWS\SysNative\wdi\perftrack\Services.ptxml
[2012-07-25 21:30:54 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.2.9200.16384_none_282967cc570d3701\Services.ptxml
< MD5 for: SERVICES.SETTINGS >
[2013-01-28 23:31:46 | 000,001,622 | ---- | M] () MD5=81E136EBBD0008284F9A2F23402FF2CF -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Components\services.settings
< MD5 for: SERVICES.WSTCGRP >
[2013-01-28 23:31:46 | 000,000,224 | ---- | M] () MD5=4C0234F9B3F49A3484CE64025050D7A7 -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Groups\OpenedProjects\services.wstcgrp
[2013-01-28 23:31:46 | 000,000,225 | ---- | M] () MD5=E4AD31A486D75BC449F02775904D2430 -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Groups\InitialLayout\services.wstcgrp
< MD5 for: SERVICES.WSTCREF >
[2013-01-28 23:31:46 | 000,000,129 | ---- | M] () MD5=73E5717A2B2C3FF0F7ED6EFDD0A658B3 -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Modes\explorer\services.wstcref
< MD5 for: SVCHOST.EXE >
[2012-07-26 04:20:58 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=0A175AF8B65797BD22C11903A8BFEB2D -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_b2666581d6b482a6\svchost.exe
[2012-07-26 04:08:47 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=57350BEDE3834915B6145B67C71C7BDA -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_0e8501058f11f3dc\svchost.exe
[2012-09-20 07:33:14 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=607F7CB143783A8F9BA058D2FC4F2D36 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_0f4c7e60a8019d22\svchost.exe
[2012-09-20 06:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\SysWOW64\svchost.exe
[2012-09-20 06:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_b2a345c7d68772cb\svchost.exe
[2013-02-08 07:12:46 | 000,140,288 | ---- | M] () MD5=B496B4A9FD5C199C524003857270924F -- C:\Users\jeff\AppData\Roaming\Adobe32\svchost.exe
[2012-09-20 07:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\WINDOWS\SysNative\svchost.exe
[2012-09-20 07:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_0ec1e14b8ee4e401\svchost.exe
[2012-09-20 06:56:27 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=EEF5E64822C3E21B186EA53463BE92DA -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_b32de2dcefa42bec\svchost.exe
< MD5 for: USERINIT.EXE >
[2012-07-26 04:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\WINDOWS\SysNative\userinit.exe
[2012-07-26 04:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_34f2617a5b742e02\userinit.exe
[2012-07-26 04:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\SysWOW64\userinit.exe
[2012-07-26 04:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_d8d3c5f6a316bccc\userinit.exe
< MD5 for: WINLOGON.EXE >
[2012-09-20 07:33:55 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=1F84B5F8DBDFFD36DF143C61CE25F12A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe
[2012-09-20 07:33:17 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=6522E98C94A2A81AE11EB66D2AF5743A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe
[2012-07-26 04:08:50 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=93AB226C07A9789B2EC7B41F73602F76 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe
[2012-10-11 06:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\WINDOWS\SysNative\winlogon.exe
[2012-10-11 06:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe
[2012-10-11 06:45:27 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=CBFD56B4EC07CB056A6ABD55DD33671F -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe
< End of report >
OTL EXTRA SCAN:
OTL Extras logfile created on: 23-2-2013 14:37:29 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\jeff\Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16484)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
7,96 Gb Total Physical Memory | 4,77 Gb Available Physical Memory | 60,01% Memory free
15,96 Gb Paging File | 10,84 Gb Available in Paging File | 67,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,69 Gb Total Space | 19,49 Gb Free Space | 17,45% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 69,52 Mb Free Space | 69,52% Space Free | Partition Type: NTFS
Drive E: | 910,41 Gb Total Space | 485,76 Gb Free Space | 53,36% Space Free | Partition Type: NTFS
Drive F: | 20,00 Gb Total Space | 19,89 Gb Free Space | 99,46% Space Free | Partition Type: NTFS
Drive H: | 931,51 Gb Total Space | 567,31 Gb Free Space | 60,90% Space Free | Partition Type: NTFS
Computer Name: JEFF-PC | User Name: jeff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{076CEF61-334E-42A2-B815-28F14EFD5D46}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{088361C7-6D55-41C8-B6B8-D3DED0C34DD7}" = rport=138 | protocol=17 | dir=out | app=system |
"{12AFA1FA-D47E-40C9-9D6C-9AAB4AD04833}" = rport=10243 | protocol=6 | dir=out | app=system |
"{19C9A9F2-ED05-4053-A7A0-7B8AA516443E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2E561B68-A350-4BD4-A556-30A1B9EB762B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{321483B6-3A30-4AD4-A44A-55BA324A490A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{32286743-B6B3-490E-8B7F-CE0448F3A1A0}" = lport=59067 | protocol=6 | dir=in | name=pando media booster |
"{3D0E1010-351E-4479-9B2D-057B387D4D5E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{43C4551C-29D8-45FA-A6B7-9E563E24C5DD}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{49F9A80F-15DF-4CE6-B121-A9D9A25825BD}" = rport=445 | protocol=6 | dir=out | app=system |
"{4F03DDA2-C7AC-47C1-939E-AD5B34728412}" = lport=139 | protocol=6 | dir=in | app=system |
"{5FB6A007-8ACC-4813-8598-0C8D93009BB2}" = lport=59067 | protocol=17 | dir=in | name=pando media booster |
"{7BF980F0-C693-4FD7-8528-72CC4EBC77EA}" = lport=138 | protocol=17 | dir=in | app=system |
"{959BF0D1-0C1F-4F62-89D0-0F838A709D44}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{97ABFFFE-C2A7-44E4-B48B-999CE7A5C973}" = lport=10243 | protocol=6 | dir=in | app=system |
"{99A94435-E181-4B97-B004-CB80B48FC699}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9B6B3B44-5638-43EF-95BA-463AC94BAA98}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9FFE6239-2B55-4220-8D02-6F4B5A08197A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A335A296-EAFD-4040-90F9-837CA9B098B9}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A40FDBF4-7009-4C0B-AC75-1BCA2F9E969C}" = lport=137 | protocol=17 | dir=in | app=system |
"{C53341AC-69EE-4682-B831-915933AEF21B}" = lport=59067 | protocol=17 | dir=in | name=pando media booster |
"{CC7BFB7F-ECFD-409E-A9AC-AED27D762618}" = lport=445 | protocol=6 | dir=in | app=system |
"{DB119C1A-B5C3-4B55-9B8A-296E7F59EA6C}" = rport=139 | protocol=6 | dir=out | app=system |
"{F03F385F-22B2-4A7E-946D-4034FC1C120A}" = lport=59067 | protocol=6 | dir=in | name=pando media booster |
"{F6406BCE-3658-4960-BCEA-23B8E4DD8DF8}" = rport=137 | protocol=17 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01888DB6-5133-4B33-BF5F-06FFC671039C}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{0237FDA6-392F-485B-A8CD-EB523C0F9DAC}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{05044F2D-489C-483B-8B86-FE1D151D7BB9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0983A59E-C5D4-4F74-BD76-8747BCD924B2}" = protocol=17 | dir=in | app=e:\games\far cry 2\bin\fc2launcher.exe |
"{0A7E9969-E2F1-42DE-905E-039F12EC8250}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{0CACE1BA-6E1F-4A55-A0C6-3E06D3A4B490}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{0DF40AB9-6A28-4A45-B6B5-01C9B3E4C718}" = protocol=6 | dir=in | app=e:\utorrent\utorrent.exe |
"{0E1A970E-9C8D-4896-81AA-8F91816D0612}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{13A4EB20-8C47-41FA-B770-DDE11056D22D}" = dir=out | name=radiant defense |
"{13B27931-D95C-4F3D-82F4-22D1EF98793D}" = dir=out | name=@{microsoft.bingweather_1.5.1.245_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |
"{179D27EB-7891-47DB-AFC4-14C8EAFFC5DD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{18C49B61-EA8F-43CB-B1A6-2054A9725CE3}" = protocol=17 | dir=in | app=e:\games\far cry 2\bin\fc2editor.exe |
"{1BDE7B9D-A627-497E-8E05-0268CE802EEF}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{1D75693C-04CD-46E0-9867-74C4D2BE0095}" = dir=out | app=e:\games\assassins creed iii\assassinscreed3.exe |
"{1EB3AA6E-8EF0-4FE5-B5DA-34EF2B6CAE78}" = protocol=17 | dir=in | app=e:\games\battlefield 3\bf3.exe |
"{1FA8999E-8C54-4EE8-A13B-C29A0B0F8C3E}" = protocol=6 | dir=in | app=e:\games\bin\farcry3_d3d11.exe |
"{281C6F4B-A705-4323-8201-F9003750101D}" = dir=out | name=@{microsoft.bingsports_1.5.1.249_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} |
"{28B27EDB-12D6-412F-84FC-03200EFBDC00}" = protocol=6 | dir=in | app=e:\games\bin\fc3updater.exe |
"{2A7FDE3C-A1C9-4B63-9CC9-0143D5662D90}" = dir=out | name=facebook lite |
"{2AC66163-EC07-4EAB-AD61-14642A0F035B}" = dir=out | name=mftp |
"{2C6746E2-305E-438A-8F67-CFF5CC3EA8CF}" = protocol=1 | dir=out | [email protected],-28544 |
"{3006CA3A-8899-4FD4-A7BA-E610501B51D7}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{30BFA88F-7B47-442D-B744-1981DAA613B6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{333A7D1D-1D98-4495-B090-E230694CC829}" = protocol=6 | dir=in | app=e:\games\age of empire iii\age3y.exe |
"{337F8025-9B78-4705-A338-968E1F13F7A8}" = protocol=6 | dir=in | app=e:\games\bin\fc3editor.exe |
"{36E06616-FFD4-4C61-BD10-7858085D54C7}" = dir=out | name=@{microsoft.bingnews_1.5.1.409_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} |
"{3AAD7886-E7FE-4711-A0B2-27EAE74EFB10}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{3D819613-201B-4FD6-90C2-27643A497C1F}" = protocol=17 | dir=in | app=e:\utorrent\utorrent.exe |
"{3F2215E3-7CB5-4023-9E7B-48880A4335A8}" = dir=out | name=google search |
"{438E2E03-DDF2-476B-9E2D-E9D9E713777C}" = dir=out | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{446202E5-0B4B-4AA4-B655-D34C02730E7D}" = dir=out | name=@{microsoft.bingfinance_1.5.1.406_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} |
"{450AF9AD-2651-4B8B-BA9B-A1FAE670DE36}" = protocol=17 | dir=in | app=e:\games\bulletstorm\binaries\win32\shippingpc-stormgame.exe |
"{487F1033-AEF4-4E94-AE8C-28C157B912E9}" = protocol=6 | dir=in | app=e:\games\assassins creed iii\ac3sp.exe |
"{4DBD131A-F8E2-4914-BFA0-7A44F1DFE460}" = protocol=17 | dir=in | app=e:\games\assassins creed iii\ac3mp.exe |
"{5126887C-C6AE-4090-888D-184E43B5C833}" = protocol=17 | dir=in | app=e:\games\crysis 3\bin32\crysis3.exe |
"{51352537-2678-440E-A68A-2412C939C2A3}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{513CAB20-BBAA-41E3-A4F4-A4D9FAA9E9AA}" = protocol=6 | dir=in | app=e:\games\star wars - the old republic\launcher.exe |
"{51B4B69A-311B-4FAA-AC7B-F5B0A78B2FEC}" = protocol=58 | dir=out | [email protected],-28546 |
"{540F22AB-E833-4B74-AC8D-ED50BB48210B}" = protocol=17 | dir=in | app=e:\games\age of empire iii\age3x.exe |
"{550C260D-0630-4220-9C8E-CC4EA8AC8C9A}" = protocol=58 | dir=in | [email protected],-28545 |
"{5737738E-412D-4ADB-849E-6D74114B38DA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5B064097-CB84-4008-9BB4-97A7CAD8F11C}" = protocol=17 | dir=in | app=e:\games\star wars - the old republic\launcher.exe |
"{5BFF3015-EA08-4D87-9F80-DEE1ABE98E8D}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{5CE7179D-D0EA-4817-91E1-0B4BA10DA223}" = dir=out | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{5F55D091-6152-4A54-B352-0F95C7233EF7}" = dir=in | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{68FF65D2-B5E2-4488-B2CA-EB8D99B206DA}" = dir=in | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{69C96717-D8F4-4408-A174-C68C48CA7355}" = protocol=6 | dir=in | app=e:\games\crysis 3\bin32\crysis3.exe |
"{6BAB0DC2-0D4C-4561-BA5D-CC0086A6B9CC}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{6C18FE79-562E-4701-B2A4-D237B08C949D}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{6D94B2EC-DCA1-4E86-8274-4E94E0DBAEFB}" = dir=out | name=@{microsoft.zunevideo_1.1.134.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} |
"{7285DAFB-4E94-4A65-856A-8188835033DA}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{73EB9727-6F1A-4BC6-BF5D-49A82036CBAF}" = protocol=6 | dir=out | app=system |
"{74316174-806A-4C43-BAA0-C401CD614D53}" = dir=in | name=@{microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{7A6745C2-0990-488B-9FDC-4A63F7E86E62}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{7D965C57-EA10-48BD-8B5A-29AF12727FD7}" = protocol=17 | dir=in | app=e:\games\age of empire iii\age3y.exe |
"{7DB0D11B-79AF-4A69-84A8-656FC1401271}" = protocol=17 | dir=in | app=e:\games\assassins creed iii\ac3sp.exe |
"{7FCBF890-5152-4220-BB5C-D3C191ED6871}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{82358BDB-D5F8-475F-9354-6D539E76984F}" = dir=out | name=9gag viewer |
"{85FA6024-EFA5-47AD-89EF-CC6B0D5D42ED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9219BA4D-6556-46D5-8761-A9EE804EE92A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9378CB54-6E11-451D-B3C9-2477F97D49E5}" = protocol=17 | dir=in | app=e:\games\far cry 2\bin\farcry2.exe |
"{95D519FC-A162-4DAE-B90D-B82A88EA8023}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9760BB01-DE64-439D-8088-EF889699775D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A217BC6B-AE8F-4926-BD68-54213667F591}" = protocol=17 | dir=in | app=c:\program files\synergy\synergys.exe |
"{A3A4D26C-5922-4B9D-8D04-D87C08024939}" = dir=in | app=e:\games\the war z\warz.exe |
"{A55A6442-5D3F-478C-A6ED-64672FDE9B70}" = dir=out | app=e:\medal of honor\launcher.exe |
"{A6B67729-C2A2-4B23-9872-359A3E57277E}" = dir=in | name=@{microsoft.reader_6.2.9200.20523_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{A90B1F0A-A896-43E3-B8AE-AA18543E1C5B}" = protocol=6 | dir=in | app=e:\games\far cry 2\bin\farcry2.exe |
"{AB8D35D4-BF6E-4E00-9126-97A27713D3C6}" = protocol=17 | dir=in | app=e:\games\bin\fc3updater.exe |
"{ABBFACA5-FEC0-405E-95ED-AE0689E9A582}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{AC128E50-58CB-49DD-83A2-8358B285A41A}" = protocol=6 | dir=in | app=c:\program files\synergy\synergys.exe |
"{AFA81DA3-DBBD-4A48-8E4D-A97574861987}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{B059B569-9142-46EF-9C84-A9525267C471}" = dir=out | name=@{microsoft.zunemusic_1.1.134.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} |
"{B1F8DAC5-52BA-4B9B-9C8A-D3F7908E4BCB}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B247B5BE-1FF6-41A2-9349-0D8EAC6D5881}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} |
"{B34343B5-FF7B-48F6-81BC-174287EC2C7D}" = protocol=1 | dir=in | [email protected],-28543 |
"{B43005D1-304C-4465-84E0-BC02A4694F9A}" = dir=out | app=e:\games\assassins creed iii\ac3sp.exe |
"{B678CE75-A3D5-4C6E-84DE-007BEBD1838D}" = protocol=6 | dir=in | app=e:\games\bulletstorm\binaries\win32\shippingpc-stormgame.exe |
"{B6F8894D-5277-446A-965B-1196B469E064}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{B9266329-2760-492F-A80B-675B586DC6C1}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{BB382E08-3829-4F1C-875D-5B28DCB4EA41}" = protocol=6 | dir=in | app=e:\games\far cry 2\bin\fc2editor.exe |
"{BFDF0344-0F8B-47AF-BA22-CF4984CCC3C7}" = dir=out | name=@{microsoft.xboxlivegames_1.1.134.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{C3AC3732-F9AA-428C-8C70-C54116882E70}" = dir=in | name=mftp |
"{C636982E-FCCD-403D-80FF-B8909FF76872}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{CB559298-7FAA-4C86-9908-E61F9C6ED9F9}" = dir=out | name=@{microsoft.reader_6.2.9200.20523_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{D694AC9D-6BF2-4805-86C0-8AD6CF847F4E}" = dir=in | app=e:\medal of honor\launcher.exe |
"{D73F0C82-368D-43E5-BE37-E8FE5575ABEF}" = dir=out | name=@{microsoft.bing_1.5.1.251_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
"{D801CF6D-3112-4062-8650-73BB65FA504C}" = protocol=17 | dir=in | app=e:\games\bin\fc3editor.exe |
"{D9C8548D-F642-4970-8EFC-59C298A602D3}" = dir=out | name=@{microsoft.bingmaps_1.5.1.240_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{DD06F5E5-7ACE-4D66-95FF-F060F6F3A6E4}" = protocol=6 | dir=in | app=e:\games\assassins creed iii\ac3mp.exe |
"{E0AA2F36-DE76-44BB-910C-FFCD6F90CB0B}" = dir=out | name=@{microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{E0EFB176-DBA0-4C02-98E6-82A9C4573F69}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{E807145A-A4DE-43DF-BB00-E39DBD84AAF9}" = protocol=17 | dir=in | app=e:\games\bin\farcry3_d3d11.exe |
"{E91EF930-F284-4D07-AE62-8D3695305A22}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{EA71A422-224F-4D29-B4BE-4B6BFCBE4562}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{EEDE8282-0F95-4F88-B1FF-2B672FC6E7D3}" = protocol=6 | dir=in | app=e:\games\battlefield 3\bf3.exe |
"{EEE8C55C-63EA-46A9-9C4C-87D572CEA9F7}" = dir=out | name=@{microsoft.bingtravel_1.5.1.248_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |
"{F075AB4E-130A-4803-88A7-2B375624E66E}" = protocol=6 | dir=in | app=e:\games\bin\farcry3.exe |
"{F1506DD0-B96F-4F26-B07F-60E7543CB6B7}" = protocol=17 | dir=in | app=e:\games\bin\farcry3.exe |
"{F5EB7D61-CDB9-4882-817F-02D1949266A2}" = protocol=6 | dir=in | app=e:\games\age of empire iii\age3x.exe |
"{F989F79E-E21C-4B31-8BFC-812CBBDF18AA}" = dir=out | app=%programfiles% (x86)\installshield installation information\{9d15e813-0c26-41e7-abc5-3eb06ff1b3cf}\dataextract.exe |
"{FAD7E3D9-934F-4177-BC2B-75149B9B9604}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{FB070158-E9B7-41BE-B59B-0195E5A856F4}" = protocol=6 | dir=in | app=e:\games\far cry 2\bin\fc2launcher.exe |
"{FF7E5B4A-343D-410F-963E-A27851BCE414}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{002C2D59-2C8D-4D60-92FF-97F2D6E4D9E9}E:\games\call of duty black ops ii\t6sp.exe" = protocol=6 | dir=in | app=e:\games\call of duty black ops ii\t6sp.exe |
"TCP Query User{0F978211-4FC0-4989-97FE-37B5A0004B45}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"TCP Query User{189F727B-21A1-4F37-AE1A-52F834C3B0DC}C:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe" = protocol=6 | dir=in | app=c:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe |
"TCP Query User{3A78D7A5-CD1A-4635-9964-92BA8889F38A}C:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe |
"TCP Query User{3E6461E2-BC6A-4809-B4B2-3B60F8585D20}C:\users\jeff\appdata\local\temp\gw2.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\local\temp\gw2.exe |
"TCP Query User{527216EF-BADE-438A-A475-FDE4D2456A3A}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{54C664AC-35A5-4851-8949-4DC2A674A39C}E:\games\bin\farcry3.exe" = protocol=6 | dir=in | app=e:\games\bin\farcry3.exe |
"TCP Query User{65A4B5BC-3E44-4FAA-8C59-94E267686F3C}E:\games\r.g. catalyst\max payne 3\maxpayne3.exe" = protocol=6 | dir=in | app=e:\games\r.g. catalyst\max payne 3\maxpayne3.exe |
"TCP Query User{77D25FF3-1A70-41B4-8629-96265F2B9C38}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"TCP Query User{791AA0A8-E99C-4C86-9F62-6D35729D4433}E:\games\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=e:\games\guild wars 2\gw2.exe |
"TCP Query User{7D65F13E-D0EB-4661-89EC-3DDF1CFAEC9E}C:\users\jeff\planetside2\planetside2.exe" = protocol=6 | dir=in | app=c:\users\jeff\planetside2\planetside2.exe |
"TCP Query User{8229E47C-51DA-4371-8339-36346C785747}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"TCP Query User{8B1426EF-1AB6-4834-877C-D15D9633A3CB}E:\games\call of duty black ops ii\t6zm.exe" = protocol=6 | dir=in | app=e:\games\call of duty black ops ii\t6zm.exe |
"TCP Query User{BEEEEFF9-19D5-4622-8811-DA5EFD24A365}E:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe" = protocol=6 | dir=in | app=e:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe |
"TCP Query User{C58EA645-BEE0-441C-B552-CDBFA89E6276}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"TCP Query User{D060A284-1CDC-4132-82EF-9BDCA8788233}E:\games\call of duty black ops ii\t6mp.exe" = protocol=6 | dir=in | app=e:\games\call of duty black ops ii\t6mp.exe |
"TCP Query User{DDFF0370-04B9-4B28-87E6-A473400EA2C7}E:\games\crysis 2\bin32\crysis2.exe" = protocol=6 | dir=in | app=e:\games\crysis 2\bin32\crysis2.exe |
"TCP Query User{FD68C92C-6D53-4461-BBEE-FD81FE3212D7}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{10EEE635-9EFA-4B8B-B239-A28D877C3BED}E:\games\bin\farcry3.exe" = protocol=17 | dir=in | app=e:\games\bin\farcry3.exe |
"UDP Query User{1E040BE7-50BE-4B62-B73E-50D5ADEE5FB9}C:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe |
"UDP Query User{2765BB4B-ECE6-4DB6-A466-0052CB2A2BC3}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{3BF044B5-A4A0-4E75-8EA9-89C725D33281}E:\games\r.g. catalyst\max payne 3\maxpayne3.exe" = protocol=17 | dir=in | app=e:\games\r.g. catalyst\max payne 3\maxpayne3.exe |
"UDP Query User{4DBC0533-7AE9-41EA-A8CF-BA741067B66C}C:\users\jeff\planetside2\planetside2.exe" = protocol=17 | dir=in | app=c:\users\jeff\planetside2\planetside2.exe |
"UDP Query User{6AED8A37-A5D8-43BA-89DD-DD553E16D79E}C:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe" = protocol=17 | dir=in | app=c:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe |
"UDP Query User{81A4644E-2B90-47C7-9C4E-9B5E050ECFFB}C:\users\jeff\appdata\local\temp\gw2.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\local\temp\gw2.exe |
"UDP Query User{8BE8033D-F11A-445C-8BF4-D41DE18025E0}E:\games\call of duty black ops ii\t6mp.exe" = protocol=17 | dir=in | app=e:\games\call of duty black ops ii\t6mp.exe |
"UDP Query User{9432C79D-D024-4851-B1C2-5184CA96277D}E:\games\call of duty black ops ii\t6sp.exe" = protocol=17 | dir=in | app=e:\games\call of duty black ops ii\t6sp.exe |
"UDP Query User{9EDF9370-E653-4B0C-9919-F5BCAE6E0C9E}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{A31B045B-FCBF-4E09-8ADF-7BE26B17CECE}E:\games\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=e:\games\guild wars 2\gw2.exe |
"UDP Query User{A472FF43-117C-48A3-B073-62092CC17969}E:\games\crysis 2\bin32\crysis2.exe" = protocol=17 | dir=in | app=e:\games\crysis 2\bin32\crysis2.exe |
"UDP Query User{B4FA8710-7611-4F0A-B9BF-8E84FB1C8CD4}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"UDP Query User{C76CE14F-20E3-4FD3-9D10-FC1292F30D67}E:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe" = protocol=17 | dir=in | app=e:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe |
"UDP Query User{CE0833DF-72C2-44E4-B2ED-E48A563E507F}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{D67CFA0D-8F56-4801-B25E-2B0CBFC61658}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"UDP Query User{DED19454-7108-4045-AD11-CC1C5D84DA8E}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"UDP Query User{EDC107DE-655F-49F6-B7A6-8C0399DA7231}E:\games\call of duty black ops ii\t6zm.exe" = protocol=17 | dir=in | app=e:\games\call of duty black ops ii\t6zm.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp version 0.99.7
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86417011FF}" = Java 7 Update 11 (64-bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{552A9E66-09E1-4BA1-ABF9-A51955142BA5}" = Vinny27 - Adobe Photoshop CS6 64-bit
"{64A3A4F4-B792-11D6-A78A-00B0D0170110}" = Java SE Development Kit 7 Update 11 (64-bit)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision stuurprogramma 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA-configuratiescherm 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafisch stuurprogramma 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.0.1 (BETA)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision controllerstuurprogramma 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX systeemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 2.47.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio-stuurprogramma 1.3.23.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"WinRAR archiver" = WinRAR 4.20 (64-bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}" = Razer Synapse 2.0
"{12947715-B6F0-4597-816F-5E13FB647921}_is1" = Spotnet
"{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23C3EF87-AD08-4F76-982D-1AE137485F08}" = MySQL Workbench 5.2 CE
"{25A18E40-3263-416E-B672-BE85DA47BBFD}" = Mumble 1.2.3
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{4198AE83-A3C6-4C41-85C8-EC63E990696E}" = Crysis®3
"{45410935-3E72-472B-8C35-AB1000008200}" = Bulletstorm
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{6033673D-2530-4587-8AD0-EB059FC263F9}" = Crysis® 2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{718B4606-2FEF-411B-B96E-4FC53B91EBC0}" = Secure Download Manager
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{84F3F00F-CCA9-43B3-A493-1E2757649848}_is1" = Lucius 1.01.3173
"{88F0F4FF-B514-4E32-9C17-CAF96D60EAFC}" = Razer Game Booster
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}" = Assassin's Creed ® III
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B4DD5371-2FA3-4178-95E8-54DDF34F0E91}" = IObit Apps Toolbar v6.9
"{BC3051A7-1021-4B57-A3DA-AAC24566FAE7}_is1" = The War Z version 1.0
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = De Sims™ 3
"{C3592426-531E-4110-911D-BFECE2CE284B}" = puush
"{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties
"{CFEF8DB5-B45E-4b05-90BE-D02AA6F45354}" = Firefall
"{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}" = Far Cry 3
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2
"ACE COMBAT ASSAULT HORIZON Enhanced Edition_is1" = ACE COMBAT ASSAULT HORIZON Enhanced Edition
"Advanced SystemCare 6_is1" = Advanced SystemCare 6
"Aliens: Colonial Marines_is1" = Aliens: Colonial Marines
"Alt.Binz" = Alt.Binz 0.39.4
"Battlelog Web Plugins" = Battlelog Web Plugins
"BSPlayerf" = BS.Player FREE
"Call of Duty Black Ops II_is1" = Call of Duty Black Ops II
"ESN Sonar-0.70.4" = ESN Sonar
"Fences 22.01" = Fences 2
"GFWL_{45410935-3E72-472B-8C35-AB1000008200}" = Bulletstorm
"Google Chrome" = Google Chrome
"Guild Wars 2" = Guild Wars 2
"Homefront_is1" = Homefront
"InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs
"InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties
"IObit Malware Fighter_is1" = IObit Malware Fighter
"Lord of the Rings - War in the North_is1" = Lord of the Rings - War in the North
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Mass Effect 3.Deluxe Edition.v 1.4.5427.111 + 12 DLC_is1" = Mass Effect 3.Deluxe Edition.v 1.4.5427.111 + 12 DLC
"Max Payne 3_is1" = «Max Payne 3» 1.0.0.57
"nbi-nb-base-7.2.1.0.201210100934" = NetBeans IDE 7.2.1
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Open Codecs" = Xiph.Org Open Codecs 0.85.17777
"Origin" = Origin
"PrecisionX" = EVGA Precision X 3.0.4
"PunkBusterSvc" = PunkBuster Services
"Rockstar Games Social Club" = Rockstar Games Social Club
"Smart Defrag 2_is1" = Smart Defrag 2
"StarCraft II" = StarCraft II
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Synergy" = Synergy
"UltraUXThemePatcher" = UltraUXThemePatcher
"Uplay" = Uplay
"uTorrent" = µTorrent
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{8ACF0A2F-1873-4062-9769-0BD350554888}_is1" = setup version 1.0
"FileZilla Client" = FileZilla Client 3.6.0.2
"SOE-C:/Users/jeff/AppData/Local/Sony Online Entertainment/ApplicationUpdater" = applicationupdater
"SOE-C:/Users/jeff/PlanetSide2" = gamelauncher-ps2-psg
"soe-PlanetSide 2 PSG" = PlanetSide 2
"Spotify" = Spotify
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"SOE-C:/Users/jeff/PlanetSide2" = gamelauncher-ps2-psg
"soe-PlanetSide 2 PSG" = PlanetSide 2
"Spotify" = Spotify
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 20-2-2013 15:36:42 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: ShippingPC-StormGame.exe, versie: 1.0.7094.0,
tijdstempel: 0x4d35a5ef Naam van module met fout: ShippingPC-StormGame.exe, versie:
1.0.7094.0, tijdstempel: 0x4d35a5ef Uitzonderingscode: 0xc0000005 Foutmarge: 0x00a1645b
Id
van proces met fout: 0xa64 Starttijd van toepassing met fout: 0x01ce0fa0e42fc7e0
Pad
naar toepassing met fout: E:\games\Bulletstorm\Binaries\Win32\ShippingPC-StormGame.exe
Pad
naar module met fout: E:\games\Bulletstorm\Binaries\Win32\ShippingPC-StormGame.exe
Rapport-id:
d9f63315-7b94-11e2-bea4-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
Error - 20-2-2013 18:43:07 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: touchup.exe, versie: 3.4.0.0, tijdstempel:
0x50b95db3 Naam van module met fout: dlnashext.dll_unloaded, versie: 0.0.0.0, tijdstempel:
0x5010975d Uitzonderingscode: 0xc00001a5 Foutmarge: 0x562076d4 Id van proces met fout:
0x105c Starttijd van toepassing met fout: 0x01ce0fbb8df37609 Pad naar toepassing
met fout: E:\games\Crysis 3\__Installer\touchup.exe Pad naar module met fout: dlnashext.dll
Rapport-id:
e4b2d7c8-7bae-11e2-bea4-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
Error - 20-2-2013 18:43:08 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: touchup.exe, versie: 3.4.0.0, tijdstempel:
0x50b95db3 Naam van module met fout: unknown, versie: 0.0.0.0, tijdstempel: 0x00000000
Uitzonderingscode:
0xc0000005 Foutmarge: 0x771ebda1 Id van proces met fout: 0x105c Starttijd van toepassing
met fout: 0x01ce0fbb8df37609 Pad naar toepassing met fout: E:\games\Crysis 3\__Installer\touchup.exe
Pad
naar module met fout: unknown Rapport-id: e4f458cf-7bae-11e2-bea4-8c89a5c5564d Volledige
pakketnaam met fout: Relatieve toepassings-id van pakket met fout:
Error - 20-2-2013 19:20:33 | Computer Name = jeff-PC | Source = Application Hang | ID = 1002
Description = Het programma chrome.exe, versie 24.0.1312.57 reageert niet meer op
Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem
beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Onderhoudscentrum
in het Configuratiescherm. Proces-id: fb8 Starttijd: 01ce0fa3594c564a Eindtijd: 8 Toepassingspad:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Rapport-id: 405ca6ee-7bb3-11e2-bea4-8c89a5c5564d
Volledige
pakketnaam met fout: Relatieve toepassings-id van pakket met fout:
Error - 21-2-2013 15:14:39 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: Origin.exe, versie: 9.1.13.89, tijdstempel:
0x5122b6a0 Naam van module met fout: ntdll.dll, versie: 6.2.9200.16420, tijdstempel:
0x505aaa82 Uitzonderingscode: 0xc0000374 Foutmarge: 0x000da94f Id van proces met fout:
0xec0 Starttijd van toepassing met fout: 0x01ce1066a0f706cb Pad naar toepassing met
fout: C:\Program Files (x86)\Origin\Origin.exe Pad naar module met fout: C:\WINDOWS\SYSTEM32\ntdll.dll
Rapport-id:
ef93d385-7c5a-11e2-bea4-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
Error - 21-2-2013 20:25:58 | Computer Name = jeff-PC | Source = IMFservice | ID = 0
Description =
Error - 21-2-2013 20:25:58 | Computer Name = jeff-PC | Source = IMFservice | ID = 0
Description =
Error - 22-2-2013 09:46:54 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: crysis3.exe, versie: 1.0.0.1, tijdstempel:
0x02f4d040 Naam van module met fout: crysis3.exe, versie: 1.0.0.1, tijdstempel:
0x02f4d040 Uitzonderingscode: 0xc0000005 Foutmarge: 0x014c31e3 Id van proces met fout:
0xae0 Starttijd van toepassing met fout: 0x01ce11029abd0236 Pad naar toepassing met
fout: E:\games\Crysis 3\Bin32\crysis3.exe Pad naar module met fout: E:\games\Crysis
3\Bin32\crysis3.exe Rapport-id: 50c77297-7cf6-11e2-bea6-8c89a5c5564d Volledige pakketnaam
met fout: Relatieve toepassings-id van pakket met fout:
Error - 22-2-2013 13:46:59 | Computer Name = jeff-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 2486
Description = App windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
is niet gestart binnen de toegewezen tijd.
Error - 23-2-2013 07:19:13 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: aswMBR.exe, versie: 0.9.9.1707, tijdstempel:
0x509be8bf Naam van module met fout: ntdll.dll, versie: 6.2.9200.16420, tijdstempel:
0x505aaa82 Uitzonderingscode: 0xc0000005 Foutmarge: 0x0004f44d Id van proces met fout:
0xb94 Starttijd van toepassing met fout: 0x01ce11b75623c0da Pad naar toepassing met
fout: C:\Users\jeff\Downloads\aswMBR.exe Pad naar module met fout: C:\WINDOWS\SYSTEM32\ntdll.dll
Rapport-id:
d9da65ed-7daa-11e2-bea9-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
[ System Events ]
Error - 22-2-2013 13:19:34 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 22-2-2013 17:33:23 | Computer Name = jeff-PC | Source = DCOM | ID = 10010
Description =
Error - 23-2-2013 06:19:07 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:00:17 | Computer Name = jeff-PC | Source = EventLog | ID = 6008
Description = De vorige afsluiting van het systeem om 11:59:07 op ?23-?2-?2013 is
onverwacht gebeurd.
Error - 23-2-2013 07:00:14 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:00:19 | Computer Name = jeff-PC | Source = BugCheck | ID = 1001
Description =
Error - 23-2-2013 07:23:19 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:25:51 | Computer Name = jeff-PC | Source = EventLog | ID = 6008
Description = De vorige afsluiting van het systeem om 12:24:20 op ?23-?2-?2013 is
onverwacht gebeurd.
Error - 23-2-2013 07:25:49 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:25:53 | Computer Name = jeff-PC | Source = BugCheck | ID = 1001
Description =
< End of report >
OTL scan:
OTL logfile created on: 23-2-2013 14:37:29 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\jeff\Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16484)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
7,96 Gb Total Physical Memory | 4,77 Gb Available Physical Memory | 60,01% Memory free
15,96 Gb Paging File | 10,84 Gb Available in Paging File | 67,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,69 Gb Total Space | 19,49 Gb Free Space | 17,45% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 69,52 Mb Free Space | 69,52% Space Free | Partition Type: NTFS
Drive E: | 910,41 Gb Total Space | 485,76 Gb Free Space | 53,36% Space Free | Partition Type: NTFS
Drive F: | 20,00 Gb Total Space | 19,89 Gb Free Space | 99,46% Space Free | Partition Type: NTFS
Drive H: | 931,51 Gb Total Space | 567,31 Gb Free Space | 60,90% Space Free | Partition Type: NTFS
Computer Name: JEFF-PC | User Name: jeff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013-02-23 14:36:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\jeff\Downloads\OTL.exe
PRC - [2013-02-21 12:23:58 | 003,494,992 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\Origin.exe
PRC - [2013-02-20 12:25:52 | 000,008,192 | RH-- | M] (Microsoft Corporation) -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe
PRC - [2013-02-20 12:18:21 | 010,201,600 | RH-- | M] () -- C:\Users\jeff\AppData\Local\Temp\BioCredProv.exe
PRC - [2013-02-17 12:51:20 | 000,526,247 | -H-- | M] () -- C:\Temporary\iehighutil.exe
PRC - [2013-02-12 16:34:32 | 033,082,632 | ---- | M] (Crytek GmbH) -- E:\games\Crysis 3\Bin32\Crysis3.exe
PRC - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
PRC - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013-02-08 10:46:24 | 001,320,768 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
PRC - [2013-02-08 07:12:46 | 000,140,288 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\svchost.exe
PRC - [2013-01-26 03:35:08 | 001,248,208 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013-01-19 03:51:31 | 001,129,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013-01-19 03:50:07 | 001,071,392 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
PRC - [2013-01-15 18:47:12 | 000,491,840 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
PRC - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
PRC - [2012-12-25 15:11:24 | 001,611,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
PRC - [2012-11-07 16:42:09 | 001,199,576 | ---- | M] (Spotify Ltd) -- C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012-10-17 11:21:02 | 000,553,800 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
PRC - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
========== Modules (No Company Name) ==========
MOD - [2013-02-21 18:57:15 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d9b1eab5c18e51eaf4acc4894df0f223\System.ServiceProcess.ni.dll
MOD - [2013-02-21 18:57:14 | 000,141,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\a7dd657846daf68d3f6750ccad627628\System.Configuration.Install.ni.dll
MOD - [2013-02-21 18:57:13 | 001,711,616 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\4e0b80cd44dbb1d3b283aea5496da8e9\Microsoft.VisualBasic.ni.dll
MOD - [2013-02-21 12:23:58 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\Origin\tufao.dll
MOD - [2013-02-20 14:27:28 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65220f0f32ec84454f9a811fba883c2e\System.Windows.Forms.ni.dll
MOD - [2013-02-20 12:18:21 | 010,201,600 | RH-- | M] () -- C:\Users\jeff\AppData\Local\Temp\BioCredProv.exe
MOD - [2013-02-17 12:51:20 | 000,526,247 | -H-- | M] () -- C:\Temporary\iehighutil.exe
MOD - [2013-02-14 11:56:30 | 012,638,576 | ---- | M] () -- C:\Users\jeff\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll
MOD - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
MOD - [2013-02-08 07:12:46 | 000,140,288 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\svchost.exe
MOD - [2013-02-08 07:12:46 | 000,013,824 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libblkmaker-0.1-0.dll
MOD - [2013-02-08 07:12:46 | 000,013,312 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libblkmaker_jansson-0.1-0.dll
MOD - [2013-02-08 07:11:58 | 000,228,352 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libcurl-4.dll
MOD - [2013-02-08 07:11:58 | 000,092,672 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\pdcurses.dll
MOD - [2013-02-08 07:11:58 | 000,088,576 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\zlib1.dll
MOD - [2013-02-08 07:11:58 | 000,052,736 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Adobe32\libjansson-4.dll
MOD - [2013-01-31 14:03:56 | 000,345,600 | ---- | M] () -- E:\games\Crysis 3\Bin32\nvDXTLibrary.dll
MOD - [2013-01-31 14:03:56 | 000,078,848 | ---- | M] () -- E:\games\Crysis 3\Bin32\Txaa.win32.dll
MOD - [2013-01-26 03:35:06 | 000,460,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll
MOD - [2013-01-26 03:35:04 | 004,012,496 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013-01-26 03:34:19 | 000,597,968 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013-01-26 03:34:18 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013-01-26 03:34:16 | 001,552,848 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2013-01-16 11:08:25 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e2f7dbe3bf08df200a4cdcf2e0eb82fa\System.Runtime.Remoting.ni.dll
MOD - [2013-01-16 11:08:21 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\cf561d65486360afb324d26c80b9aac2\System.Configuration.ni.dll
MOD - [2013-01-16 11:07:00 | 005,453,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\ae31f7dc9817e359d05c9c8efdd5f359\System.Xml.ni.dll
MOD - [2013-01-16 11:06:54 | 006,656,512 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\644cb8dc7b37a1eec15f542da9846d0c\System.Data.ni.dll
MOD - [2013-01-16 11:06:54 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7e6b074d3f3e3cc8e0270a3552c47aaa\System.Drawing.ni.dll
MOD - [2013-01-16 11:06:37 | 007,988,736 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\28c2c6e7f48ff80c680a97b08df66a72\System.ni.dll
MOD - [2013-01-16 11:06:34 | 011,494,912 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\8d2929ad589e1092eb62a43424361465\mscorlib.ni.dll
MOD - [2013-01-15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madexcept_.bpl
MOD - [2013-01-15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\maddisAsm_.bpl
MOD - [2013-01-15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madbasic_.bpl
MOD - [2012-11-29 22:59:32 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2012-10-17 11:21:02 | 000,553,800 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
MOD - [2012-09-13 23:03:56 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_nl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2012-07-06 03:01:13 | 002,972,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2012-06-30 05:18:08 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTMUI.dll
MOD - [2012-06-30 05:18:04 | 000,335,872 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTHAL.dll
MOD - [2012-06-30 05:17:48 | 000,225,280 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTCore.dll
MOD - [2012-06-30 05:17:40 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTUI.dll
MOD - [2012-06-30 05:17:34 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTFC.dll
MOD - [2011-08-19 16:33:28 | 000,047,960 | ---- | M] () -- C:\Program Files (x86)\IObit\Smart Defrag 2\NtfsData.dll
MOD - [2011-05-01 07:04:54 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision X\RTTSH.dll
========== Services (SafeList) ==========
SRV:64bit: - [2013-01-10 00:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2013-01-10 00:22:53 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2013-01-10 00:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2012-12-06 05:23:00 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2012-12-06 05:22:59 | 000,178,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2012-11-06 05:17:41 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2012-10-24 00:26:36 | 000,423,496 | ---- | M] () [Auto | Running] -- C:\Program Files\Synergy\synergyd.exe -- (Synergy)
SRV:64bit: - [2012-09-20 10:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2012-09-20 07:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2012-09-20 07:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2012-07-26 04:17:59 | 000,015,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2012-07-26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2012-07-26 04:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2012-07-26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2012-07-26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2012-07-26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2012-07-26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2012-07-26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2012-07-26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2012-07-26 04:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2012-07-26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2012-07-26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
SRV:64bit: - [2012-07-26 04:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013-01-23 18:02:43 | 000,541,608 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe -- (AdvancedSystemCareService6)
SRV - [2013-01-08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012-07-26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2013-01-10 02:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2013-01-10 02:39:29 | 000,194,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2012-12-19 06:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012-11-27 04:56:29 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2012-11-27 04:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2012-11-20 05:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2012-11-07 08:49:46 | 000,113,664 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rzudd.sys -- (rzudd)
DRV:64bit: - [2012-11-06 08:52:07 | 000,445,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2012-11-06 08:36:23 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
DRV:64bit: - [2012-11-06 04:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2012-10-12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012-10-11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2012-10-11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
DRV:64bit: - [2012-09-20 08:55:33 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2012-09-20 08:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2012-09-20 08:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2012-09-20 08:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2012-09-20 08:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2012-09-20 08:03:08 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
DRV:64bit: - [2012-09-19 10:02:08 | 000,102,368 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012-09-19 10:02:06 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012-07-26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012-07-26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
DRV:64bit: - [2012-07-26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2012-07-26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2012-07-26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2012-07-26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2012-07-26 06:00:55 | 000,283,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2012-07-26 06:00:55 | 000,077,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
DRV:64bit: - [2012-07-26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2012-07-26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2012-07-26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2012-07-26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2012-07-26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2012-07-26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2012-07-26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2012-07-26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2012-07-26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
DRV:64bit: - [2012-07-26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2012-07-26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2012-07-26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2012-07-26 05:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2012-07-26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
DRV:64bit: - [2012-07-26 05:44:30 | 000,258,288 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2012-07-26 05:36:15 | 000,034,216 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2012-07-26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012-07-26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2012-07-26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2012-07-26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2012-07-26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2012-07-26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2012-07-26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2012-07-26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2012-07-26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2012-07-26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2012-07-26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2012-07-26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2012-07-26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2012-07-26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2012-07-26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012-07-26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2012-07-26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2012-07-26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012-07-26 03:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid)
DRV:64bit: - [2012-07-26 03:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp)
DRV:64bit: - [2012-07-26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp)
DRV:64bit: - [2012-07-26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2012-07-26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2012-07-26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2012-07-17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012-06-02 15:31:56 | 000,589,824 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
DRV:64bit: - [2010-11-26 18:02:18 | 000,017,720 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:64bit: - [2009-11-18 07:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\MBfilt64.sys -- (MBfilt)
DRV - [2012-11-13 21:53:00 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2012-10-17 11:21:00 | 000,015,176 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\EVGA Precision X\RTCore64.sys -- (RTCore64)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://nl.search.yah...r=spigot-yhp-ie
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nl-NL,nl;q=0.8,en-US;q=0.5,en;q=0.3
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3C EA C2 B8 29 F7 CD 01 [binary data]
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\URLSearchHook: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes,DefaultScope = {C34CA07A-74EF-4CBD-8F67-A805395AC575}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...q={searchTerms}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..\SearchScopes\{C34CA07A-74EF-4CBD-8F67-A805395AC575}: "URL" = http://nl.search.yah...p={searchTerms}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nl-NL,nl;q=0.8,en-US;q=0.5,en;q=0.3
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 21 3A A5 35 04 D7 CD 01 [binary data]
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...q={searchTerms}
IE - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
========== Chrome ==========
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - Extension: YouTube = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google Zoeken = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Ebay Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.0_0\
CHR - Extension: Domain Error Assistant = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.1_0\
CHR - Extension: Savings-Slider = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0\
CHR - Extension: Amazon Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\
CHR - Extension: Gmail = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2012-07-26 06:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O4:64bit: - HKLM..\Run: [Fences] C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [AdobeUpdate] C:\Users\jeff\AppData\Roaming\Adobe32\invis.vbs ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Advanced SystemCare 6] C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [iehighutil] C:\Temporary\iehighutil.exe ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Microsoft Routing Utilities] C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [puush] C:\Program Files (x86)\puush\puush.exe ()
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Spotify Web Helper] C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [Spotify] C:\Users\jeff\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [Spotify Web Helper] C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - Startup: C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk = C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1001\..Trusted Domains: sony.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E96A4FF6-3529-4BB1-B665-F131F45343C8}: DhcpNameServer = 192.168.2.254
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000 Winlogon: Shell - (C:\WINDOWS\explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000 Winlogon: Shell - (C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe) - C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-07-26 07:52:25 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
NetSvcs:64bit: wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:64bit: DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:64bit: NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:64bit: SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2013-02-23 12:05:15 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013-02-22 14:07:27 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\NVIDIA
[2013-02-22 14:06:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2013-02-22 14:06:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013-02-22 14:05:28 | 026,947,360 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2013-02-22 14:05:28 | 020,534,560 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2013-02-22 14:05:28 | 017,987,192 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2013-02-22 14:05:28 | 015,275,744 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2013-02-22 14:05:28 | 015,038,296 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2013-02-22 14:05:28 | 012,862,400 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2013-02-22 14:05:28 | 009,422,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2013-02-22 14:05:28 | 007,964,680 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2013-02-22 14:05:28 | 007,569,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2013-02-22 14:05:28 | 006,267,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2013-02-22 14:05:28 | 002,911,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2013-02-22 14:05:28 | 002,726,176 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2013-02-22 14:05:28 | 002,350,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvenc.dll
[2013-02-22 14:05:28 | 001,990,944 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvenc.dll
[2013-02-22 14:05:28 | 001,807,136 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6420294.dll
[2013-02-22 14:05:28 | 001,510,328 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdagenco6420103.dll
[2013-02-22 14:05:28 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6420162.dll
[2013-02-22 14:05:28 | 001,114,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvumdshimx.dll
[2013-02-22 14:05:28 | 000,963,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2013-02-22 14:05:28 | 000,250,504 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2013-02-22 14:05:28 | 000,205,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2013-02-22 14:05:28 | 000,194,488 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvhda64v.sys
[2013-02-22 14:05:28 | 000,031,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdap64.dll
[2013-02-22 14:05:27 | 025,256,736 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2013-02-22 14:05:27 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2013-02-22 14:05:27 | 002,854,344 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2013-02-22 14:05:27 | 002,528,840 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2013-02-20 23:43:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3
[2013-02-20 18:39:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2013-02-20 18:39:53 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\SystemRequirementsLab
[2013-02-20 12:23:56 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Adobe32
[2013-02-20 12:22:03 | 000,000,000 | ---D | C] -- C:\Temporary
[2013-02-20 12:22:03 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\AppName
[2013-02-20 04:50:31 | 000,692,576 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2013-02-20 04:50:31 | 000,078,176 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2013-02-19 13:31:55 | 001,690,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
[2013-02-19 13:31:55 | 001,437,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
[2013-02-19 13:31:53 | 002,094,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmc.exe
[2013-02-19 13:31:53 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2013-02-19 13:31:53 | 001,886,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setupapi.dll
[2013-02-19 13:31:53 | 001,611,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmc.exe
[2013-02-19 13:31:53 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll
[2013-02-19 13:31:53 | 000,820,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpprefcl.dll
[2013-02-19 13:31:53 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netprofmsvc.dll
[2013-02-19 13:31:53 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srmstormod.dll
[2013-02-19 13:31:52 | 000,728,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samsrv.dll
[2013-02-19 13:31:52 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MP4SDECD.DLL
[2013-02-19 13:31:52 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll
[2013-02-19 13:31:52 | 000,582,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gpprefcl.dll
[2013-02-19 13:31:52 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsm.dll
[2013-02-19 13:31:52 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MP4SDECD.DLL
[2013-02-19 13:31:52 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll
[2013-02-19 13:31:52 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2013-02-19 13:31:52 | 000,303,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2013-02-19 13:31:52 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srm.dll
[2013-02-19 13:31:52 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srm.dll
[2013-02-19 13:31:52 | 000,261,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2013-02-19 13:31:52 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSDMon.dll
[2013-02-19 13:31:52 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srmstormod.dll
[2013-02-19 13:31:52 | 000,194,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys
[2013-02-19 13:31:52 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncbservice.dll
[2013-02-19 13:31:52 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetpp.dll
[2013-02-19 13:31:52 | 000,124,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys
[2013-02-19 13:31:52 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\httpprxm.dll
[2013-02-19 13:31:52 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wiaacmgr.exe
[2013-02-19 13:31:52 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wiaacmgr.exe
[2013-02-19 13:31:52 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adhsvc.dll
[2013-02-19 13:31:52 | 000,028,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys
[2013-02-19 13:31:52 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adhapi.dll
[2013-02-19 13:31:52 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\httpprxp.dll
[2013-02-19 13:31:52 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\keepaliveprovider.dll
[2013-02-19 13:31:19 | 006,967,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2013-02-19 13:31:16 | 003,966,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2013-02-19 13:31:16 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2013-02-19 13:31:15 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2013-02-19 13:31:15 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2013-02-19 13:31:15 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2013-02-19 13:31:15 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesysprep.dll
[2013-02-19 13:31:15 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesysprep.dll
[2013-02-19 13:31:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll
[2013-02-19 13:31:15 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll
[2013-02-19 13:31:15 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2013-02-19 13:31:15 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll
[2013-02-19 13:31:15 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll
[2013-02-17 20:26:28 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Mumble
[2013-02-17 20:26:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
[2013-02-17 20:26:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mumble
[2013-02-16 20:33:14 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\FLT
[2013-02-16 19:45:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aliens Colonial Marines
[2013-02-14 14:28:39 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Skyrim
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit Apps Toolbar
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2013-02-11 16:05:48 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\Electronic Arts
[2013-02-11 16:05:10 | 000,447,752 | R--- | C] (On2.com) -- C:\WINDOWS\SysWow64\vp6vfw.dll
[2013-02-11 16:05:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
[2013-02-11 16:03:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2013-02-10 20:51:04 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\puush
[2013-02-09 18:43:52 | 000,555,808 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvStreaming.exe
[2013-02-02 20:53:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\Desktop\ZygorGuidesViewer
[2013-02-02 20:51:11 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\CAPCOM
[2013-02-01 18:36:02 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Spotnet
[2013-02-01 09:25:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spotnet
[2013-01-31 12:46:47 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\LolClient
[2013-01-30 21:02:35 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_39.dll
[2013-01-30 21:02:35 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_39.dll
[2013-01-30 21:02:35 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_39.dll
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\Riot Games
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewFeature1
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\PMB Files
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2013-01-30 20:00:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2013-01-30 20:00:00 | 000,000,000 | ---D | C] -- C:\Users\jeff\.swt
[2013-01-29 16:24:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2013-01-29 16:06:45 | 000,000,000 | ---D | C] -- C:\Program Files\Synergy
[2013-01-28 18:45:37 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\StarCraft II
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2013-01-26 12:55:38 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Red 5 Studios
[2013-01-26 01:55:03 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\NAMCO
[2013-01-26 01:44:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Programs
[2013-01-25 21:15:17 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\StartIsBack
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraUXThemePatcher
[2013-01-25 21:00:49 | 002,884,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themeui.dll.backup
[2013-01-25 21:00:49 | 002,884,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themeui.dll
[2013-01-25 21:00:49 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxinit.dll.backup
[2013-01-25 21:00:48 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll.backup
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\e-academy Inc
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\e-academy Inc
[2013-01-25 19:54:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\TaskDisabled
[2013-01-25 18:31:31 | 000,032,600 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\SmartDefragBootTime.exe
[2013-01-25 18:26:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 2
[2013-01-25 18:26:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
[2013-01-25 18:23:57 | 000,026,432 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\RegistryDefragBootTime.exe
[2013-01-25 18:17:38 | 000,000,000 | ---D | C] -- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013-01-25 18:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\{BDDB56DE-AE4E-48A2-B856-FB60C8498453}
[2013-01-25 18:17:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 6
[2013-01-25 18:17:05 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
[2013-01-25 17:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013-02-23 14:27:00 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-02-23 12:31:51 | 001,792,392 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2013-02-23 12:31:51 | 000,795,678 | ---- | M] () -- C:\WINDOWS\SysNative\perfh013.dat
[2013-02-23 12:31:51 | 000,710,046 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2013-02-23 12:31:51 | 000,158,970 | ---- | M] () -- C:\WINDOWS\SysNative\perfc013.dat
[2013-02-23 12:31:51 | 000,132,416 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2013-02-23 12:26:01 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-23 12:25:49 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2013-02-23 12:25:47 | 2538,635,263 | -HS- | M] () -- C:\hiberfil.sys
[2013-02-22 14:07:13 | 000,001,371 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | M] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 12:58:39 | 000,199,936 | ---- | M] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:35 | 004,920,600 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-17 20:28:50 | 000,002,379 | ---- | M] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | M] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | M] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:38 | 000,458,906 | ---- | M] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | M] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-10 04:25:27 | 026,947,360 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2013-02-10 04:25:27 | 025,256,736 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2013-02-10 04:25:27 | 020,534,560 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2013-02-10 04:25:27 | 017,987,192 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2013-02-10 04:25:27 | 017,560,352 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2013-02-10 04:25:27 | 015,275,744 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2013-02-10 04:25:27 | 015,038,296 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2013-02-10 04:25:27 | 012,862,400 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2013-02-10 04:25:27 | 009,422,672 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2013-02-10 04:25:27 | 007,964,680 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2013-02-10 04:25:27 | 007,569,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2013-02-10 04:25:27 | 006,267,240 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2013-02-10 04:25:27 | 002,911,008 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2013-02-10 04:25:27 | 002,854,344 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2013-02-10 04:25:27 | 002,726,176 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2013-02-10 04:25:27 | 002,528,840 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2013-02-10 04:25:27 | 002,350,368 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvenc.dll
[2013-02-10 04:25:27 | 001,990,944 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvenc.dll
[2013-02-10 04:25:27 | 001,807,136 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6420294.dll
[2013-02-10 04:25:27 | 001,510,176 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6420162.dll
[2013-02-10 04:25:27 | 001,114,144 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvumdshimx.dll
[2013-02-10 04:25:27 | 000,963,776 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2013-02-10 04:25:27 | 000,250,504 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2013-02-10 04:25:27 | 000,205,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2013-02-10 04:25:27 | 000,017,738 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-10 02:04:31 | 006,393,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2013-02-10 02:04:31 | 003,472,672 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2013-02-10 02:04:29 | 002,555,680 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2013-02-10 02:04:29 | 000,237,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2013-02-10 02:04:29 | 000,063,776 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2013-02-09 18:43:52 | 000,555,808 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvStreaming.exe
[2013-02-09 14:25:36 | 003,035,306 | ---- | M] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2013-02-09 11:46:28 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-02-07 00:06:14 | 000,692,576 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2013-02-07 00:06:14 | 000,078,176 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2013-02-04 10:52:39 | 000,460,855 | ---- | M] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:56:00 | 012,629,031 | ---- | M] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | M] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | M] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | M] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.xtr
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:31 | 000,280,904 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | M] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | M] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:13:07 | 000,000,180 | ---- | M] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 21:00:49 | 002,884,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themeui.dll
[2013-01-25 18:26:45 | 000,001,182 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | M] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | M] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013-02-22 14:07:13 | 000,001,371 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | C] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 14:05:28 | 000,017,738 | ---- | C] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-22 12:58:39 | 000,199,936 | ---- | C] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:31 | 004,920,600 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-19 13:31:52 | 000,386,577 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2013-02-17 20:28:50 | 000,002,379 | ---- | C] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | C] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | C] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:29 | 000,458,906 | ---- | C] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | C] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-04 10:52:39 | 000,460,855 | ---- | C] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:55:58 | 012,629,031 | ---- | C] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | C] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | C] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | C] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:59 | 000,281,520 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:35 | 000,280,904 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | C] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | C] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:08:58 | 000,000,180 | ---- | C] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 18:26:45 | 000,017,720 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\SmartDefragDriver.sys
[2013-01-25 18:26:45 | 000,001,182 | ---- | C] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | C] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | C] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2012-12-27 18:03:51 | 003,123,272 | R--- | C] () -- C:\WINDOWS\SysWow64\pbsvc.exe
[2012-11-17 11:20:43 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
[2012-11-02 23:14:16 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
[2012-07-26 09:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2012-07-26 09:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2012-07-26 08:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-07-26 02:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2012-07-25 21:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2012-07-25 21:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2012-06-02 15:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\WINDOWS\SysWow64\xlive.dll.cat
========== ZeroAccess Check ==========
[2013-01-14 19:02:25 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-01-10 00:23:07 | 019,791,360 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-01-10 00:26:23 | 017,560,576 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== Custom Scans ==========
========== Base Services ==========
SRV:64bit: - [2012-09-20 07:30:35 | 000,190,976 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:64bit: - [2012-07-26 04:05:04 | 000,069,632 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:64bit: - [2012-07-26 04:08:16 | 000,094,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:64bit: - [2012-07-26 04:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:64bit: - [2012-11-27 05:17:32 | 000,718,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:64bit: - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV - [2012-07-26 04:18:47 | 000,043,520 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\keyiso.dll -- (KeyIso)
SRV:64bit: - [2012-07-26 04:05:36 | 000,507,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2012-07-26 04:18:26 | 000,394,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:64bit: - [2012-07-26 04:05:12 | 000,134,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:64bit: - [2012-07-26 04:05:21 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV:64bit: - [2012-07-26 04:07:06 | 000,817,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:64bit: - [2012-10-11 06:43:40 | 000,331,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2012-10-11 06:06:02 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2012-09-20 07:31:07 | 000,210,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:64bit: - [2012-07-26 04:05:34 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\eapsvc.dll -- (Eaphost)
SRV:64bit: - [2012-07-26 04:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2012-07-26 04:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:64bit: - [2012-07-26 04:05:51 | 000,438,784 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:64bit: - [2012-07-26 04:05:51 | 000,474,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:64bit: - [2012-07-26 04:07:25 | 000,502,784 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:64bit: - [2012-09-20 07:31:57 | 000,080,896 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:64bit: - [2012-07-26 04:06:34 | 000,255,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:64bit: - [2013-01-10 00:22:53 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2012-09-20 07:32:17 | 000,356,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:64bit: - [2012-07-26 06:26:47 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:64bit: - [2012-09-20 07:33:04 | 000,107,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:64bit: - [2012-07-26 04:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
No service found with a name of ProtectedStorage
No service found with a name of EMDMgmt
SRV:64bit: - [2012-07-26 04:07:03 | 000,099,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:64bit: - [2012-07-26 04:07:03 | 000,358,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:64bit: - [2012-07-26 04:07:06 | 000,817,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:64bit: - [2012-07-26 04:07:09 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:64bit: - [2012-09-20 07:33:39 | 000,035,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:64bit: - [2012-07-26 04:08:12 | 000,099,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:64bit: - [2012-07-26 04:07:23 | 000,309,248 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:64bit: - [2012-07-26 04:07:16 | 000,565,760 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2012-07-26 04:19:59 | 000,506,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:64bit: - [2012-07-26 04:07:08 | 001,282,560 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:64bit: - [2012-07-26 04:07:28 | 000,305,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2012-07-26 04:20:06 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:64bit: - [2012-07-26 04:07:30 | 000,047,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2012-07-26 04:07:00 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:64bit: - [2012-07-26 04:08:49 | 001,482,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:64bit: - [2012-11-06 05:17:42 | 000,785,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (Audiosrv)
SRV:64bit: - [2012-11-06 05:17:41 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2012-07-26 04:07:08 | 000,148,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:64bit: - [2012-07-26 04:17:59 | 000,015,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2012-07-26 04:07:47 | 001,731,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (EventLog)
SRV:64bit: - [2012-10-11 06:44:35 | 000,904,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:64bit: - [2012-07-26 04:07:47 | 000,570,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:64bit: - [2012-07-26 04:08:34 | 000,124,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\msiexec.exe -- (msiserver)
SRV - [2012-07-26 04:20:50 | 000,062,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysWow64\msiexec.exe -- (msiserver)
SRV:64bit: - [2012-07-26 04:08:06 | 000,219,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:64bit: - [2012-11-27 05:19:52 | 003,345,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:64bit: - [2012-07-26 04:05:31 | 000,252,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:64bit: - [2012-11-06 05:19:59 | 001,386,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlansvc.dll -- (WlanSvc)
SRV:64bit: - [2012-07-26 04:08:02 | 000,191,488 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)
< %SYSTEMDRIVE%\*.exe >
< MD5 for: EXPLORER.EXE >
[2012-10-11 06:53:24 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=0AD19A3CA61271BA872AD90771BA47DC -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_b592a71650d677ed\explorer.exe
[2012-10-11 09:09:58 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=0DDFEAA2AA18D4295EF220EB666B2312 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_ab3dfcc41c75b5f2\explorer.exe
[2012-07-26 04:50:01 | 002,114,936 | ---- | M] (Microsoft Corporation) MD5=5B6ED1B57DBFF18D405A0260559B571E -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_b4d2f8c937e166b1\explorer.exe
[2012-07-26 05:49:13 | 002,380,440 | ---- | M] (Microsoft Corporation) MD5=928791755FDDEA721B053535EF84FA17 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_aa7e4e770380a4b6\explorer.exe
[2012-10-11 06:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=953ADECFF08202A01EFC6110214FDE02 -- C:\Windows\SysWOW64\explorer.exe
[2012-10-11 06:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) MD5=953ADECFF08202A01EFC6110214FDE02 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_b5080a0137b9becc\explorer.exe
[2012-10-11 08:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=E13A31D5254C25406A7946BDD9B06364 -- C:\Windows\explorer.exe
[2012-10-11 08:35:16 | 002,380,944 | ---- | M] (Microsoft Corporation) MD5=E13A31D5254C25406A7946BDD9B06364 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_aab35faf0358fcd1\explorer.exe
< MD5 for: SERVICES >
[2012-07-26 06:26:47 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..ucture-other-minwin_31bf3856ad364e35_6.2.9200.16384_none_8e0944daeed62829\services
< MD5 for: SERVICES.EXE >
[2012-09-20 07:33:11 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=581190907DA1CF8CB7B87B35FFE64A07 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.20521_none_98a9ea2e9f571eb2\services.exe
[2012-07-26 06:26:45 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=754A2CC1F32107EA87CBD305ABE3E618 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.16384_none_97e26cd38667756c\services.exe
[2012-09-20 07:33:46 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=8F226143046435C75C033B0C52E90FFE -- C:\WINDOWS\SysNative\services.exe
[2012-09-20 07:33:46 | 000,410,624 | ---- | M] (Microsoft Corporation) MD5=8F226143046435C75C033B0C52E90FFE -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.16420_none_981f4d19863a6591\services.exe
< MD5 for: SERVICES.EXE.MUI >
[2012-07-26 10:49:08 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=66953EC2CD8E0D23434AAF943BA60219 -- C:\WINDOWS\SysNative\nl-NL\services.exe.mui
[2012-07-26 10:49:08 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=66953EC2CD8E0D23434AAF943BA60219 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.2.9200.16384_nl-nl_7bd2dfda38c15fbf\services.exe.mui
< MD5 for: SERVICES.INI >
[2005-09-26 14:16:00 | 000,003,813 | ---- | M] () MD5=34E5D0BEBEF501D89F3266DA0FC92A83 -- C:\Users\jeff\AppData\Roaming\25Assist\armyops\System\Services.ini
< MD5 for: SERVICES.JS >
[2012-11-01 23:01:20 | 000,068,829 | ---- | M] () MD5=1AB92C1174BFBEC4E1624827E4267BB1 -- C:\Program Files\WindowsApps\Microsoft.BingTravel_1.5.1.248_x64__8wekyb3d8bbwe\Common\js\services.js
[2012-11-01 23:01:27 | 000,068,829 | ---- | M] () MD5=22256B41BB42C30B2160C2AEB4770C37 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.5.1.409_x64__8wekyb3d8bbwe\common\js\services.js
[2012-07-26 10:54:56 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:54:48 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:54:45 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:55:25 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingTravel_1.2.0.145_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-07-26 10:54:51 | 000,056,775 | ---- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 -- C:\Program Files\WindowsApps\Microsoft.BingWeather_1.2.0.135_x64__8wekyb3d8bbwe\platform\js\services.js
[2012-11-01 22:59:49 | 000,068,829 | ---- | M] () MD5=68C59AF6D4279C824FF57FC385F65503 -- C:\Program Files\WindowsApps\Microsoft.BingWeather_1.5.1.245_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:04 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:04 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.7.0.29_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:04 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.7.0.38_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.27_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.31_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:15 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingNews_1.7.0.38_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:03:36 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:04:02 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingTravel_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-12-16 17:02:49 | 000,069,359 | ---- | M] () MD5=6AA9F10CF05F9848EFAA91062BBEB586 -- C:\Program Files\WindowsApps\Microsoft.BingWeather_1.7.0.26_x64__8wekyb3d8bbwe\common\js\services.js
[2012-11-01 23:03:00 | 000,068,829 | ---- | M] () MD5=800D2A62D8022E1725A6F28FAD7DC025 -- C:\Program Files\WindowsApps\Microsoft.BingFinance_1.5.1.406_x64__8wekyb3d8bbwe\common\js\services.js
[2012-11-01 23:00:57 | 000,068,829 | ---- | M] () MD5=800D2A62D8022E1725A6F28FAD7DC025 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.5.1.249_x64__8wekyb3d8bbwe\common\js\services.js
[2013-01-25 18:23:05 | 000,069,359 | ---- | M] () MD5=80CE8A6918A7BDB5328F93F4A3BB26B0 -- C:\Program Files\WindowsApps\Microsoft.BingSports_1.8.0.51_x64__8wekyb3d8bbwe\common\js\services.js
< MD5 for: SERVICES.LNK >
[2012-07-25 21:19:37 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2012-07-25 21:19:37 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2012-07-25 21:19:37 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_282d8a08cf7f1ada\services.lnk
< MD5 for: SERVICES.MOF >
[2012-06-02 15:35:05 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\WINDOWS\SysNative\wbem\services.mof
[2012-06-02 15:35:05 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.2.9200.16384_none_282967cc570d3701\services.mof
< MD5 for: SERVICES.MSC >
[2012-06-02 15:31:20 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\WINDOWS\SysNative\services.msc
[2012-06-02 15:31:13 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysWOW64\services.msc
[2012-06-02 15:31:20 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_282d8a08cf7f1ada\services.msc
[2012-06-02 15:31:13 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\wow64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_3282345b03dfdcd5\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\WINDOWS\SysNative\nl-NL\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\Windows\SysWOW64\nl-NL\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.2.9200.16384_nl-nl_b614afc60f2af9b2\services.msc
[2012-07-26 10:49:28 | 000,092,748 | ---- | M] () MD5=4A8894A9D4FA8D63394DA32B3ECD3148 -- C:\Windows\WinSxS\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.2.9200.16384_nl-nl_59f6144256cd887c\services.msc
< MD5 for: SERVICES.PTXML >
[2012-07-25 21:30:54 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\WINDOWS\SysNative\wdi\perftrack\Services.ptxml
[2012-07-25 21:30:54 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.2.9200.16384_none_282967cc570d3701\Services.ptxml
< MD5 for: SERVICES.SETTINGS >
[2013-01-28 23:31:46 | 000,001,622 | ---- | M] () MD5=81E136EBBD0008284F9A2F23402FF2CF -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Components\services.settings
< MD5 for: SERVICES.WSTCGRP >
[2013-01-28 23:31:46 | 000,000,224 | ---- | M] () MD5=4C0234F9B3F49A3484CE64025050D7A7 -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Groups\OpenedProjects\services.wstcgrp
[2013-01-28 23:31:46 | 000,000,225 | ---- | M] () MD5=E4AD31A486D75BC449F02775904D2430 -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Groups\InitialLayout\services.wstcgrp
< MD5 for: SERVICES.WSTCREF >
[2013-01-28 23:31:46 | 000,000,129 | ---- | M] () MD5=73E5717A2B2C3FF0F7ED6EFDD0A658B3 -- C:\Users\jeff\AppData\Roaming\NetBeans\7.2.1\config\Windows2Local\Modes\explorer\services.wstcref
< MD5 for: SVCHOST.EXE >
[2012-07-26 04:20:58 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=0A175AF8B65797BD22C11903A8BFEB2D -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_b2666581d6b482a6\svchost.exe
[2012-07-26 04:08:47 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=57350BEDE3834915B6145B67C71C7BDA -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_0e8501058f11f3dc\svchost.exe
[2012-09-20 07:33:14 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=607F7CB143783A8F9BA058D2FC4F2D36 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_0f4c7e60a8019d22\svchost.exe
[2012-09-20 06:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\SysWOW64\svchost.exe
[2012-09-20 06:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_b2a345c7d68772cb\svchost.exe
[2013-02-08 07:12:46 | 000,140,288 | ---- | M] () MD5=B496B4A9FD5C199C524003857270924F -- C:\Users\jeff\AppData\Roaming\Adobe32\svchost.exe
[2012-09-20 07:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\WINDOWS\SysNative\svchost.exe
[2012-09-20 07:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_0ec1e14b8ee4e401\svchost.exe
[2012-09-20 06:56:27 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=EEF5E64822C3E21B186EA53463BE92DA -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_b32de2dcefa42bec\svchost.exe
< MD5 for: USERINIT.EXE >
[2012-07-26 04:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\WINDOWS\SysNative\userinit.exe
[2012-07-26 04:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_34f2617a5b742e02\userinit.exe
[2012-07-26 04:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\SysWOW64\userinit.exe
[2012-07-26 04:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_d8d3c5f6a316bccc\userinit.exe
< MD5 for: WINLOGON.EXE >
[2012-09-20 07:33:55 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=1F84B5F8DBDFFD36DF143C61CE25F12A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe
[2012-09-20 07:33:17 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=6522E98C94A2A81AE11EB66D2AF5743A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe
[2012-07-26 04:08:50 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=93AB226C07A9789B2EC7B41F73602F76 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe
[2012-10-11 06:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\WINDOWS\SysNative\winlogon.exe
[2012-10-11 06:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe
[2012-10-11 06:45:27 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=CBFD56B4EC07CB056A6ABD55DD33671F -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe
< End of report >
OTL EXTRA SCAN:
OTL Extras logfile created on: 23-2-2013 14:37:29 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\jeff\Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16484)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
7,96 Gb Total Physical Memory | 4,77 Gb Available Physical Memory | 60,01% Memory free
15,96 Gb Paging File | 10,84 Gb Available in Paging File | 67,91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,69 Gb Total Space | 19,49 Gb Free Space | 17,45% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 69,52 Mb Free Space | 69,52% Space Free | Partition Type: NTFS
Drive E: | 910,41 Gb Total Space | 485,76 Gb Free Space | 53,36% Space Free | Partition Type: NTFS
Drive F: | 20,00 Gb Total Space | 19,89 Gb Free Space | 99,46% Space Free | Partition Type: NTFS
Drive H: | 931,51 Gb Total Space | 567,31 Gb Free Space | 60,90% Space Free | Partition Type: NTFS
Computer Name: JEFF-PC | User Name: jeff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{076CEF61-334E-42A2-B815-28F14EFD5D46}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{088361C7-6D55-41C8-B6B8-D3DED0C34DD7}" = rport=138 | protocol=17 | dir=out | app=system |
"{12AFA1FA-D47E-40C9-9D6C-9AAB4AD04833}" = rport=10243 | protocol=6 | dir=out | app=system |
"{19C9A9F2-ED05-4053-A7A0-7B8AA516443E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2E561B68-A350-4BD4-A556-30A1B9EB762B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{321483B6-3A30-4AD4-A44A-55BA324A490A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{32286743-B6B3-490E-8B7F-CE0448F3A1A0}" = lport=59067 | protocol=6 | dir=in | name=pando media booster |
"{3D0E1010-351E-4479-9B2D-057B387D4D5E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{43C4551C-29D8-45FA-A6B7-9E563E24C5DD}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{49F9A80F-15DF-4CE6-B121-A9D9A25825BD}" = rport=445 | protocol=6 | dir=out | app=system |
"{4F03DDA2-C7AC-47C1-939E-AD5B34728412}" = lport=139 | protocol=6 | dir=in | app=system |
"{5FB6A007-8ACC-4813-8598-0C8D93009BB2}" = lport=59067 | protocol=17 | dir=in | name=pando media booster |
"{7BF980F0-C693-4FD7-8528-72CC4EBC77EA}" = lport=138 | protocol=17 | dir=in | app=system |
"{959BF0D1-0C1F-4F62-89D0-0F838A709D44}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{97ABFFFE-C2A7-44E4-B48B-999CE7A5C973}" = lport=10243 | protocol=6 | dir=in | app=system |
"{99A94435-E181-4B97-B004-CB80B48FC699}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9B6B3B44-5638-43EF-95BA-463AC94BAA98}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9FFE6239-2B55-4220-8D02-6F4B5A08197A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A335A296-EAFD-4040-90F9-837CA9B098B9}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A40FDBF4-7009-4C0B-AC75-1BCA2F9E969C}" = lport=137 | protocol=17 | dir=in | app=system |
"{C53341AC-69EE-4682-B831-915933AEF21B}" = lport=59067 | protocol=17 | dir=in | name=pando media booster |
"{CC7BFB7F-ECFD-409E-A9AC-AED27D762618}" = lport=445 | protocol=6 | dir=in | app=system |
"{DB119C1A-B5C3-4B55-9B8A-296E7F59EA6C}" = rport=139 | protocol=6 | dir=out | app=system |
"{F03F385F-22B2-4A7E-946D-4034FC1C120A}" = lport=59067 | protocol=6 | dir=in | name=pando media booster |
"{F6406BCE-3658-4960-BCEA-23B8E4DD8DF8}" = rport=137 | protocol=17 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01888DB6-5133-4B33-BF5F-06FFC671039C}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{0237FDA6-392F-485B-A8CD-EB523C0F9DAC}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{05044F2D-489C-483B-8B86-FE1D151D7BB9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0983A59E-C5D4-4F74-BD76-8747BCD924B2}" = protocol=17 | dir=in | app=e:\games\far cry 2\bin\fc2launcher.exe |
"{0A7E9969-E2F1-42DE-905E-039F12EC8250}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{0CACE1BA-6E1F-4A55-A0C6-3E06D3A4B490}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{0DF40AB9-6A28-4A45-B6B5-01C9B3E4C718}" = protocol=6 | dir=in | app=e:\utorrent\utorrent.exe |
"{0E1A970E-9C8D-4896-81AA-8F91816D0612}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{13A4EB20-8C47-41FA-B770-DDE11056D22D}" = dir=out | name=radiant defense |
"{13B27931-D95C-4F3D-82F4-22D1EF98793D}" = dir=out | name=@{microsoft.bingweather_1.5.1.245_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |
"{179D27EB-7891-47DB-AFC4-14C8EAFFC5DD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{18C49B61-EA8F-43CB-B1A6-2054A9725CE3}" = protocol=17 | dir=in | app=e:\games\far cry 2\bin\fc2editor.exe |
"{1BDE7B9D-A627-497E-8E05-0268CE802EEF}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{1D75693C-04CD-46E0-9867-74C4D2BE0095}" = dir=out | app=e:\games\assassins creed iii\assassinscreed3.exe |
"{1EB3AA6E-8EF0-4FE5-B5DA-34EF2B6CAE78}" = protocol=17 | dir=in | app=e:\games\battlefield 3\bf3.exe |
"{1FA8999E-8C54-4EE8-A13B-C29A0B0F8C3E}" = protocol=6 | dir=in | app=e:\games\bin\farcry3_d3d11.exe |
"{281C6F4B-A705-4323-8201-F9003750101D}" = dir=out | name=@{microsoft.bingsports_1.5.1.249_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} |
"{28B27EDB-12D6-412F-84FC-03200EFBDC00}" = protocol=6 | dir=in | app=e:\games\bin\fc3updater.exe |
"{2A7FDE3C-A1C9-4B63-9CC9-0143D5662D90}" = dir=out | name=facebook lite |
"{2AC66163-EC07-4EAB-AD61-14642A0F035B}" = dir=out | name=mftp |
"{2C6746E2-305E-438A-8F67-CFF5CC3EA8CF}" = protocol=1 | dir=out | [email protected],-28544 |
"{3006CA3A-8899-4FD4-A7BA-E610501B51D7}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{30BFA88F-7B47-442D-B744-1981DAA613B6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{333A7D1D-1D98-4495-B090-E230694CC829}" = protocol=6 | dir=in | app=e:\games\age of empire iii\age3y.exe |
"{337F8025-9B78-4705-A338-968E1F13F7A8}" = protocol=6 | dir=in | app=e:\games\bin\fc3editor.exe |
"{36E06616-FFD4-4C61-BD10-7858085D54C7}" = dir=out | name=@{microsoft.bingnews_1.5.1.409_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} |
"{3AAD7886-E7FE-4711-A0B2-27EAE74EFB10}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{3D819613-201B-4FD6-90C2-27643A497C1F}" = protocol=17 | dir=in | app=e:\utorrent\utorrent.exe |
"{3F2215E3-7CB5-4023-9E7B-48880A4335A8}" = dir=out | name=google search |
"{438E2E03-DDF2-476B-9E2D-E9D9E713777C}" = dir=out | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{446202E5-0B4B-4AA4-B655-D34C02730E7D}" = dir=out | name=@{microsoft.bingfinance_1.5.1.406_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} |
"{450AF9AD-2651-4B8B-BA9B-A1FAE670DE36}" = protocol=17 | dir=in | app=e:\games\bulletstorm\binaries\win32\shippingpc-stormgame.exe |
"{487F1033-AEF4-4E94-AE8C-28C157B912E9}" = protocol=6 | dir=in | app=e:\games\assassins creed iii\ac3sp.exe |
"{4DBD131A-F8E2-4914-BFA0-7A44F1DFE460}" = protocol=17 | dir=in | app=e:\games\assassins creed iii\ac3mp.exe |
"{5126887C-C6AE-4090-888D-184E43B5C833}" = protocol=17 | dir=in | app=e:\games\crysis 3\bin32\crysis3.exe |
"{51352537-2678-440E-A68A-2412C939C2A3}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{513CAB20-BBAA-41E3-A4F4-A4D9FAA9E9AA}" = protocol=6 | dir=in | app=e:\games\star wars - the old republic\launcher.exe |
"{51B4B69A-311B-4FAA-AC7B-F5B0A78B2FEC}" = protocol=58 | dir=out | [email protected],-28546 |
"{540F22AB-E833-4B74-AC8D-ED50BB48210B}" = protocol=17 | dir=in | app=e:\games\age of empire iii\age3x.exe |
"{550C260D-0630-4220-9C8E-CC4EA8AC8C9A}" = protocol=58 | dir=in | [email protected],-28545 |
"{5737738E-412D-4ADB-849E-6D74114B38DA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5B064097-CB84-4008-9BB4-97A7CAD8F11C}" = protocol=17 | dir=in | app=e:\games\star wars - the old republic\launcher.exe |
"{5BFF3015-EA08-4D87-9F80-DEE1ABE98E8D}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{5CE7179D-D0EA-4817-91E1-0B4BA10DA223}" = dir=out | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{5F55D091-6152-4A54-B352-0F95C7233EF7}" = dir=in | name=@{microsoft.skypeapp_1.3.0.112_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{68FF65D2-B5E2-4488-B2CA-EB8D99B206DA}" = dir=in | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{69C96717-D8F4-4408-A174-C68C48CA7355}" = protocol=6 | dir=in | app=e:\games\crysis 3\bin32\crysis3.exe |
"{6BAB0DC2-0D4C-4561-BA5D-CC0086A6B9CC}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{6C18FE79-562E-4701-B2A4-D237B08C949D}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |
"{6D94B2EC-DCA1-4E86-8274-4E94E0DBAEFB}" = dir=out | name=@{microsoft.zunevideo_1.1.134.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} |
"{7285DAFB-4E94-4A65-856A-8188835033DA}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{73EB9727-6F1A-4BC6-BF5D-49A82036CBAF}" = protocol=6 | dir=out | app=system |
"{74316174-806A-4C43-BAA0-C401CD614D53}" = dir=in | name=@{microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{7A6745C2-0990-488B-9FDC-4A63F7E86E62}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{7D965C57-EA10-48BD-8B5A-29AF12727FD7}" = protocol=17 | dir=in | app=e:\games\age of empire iii\age3y.exe |
"{7DB0D11B-79AF-4A69-84A8-656FC1401271}" = protocol=17 | dir=in | app=e:\games\assassins creed iii\ac3sp.exe |
"{7FCBF890-5152-4220-BB5C-D3C191ED6871}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{82358BDB-D5F8-475F-9354-6D539E76984F}" = dir=out | name=9gag viewer |
"{85FA6024-EFA5-47AD-89EF-CC6B0D5D42ED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9219BA4D-6556-46D5-8761-A9EE804EE92A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9378CB54-6E11-451D-B3C9-2477F97D49E5}" = protocol=17 | dir=in | app=e:\games\far cry 2\bin\farcry2.exe |
"{95D519FC-A162-4DAE-B90D-B82A88EA8023}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9760BB01-DE64-439D-8088-EF889699775D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A217BC6B-AE8F-4926-BD68-54213667F591}" = protocol=17 | dir=in | app=c:\program files\synergy\synergys.exe |
"{A3A4D26C-5922-4B9D-8D04-D87C08024939}" = dir=in | app=e:\games\the war z\warz.exe |
"{A55A6442-5D3F-478C-A6ED-64672FDE9B70}" = dir=out | app=e:\medal of honor\launcher.exe |
"{A6B67729-C2A2-4B23-9872-359A3E57277E}" = dir=in | name=@{microsoft.reader_6.2.9200.20523_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{A90B1F0A-A896-43E3-B8AE-AA18543E1C5B}" = protocol=6 | dir=in | app=e:\games\far cry 2\bin\farcry2.exe |
"{AB8D35D4-BF6E-4E00-9126-97A27713D3C6}" = protocol=17 | dir=in | app=e:\games\bin\fc3updater.exe |
"{ABBFACA5-FEC0-405E-95ED-AE0689E9A582}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{AC128E50-58CB-49DD-83A2-8358B285A41A}" = protocol=6 | dir=in | app=c:\program files\synergy\synergys.exe |
"{AFA81DA3-DBBD-4A48-8E4D-A97574861987}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{B059B569-9142-46EF-9C84-A9525267C471}" = dir=out | name=@{microsoft.zunemusic_1.1.134.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} |
"{B1F8DAC5-52BA-4B9B-9C8A-D3F7908E4BCB}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B247B5BE-1FF6-41A2-9349-0D8EAC6D5881}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} |
"{B34343B5-FF7B-48F6-81BC-174287EC2C7D}" = protocol=1 | dir=in | [email protected],-28543 |
"{B43005D1-304C-4465-84E0-BC02A4694F9A}" = dir=out | app=e:\games\assassins creed iii\ac3sp.exe |
"{B678CE75-A3D5-4C6E-84DE-007BEBD1838D}" = protocol=6 | dir=in | app=e:\games\bulletstorm\binaries\win32\shippingpc-stormgame.exe |
"{B6F8894D-5277-446A-965B-1196B469E064}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{B9266329-2760-492F-A80B-675B586DC6C1}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{BB382E08-3829-4F1C-875D-5B28DCB4EA41}" = protocol=6 | dir=in | app=e:\games\far cry 2\bin\fc2editor.exe |
"{BFDF0344-0F8B-47AF-BA22-CF4984CCC3C7}" = dir=out | name=@{microsoft.xboxlivegames_1.1.134.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{C3AC3732-F9AA-428C-8C70-C54116882E70}" = dir=in | name=mftp |
"{C636982E-FCCD-403D-80FF-B8909FF76872}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{CB559298-7FAA-4C86-9908-E61F9C6ED9F9}" = dir=out | name=@{microsoft.reader_6.2.9200.20523_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{D694AC9D-6BF2-4805-86C0-8AD6CF847F4E}" = dir=in | app=e:\medal of honor\launcher.exe |
"{D73F0C82-368D-43E5-BE37-E8FE5575ABEF}" = dir=out | name=@{microsoft.bing_1.5.1.251_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
"{D801CF6D-3112-4062-8650-73BB65FA504C}" = protocol=17 | dir=in | app=e:\games\bin\fc3editor.exe |
"{D9C8548D-F642-4970-8EFC-59C298A602D3}" = dir=out | name=@{microsoft.bingmaps_1.5.1.240_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{DD06F5E5-7ACE-4D66-95FF-F060F6F3A6E4}" = protocol=6 | dir=in | app=e:\games\assassins creed iii\ac3mp.exe |
"{E0AA2F36-DE76-44BB-910C-FFCD6F90CB0B}" = dir=out | name=@{microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{E0EFB176-DBA0-4C02-98E6-82A9C4573F69}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{E807145A-A4DE-43DF-BB00-E39DBD84AAF9}" = protocol=17 | dir=in | app=e:\games\bin\farcry3_d3d11.exe |
"{E91EF930-F284-4D07-AE62-8D3695305A22}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{EA71A422-224F-4D29-B4BE-4B6BFCBE4562}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{EEDE8282-0F95-4F88-B1FF-2B672FC6E7D3}" = protocol=6 | dir=in | app=e:\games\battlefield 3\bf3.exe |
"{EEE8C55C-63EA-46A9-9C4C-87D572CEA9F7}" = dir=out | name=@{microsoft.bingtravel_1.5.1.248_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |
"{F075AB4E-130A-4803-88A7-2B375624E66E}" = protocol=6 | dir=in | app=e:\games\bin\farcry3.exe |
"{F1506DD0-B96F-4F26-B07F-60E7543CB6B7}" = protocol=17 | dir=in | app=e:\games\bin\farcry3.exe |
"{F5EB7D61-CDB9-4882-817F-02D1949266A2}" = protocol=6 | dir=in | app=e:\games\age of empire iii\age3x.exe |
"{F989F79E-E21C-4B31-8BFC-812CBBDF18AA}" = dir=out | app=%programfiles% (x86)\installshield installation information\{9d15e813-0c26-41e7-abc5-3eb06ff1b3cf}\dataextract.exe |
"{FAD7E3D9-934F-4177-BC2B-75149B9B9604}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{FB070158-E9B7-41BE-B59B-0195E5A856F4}" = protocol=6 | dir=in | app=e:\games\far cry 2\bin\fc2launcher.exe |
"{FF7E5B4A-343D-410F-963E-A27851BCE414}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"TCP Query User{002C2D59-2C8D-4D60-92FF-97F2D6E4D9E9}E:\games\call of duty black ops ii\t6sp.exe" = protocol=6 | dir=in | app=e:\games\call of duty black ops ii\t6sp.exe |
"TCP Query User{0F978211-4FC0-4989-97FE-37B5A0004B45}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"TCP Query User{189F727B-21A1-4F37-AE1A-52F834C3B0DC}C:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe" = protocol=6 | dir=in | app=c:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe |
"TCP Query User{3A78D7A5-CD1A-4635-9964-92BA8889F38A}C:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe |
"TCP Query User{3E6461E2-BC6A-4809-B4B2-3B60F8585D20}C:\users\jeff\appdata\local\temp\gw2.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\local\temp\gw2.exe |
"TCP Query User{527216EF-BADE-438A-A475-FDE4D2456A3A}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{54C664AC-35A5-4851-8949-4DC2A674A39C}E:\games\bin\farcry3.exe" = protocol=6 | dir=in | app=e:\games\bin\farcry3.exe |
"TCP Query User{65A4B5BC-3E44-4FAA-8C59-94E267686F3C}E:\games\r.g. catalyst\max payne 3\maxpayne3.exe" = protocol=6 | dir=in | app=e:\games\r.g. catalyst\max payne 3\maxpayne3.exe |
"TCP Query User{77D25FF3-1A70-41B4-8629-96265F2B9C38}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"TCP Query User{791AA0A8-E99C-4C86-9F62-6D35729D4433}E:\games\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=e:\games\guild wars 2\gw2.exe |
"TCP Query User{7D65F13E-D0EB-4661-89EC-3DDF1CFAEC9E}C:\users\jeff\planetside2\planetside2.exe" = protocol=6 | dir=in | app=c:\users\jeff\planetside2\planetside2.exe |
"TCP Query User{8229E47C-51DA-4371-8339-36346C785747}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"TCP Query User{8B1426EF-1AB6-4834-877C-D15D9633A3CB}E:\games\call of duty black ops ii\t6zm.exe" = protocol=6 | dir=in | app=e:\games\call of duty black ops ii\t6zm.exe |
"TCP Query User{BEEEEFF9-19D5-4622-8811-DA5EFD24A365}E:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe" = protocol=6 | dir=in | app=e:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe |
"TCP Query User{C58EA645-BEE0-441C-B552-CDBFA89E6276}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"TCP Query User{D060A284-1CDC-4132-82EF-9BDCA8788233}E:\games\call of duty black ops ii\t6mp.exe" = protocol=6 | dir=in | app=e:\games\call of duty black ops ii\t6mp.exe |
"TCP Query User{DDFF0370-04B9-4B28-87E6-A473400EA2C7}E:\games\crysis 2\bin32\crysis2.exe" = protocol=6 | dir=in | app=e:\games\crysis 2\bin32\crysis2.exe |
"TCP Query User{FD68C92C-6D53-4461-BBEE-FD81FE3212D7}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{10EEE635-9EFA-4B8B-B239-A28D877C3BED}E:\games\bin\farcry3.exe" = protocol=17 | dir=in | app=e:\games\bin\farcry3.exe |
"UDP Query User{1E040BE7-50BE-4B62-B73E-50D5ADEE5FB9}C:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\roaming\25assist\armyops\system\armyops.exe |
"UDP Query User{2765BB4B-ECE6-4DB6-A466-0052CB2A2BC3}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{3BF044B5-A4A0-4E75-8EA9-89C725D33281}E:\games\r.g. catalyst\max payne 3\maxpayne3.exe" = protocol=17 | dir=in | app=e:\games\r.g. catalyst\max payne 3\maxpayne3.exe |
"UDP Query User{4DBC0533-7AE9-41EA-A8CF-BA741067B66C}C:\users\jeff\planetside2\planetside2.exe" = protocol=17 | dir=in | app=c:\users\jeff\planetside2\planetside2.exe |
"UDP Query User{6AED8A37-A5D8-43BA-89DD-DD553E16D79E}C:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe" = protocol=17 | dir=in | app=c:\program files (x86)\netbeans 7.2.1\bin\netbeans.exe |
"UDP Query User{81A4644E-2B90-47C7-9C4E-9B5E050ECFFB}C:\users\jeff\appdata\local\temp\gw2.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\local\temp\gw2.exe |
"UDP Query User{8BE8033D-F11A-445C-8BF4-D41DE18025E0}E:\games\call of duty black ops ii\t6mp.exe" = protocol=17 | dir=in | app=e:\games\call of duty black ops ii\t6mp.exe |
"UDP Query User{9432C79D-D024-4851-B1C2-5184CA96277D}E:\games\call of duty black ops ii\t6sp.exe" = protocol=17 | dir=in | app=e:\games\call of duty black ops ii\t6sp.exe |
"UDP Query User{9EDF9370-E653-4B0C-9919-F5BCAE6E0C9E}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{A31B045B-FCBF-4E09-8ADF-7BE26B17CECE}E:\games\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=e:\games\guild wars 2\gw2.exe |
"UDP Query User{A472FF43-117C-48A3-B073-62092CC17969}E:\games\crysis 2\bin32\crysis2.exe" = protocol=17 | dir=in | app=e:\games\crysis 2\bin32\crysis2.exe |
"UDP Query User{B4FA8710-7611-4F0A-B9BF-8E84FB1C8CD4}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"UDP Query User{C76CE14F-20E3-4FD3-9D10-FC1292F30D67}E:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe" = protocol=17 | dir=in | app=e:\games\mass effect 3\mass effect 3.deluxe edition.v 1.4.5427.111 + 12 dlc\binaries\win32\masseffect3.exe |
"UDP Query User{CE0833DF-72C2-44E4-B2ED-E48A563E507F}E:\games\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=e:\games\dishonored\binaries\win32\dishonored.exe |
"UDP Query User{D67CFA0D-8F56-4801-B25E-2B0CBFC61658}C:\users\jeff\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\jeff\appdata\roaming\spotify\spotify.exe |
"UDP Query User{DED19454-7108-4045-AD11-CC1C5D84DA8E}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"UDP Query User{EDC107DE-655F-49F6-B7A6-8C0399DA7231}E:\games\call of duty black ops ii\t6zm.exe" = protocol=17 | dir=in | app=e:\games\call of duty black ops ii\t6zm.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp version 0.99.7
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86417011FF}" = Java 7 Update 11 (64-bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{552A9E66-09E1-4BA1-ABF9-A51955142BA5}" = Vinny27 - Adobe Photoshop CS6 64-bit
"{64A3A4F4-B792-11D6-A78A-00B0D0170110}" = Java SE Development Kit 7 Update 11 (64-bit)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision stuurprogramma 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA-configuratiescherm 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafisch stuurprogramma 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.0.1 (BETA)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision controllerstuurprogramma 314.07
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX systeemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 2.47.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio-stuurprogramma 1.3.23.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"WinRAR archiver" = WinRAR 4.20 (64-bit)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}" = Razer Synapse 2.0
"{12947715-B6F0-4597-816F-5E13FB647921}_is1" = Spotnet
"{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23C3EF87-AD08-4F76-982D-1AE137485F08}" = MySQL Workbench 5.2 CE
"{25A18E40-3263-416E-B672-BE85DA47BBFD}" = Mumble 1.2.3
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{4198AE83-A3C6-4C41-85C8-EC63E990696E}" = Crysis®3
"{45410935-3E72-472B-8C35-AB1000008200}" = Bulletstorm
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{6033673D-2530-4587-8AD0-EB059FC263F9}" = Crysis® 2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{718B4606-2FEF-411B-B96E-4FC53B91EBC0}" = Secure Download Manager
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{84F3F00F-CCA9-43B3-A493-1E2757649848}_is1" = Lucius 1.01.3173
"{88F0F4FF-B514-4E32-9C17-CAF96D60EAFC}" = Razer Game Booster
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}" = Assassin's Creed ® III
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B4DD5371-2FA3-4178-95E8-54DDF34F0E91}" = IObit Apps Toolbar v6.9
"{BC3051A7-1021-4B57-A3DA-AAC24566FAE7}_is1" = The War Z version 1.0
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = De Sims™ 3
"{C3592426-531E-4110-911D-BFECE2CE284B}" = puush
"{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties
"{CFEF8DB5-B45E-4b05-90BE-D02AA6F45354}" = Firefall
"{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}" = Far Cry 3
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2
"ACE COMBAT ASSAULT HORIZON Enhanced Edition_is1" = ACE COMBAT ASSAULT HORIZON Enhanced Edition
"Advanced SystemCare 6_is1" = Advanced SystemCare 6
"Aliens: Colonial Marines_is1" = Aliens: Colonial Marines
"Alt.Binz" = Alt.Binz 0.39.4
"Battlelog Web Plugins" = Battlelog Web Plugins
"BSPlayerf" = BS.Player FREE
"Call of Duty Black Ops II_is1" = Call of Duty Black Ops II
"ESN Sonar-0.70.4" = ESN Sonar
"Fences 22.01" = Fences 2
"GFWL_{45410935-3E72-472B-8C35-AB1000008200}" = Bulletstorm
"Google Chrome" = Google Chrome
"Guild Wars 2" = Guild Wars 2
"Homefront_is1" = Homefront
"InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs
"InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties
"IObit Malware Fighter_is1" = IObit Malware Fighter
"Lord of the Rings - War in the North_is1" = Lord of the Rings - War in the North
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Mass Effect 3.Deluxe Edition.v 1.4.5427.111 + 12 DLC_is1" = Mass Effect 3.Deluxe Edition.v 1.4.5427.111 + 12 DLC
"Max Payne 3_is1" = «Max Payne 3» 1.0.0.57
"nbi-nb-base-7.2.1.0.201210100934" = NetBeans IDE 7.2.1
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Open Codecs" = Xiph.Org Open Codecs 0.85.17777
"Origin" = Origin
"PrecisionX" = EVGA Precision X 3.0.4
"PunkBusterSvc" = PunkBuster Services
"Rockstar Games Social Club" = Rockstar Games Social Club
"Smart Defrag 2_is1" = Smart Defrag 2
"StarCraft II" = StarCraft II
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Synergy" = Synergy
"UltraUXThemePatcher" = UltraUXThemePatcher
"Uplay" = Uplay
"uTorrent" = µTorrent
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-4203280234-4039808070-1079781814-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{8ACF0A2F-1873-4062-9769-0BD350554888}_is1" = setup version 1.0
"FileZilla Client" = FileZilla Client 3.6.0.2
"SOE-C:/Users/jeff/AppData/Local/Sony Online Entertainment/ApplicationUpdater" = applicationupdater
"SOE-C:/Users/jeff/PlanetSide2" = gamelauncher-ps2-psg
"soe-PlanetSide 2 PSG" = PlanetSide 2
"Spotify" = Spotify
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-4203280234-4039808070-1079781814-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"SOE-C:/Users/jeff/PlanetSide2" = gamelauncher-ps2-psg
"soe-PlanetSide 2 PSG" = PlanetSide 2
"Spotify" = Spotify
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 20-2-2013 15:36:42 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: ShippingPC-StormGame.exe, versie: 1.0.7094.0,
tijdstempel: 0x4d35a5ef Naam van module met fout: ShippingPC-StormGame.exe, versie:
1.0.7094.0, tijdstempel: 0x4d35a5ef Uitzonderingscode: 0xc0000005 Foutmarge: 0x00a1645b
Id
van proces met fout: 0xa64 Starttijd van toepassing met fout: 0x01ce0fa0e42fc7e0
Pad
naar toepassing met fout: E:\games\Bulletstorm\Binaries\Win32\ShippingPC-StormGame.exe
Pad
naar module met fout: E:\games\Bulletstorm\Binaries\Win32\ShippingPC-StormGame.exe
Rapport-id:
d9f63315-7b94-11e2-bea4-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
Error - 20-2-2013 18:43:07 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: touchup.exe, versie: 3.4.0.0, tijdstempel:
0x50b95db3 Naam van module met fout: dlnashext.dll_unloaded, versie: 0.0.0.0, tijdstempel:
0x5010975d Uitzonderingscode: 0xc00001a5 Foutmarge: 0x562076d4 Id van proces met fout:
0x105c Starttijd van toepassing met fout: 0x01ce0fbb8df37609 Pad naar toepassing
met fout: E:\games\Crysis 3\__Installer\touchup.exe Pad naar module met fout: dlnashext.dll
Rapport-id:
e4b2d7c8-7bae-11e2-bea4-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
Error - 20-2-2013 18:43:08 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: touchup.exe, versie: 3.4.0.0, tijdstempel:
0x50b95db3 Naam van module met fout: unknown, versie: 0.0.0.0, tijdstempel: 0x00000000
Uitzonderingscode:
0xc0000005 Foutmarge: 0x771ebda1 Id van proces met fout: 0x105c Starttijd van toepassing
met fout: 0x01ce0fbb8df37609 Pad naar toepassing met fout: E:\games\Crysis 3\__Installer\touchup.exe
Pad
naar module met fout: unknown Rapport-id: e4f458cf-7bae-11e2-bea4-8c89a5c5564d Volledige
pakketnaam met fout: Relatieve toepassings-id van pakket met fout:
Error - 20-2-2013 19:20:33 | Computer Name = jeff-PC | Source = Application Hang | ID = 1002
Description = Het programma chrome.exe, versie 24.0.1312.57 reageert niet meer op
Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem
beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Onderhoudscentrum
in het Configuratiescherm. Proces-id: fb8 Starttijd: 01ce0fa3594c564a Eindtijd: 8 Toepassingspad:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Rapport-id: 405ca6ee-7bb3-11e2-bea4-8c89a5c5564d
Volledige
pakketnaam met fout: Relatieve toepassings-id van pakket met fout:
Error - 21-2-2013 15:14:39 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: Origin.exe, versie: 9.1.13.89, tijdstempel:
0x5122b6a0 Naam van module met fout: ntdll.dll, versie: 6.2.9200.16420, tijdstempel:
0x505aaa82 Uitzonderingscode: 0xc0000374 Foutmarge: 0x000da94f Id van proces met fout:
0xec0 Starttijd van toepassing met fout: 0x01ce1066a0f706cb Pad naar toepassing met
fout: C:\Program Files (x86)\Origin\Origin.exe Pad naar module met fout: C:\WINDOWS\SYSTEM32\ntdll.dll
Rapport-id:
ef93d385-7c5a-11e2-bea4-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
Error - 21-2-2013 20:25:58 | Computer Name = jeff-PC | Source = IMFservice | ID = 0
Description =
Error - 21-2-2013 20:25:58 | Computer Name = jeff-PC | Source = IMFservice | ID = 0
Description =
Error - 22-2-2013 09:46:54 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: crysis3.exe, versie: 1.0.0.1, tijdstempel:
0x02f4d040 Naam van module met fout: crysis3.exe, versie: 1.0.0.1, tijdstempel:
0x02f4d040 Uitzonderingscode: 0xc0000005 Foutmarge: 0x014c31e3 Id van proces met fout:
0xae0 Starttijd van toepassing met fout: 0x01ce11029abd0236 Pad naar toepassing met
fout: E:\games\Crysis 3\Bin32\crysis3.exe Pad naar module met fout: E:\games\Crysis
3\Bin32\crysis3.exe Rapport-id: 50c77297-7cf6-11e2-bea6-8c89a5c5564d Volledige pakketnaam
met fout: Relatieve toepassings-id van pakket met fout:
Error - 22-2-2013 13:46:59 | Computer Name = jeff-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 2486
Description = App windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
is niet gestart binnen de toegewezen tijd.
Error - 23-2-2013 07:19:13 | Computer Name = jeff-PC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: aswMBR.exe, versie: 0.9.9.1707, tijdstempel:
0x509be8bf Naam van module met fout: ntdll.dll, versie: 6.2.9200.16420, tijdstempel:
0x505aaa82 Uitzonderingscode: 0xc0000005 Foutmarge: 0x0004f44d Id van proces met fout:
0xb94 Starttijd van toepassing met fout: 0x01ce11b75623c0da Pad naar toepassing met
fout: C:\Users\jeff\Downloads\aswMBR.exe Pad naar module met fout: C:\WINDOWS\SYSTEM32\ntdll.dll
Rapport-id:
d9da65ed-7daa-11e2-bea9-8c89a5c5564d Volledige pakketnaam met fout: Relatieve toepassings-id
van pakket met fout:
[ System Events ]
Error - 22-2-2013 13:19:34 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 22-2-2013 17:33:23 | Computer Name = jeff-PC | Source = DCOM | ID = 10010
Description =
Error - 23-2-2013 06:19:07 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:00:17 | Computer Name = jeff-PC | Source = EventLog | ID = 6008
Description = De vorige afsluiting van het systeem om 11:59:07 op ?23-?2-?2013 is
onverwacht gebeurd.
Error - 23-2-2013 07:00:14 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:00:19 | Computer Name = jeff-PC | Source = BugCheck | ID = 1001
Description =
Error - 23-2-2013 07:23:19 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:25:51 | Computer Name = jeff-PC | Source = EventLog | ID = 6008
Description = De vorige afsluiting van het systeem om 12:24:20 op ?23-?2-?2013 is
onverwacht gebeurd.
Error - 23-2-2013 07:25:49 | Computer Name = jeff-PC | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
Error - 23-2-2013 07:25:53 | Computer Name = jeff-PC | Source = BugCheck | ID = 1001
Description =
< End of report >
#4
Posted 23 February 2013 - 07:59 AM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
OK I can see it, after this run let me know how the computer is behaving
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
- Under the Custom Scans/Fixes box at the bottom, paste in the following
:OTL O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [AdobeUpdate] C:\Users\jeff\AppData\Roaming\Adobe32\invis.vbs () O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [iehighutil] C:\Temporary\iehighutil.exe () O4 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000..\Run: [Microsoft Routing Utilities] C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-4203280234-4039808070-1079781814-1000 Winlogon: Shell - (C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe) - C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Templates\vmnethcp.exe (Microsoft Corporation) [2013-02-20 12:23:56 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Adobe32 [2013-02-20 12:22:03 | 000,000,000 | ---D | C] -- C:\Temporary [2013-02-20 12:22:03 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\AppName :Commands [resethosts] [emptytemp] [CREATERESTOREPOINT] [Reboot]
- Then click the Run Fix button at the top
- Let the program run unhindered, reboot the PC when it is done
- Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
#5
Posted 23 February 2013 - 08:36 AM
jeffNL
- Topic Starter
-
- Member
-
- 5 posts
New Member
OTL logfile created on: 23-2-2013 15:32:01 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\jeff\Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16484)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
7,96 Gb Total Physical Memory | 6,48 Gb Available Physical Memory | 81,50% Memory free
15,96 Gb Paging File | 14,20 Gb Available in Paging File | 88,97% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,69 Gb Total Space | 20,03 Gb Free Space | 17,94% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 69,52 Mb Free Space | 69,52% Space Free | Partition Type: NTFS
Drive E: | 910,41 Gb Total Space | 514,29 Gb Free Space | 56,49% Space Free | Partition Type: NTFS
Drive F: | 20,00 Gb Total Space | 19,89 Gb Free Space | 99,46% Space Free | Partition Type: NTFS
Drive H: | 931,51 Gb Total Space | 567,31 Gb Free Space | 60,90% Space Free | Partition Type: NTFS
Computer Name: JEFF-PC | User Name: jeff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013-02-23 14:36:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\jeff\Downloads\OTL.exe
PRC - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
PRC - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013-02-08 10:46:24 | 001,320,768 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
PRC - [2013-01-30 20:00:17 | 003,093,624 | ---- | M] () -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
PRC - [2013-01-26 03:35:08 | 001,248,208 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013-01-19 03:51:31 | 001,129,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013-01-15 18:47:12 | 000,491,840 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
PRC - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
PRC - [2012-12-25 15:11:24 | 001,611,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
PRC - [2012-11-07 16:42:09 | 001,199,576 | ---- | M] (Spotify Ltd) -- C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
========== Modules (No Company Name) ==========
MOD - [2013-02-20 14:27:28 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65220f0f32ec84454f9a811fba883c2e\System.Windows.Forms.ni.dll
MOD - [2013-02-14 11:56:30 | 012,638,576 | ---- | M] () -- C:\Users\jeff\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll
MOD - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
MOD - [2013-01-30 20:00:17 | 003,093,624 | ---- | M] () -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MOD - [2013-01-26 03:35:06 | 000,460,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll
MOD - [2013-01-26 03:35:04 | 004,012,496 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013-01-26 03:34:19 | 000,597,968 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013-01-26 03:34:18 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013-01-26 03:34:16 | 001,552,848 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2013-01-16 11:08:25 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e2f7dbe3bf08df200a4cdcf2e0eb82fa\System.Runtime.Remoting.ni.dll
MOD - [2013-01-16 11:08:21 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\cf561d65486360afb324d26c80b9aac2\System.Configuration.ni.dll
MOD - [2013-01-16 11:07:00 | 005,453,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\ae31f7dc9817e359d05c9c8efdd5f359\System.Xml.ni.dll
MOD - [2013-01-16 11:06:54 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7e6b074d3f3e3cc8e0270a3552c47aaa\System.Drawing.ni.dll
MOD - [2013-01-16 11:06:37 | 007,988,736 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\28c2c6e7f48ff80c680a97b08df66a72\System.ni.dll
MOD - [2013-01-16 11:06:34 | 011,494,912 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\8d2929ad589e1092eb62a43424361465\mscorlib.ni.dll
MOD - [2013-01-15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madexcept_.bpl
MOD - [2013-01-15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\maddisAsm_.bpl
MOD - [2013-01-15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madbasic_.bpl
MOD - [2012-11-29 22:59:32 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2012-09-13 23:03:56 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_nl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2011-08-19 16:33:28 | 000,047,960 | ---- | M] () -- C:\Program Files (x86)\IObit\Smart Defrag 2\NtfsData.dll
========== Services (SafeList) ==========
SRV:64bit: - [2013-01-10 00:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2013-01-10 00:22:53 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2013-01-10 00:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2012-12-06 05:23:00 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2012-12-06 05:22:59 | 000,178,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2012-11-06 05:17:41 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2012-10-24 00:26:36 | 000,423,496 | ---- | M] () [Auto | Running] -- C:\Program Files\Synergy\synergyd.exe -- (Synergy)
SRV:64bit: - [2012-09-20 10:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2012-09-20 07:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2012-09-20 07:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2012-07-26 04:17:59 | 000,015,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2012-07-26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2012-07-26 04:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2012-07-26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2012-07-26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2012-07-26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2012-07-26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2012-07-26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2012-07-26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2012-07-26 04:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2012-07-26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2012-07-26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
SRV:64bit: - [2012-07-26 04:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013-01-23 18:02:43 | 000,541,608 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe -- (AdvancedSystemCareService6)
SRV - [2013-01-08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Running] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012-07-26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2013-01-10 02:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2013-01-10 02:39:29 | 000,194,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2012-12-19 06:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012-11-27 04:56:29 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2012-11-27 04:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2012-11-20 05:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2012-11-07 08:49:46 | 000,113,664 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rzudd.sys -- (rzudd)
DRV:64bit: - [2012-11-06 08:52:07 | 000,445,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2012-11-06 08:36:23 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
DRV:64bit: - [2012-11-06 04:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2012-10-12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012-10-11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2012-10-11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
DRV:64bit: - [2012-09-20 08:55:33 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2012-09-20 08:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2012-09-20 08:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2012-09-20 08:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2012-09-20 08:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2012-09-20 08:03:08 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
DRV:64bit: - [2012-09-19 10:02:08 | 000,102,368 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012-09-19 10:02:06 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012-07-26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012-07-26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
DRV:64bit: - [2012-07-26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2012-07-26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2012-07-26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2012-07-26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2012-07-26 06:00:55 | 000,283,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2012-07-26 06:00:55 | 000,077,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
DRV:64bit: - [2012-07-26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2012-07-26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2012-07-26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2012-07-26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2012-07-26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2012-07-26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2012-07-26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2012-07-26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2012-07-26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
DRV:64bit: - [2012-07-26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2012-07-26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2012-07-26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2012-07-26 05:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2012-07-26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
DRV:64bit: - [2012-07-26 05:44:30 | 000,258,288 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2012-07-26 05:36:15 | 000,034,216 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2012-07-26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012-07-26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2012-07-26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2012-07-26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2012-07-26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2012-07-26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2012-07-26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2012-07-26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2012-07-26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2012-07-26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2012-07-26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2012-07-26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2012-07-26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2012-07-26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2012-07-26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012-07-26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2012-07-26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2012-07-26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012-07-26 03:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid)
DRV:64bit: - [2012-07-26 03:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp)
DRV:64bit: - [2012-07-26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp)
DRV:64bit: - [2012-07-26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2012-07-26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2012-07-26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2012-07-17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012-06-02 15:31:56 | 000,589,824 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
DRV:64bit: - [2010-11-26 18:02:18 | 000,017,720 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:64bit: - [2009-11-18 07:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\MBfilt64.sys -- (MBfilt)
DRV - [2012-11-13 21:53:00 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2012-10-17 11:21:00 | 000,015,176 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\EVGA Precision X\RTCore64.sys -- (RTCore64)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://nl.search.yah...r=spigot-yhp-ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nl-NL,nl;q=0.8,en-US;q=0.5,en;q=0.3
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3C EA C2 B8 29 F7 CD 01 [binary data]
IE - HKCU\..\URLSearchHook: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {C34CA07A-74EF-4CBD-8F67-A805395AC575}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...q={searchTerms}
IE - HKCU\..\SearchScopes\{C34CA07A-74EF-4CBD-8F67-A805395AC575}: "URL" = http://nl.search.yah...p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
========== Chrome ==========
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - Extension: YouTube = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google Zoeken = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Ebay Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.0_0\
CHR - Extension: Domain Error Assistant = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.1_0\
CHR - Extension: Savings-Slider = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0\
CHR - Extension: Amazon Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\
CHR - Extension: Gmail = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2013-02-23 15:28:59 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O4:64bit: - HKLM..\Run: [Fences] C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [Advanced SystemCare 6] C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe (IObit)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [puush] C:\Program Files (x86)\puush\puush.exe ()
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - Startup: C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk = C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E96A4FF6-3529-4BB1-B665-F131F45343C8}: DhcpNameServer = 192.168.2.254
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (c:\windows\explorer.exe) - c:\Windows\explorer.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-07-26 07:52:25 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013-02-23 15:28:58 | 000,000,000 | ---D | C] -- C:\_OTL
[2013-02-23 14:43:12 | 000,000,000 | ---D | C] -- C:\Users\jeff\Desktop\map
[2013-02-23 12:05:15 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013-02-22 14:07:27 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\NVIDIA
[2013-02-22 14:06:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2013-02-22 14:06:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013-02-20 23:43:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3
[2013-02-20 18:39:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2013-02-20 18:39:53 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\SystemRequirementsLab
[2013-02-17 20:26:28 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Mumble
[2013-02-17 20:26:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
[2013-02-17 20:26:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mumble
[2013-02-16 20:33:14 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\FLT
[2013-02-16 19:45:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aliens Colonial Marines
[2013-02-14 14:28:39 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Skyrim
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit Apps Toolbar
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2013-02-11 16:05:48 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\Electronic Arts
[2013-02-11 16:05:10 | 000,447,752 | R--- | C] (On2.com) -- C:\WINDOWS\SysWow64\vp6vfw.dll
[2013-02-11 16:05:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
[2013-02-11 16:03:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2013-02-10 20:51:04 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\puush
[2013-02-02 20:53:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\Desktop\ZygorGuidesViewer
[2013-02-02 20:51:11 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\CAPCOM
[2013-02-01 18:36:02 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Spotnet
[2013-02-01 09:25:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spotnet
[2013-01-31 12:46:47 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\LolClient
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\Riot Games
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewFeature1
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\PMB Files
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2013-01-30 20:00:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2013-01-30 20:00:00 | 000,000,000 | ---D | C] -- C:\Users\jeff\.swt
[2013-01-29 16:24:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2013-01-29 16:06:45 | 000,000,000 | ---D | C] -- C:\Program Files\Synergy
[2013-01-28 18:45:37 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\StarCraft II
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2013-01-26 12:55:38 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Red 5 Studios
[2013-01-26 01:55:03 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\NAMCO
[2013-01-26 01:44:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Programs
[2013-01-25 21:15:17 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\StartIsBack
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraUXThemePatcher
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\e-academy Inc
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\e-academy Inc
[2013-01-25 19:54:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\TaskDisabled
[2013-01-25 18:31:31 | 000,032,600 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\SmartDefragBootTime.exe
[2013-01-25 18:26:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 2
[2013-01-25 18:26:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
[2013-01-25 18:23:57 | 000,026,432 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\RegistryDefragBootTime.exe
[2013-01-25 18:17:38 | 000,000,000 | ---D | C] -- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013-01-25 18:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\{BDDB56DE-AE4E-48A2-B856-FB60C8498453}
[2013-01-25 18:17:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 6
[2013-01-25 18:17:05 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
[2013-01-25 17:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
========== Files - Modified Within 30 Days ==========
[2013-02-23 15:30:22 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-23 15:29:48 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2013-02-23 15:29:46 | 2538,635,263 | -HS- | M] () -- C:\hiberfil.sys
[2013-02-23 15:28:59 | 000,000,098 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\Hosts
[2013-02-23 15:27:00 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-02-23 12:31:51 | 001,792,392 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2013-02-23 12:31:51 | 000,795,678 | ---- | M] () -- C:\WINDOWS\SysNative\perfh013.dat
[2013-02-23 12:31:51 | 000,710,046 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2013-02-23 12:31:51 | 000,158,970 | ---- | M] () -- C:\WINDOWS\SysNative\perfc013.dat
[2013-02-23 12:31:51 | 000,132,416 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2013-02-22 14:07:13 | 000,001,371 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | M] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 12:58:39 | 000,199,936 | ---- | M] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:35 | 004,920,600 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-17 20:28:50 | 000,002,379 | ---- | M] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | M] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | M] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:38 | 000,458,906 | ---- | M] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | M] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-10 04:25:27 | 000,017,738 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-09 14:25:36 | 003,035,306 | ---- | M] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2013-02-09 11:46:28 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-02-04 10:52:39 | 000,460,855 | ---- | M] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:56:00 | 012,629,031 | ---- | M] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | M] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | M] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | M] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.xtr
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:31 | 000,280,904 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | M] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | M] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:13:07 | 000,000,180 | ---- | M] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 18:26:45 | 000,001,182 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | M] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | M] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
========== Files Created - No Company Name ==========
[2013-02-22 14:07:13 | 000,001,371 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | C] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 14:05:28 | 000,017,738 | ---- | C] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-22 12:58:39 | 000,199,936 | ---- | C] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:31 | 004,920,600 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-19 13:31:52 | 000,386,577 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2013-02-17 20:28:50 | 000,002,379 | ---- | C] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | C] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | C] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:29 | 000,458,906 | ---- | C] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | C] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-04 10:52:39 | 000,460,855 | ---- | C] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:55:58 | 012,629,031 | ---- | C] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | C] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | C] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | C] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:59 | 000,281,520 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:35 | 000,280,904 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | C] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | C] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:08:58 | 000,000,180 | ---- | C] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 18:26:45 | 000,017,720 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\SmartDefragDriver.sys
[2013-01-25 18:26:45 | 000,001,182 | ---- | C] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | C] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | C] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2012-12-27 18:03:51 | 003,123,272 | R--- | C] () -- C:\WINDOWS\SysWow64\pbsvc.exe
[2012-11-17 11:20:43 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
[2012-11-02 23:14:16 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
[2012-07-26 09:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2012-07-26 09:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2012-07-26 08:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-07-26 02:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2012-07-25 21:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2012-07-25 21:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2012-06-02 15:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\WINDOWS\SysWow64\xlive.dll.cat
========== ZeroAccess Check ==========
[2013-01-14 19:02:25 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-01-10 00:23:07 | 019,791,360 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-01-10 00:26:23 | 017,560,576 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2013-01-16 20:17:34 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\25Assist
[2013-01-20 00:54:49 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Bioshock2
[2012-11-11 15:20:20 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\BSplayer
[2012-11-06 09:33:19 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\BSplayer Pro
[2013-01-25 20:27:09 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\e-academy Inc
[2013-01-25 18:23:43 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\FileZilla
[2013-01-25 18:26:45 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\IObit
[2013-01-31 12:46:47 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\LolClient
[2013-02-17 20:28:56 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Mumble
[2012-11-05 18:04:52 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\MySQL
[2012-11-05 17:28:56 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\NetBeans
[2012-11-30 21:10:33 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Origin
[2013-02-10 20:51:04 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\puush
[2013-01-19 21:03:31 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Rockstar Games
[2013-02-23 15:02:07 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Spotify
[2012-12-23 18:18:35 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Stardock
[2013-02-20 18:39:53 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\SystemRequirementsLab
[2013-02-20 12:39:51 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\uTorrent
========== Purity Check ==========
< End of report >
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\jeff\Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16484)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
7,96 Gb Total Physical Memory | 6,48 Gb Available Physical Memory | 81,50% Memory free
15,96 Gb Paging File | 14,20 Gb Available in Paging File | 88,97% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,69 Gb Total Space | 20,03 Gb Free Space | 17,94% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 69,52 Mb Free Space | 69,52% Space Free | Partition Type: NTFS
Drive E: | 910,41 Gb Total Space | 514,29 Gb Free Space | 56,49% Space Free | Partition Type: NTFS
Drive F: | 20,00 Gb Total Space | 19,89 Gb Free Space | 99,46% Space Free | Partition Type: NTFS
Drive H: | 931,51 Gb Total Space | 567,31 Gb Free Space | 60,90% Space Free | Partition Type: NTFS
Computer Name: JEFF-PC | User Name: jeff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013-02-23 14:36:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\jeff\Downloads\OTL.exe
PRC - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
PRC - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013-02-08 10:46:24 | 001,320,768 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
PRC - [2013-01-30 20:00:17 | 003,093,624 | ---- | M] () -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
PRC - [2013-01-26 03:35:08 | 001,248,208 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013-01-19 03:51:31 | 001,129,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013-01-15 18:47:12 | 000,491,840 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
PRC - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
PRC - [2012-12-25 15:11:24 | 001,611,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
PRC - [2012-11-07 16:42:09 | 001,199,576 | ---- | M] (Spotify Ltd) -- C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
========== Modules (No Company Name) ==========
MOD - [2013-02-20 14:27:28 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65220f0f32ec84454f9a811fba883c2e\System.Windows.Forms.ni.dll
MOD - [2013-02-14 11:56:30 | 012,638,576 | ---- | M] () -- C:\Users\jeff\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll
MOD - [2013-02-10 20:51:19 | 000,565,480 | ---- | M] () -- C:\Program Files (x86)\puush\puush.exe
MOD - [2013-01-30 20:00:17 | 003,093,624 | ---- | M] () -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MOD - [2013-01-26 03:35:06 | 000,460,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll
MOD - [2013-01-26 03:35:04 | 004,012,496 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013-01-26 03:34:19 | 000,597,968 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013-01-26 03:34:18 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013-01-26 03:34:16 | 001,552,848 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2013-01-16 11:08:25 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e2f7dbe3bf08df200a4cdcf2e0eb82fa\System.Runtime.Remoting.ni.dll
MOD - [2013-01-16 11:08:21 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\cf561d65486360afb324d26c80b9aac2\System.Configuration.ni.dll
MOD - [2013-01-16 11:07:00 | 005,453,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\ae31f7dc9817e359d05c9c8efdd5f359\System.Xml.ni.dll
MOD - [2013-01-16 11:06:54 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7e6b074d3f3e3cc8e0270a3552c47aaa\System.Drawing.ni.dll
MOD - [2013-01-16 11:06:37 | 007,988,736 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\28c2c6e7f48ff80c680a97b08df66a72\System.ni.dll
MOD - [2013-01-16 11:06:34 | 011,494,912 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\8d2929ad589e1092eb62a43424361465\mscorlib.ni.dll
MOD - [2013-01-15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madexcept_.bpl
MOD - [2013-01-15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\maddisAsm_.bpl
MOD - [2013-01-15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madbasic_.bpl
MOD - [2012-11-29 22:59:32 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2012-09-13 23:03:56 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_nl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2011-08-19 16:33:28 | 000,047,960 | ---- | M] () -- C:\Program Files (x86)\IObit\Smart Defrag 2\NtfsData.dll
========== Services (SafeList) ==========
SRV:64bit: - [2013-01-10 00:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2013-01-10 00:22:53 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2013-01-10 00:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2012-12-06 05:23:00 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2012-12-06 05:22:59 | 000,178,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2012-11-06 05:17:41 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2012-10-24 00:26:36 | 000,423,496 | ---- | M] () [Auto | Running] -- C:\Program Files\Synergy\synergyd.exe -- (Synergy)
SRV:64bit: - [2012-09-20 10:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2012-09-20 07:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2012-09-20 07:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2012-07-26 04:17:59 | 000,015,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2012-07-26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2012-07-26 04:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2012-07-26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2012-07-26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2012-07-26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2012-07-26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2012-07-26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2012-07-26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2012-07-26 04:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2012-07-26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2012-07-26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
SRV:64bit: - [2012-07-26 04:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV - [2013-02-09 18:43:48 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013-02-08 10:38:30 | 000,805,240 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2013-01-24 20:12:59 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013-01-23 18:02:43 | 000,541,608 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-01-19 03:50:09 | 002,070,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013-01-15 18:47:10 | 000,465,216 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe -- (AdvancedSystemCareService6)
SRV - [2013-01-08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Running] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-11-06 05:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012-07-26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2013-01-10 02:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2013-01-10 02:39:29 | 000,194,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2012-12-19 06:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012-11-27 04:56:29 | 000,031,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2012-11-27 04:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2012-11-20 05:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2012-11-07 08:49:46 | 000,113,664 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rzudd.sys -- (rzudd)
DRV:64bit: - [2012-11-06 08:52:07 | 000,445,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2012-11-06 08:36:23 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
DRV:64bit: - [2012-11-06 04:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2012-10-12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012-10-11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2012-10-11 08:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
DRV:64bit: - [2012-09-20 08:55:33 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2012-09-20 08:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2012-09-20 08:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2012-09-20 08:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2012-09-20 08:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2012-09-20 08:03:08 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
DRV:64bit: - [2012-09-19 10:02:08 | 000,102,368 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012-09-19 10:02:06 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012-07-26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012-07-26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
DRV:64bit: - [2012-07-26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2012-07-26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2012-07-26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2012-07-26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2012-07-26 06:00:55 | 000,283,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2012-07-26 06:00:55 | 000,077,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
DRV:64bit: - [2012-07-26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2012-07-26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2012-07-26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2012-07-26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2012-07-26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2012-07-26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2012-07-26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2012-07-26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2012-07-26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
DRV:64bit: - [2012-07-26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2012-07-26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2012-07-26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2012-07-26 05:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2012-07-26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
DRV:64bit: - [2012-07-26 05:44:30 | 000,258,288 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2012-07-26 05:36:15 | 000,034,216 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2012-07-26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012-07-26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2012-07-26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2012-07-26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2012-07-26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2012-07-26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2012-07-26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2012-07-26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2012-07-26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2012-07-26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2012-07-26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2012-07-26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2012-07-26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2012-07-26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2012-07-26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012-07-26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2012-07-26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2012-07-26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012-07-26 03:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid)
DRV:64bit: - [2012-07-26 03:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp)
DRV:64bit: - [2012-07-26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr)
DRV:64bit: - [2012-07-26 03:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp)
DRV:64bit: - [2012-07-26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2012-07-26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2012-07-26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2012-07-17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012-06-02 15:31:56 | 000,589,824 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
DRV:64bit: - [2010-11-26 18:02:18 | 000,017,720 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:64bit: - [2009-11-18 07:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\MBfilt64.sys -- (MBfilt)
DRV - [2012-11-13 21:53:00 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2012-10-17 11:21:00 | 000,015,176 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\EVGA Precision X\RTCore64.sys -- (RTCore64)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://nl.search.yah...r=spigot-yhp-ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nl-NL,nl;q=0.8,en-US;q=0.5,en;q=0.3
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3C EA C2 B8 29 F7 CD 01 [binary data]
IE - HKCU\..\URLSearchHook: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {C34CA07A-74EF-4CBD-8F67-A805395AC575}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...q={searchTerms}
IE - HKCU\..\SearchScopes\{C34CA07A-74EF-4CBD-8F67-A805395AC575}: "URL" = http://nl.search.yah...p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
========== Chrome ==========
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://nl.search.yah...r=spigot-yhp-ch
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - Extension: YouTube = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google Zoeken = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Ebay Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.0_0\
CHR - Extension: Domain Error Assistant = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.1_0\
CHR - Extension: Savings-Slider = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.3_0\
CHR - Extension: Amazon Shopping Assistant by Spigot = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\
CHR - Extension: Gmail = C:\Users\jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2013-02-23 15:28:59 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (IObit Apps Toolbar) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll (Spigot, Inc.)
O4:64bit: - HKLM..\Run: [Fences] C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [Advanced SystemCare 6] C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe (IObit)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [puush] C:\Program Files (x86)\puush\puush.exe ()
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\jeff\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - Startup: C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk = C:\Program Files (x86)\Stardock\Fences\Fences.exe (Stardock Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E96A4FF6-3529-4BB1-B665-F131F45343C8}: DhcpNameServer = 192.168.2.254
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (c:\windows\explorer.exe) - c:\Windows\explorer.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-07-26 07:52:25 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013-02-23 15:28:58 | 000,000,000 | ---D | C] -- C:\_OTL
[2013-02-23 14:43:12 | 000,000,000 | ---D | C] -- C:\Users\jeff\Desktop\map
[2013-02-23 12:05:15 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013-02-22 14:07:27 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\NVIDIA
[2013-02-22 14:06:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2013-02-22 14:06:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013-02-20 23:43:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3
[2013-02-20 18:39:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2013-02-20 18:39:53 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\SystemRequirementsLab
[2013-02-17 20:26:28 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Mumble
[2013-02-17 20:26:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
[2013-02-17 20:26:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mumble
[2013-02-16 20:33:14 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\FLT
[2013-02-16 19:45:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aliens Colonial Marines
[2013-02-14 14:28:39 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Skyrim
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit Apps Toolbar
[2013-02-13 19:02:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2013-02-11 16:05:48 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\Electronic Arts
[2013-02-11 16:05:10 | 000,447,752 | R--- | C] (On2.com) -- C:\WINDOWS\SysWow64\vp6vfw.dll
[2013-02-11 16:05:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
[2013-02-11 16:03:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2013-02-10 20:51:04 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\puush
[2013-02-10 20:51:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\puush
[2013-02-02 20:53:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\Desktop\ZygorGuidesViewer
[2013-02-02 20:51:11 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\CAPCOM
[2013-02-01 18:36:02 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Spotnet
[2013-02-01 09:25:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Spotnet
[2013-02-01 09:24:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spotnet
[2013-01-31 12:46:47 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\LolClient
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\Riot Games
[2013-01-30 21:01:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewFeature1
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\PMB Files
[2013-01-30 20:00:18 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2013-01-30 20:00:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2013-01-30 20:00:00 | 000,000,000 | ---D | C] -- C:\Users\jeff\.swt
[2013-01-29 16:24:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2013-01-29 16:06:45 | 000,000,000 | ---D | C] -- C:\Program Files\Synergy
[2013-01-28 18:45:37 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\StarCraft II
[2013-01-28 18:45:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2013-01-26 12:55:38 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Red 5 Studios
[2013-01-26 01:55:03 | 000,000,000 | ---D | C] -- C:\Users\jeff\Documents\NAMCO
[2013-01-26 01:44:18 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\Programs
[2013-01-25 21:15:17 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\StartIsBack
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraUXThemePatcher
[2013-01-25 21:00:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraUXThemePatcher
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\e-academy Inc
[2013-01-25 20:27:09 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Local\e-academy Inc
[2013-01-25 19:54:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\tasks\TaskDisabled
[2013-01-25 18:31:31 | 000,032,600 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\SmartDefragBootTime.exe
[2013-01-25 18:26:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 2
[2013-01-25 18:26:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
[2013-01-25 18:23:57 | 000,026,432 | ---- | C] (IObit) -- C:\WINDOWS\SysNative\RegistryDefragBootTime.exe
[2013-01-25 18:17:38 | 000,000,000 | ---D | C] -- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013-01-25 18:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\{BDDB56DE-AE4E-48A2-B856-FB60C8498453}
[2013-01-25 18:17:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 6
[2013-01-25 18:17:05 | 000,000,000 | ---D | C] -- C:\Users\jeff\AppData\Roaming\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
[2013-01-25 18:16:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
[2013-01-25 17:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
========== Files - Modified Within 30 Days ==========
[2013-02-23 15:30:22 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-23 15:29:48 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2013-02-23 15:29:46 | 2538,635,263 | -HS- | M] () -- C:\hiberfil.sys
[2013-02-23 15:28:59 | 000,000,098 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\Hosts
[2013-02-23 15:27:00 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013-02-23 12:31:51 | 001,792,392 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2013-02-23 12:31:51 | 000,795,678 | ---- | M] () -- C:\WINDOWS\SysNative\perfh013.dat
[2013-02-23 12:31:51 | 000,710,046 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2013-02-23 12:31:51 | 000,158,970 | ---- | M] () -- C:\WINDOWS\SysNative\perfc013.dat
[2013-02-23 12:31:51 | 000,132,416 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2013-02-22 14:07:13 | 000,001,371 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | M] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 12:58:39 | 000,199,936 | ---- | M] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:35 | 004,920,600 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-17 20:28:50 | 000,002,379 | ---- | M] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | M] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | M] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:38 | 000,458,906 | ---- | M] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | M] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-10 04:25:27 | 000,017,738 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-09 14:25:36 | 003,035,306 | ---- | M] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2013-02-09 11:46:28 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-02-04 10:52:39 | 000,460,855 | ---- | M] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:56:00 | 012,629,031 | ---- | M] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | M] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | M] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | M] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.xtr
[2013-01-28 23:07:55 | 000,281,520 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:31 | 000,280,904 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | M] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | M] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:13:07 | 000,000,180 | ---- | M] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 18:26:45 | 000,001,182 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | M] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | M] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | M] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2013-01-24 20:12:59 | 000,076,888 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
========== Files Created - No Company Name ==========
[2013-02-22 14:07:13 | 000,001,371 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013-02-22 14:06:27 | 000,002,137 | ---- | C] () -- C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
[2013-02-22 14:05:28 | 000,017,738 | ---- | C] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2013-02-22 12:58:39 | 000,199,936 | ---- | C] () -- C:\Users\jeff\Desktop\3Golf.rar
[2013-02-22 11:13:31 | 004,920,600 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2013-02-20 12:24:10 | 000,232,904 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\poclbm121016GeForce GTX 470gv1w256l4.bin
[2013-02-19 13:31:52 | 000,386,577 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2013-02-17 20:28:50 | 000,002,379 | ---- | C] () -- C:\Users\jeff\Documents\MumbleAutomaticCertificateBackup.p12
[2013-02-17 20:26:17 | 000,001,014 | ---- | C] () -- C:\Users\Public\Desktop\Mumble.lnk
[2013-02-16 19:45:05 | 000,001,010 | ---- | C] () -- C:\Users\Public\Desktop\Aliens Colonial Marines.lnk
[2013-02-14 18:44:29 | 000,458,906 | ---- | C] () -- C:\Users\jeff\Documents\WoWScrnShot_021413_184402.jpg
[2013-02-11 16:05:08 | 000,002,080 | ---- | C] () -- C:\Users\Public\Desktop\De Sims™ 3.lnk
[2013-02-04 10:52:39 | 000,460,855 | ---- | C] () -- C:\Users\jeff\Desktop\oberjoch-bad-hindelang_1_l1.jpg
[2013-02-02 20:55:58 | 012,629,031 | ---- | C] () -- C:\Users\jeff\Desktop\ZygorGuidesViewer.rar
[2013-02-01 09:25:00 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\Spotnet.lnk
[2013-01-30 21:02:36 | 000,001,736 | ---- | C] () -- C:\Users\Public\Desktop\Play League of Legends.lnk
[2013-01-29 18:40:00 | 000,001,500 | ---- | C] () -- C:\Users\jeff\Desktop\Skype - Snelkoppeling.lnk
[2013-01-29 16:06:51 | 000,000,808 | ---- | C] () -- C:\Users\jeff\Desktop\Synergy.lnk
[2013-01-28 23:07:59 | 000,281,520 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
[2013-01-28 23:07:35 | 000,280,904 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
[2013-01-27 15:30:45 | 000,000,136 | ---- | C] () -- C:\Users\jeff\Desktop\Age of Empires 3 The WarChiefs - Snelkoppeling.lnk
[2013-01-26 12:55:24 | 000,000,958 | ---- | C] () -- C:\Users\Public\Desktop\Play Firefall.lnk
[2013-01-26 01:48:56 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\ACE COMBAT ASSAULT HORIZON Enhanced Edition.lnk
[2013-01-25 21:08:58 | 000,000,180 | ---- | C] () -- C:\Users\jeff\Documents\systemtransparency.ini
[2013-01-25 18:26:45 | 000,017,720 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\SmartDefragDriver.sys
[2013-01-25 18:26:45 | 000,001,182 | ---- | C] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk
[2013-01-25 18:26:43 | 000,001,189 | ---- | C] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2013-01-25 18:17:35 | 000,001,276 | ---- | C] () -- C:\Users\Public\Desktop\Uninstaller.lnk
[2013-01-25 18:17:35 | 000,001,225 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
[2013-01-25 17:29:22 | 000,002,056 | ---- | C] () -- C:\Users\jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fences.lnk
[2012-12-27 18:03:51 | 003,123,272 | R--- | C] () -- C:\WINDOWS\SysWow64\pbsvc.exe
[2012-11-17 11:20:43 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
[2012-11-02 23:14:16 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
[2012-07-26 09:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2012-07-26 09:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2012-07-26 08:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-07-26 02:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2012-07-25 21:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2012-07-25 21:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2012-06-02 15:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\WINDOWS\SysWow64\xlive.dll.cat
========== ZeroAccess Check ==========
[2013-01-14 19:02:25 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-01-10 00:23:07 | 019,791,360 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-01-10 00:26:23 | 017,560,576 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2013-01-16 20:17:34 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\25Assist
[2013-01-20 00:54:49 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Bioshock2
[2012-11-11 15:20:20 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\BSplayer
[2012-11-06 09:33:19 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\BSplayer Pro
[2013-01-25 20:27:09 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\e-academy Inc
[2013-01-25 18:23:43 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\FileZilla
[2013-01-25 18:26:45 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\IObit
[2013-01-31 12:46:47 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\LolClient
[2013-02-17 20:28:56 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Mumble
[2012-11-05 18:04:52 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\MySQL
[2012-11-05 17:28:56 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\NetBeans
[2012-11-30 21:10:33 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Origin
[2013-02-10 20:51:04 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\puush
[2013-01-19 21:03:31 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Rockstar Games
[2013-02-23 15:02:07 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Spotify
[2012-12-23 18:18:35 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\Stardock
[2013-02-20 18:39:53 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\SystemRequirementsLab
[2013-02-20 12:39:51 | 000,000,000 | ---D | M] -- C:\Users\jeff\AppData\Roaming\uTorrent
========== Purity Check ==========
< End of report >
#6
Posted 23 February 2013 - 09:14 AM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
How is the computer running now ?
Malwarebytes' Anti-Malware
Please download Malwarebytes' Anti-Malware from Here or Here
Double Click mbam-setup.exe to install the application.
Malwarebytes' Anti-Malware
Please download Malwarebytes' Anti-Malware from Here or Here
Double Click mbam-setup.exe to install the application.
- Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select "Perform Quick Scan", then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy&Paste the entire report in your next reply.
#7
Posted 23 February 2013 - 10:46 AM
jeffNL
- Topic Starter
-
- Member
-
- 5 posts
New Member
Malwarebytes Anti-Malware (-evaluatieversie-) 1.70.0.1100
www.malwarebytes.org
Databaseversie: v2013.02.23.06
Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16484
jeff :: JEFF-PC [administrator]
Bescherming: Ingeschakeld
23-2-2013 17:43:20
mbam-log-2013-02-23 (17-43-20).txt
Scan type: Snelle scan
Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scan opties: P2P
Objecten gescand: 230082
Verstreken tijd: 49 seconde(n)
Geheugenprocessen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels gedetecteerd: 1
HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> Succesvol in quarantaine geplaatst en verwijderd.
Registerwaarden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerdata gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Bestanden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
(einde)
www.malwarebytes.org
Databaseversie: v2013.02.23.06
Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16484
jeff :: JEFF-PC [administrator]
Bescherming: Ingeschakeld
23-2-2013 17:43:20
mbam-log-2013-02-23 (17-43-20).txt
Scan type: Snelle scan
Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scan opties: P2P
Objecten gescand: 230082
Verstreken tijd: 49 seconde(n)
Geheugenprocessen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels gedetecteerd: 1
HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> Succesvol in quarantaine geplaatst en verwijderd.
Registerwaarden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerdata gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Bestanden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
(einde)
#8
Posted 23 February 2013 - 10:57 AM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
Is the computer running OK now ?
#9
Posted 23 February 2013 - 11:10 AM
jeffNL
- Topic Starter
-
- Member
-
- 5 posts
New Member
jep! the process isn't showing up! Speed is back to normal! thank you very much!
#10
Posted 23 February 2013 - 11:30 AM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
Subject to no further problems 
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean
A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:
Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.
We will now confirm that your hidden files are set to that, as some of the tools I use will change that
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
Malwarebytes.
Update and run weekly to keep your system clean
Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
If you use on-line banking then as an added layer of protection install Trusteer Rapport
It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?Keep safe
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean
A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:
Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.
We will now confirm that your hidden files are set to that, as some of the tools I use will change that
- Click Start.
- Open My Computer.
- Select the Tools menu and click Folder Options.
- Select the View Tab.
- Under the Hidden files and folders heading select Do not show hidden files and folders.
- Click Yes to confirm.
- Click OK.
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
Malwarebytes. Update and run weekly to keep your system clean
Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
If you use on-line banking then as an added layer of protection install Trusteer Rapport
It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?Keep safe
#11
Posted 26 February 2013 - 11:48 AM
Essexboy
-
- Retired Staff
-
- 69,964 posts
GeekU Moderator
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:
Sign In
Create Account
