Heres OTL log
OTL logfile created on: 4/2/2013 19:34:37 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Home\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.75 Gb Total Physical Memory | 1.79 Gb Available Physical Memory | 47.77% Memory free
5.50 Gb Paging File | 3.10 Gb Available in Paging File | 56.45% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 316.60 Gb Total Space | 3.11 Gb Free Space | 0.98% Space Free | Partition Type: NTFS
Drive E: | 465.76 Gb Total Space | 442.17 Gb Free Space | 94.94% Space Free | Partition Type: NTFS
Computer Name: TOUCH-PC | User Name: Home | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/04/02 12:45:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Home\Desktop\OTL.exe
PRC - [2013/03/12 02:05:50 | 029,106,336 | ---- | M] (Dropbox, Inc.) -- C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2013/02/26 07:23:13 | 003,560,800 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013/02/14 17:24:45 | 000,213,384 | ---- | M] (Google Inc.) -- C:\Users\Home\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe
PRC - [2013/01/21 03:31:06 | 001,251,064 | ---- | M] (Bogdan Sharkov) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
PRC - [2012/12/14 17:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/12/14 17:49:28 | 000,512,360 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/12/14 17:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012/12/10 18:29:46 | 002,254,768 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012/11/21 05:32:28 | 004,074,600 | ---- | M] (Initex) -- C:\Program Files (x86)\Proxifier\Proxifier.exe
PRC - [2012/10/02 17:21:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012/10/02 14:15:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012/07/24 15:32:10 | 000,404,848 | ---- | M] (AnchorFree Inc.) -- C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
PRC - [2012/07/24 15:28:22 | 000,387,440 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
PRC - [2012/07/24 15:26:42 | 000,474,992 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
PRC - [2012/05/03 09:56:10 | 033,837,056 | ---- | M] (Skype Technologies S.A.) -- C:\Users\Home\Desktop\All\ProjSkype\skype55_59_deobfuscated\skype59_patched.exe
PRC - [2012/04/17 10:19:40 | 003,671,872 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2011/05/05 15:05:19 | 000,273,544 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2011/01/30 11:23:40 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
PRC - [2010/12/01 09:26:40 | 000,574,216 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManager.exe
PRC - [2010/11/20 07:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
PRC - [2010/03/23 13:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
PRC - [2010/01/07 17:11:28 | 000,140,520 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009/03/05 16:07:20 | 002,260,480 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2008/10/14 22:38:56 | 000,623,992 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
PRC - [2008/05/27 23:17:49 | 000,003,584 | ---- | M] () -- C:\Users\Home\Downloads\SmitfraudFix\Policies.exe
PRC - [2008/05/24 15:02:50 | 000,417,792 | ---- | M] () -- C:\Program Files (x86)\Icecast2 Win32\icecastService.exe
========== Modules (No Company Name) ==========
MOD - [2013/03/21 17:50:33 | 000,390,096 | ---- | M] () -- C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
MOD - [2013/03/21 17:50:31 | 004,050,896 | ---- | M] () -- C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\pdf.dll
MOD - [2013/03/21 17:49:41 | 000,598,480 | ---- | M] () -- C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\libglesv2.dll
MOD - [2013/03/21 17:49:40 | 000,124,368 | ---- | M] () -- C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\libegl.dll
MOD - [2013/03/21 17:49:38 | 001,606,096 | ---- | M] () -- C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\ffmpegsumo.dll
MOD - [2012/11/22 19:57:06 | 000,056,424 | ---- | M] () -- C:\Windows\SysWOW64\PrxerNsp.dll
MOD - [2012/04/05 01:14:26 | 000,469,880 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\cximagecrt.dll
MOD - [2012/01/08 08:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2011/09/14 06:13:48 | 001,437,184 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_imgproc220.dll
MOD - [2011/09/14 06:13:04 | 002,128,384 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_core220.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/01/26 11:37:42 | 003,622,128 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\plugin\libbizlplugin.dll
MOD - [2010/12/01 09:26:38 | 000,195,584 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
MOD - [2010/12/01 09:26:36 | 000,400,384 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
MOD - [2010/12/01 09:26:36 | 000,375,808 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
MOD - [2010/12/01 09:26:36 | 000,322,048 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
MOD - [2010/12/01 09:26:36 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
MOD - [2010/12/01 09:26:35 | 002,452,992 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
MOD - [2010/12/01 09:26:35 | 001,008,640 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
MOD - [2010/12/01 09:26:34 | 000,062,464 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
MOD - [2008/05/27 23:17:49 | 000,003,584 | ---- | M] () -- C:\Users\Home\Downloads\SmitfraudFix\Policies.exe
========== Services (SafeList) ==========
SRV:64bit: - [2012/08/13 01:54:06 | 000,141,464 | ---- | M] (BiniSoft.org) [Auto | Running] -- C:\Program Files\Windows Firewall Control\wfcs.exe -- (wfcs)
SRV:64bit: - [2012/06/17 02:52:14 | 000,098,576 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV:64bit: - [2011/10/12 04:55:12 | 005,739,008 | ---- | M] (Native Instruments GmbH) [Auto | Running] -- C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
SRV:64bit: - [2009/07/13 20:39:47 | 000,081,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tlntsvr.exe -- (TlntSvr)
SRV:64bit: - [2007/11/07 09:11:22 | 004,466,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)
SRV - [2013/03/12 23:36:08 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/03/08 01:04:51 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/02/26 07:23:13 | 003,560,800 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2012/12/14 17:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/12/14 17:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/12/10 18:29:46 | 002,465,712 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012/10/02 17:21:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/10/02 14:15:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012/09/25 15:23:44 | 000,743,320 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2012/07/24 15:36:22 | 000,078,072 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.exe -- (HssTrayService)
SRV - [2012/07/24 15:32:10 | 000,404,848 | ---- | M] (AnchorFree Inc.) [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe -- (HssSrv)
SRV - [2012/07/24 15:28:22 | 000,387,440 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe -- (HssWd)
SRV - [2012/07/24 15:26:42 | 000,474,992 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe -- (hshld)
SRV - [2012/07/09 01:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2012/04/22 22:21:25 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011/09/26 12:17:16 | 009,665,536 | ---- | M] () [Auto | Stopped] -- c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe -- (wampmysqld)
SRV - [2011/09/26 12:06:54 | 000,021,504 | ---- | M] (Apache Software Foundation) [Auto | Stopped] -- c:\wamp\bin\apache\Apache2.2.21\bin\httpd.exe -- (wampapache)
SRV - [2011/01/30 11:23:40 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/23 13:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/05/24 15:02:50 | 000,417,792 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Icecast2 Win32\icecastService.exe -- (Icecast-trunk)
SRV - [1998/06/06 01:00:00 | 000,034,036 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\VARPC.EXE -- (Visual Studio Analyzer RPC bridge)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2013/02/06 16:28:46 | 000,221,720 | ---- | M] (QFX Software Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\keyscrambler.sys -- (KeyScrambler)
DRV:64bit: - [2013/01/04 22:48:36 | 000,042,328 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)
DRV:64bit: - [2012/12/16 02:59:22 | 000,101,376 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
DRV:64bit: - [2012/12/14 17:49:28 | 000,024,176 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/10/04 14:29:24 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2012/09/25 14:57:09 | 000,021,608 | ---- | M] (TamoSoft) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cv2k1.sys -- (CV2K1)
DRV:64bit: - [2012/09/24 17:41:35 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012/07/24 15:11:54 | 000,041,704 | ---- | M] (AnchorFree Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\hssdrv6.sys -- (HssDRV6)
DRV:64bit: - [2012/07/24 15:11:52 | 000,038,632 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2012/07/15 12:48:16 | 000,030,720 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tapoas.sys -- (tapoas)
DRV:64bit: - [2012/06/27 16:22:55 | 000,026,256 | ---- | M] (TamoSoft) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tsvp.sys -- (TsVp)
DRV:64bit: - [2012/06/17 02:52:12 | 000,166,576 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV:64bit: - [2012/06/04 16:16:36 | 000,067,368 | ---- | M] (Mozy, Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mozy.sys -- (mozyFilter)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/22 05:34:36 | 000,028,160 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2012/01/11 01:11:20 | 000,034,304 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcvidrv_x64.sys -- (ManyCam)
DRV:64bit: - [2011/12/15 12:29:42 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:64bit: - [2011/05/10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/09/22 14:19:02 | 000,056,832 | ---- | M] (AnchorFree Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HssDrv.sys -- (HssDrv)
DRV:64bit: - [2010/07/01 14:21:50 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc)
DRV:64bit: - [2010/04/21 15:14:04 | 000,022,120 | ---- | M] (TamoSoft) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsvlb.sys -- (TsVlb)
DRV:64bit: - [2010/03/23 13:29:46 | 000,304,784 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV:64bit: - [2010/02/08 08:32:00 | 000,014,992 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CVirtA64.sys -- (CVirtA)
DRV:64bit: - [2009/09/16 08:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 19:09:10 | 000,007,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\loop.sys -- (msloop)
DRV:64bit: - [2009/07/08 00:45:50 | 002,769,400 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/06/05 01:47:48 | 000,028,192 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvamacpi.sys -- (nvamacpi)
DRV:64bit: - [2009/05/18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/03/18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2008/12/26 12:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vcsvad.sys -- (VCSVADHWSer)
DRV:64bit: - [2008/11/16 18:39:44 | 000,157,968 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dne64x.sys -- (DNE)
DRV - [2010/01/07 17:11:30 | 000,146,928 | ---- | M] (CyberLink Corp.) [2011/03/14 10:08:56] [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD DX\000.fcl -- ({1E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7})
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2006/09/14 01:21:54 | 000,002,240 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\LENDIG.sys -- (LENDIG)
DRV - [1998/05/07 01:00:00 | 000,000,111 | ---- | M] () [Adapter | On_Demand | Unknown] -- C:\Windows\SysWow64\WINSOCK.SRG -- (Winsock)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,DefaultNetworkProfile = 9221036
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 30 9F 07 0C 59 2C CD 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope = {FA00F2F0-1C38-4D44-BE4F-42BE62E794AF}
IE - HKCU\..\SearchScopes\{4260182C-53DC-5177-430F-D0D732B41839}: "URL" = http://ib.startnow.c...eferrer:source}
IE - HKCU\..\SearchScopes\{65C466CC-786F-414C-AC05-DC95D5A03175}: "URL" = http://www.google.co...ie=utf8&oe=utf8
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...arcSearchScopes
IE - HKCU\..\SearchScopes\{83B5DC4E-8B4C-4CD3-A48A-5FD9F95CC34F}: "URL" = http://websearch.ask...4A-971987119EA4
IE - HKCU\..\SearchScopes\{C138E836-7A11-45FB-BFBC-6E8DA804570A}: "URL" = http://ws.infospace....r?_iceUrl=true user_id=%userid&tool_id=60231&qkw={searchTerms}
IE - HKCU\..\SearchScopes\{FA00F2F0-1C38-4D44-BE4F-42BE62E794AF}: "URL" = http://searchou.com/...f6d68bda8&r=783
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=;ftp=;https=;
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultenginename,S: S", ""
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1,S: S", ""
FF - prefs.js..browser.search.selectedEngine,S: S", ""
FF - prefs.js..browser.startup.homepage: "http://searchou.com/...0000ff6d68bda8"
FF - prefs.js..extensions.enabledAddons: afurladvisor%40anchorfree.com:1.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - prefs.js..keyword.URL: "http://searchou.com/...0000ff6d68bda8"
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.2.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.2.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.647: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.647: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\Windows\Downloaded Program Files\npsoe.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Home\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll File not found
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Home\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Home\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Home\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Home\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Home\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Home\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/08/09 20:30:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/03/08 01:04:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/03/08 01:04:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
[2012/03/25 10:24:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Home\AppData\Roaming\mozilla\Extensions
[2011/01/31 22:27:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Home\AppData\Roaming\mozilla\Firefox\extensions
[2011/01/31 22:27:59 | 000,000,000 | ---D | M] (XfireXO) -- C:\Users\Home\AppData\Roaming\mozilla\Firefox\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
[2013/04/02 12:31:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Home\AppData\Roaming\mozilla\Firefox\Profiles\l18miaid.default\extensions
[2012/11/27 20:36:01 | 000,000,000 | ---D | M] (WindowShopper) -- C:\Users\Home\AppData\Roaming\mozilla\Firefox\Profiles\l18miaid.default\extensions\superfish@superfish.com
[2013/02/16 06:26:57 | 000,204,940 | ---- | M] () (No name found) -- C:\Users\Home\AppData\Roaming\mozilla\firefox\profiles\l18miaid.default\extensions\OneClickDownload@OneClickDownload.com.xpi
[2012/04/15 16:55:32 | 000,004,546 | ---- | M] () (No name found) -- C:\Users\Home\AppData\Roaming\mozilla\firefox\profiles\l18miaid.default\extensions\support@super-hide-ip.com.xpi
[2013/04/01 19:51:08 | 000,001,378 | ---- | M] () -- C:\Users\Home\AppData\Roaming\mozilla\firefox\profiles\l18miaid.default\searchplugins\privitize.xml
[2013/03/08 01:04:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/03/08 01:04:41 | 000,000,000 | ---D | M] (Hotspot Shield Helper (Please allow this installation)) -- C:\Program Files (x86)\Mozilla Firefox\extensions\afurladvisor@anchorfree.com
[2013/03/08 01:04:52 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/06/28 10:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2012/07/08 00:02:24 | 000,003,659 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/09/06 16:37:53 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/05/24 18:41:10 | 000,001,847 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\privatesearch.xml
[2013/02/20 06:47:14 | 000,002,086 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
========== Chrome ==========
CHR - default_search_provider: Search The Web (privitize) (Enabled)
CHR - default_search_provider: search_url = http://searchou.com/...00000ff6d68bda8
CHR - default_search_provider: suggest_url =
CHR - homepage: https://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Home\AppData\Local\Google\Chrome\Application\26.0.1410.43\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Browser\nppdf32.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Home\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Home\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\Home\AppData\Roaming\Mozilla\plugins\npo1d.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Java Platform SE 7 U5 (Enabled) = C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
CHR - plugin: RealNetworks RealPlayer Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: RealPlayer HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Home\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Free Realms Installer (Enabled) = C:\Windows\Downloaded Program Files\npsoe.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll
CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10516.0\npctrl.dll
CHR - Extension: Adblock Plus = C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4_0\
CHR - Extension: Crackle = C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibfamoapbmmmlknoopmmfofgladlinic\7.1.7_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.4_0\
CHR - Extension: Abstract-Blue = C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa\1.0_0\
O1 HOSTS File: ([2013/04/02 12:23:58 | 000,444,852 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 www.123fporn.info
O1 - Hosts: 15276 more lines...
O2:64bit: - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll File not found
O2:64bit: - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll (AnchorFree Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (privitize Helper Object) - {1ACB5ABE-4890-4747-952C-F13BDB93FB75} - C:\Program Files (x86)\Industriya\privitize\1.8.16.22\bh\privitize.dll (Industriya LLC)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - No CLSID value found.
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Panopreter Toolbar) - {4ED07CEF-6970-48F6-A457-BC93B0C6BB46} - C:\Program Files (x86)\Panopreter Plus\IEToolbar.dll (Panopreter.com)
O3 - HKLM\..\Toolbar: (no name) - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30AA252E-B1DF-4AA2-9C5E-194C67A7C623} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Ad-Aware Antivirus] "C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareLauncher" --windows-run File not found
O4 - HKLM..\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe" File not found
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui File not found
O4 - HKLM..\Run: [DATAMNGR] C:\PROGRA~2\WI3C8A~1\Datamngr\DATAMN~1.EXE File not found
O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManager.lnk ()
O4 - HKLM..\Run: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe (QFX Software Corporation)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe" File not found
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [Clownfish] C:\Program Files (x86)\Clownfish\Clownfish.exe (Bogdan Sharkov)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Proxifier] c:\program files (x86)\proxifier\proxifier.exe (Initex)
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O4 - HKCU..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun File not found
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [Tango] C:\Program Files (x86)\Tango\Tango.exe -r File not found
O4 - HKCU..\Run: [uTorrent] C:\Users\Home\Downloads\uTorrent.exe (BitTorrent, Inc.)
O4 - HKLM..\RunOnce: [RunOnceEx] C:\Windows\SysWow64\iernonce.dll (Microsoft Corporation)
O4 - HKLM..\RunOnce\Setup: [Configuring Data Access Components] C:\Windows\SysWOW64\odbcconf.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Home\Documents\Startup\Dropbox.lnk = C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert selected links to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert selection to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Download with &Media Finder - Reg Error: Value error. File not found
O8 - Extra context menu item: Append to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Download with &Media Finder - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Windows\SysNative\PrxerNsp.dll ()
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\PrxerDrv.dll (Initex)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\PrxerDrv.dll (Initex)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\PrxerDrv.dll (Initex)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\PrxerDrv.dll (Initex)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000015 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000016 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000017 - C:\Windows\SysNative\PrxerDrv.dll (Initex)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Windows\SysWOW64\PrxerNsp.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\PrxerDrv.dll (Initex)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\PrxerDrv.dll (Initex)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\PrxerDrv.dll (Initex)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\PrxerDrv.dll (Initex)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWOW64\PrxerDrv.dll (Initex)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_02)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {38AB6A6C-CC4C-4F9E-A3DD-3C5681EF18A1} http://www-cdn.freer...ller.cab?v=1054 (SonyOnlineInstallerX)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} https://a248.e.akama...vex-2.2.5.7.cab (DLM Control)
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} http://support.dell....r/SysProExe.CAB (WMI Class)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} Reg Error: Value error. (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} Reg Error: Value error. (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Reg Error: Value error. (Java Plug-in 10.5.1)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.syste...ri_4.4.21.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6D68BDA8-556C-4F96-B5C2-C69D3E49446C}: DhcpNameServer = 10.2.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{78B3C496-7BF3-40B9-B0D9-216202DEA90E}: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7F1685DD-9669-4EBA-ADD2-120338D4DA6B}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A7B971B5-A392-424F-85A9-FE0BFDB94422}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D3EABA83-73B3-49EA-BFB3-27EA048C2BD6}: DhcpNameServer = 8.8.8.8
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\WI3C8A~1\Datamngr\x64\datamngr.dll) - File not found
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\System Files 32\winupdate.exe) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\WB: DllName - (C:\PROGRA~2\Stardock\OBJECT~1\WINDOW~1\fast64.dll) - File not found
O20 - Winlogon\Notify\WB: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/04/06 08:16:25 | 000,000,000 | ---D | M] - E:\autorun -- [ NTFS ]
O33 - MountPoints2\{236c7d27-415a-11e1-80bb-ef95088a48f7}\Shell - "" = AutoRun
O33 - MountPoints2\{236c7d27-415a-11e1-80bb-ef95088a48f7}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{37908492-9678-11e2-ae53-cf51464323d9}\Shell - "" = AutoRun
O33 - MountPoints2\{37908492-9678-11e2-ae53-cf51464323d9}\Shell\AutoRun\command - "" = E:\setup.exe -a
O33 - MountPoints2\{42092d41-063f-11e2-a3b9-b5ccdc1b4aa4}\Shell - "" = AutoRun
O33 - MountPoints2\{42092d41-063f-11e2-a3b9-b5ccdc1b4aa4}\Shell\AutoRun\command - "" = G:\setup.exe
O33 - MountPoints2\{a0a3156c-fa8a-11e1-b41c-00160f10903f}\Shell - "" = AutoRun
O33 - MountPoints2\{a0a3156c-fa8a-11e1-b41c-00160f10903f}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\Setup.exe
O33 - MountPoints2\{e80f1912-66db-11e1-99b7-cea52c0380ee}\Shell - "" = AutoRun
O33 - MountPoints2\{e80f1912-66db-11e1-99b7-cea52c0380ee}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\setup.hta
O33 - MountPoints2\{e80f19d5-66db-11e1-99b7-cea52c0380ee}\Shell - "" = AutoRun
O33 - MountPoints2\{e80f19d5-66db-11e1-99b7-cea52c0380ee}\Shell\AutoRun\command - "" = G:\SETUP.EXE
O33 - MountPoints2\{e80f19d8-66db-11e1-99b7-cea52c0380ee}\Shell - "" = AutoRun
O33 - MountPoints2\{e80f19d8-66db-11e1-99b7-cea52c0380ee}\Shell\AutoRun\command - "" = H:\Setup.exe
O33 - MountPoints2\{e80f19d8-66db-11e1-99b7-cea52c0380ee}\Shell\setup\command - "" = H:\setup.exe
O33 - MountPoints2\{ef1223b6-f5d5-11e1-9821-cbb7b9ee24a6}\Shell - "" = AutoRun
O33 - MountPoints2\{ef1223b6-f5d5-11e1-9821-cbb7b9ee24a6}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013/04/02 19:30:45 | 000,289,144 | ---- | C] (S!Ri) -- C:\Windows\SysWow64\VCCLSID.exe
[2013/04/02 19:30:45 | 000,288,417 | ---- | C] (S!Ri) -- C:\Windows\SysWow64\SrchSTS.exe
[2013/04/02 19:30:45 | 000,135,168 | ---- | C] (SteelWerX) -- C:\Windows\SysWow64\swreg.exe
[2013/04/02 19:30:45 | 000,087,552 | ---- | C] (S!Ri.URZ) -- C:\Windows\SysWow64\VACFix.exe
[2013/04/02 19:30:45 | 000,082,944 | ---- | C] (S!Ri.URZ) -- C:\Windows\SysWow64\IEDFix.exe
[2013/04/02 19:30:45 | 000,082,944 | ---- | C] (S!Ri.URZ) -- C:\Windows\SysWow64\IEDFix.C.exe
[2013/04/02 19:30:45 | 000,082,432 | ---- | C] (S!Ri.URZ) -- C:\Windows\SysWow64\404Fix.exe
[2013/04/02 19:30:45 | 000,080,384 | ---- | C] (S!Ri.URZ) -- C:\Windows\SysWow64\o4Patch.exe
[2013/04/02 19:30:45 | 000,079,360 | ---- | C] (SteelWerX) -- C:\Windows\SysWow64\swxcacls.exe
[2013/04/02 19:30:45 | 000,078,336 | ---- | C] (S!Ri.URZ) -- C:\Windows\SysWow64\Agent.OMZ.Fix.exe
[2013/04/02 19:30:45 | 000,053,248 | ---- | C] (http://www.beyondlogic.org) -- C:\Windows\SysWow64\Process.exe
[2013/04/02 13:12:36 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Local\ElevatedDiagnostics
[2013/04/02 12:45:23 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Home\Desktop\OTL.exe
[2013/04/02 12:26:40 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013/04/02 12:26:26 | 000,000,000 | ---D | C] -- C:\JRT
[2013/04/02 02:09:41 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013/04/02 01:57:32 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\rkill
[2013/04/01 22:49:25 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\RK_Quarantine
[2013/04/01 19:50:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Industriya
[2013/04/01 19:50:23 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Roaming\Industriya
[2013/03/31 15:22:32 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\website
[2013/03/28 18:14:25 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\dnb [bleep]
[2013/03/26 00:46:33 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\Zephex
[2013/03/24 04:23:28 | 000,000,000 | ---D | C] -- C:\[bleep]
[2013/03/24 04:00:47 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Roaming\gnupg
[2013/03/24 04:00:45 | 000,000,000 | ---D | C] -- C:\ProgramData\GNU
[2013/03/24 03:41:39 | 000,231,376 | ---- | C] (TrueCrypt Foundation) -- C:\Windows\SysNative\drivers\truecrypt.sys
[2013/03/21 22:49:15 | 000,000,000 | ---D | C] -- C:\Cookiesvampirefreaks.com
[2013/03/21 20:53:55 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\test
[2013/03/20 23:27:17 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\AESIS OpenSrc
[2013/03/20 21:34:50 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Local\VPNium
[2013/03/20 21:34:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VPNium
[2013/03/20 21:34:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VPNium
[2013/03/16 01:45:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOVE
[2013/03/16 01:45:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LOVE
[2013/03/15 23:54:29 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\My RAT
[2013/03/15 04:58:38 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Roaming\Process Hacker 2
[2013/03/15 04:57:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Hacker 2
[2013/03/15 04:57:27 | 000,000,000 | ---D | C] -- C:\Program Files\Process Hacker 2
[2013/03/15 04:56:18 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Roaming\QFX Software
[2013/03/15 04:56:18 | 000,000,000 | ---D | C] -- C:\ProgramData\QFX Software
[2013/03/15 04:56:13 | 000,221,720 | ---- | C] (QFX Software Corporation) -- C:\Windows\SysNative\drivers\keyscrambler.sys
[2013/03/15 04:56:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyScrambler
[2013/03/15 04:56:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KeyScrambler
[2013/03/15 04:20:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Remover
[2013/03/15 04:20:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PhrozenSoft
[2013/03/15 04:20:01 | 000,000,000 | ---D | C] -- C:\Users\Home\Documents\darkcomet remover
[2013/03/15 00:24:45 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Roaming\aPjaReoYXLwYuHVDUG
[2013/03/14 22:19:16 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\HSSS
[2013/03/14 22:09:36 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Roaming\X-Chat 2
[2013/03/14 22:09:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XChat
[2013/03/14 22:09:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\xchat
[2013/03/14 22:06:44 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Roaming\Hotspot Shield
[2013/03/13 22:54:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Hide IP
[2013/03/13 22:54:35 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\Super Hide IP v3.0.6.8 + Crack [broadway24™]
[2013/03/13 22:23:40 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Local\join.me
[2013/03/13 03:03:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/03/13 03:03:01 | 000,000,000 | -HSD | C] -- C:\Windows\SysNative\%APPDATA%
[2013/03/13 03:02:22 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2013/03/13 03:02:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2013/03/12 02:50:29 | 000,000,000 | ---D | C] -- C:\Users\Home\AppData\Local\Garena
[2013/03/09 01:56:14 | 000,000,000 | ---D | C] -- C:\ProgramData\{E26B3878-7CEC-469C-B449-5CAA336DF8CD}
[2013/03/09 01:55:11 | 000,000,000 | ---D | C] -- C:\ProgramData\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
[2013/03/09 00:35:11 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\Massive 1.3 Sounds
[2013/03/08 01:04:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013/03/06 13:53:38 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\Vengeance.Essential.Dubstep.Vol.1.WAV-Samples
[2013/03/03 23:33:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Web Tools
[2013/03/03 23:32:11 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2013/03/03 23:31:47 | 000,000,000 | ---D | C] -- C:\Program Files\IIS Express
[2013/03/03 23:31:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IIS Express
[2013/03/03 23:28:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WCF Data Services
[2013/03/03 23:23:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Kits
[2013/03/03 23:02:35 | 000,000,000 | ---D | C] -- C:\Users\Home\Desktop\Console Biased Tools
[2013/03/03 23:00:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Help Viewer
[2013/03/03 22:15:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
[2013/03/03 22:14:50 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 11.0
[2012/08/07 21:45:27 | 016,956,856 | ---- | C] (PremiumSoft CyberTech Ltd. ) -- C:\Users\Home\AppData\Roaming\navicat100_mysql_en.exe
[5 C:\Users\Home\*.tmp files -> C:\Users\Home\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/04/02 19:35:02 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/04/02 19:34:34 | 000,003,624 | ---- | M] () -- C:\Windows\SysWow64\tmp.reg
[2013/04/02 19:32:45 | 000,000,035 | ---- | M] () -- C:\Users\Home\AppData\Roaming\SetValue.bat
[2013/04/02 19:32:44 | 000,000,691 | ---- | M] () -- C:\Users\Home\AppData\Roaming\GetValue.vbs
[2013/04/02 19:30:05 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3394970204-3036101845-2700764691-1001UA.job
[2013/04/02 19:23:29 | 000,000,366 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Home.job
[2013/04/02 19:14:02 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/04/02 19:14:02 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/04/02 19:13:01 | 002,309,838 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/04/02 19:13:01 | 000,681,524 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/04/02 19:13:01 | 000,006,672 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/04/02 19:09:49 | 000,000,362 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateXML_Home.job
[2013/04/02 19:09:47 | 000,000,372 | ---- | M] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Home.job
[2013/04/02 19:09:40 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/04/02 19:05:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/04/02 19:05:38 | 3019,296,768 | -HS- | M] () -- C:\hiberfil.sys
[2013/04/02 17:59:54 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2013/04/02 17:59:54 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2013/04/02 17:51:40 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/04/02 12:45:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Home\Desktop\OTL.exe
[2013/04/02 12:23:58 | 000,444,852 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013/04/02 01:00:01 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3394970204-3036101845-2700764691-1001UA.job
[2013/04/02 01:00:01 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3394970204-3036101845-2700764691-1001Core.job
[2013/04/01 22:51:10 | 000,001,016 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20130402-122357.backup
[2013/04/01 20:58:42 | 000,021,359 | ---- | M] () -- C:\Users\Home\Documents\Wolfattackrecords.png
[2013/04/01 20:58:41 | 000,000,132 | ---- | M] () -- C:\Users\Home\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2013/04/01 20:58:34 | 000,242,826 | ---- | M] () -- C:\Users\Home\Documents\Wolfattackrecords.psd
[2013/04/01 16:30:00 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3394970204-3036101845-2700764691-1001Core.job
[2013/04/01 16:02:01 | 001,275,737 | ---- | M] () -- C:\Users\Home\Desktop\839B5198-962A-448A-A7E4-BCCCE28103B9.jpg
[2013/03/29 18:42:02 | 000,002,952 | ---- | M] () -- C:\Windows\Sandboxie.ini
[2013/03/29 11:45:50 | 006,488,710 | ---- | M] () -- C:\Users\Home\Desktop\Synchronize 2.mp3
[2013/03/28 12:08:08 | 006,488,710 | ---- | M] () -- C:\Users\Home\Desktop\Synchronize.mp3
[2013/03/28 12:00:08 | 000,356,680 | ---- | M] () -- C:\Users\Home\Desktop\bassstorm.png
[2013/03/28 12:00:02 | 003,059,727 | ---- | M] () -- C:\Users\Home\Desktop\bassstorm.psd
[2013/03/26 19:54:43 | 000,001,062 | ---- | M] () -- C:\Users\Home\Documents\Startup\Dropbox.lnk
[2013/03/25 00:49:01 | 000,000,065 | ---- | M] () -- C:\Users\Home\Desktop\config.ini
[2013/03/25 00:46:13 | 000,379,655 | ---- | M] () -- C:\Users\Home\Desktop\beard.exe
[2013/03/24 03:41:39 | 000,231,376 | ---- | M] (TrueCrypt Foundation) -- C:\Windows\SysNative\drivers\truecrypt.sys
[2013/03/23 23:54:01 | 000,073,020 | ---- | M] () -- C:\Users\Home\Desktop\ANIME.psd
[2013/03/22 23:11:52 | 002,735,553 | ---- | M] () -- C:\Users\Home\Desktop\Chiefkeef.psd
[2013/03/22 21:57:33 | 003,132,550 | ---- | M] () -- C:\Users\Home\Desktop\TradgiK & SOTW 2013 DnB Mix.mp3
[2013/03/22 05:51:55 | 000,000,001 | ---- | M] () -- C:\Users\Home\random.dat
[2013/03/22 05:46:52 | 000,000,043 | ---- | M] () -- C:\Users\Home\jagex_cl_runescape_LIVE.dat
[2013/03/22 02:58:59 | 005,090,576 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/03/22 00:27:19 | 000,014,914 | ---- | M] () -- C:\Users\Home\Desktop\derp.php
[2013/03/22 00:05:18 | 000,101,416 | ---- | M] () -- C:\Users\Home\Desktop\MyriadPro-SemiboldIt.otf
[2013/03/21 15:10:50 | 000,024,779 | ---- | M] () -- C:\Users\Home\Documents\IMG_21032013_151205.png
[2013/03/21 03:00:06 | 000,059,125 | ---- | M] () -- C:\Users\Home\Documents\asian.jpg
[2013/03/21 02:36:22 | 000,001,885 | ---- | M] () -- C:\Users\Home\Desktop\Process Hacker 2.lnk
[2013/03/20 21:34:38 | 000,000,983 | ---- | M] () -- C:\Users\Home\Desktop\VPNium.lnk
[2013/03/16 01:45:14 | 000,000,955 | ---- | M] () -- C:\Users\Home\Desktop\LOVE.lnk
[2013/03/16 00:17:26 | 000,271,872 | ---- | M] (The UPX Team http://upx.sf.net) -- C:\Windows\SysWow64\upx.exe
[2013/03/16 00:02:29 | 000,235,056 | ---- | M] () -- C:\Windows\Discon.wav
[2013/03/16 00:02:29 | 000,087,600 | ---- | M] () -- C:\Windows\comp.wav
[2013/03/16 00:02:29 | 000,068,016 | ---- | M] () -- C:\Windows\Growl.wav
[2013/03/16 00:02:29 | 000,032,304 | ---- | M] () -- C:\Windows\broke.wav
[2013/03/16 00:02:28 | 002,014,348 | ---- | M] () -- C:\Windows\op.wav
[2013/03/16 00:02:28 | 000,412,672 | ---- | M] (JB) -- C:\Windows\SysWow64\vbskpro.ocx
[2013/03/15 04:20:39 | 000,001,178 | ---- | M] () -- C:\Users\Public\Desktop\DarkComet Remover.lnk
[2013/03/14 23:18:40 | 000,001,150 | ---- | M] () -- C:\Users\Public\Desktop\Hotspot Shield Launch.lnk
[2013/03/14 22:09:35 | 000,001,833 | ---- | M] () -- C:\Users\Home\Desktop\XChat.lnk
[2013/03/13 22:54:54 | 000,001,047 | ---- | M] () -- C:\Users\Public\Desktop\Super Hide IP.lnk
[2013/03/13 22:23:40 | 000,001,061 | ---- | M] () -- C:\Users\Home\Desktop\join.me.lnk
[2013/03/13 18:17:03 | 000,000,142 | ---- | M] () -- C:\Users\Home\Desktop\SkypeProxySettings.reg
[2013/03/12 21:09:53 | 000,000,137 | ---- | M] () -- C:\Users\Home\Desktop\SkypeRemoveProxy.reg
[2013/03/10 03:44:40 | 000,000,000 | ---- | M] () -- C:\Users\Home\Documents\ts3_clientui-win32-1351504843-2013-03-10 03_44_40.133000.dmp
[2013/03/09 01:56:11 | 000,001,020 | ---- | M] () -- C:\Users\Public\Desktop\Massive.lnk
[2013/03/09 01:55:08 | 000,001,059 | ---- | M] () -- C:\Users\Public\Desktop\Service Center.lnk
[2013/03/03 22:54:57 | 000,207,766 | ---- | M] () -- C:\Users\Home\AppData\Local\debuggee.mdmp
[5 C:\Users\Home\*.tmp files -> C:\Users\Home\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/04/02 19:32:45 | 000,000,035 | ---- | C] () -- C:\Users\Home\AppData\Roaming\SetValue.bat
[2013/04/02 19:32:44 | 000,000,691 | ---- | C] () -- C:\Users\Home\AppData\Roaming\GetValue.vbs
[2013/04/02 19:31:02 | 000,003,624 | ---- | C] () -- C:\Windows\SysWow64\tmp.reg
[2013/04/02 19:30:45 | 000,075,776 | ---- | C] () -- C:\Windows\SysWow64\WS2Fix.exe
[2013/04/02 19:30:45 | 000,051,200 | ---- | C] () -- C:\Windows\SysWow64\dumphive.exe
[2013/04/02 19:30:45 | 000,040,960 | ---- | C] () -- C:\Windows\SysWow64\swsc.exe
[2013/04/02 19:09:46 | 000,000,372 | ---- | C] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Home.job
[2013/04/02 19:09:43 | 000,000,366 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Home.job
[2013/04/02 19:09:40 | 000,000,362 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateXML_Home.job
[2013/04/02 17:59:54 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2013/04/02 17:59:54 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2013/04/02 17:44:14 | 000,002,091 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
[2013/04/02 17:44:14 | 000,000,913 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MozyHome Status.lnk
[2013/04/01 20:58:39 | 000,021,359 | ---- | C] () -- C:\Users\Home\Documents\Wolfattackrecords.png
[2013/04/01 20:58:33 | 000,242,826 | ---- | C] () -- C:\Users\Home\Documents\Wolfattackrecords.psd
[2013/04/01 15:29:19 | 001,275,737 | ---- | C] () -- C:\Users\Home\Desktop\839B5198-962A-448A-A7E4-BCCCE28103B9.jpg
[2013/03/29 11:43:55 | 006,488,710 | ---- | C] () -- C:\Users\Home\Desktop\Synchronize 2.mp3
[2013/03/28 12:00:06 | 000,356,680 | ---- | C] () -- C:\Users\Home\Desktop\bassstorm.png
[2013/03/28 12:00:01 | 003,059,727 | ---- | C] () -- C:\Users\Home\Desktop\bassstorm.psd
[2013/03/28 11:51:32 | 006,488,710 | ---- | C] () -- C:\Users\Home\Desktop\Synchronize.mp3
[2013/03/25 00:49:01 | 000,000,065 | ---- | C] () -- C:\Users\Home\Desktop\config.ini
[2013/03/25 00:43:03 | 000,379,655 | ---- | C] () -- C:\Users\Home\Desktop\beard.exe
[2013/03/23 23:54:00 | 000,073,020 | ---- | C] () -- C:\Users\Home\Desktop\ANIME.psd
[2013/03/22 21:57:00 | 003,132,550 | ---- | C] () -- C:\Users\Home\Desktop\TradgiK & SOTW 2013 DnB Mix.mp3
[2013/03/22 00:27:14 | 000,014,914 | ---- | C] () -- C:\Users\Home\Desktop\derp.php
[2013/03/22 00:09:48 | 002,735,553 | ---- | C] () -- C:\Users\Home\Desktop\Chiefkeef.psd
[2013/03/22 00:05:09 | 000,101,416 | ---- | C] () -- C:\Users\Home\Desktop\MyriadPro-SemiboldIt.otf
[2013/03/21 15:10:34 | 000,024,779 | ---- | C] () -- C:\Users\Home\Documents\IMG_21032013_151205.png
[2013/03/21 02:59:31 | 000,059,125 | ---- | C] () -- C:\Users\Home\Documents\asian.jpg
[2013/03/20 21:34:38 | 000,000,983 | ---- | C] () -- C:\Users\Home\Desktop\VPNium.lnk
[2013/03/16 01:45:14 | 000,000,955 | ---- | C] () -- C:\Users\Home\Desktop\LOVE.lnk
[2013/03/15 04:57:27 | 000,001,885 | ---- | C] () -- C:\Users\Home\Desktop\Process Hacker 2.lnk
[2013/03/15 04:20:39 | 000,001,178 | ---- | C] () -- C:\Users\Public\Desktop\DarkComet Remover.lnk
[2013/03/14 22:09:35 | 000,001,833 | ---- | C] () -- C:\Users\Home\Desktop\XChat.lnk
[2013/03/13 22:54:54 | 000,001,047 | ---- | C] () -- C:\Users\Public\Desktop\Super Hide IP.lnk
[2013/03/13 22:23:40 | 000,001,061 | ---- | C] () -- C:\Users\Home\Desktop\join.me.lnk
[2013/03/12 21:09:43 | 000,000,137 | ---- | C] () -- C:\Users\Home\Desktop\SkypeRemoveProxy.reg
[2013/03/10 03:44:40 | 000,000,000 | ---- | C] () -- C:\Users\Home\Documents\ts3_clientui-win32-1351504843-2013-03-10 03_44_40.133000.dmp
[2013/03/09 01:56:11 | 000,001,020 | ---- | C] () -- C:\Users\Public\Desktop\Massive.lnk
[2013/03/09 01:55:08 | 000,001,059 | ---- | C] () -- C:\Users\Public\Desktop\Service Center.lnk
[2013/03/03 22:54:47 | 000,207,766 | ---- | C] () -- C:\Users\Home\AppData\Local\debuggee.mdmp
[2013/02/21 20:30:47 | 000,056,424 | ---- | C] () -- C:\Windows\SysWow64\PrxerNsp.dll
[2012/12/21 17:30:03 | 000,000,041 | ---- | C] () -- C:\Users\Home\matrix_cl_zenith_LIVE.dat
[2012/12/19 23:18:12 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat
[2012/12/14 19:04:17 | 000,000,000 | ---- | C] () -- C:\Users\Home\Paradox_runescape_preferences.dat
[2012/12/09 23:49:52 | 000,581,642 | ---- | C] () -- C:\Users\Home\AppData\Roaming\technic-launcher.jar
[2012/11/30 18:20:02 | 000,000,631 | ---- | C] () -- C:\Users\Home\openvpn-connect.json
[2012/11/25 23:05:34 | 000,000,043 | ---- | C] () -- C:\Users\Home\jagex_cl_runescape_LIVE.dat
[2012/11/17 14:07:16 | 000,000,113 | ---- | C] () -- C:\Windows\SysWow64\SVG Drawer.ini
[2012/10/16 21:57:20 | 000,000,045 | ---- | C] () -- C:\Users\Home\jagex_cl_loginapplet_LIVE.dat
[2012/10/16 21:57:20 | 000,000,001 | ---- | C] () -- C:\Users\Home\random.dat
[2012/10/11 16:00:28 | 000,000,000 | ---- | C] () -- C:\Users\Home\jagex__preferences3.dat
[2012/10/11 16:00:25 | 000,000,099 | ---- | C] () -- C:\Users\Home\jagex_Runescape_preferences2.dat
[2012/10/11 16:00:08 | 000,000,046 | ---- | C] () -- C:\Users\Home\jagex_Runescape_preferences.dat
[2012/10/03 20:55:01 | 000,000,159 | ---- | C] () -- C:\Users\Home\AppData\Roaming\net.telestream.producer.xml
[2012/09/26 19:41:40 | 000,601,088 | ---- | C] () -- C:\Users\Home\AppData\Roaming\SharedSettings.ccs
[2012/09/26 18:40:19 | 000,000,104 | -HS- | C] () -- C:\Windows\WSYS049.SYS
[2012/07/15 00:28:54 | 000,000,171 | ---- | C] () -- C:\Windows\icecast2.ini
[2012/07/10 08:17:29 | 000,002,952 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2012/07/07 13:08:33 | 000,001,263 | ---- | C] () -- C:\Program Files (x86)\Spybot - Search & Destroy - Shortcut.lnk
[2012/06/17 19:40:44 | 000,001,456 | ---- | C] () -- C:\Users\Home\AppData\Local\Adobe Save for Web 13.0 Prefs
[2012/06/17 19:28:35 | 000,000,132 | ---- | C] () -- C:\Users\Home\AppData\Roaming\Adobe GIF Format CS6 Prefs
[2012/06/10 05:25:15 | 000,000,132 | ---- | C] () -- C:\Users\Home\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2012/05/10 19:23:04 | 000,017,408 | ---- | C] () -- C:\Windows\SysWow64\minimp3.exe
[2012/04/22 15:29:52 | 000,000,091 | ---- | C] () -- C:\Users\Home\AppData\Local\NWUserDefault.ini
[2012/04/11 23:34:24 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\cd.dat
[2012/04/02 17:04:39 | 000,000,185 | ---- | C] () -- C:\Windows\mdm.ini
[2012/04/02 17:04:33 | 000,000,760 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2012/04/02 17:04:33 | 000,000,288 | ---- | C] () -- C:\Windows\ODBC.INI
[2012/04/02 15:52:33 | 000,006,550 | ---- | C] () -- C:\Windows\jautoexp.dat
[2012/03/25 10:24:56 | 000,005,890 | ---- | C] () -- C:\Windows\wininit.ini
[2012/03/11 12:44:08 | 000,006,656 | ---- | C] () -- C:\Users\Home\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/03/11 11:59:45 | 000,000,600 | ---- | C] () -- C:\Users\Home\AppData\Local\PUTTY.RND
[2012/03/07 20:37:13 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2012/03/06 23:22:22 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll
[2012/03/06 23:22:21 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll
[2012/03/06 23:22:21 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll
[2012/03/06 16:59:24 | 000,077,517 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2012/01/31 22:38:05 | 000,002,240 | ---- | C] () -- C:\Windows\LENDIG.sys
[2012/01/30 21:26:09 | 000,001,806 | ---- | C] () -- C:\Windows\TSearch.INI
[2012/01/03 22:04:06 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2012/01/01 11:57:51 | 000,000,000 | ---- | C] () -- C:\Users\Home\AppData\Local\{C906B360-2338-4A7F-BBF7-13DE2F40B573}
[2011/12/29 17:58:09 | 001,589,248 | ---- | C] () -- C:\Windows\SysWow64\libmysql_d.dll
[2011/10/14 21:32:55 | 000,221,179 | ---- | C] () -- C:\Users\Home\AppData\Roaming\UserTile.png
[2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011/08/09 19:47:29 | 000,012,794 | --S- | C] () -- C:\Users\Home\AppData\Local\4kevyrk2a6v3ct6no2nj87x5vb840rrg23v3b5q10dw6tw
[2011/08/09 19:47:29 | 000,012,794 | --S- | C] () -- C:\ProgramData\4kevyrk2a6v3ct6no2nj87x5vb840rrg23v3b5q10dw6tw
[2011/06/29 19:03:02 | 000,000,268 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2011/06/09 11:31:57 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011/05/18 21:29:50 | 000,000,056 | ---- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011/04/30 21:54:10 | 000,098,304 | ---- | C] () -- C:\Windows\SysWow64\redmonnt.dll
[2010/03/21 14:29:48 | 000,007,602 | ---- | C] () -- C:\Users\Home\AppData\Local\Resmon.ResmonCfg
========== ZeroAccess Check ==========
[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 00:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 23:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2012/04/27 17:09:39 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\.3.14
[2012/03/17 21:55:30 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\.Epsilon
[2013/04/01 17:49:13 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\.minecraft
[2012/06/06 12:31:13 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\.spoutcraft
[2012/12/11 18:54:22 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\.techniclauncher
[2012/04/13 11:48:55 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Ableton
[2013/03/15 00:24:45 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\aPjaReoYXLwYuHVDUG
[2013/02/22 22:04:18 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Audacity
[2013/02/16 06:18:10 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\AutoHideIP
[2011/01/30 11:06:58 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\AVG10
[2011/11/09 19:28:02 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Azureus
[2011/02/20 14:52:08 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Barnes & Noble
[2012/07/11 03:04:33 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Bertware
[2012/08/13 00:02:15 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Cobalt
[2013/02/16 23:27:35 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2013/03/24 00:10:03 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\DAEMON Tools Lite
[2012/06/24 05:52:43 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\DAEMON Tools Pro
[2012/07/11 22:34:01 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Deckadance16
[2013/04/02 19:11:45 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Dropbox
[2011/08/05 15:23:29 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\ESET
[2013/03/31 15:27:42 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\FileZilla
[2011/12/25 21:36:46 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\GameRanger
[2012/12/04 17:40:38 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\GetRight
[2013/03/24 04:02:35 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\gnupg
[2011/10/17 07:27:04 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\go
[2012/08/14 01:54:20 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\gtk-2.0
[2013/03/14 22:06:44 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Hotspot Shield
[2012/07/18 00:36:12 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\IcoFX2X
[2012/03/03 13:16:59 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Image-Line
[2013/04/01 19:50:23 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Industriya
[2012/12/11 18:52:28 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\logs
[2012/04/11 17:07:46 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\ManyCam
[2012/07/13 07:04:15 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Minecraft
[2011/04/29 10:36:42 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Mumble
[2012/07/08 00:04:09 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\MySQL
[2012/05/02 15:44:36 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Notepad++
[2013/02/11 20:29:11 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Ohm Force
[2011/06/25 16:38:06 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Philipp Winterberg
[2013/01/02 17:05:57 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\PrivateTunnel
[2013/03/15 04:58:38 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Process Hacker 2
[2013/02/21 20:30:53 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Proxifier
[2013/03/15 04:56:18 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\QFX Software
[2013/02/13 22:54:35 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\RobotSoft
[2012/06/30 20:35:43 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Screaming Bee
[2013/02/25 03:57:07 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Soldat
[2012/11/15 00:50:39 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Spadille
[2012/07/10 14:40:59 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012/03/03 14:16:29 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Stardock
[2012/03/13 10:30:24 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Steinberg
[2012/10/13 02:19:19 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Subversion
[2012/04/13 17:29:43 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\SuperHideIP
[2012/03/02 14:14:43 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\SynthMaker
[2012/10/12 01:16:18 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Tangible Software Solutions Inc
[2013/03/10 02:30:37 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\TeamViewer
[2013/03/24 00:10:03 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\TS3Client
[2012/09/25 22:53:56 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Tunngle
[2012/10/03 20:55:06 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\Ustream Producer
[2013/04/01 21:34:35 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\uTorrent
[2011/04/03 13:12:51 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\WhiteSmoke
[2012/08/07 15:39:57 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\wsInspector
[2013/03/15 21:40:47 | 000,000,000 | ---D | M] -- C:\Users\Home\AppData\Roaming\X-Chat 2
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:AFC66739
< End of report >