Here is the Frst:Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 02
Ran by Gabe (administrator) on AARONS-HP on 09-02-2014 11:29:04
Running from C:\Users\Gabe\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version:
http://www.bleepingc...can-tool/dl/81/ Download link for 64-Bit Version:
http://www.bleepingc...can-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST:
http://www.geekstogo...very-scan-tool/==================== Processes (Whitelisted) =================
(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(AMD) C:\Windows\system32\atieclxx.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\main.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation) C:\Windows\system32\PrintIsolationHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-09-03] (cyberlink)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-08-09] (InstallShield Software Corporation)
HKLM-x32\...\Run: [RazerGameBooster] - C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe [61152 2013-11-22] (Razer Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1143187190-511333535-2285427750-1003\...\Run: [690A3B64279ECB48B1C83D88E3FB162ECEE653EF._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866632 2014-02-01] (Google Inc.)
HKU\S-1-5-21-1143187190-511333535-2285427750-1003\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1143187190-511333535-2285427750-1003\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1143187190-511333535-2285427750-1003\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1143187190-511333535-2285427750-1003\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
==================== Internet (Whitelisted) ====================
ProxyServer: http=127.0.0.1:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft...=ie&ar=iesearchStartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} URL =
SearchScopes: HKLM - {01900FB1-3A50-4BED-8BCF-7DC6EC494919} URL =
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
http://rover.ebay.co...w={searchTerms}SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
http://www.google.co...age={startPage}SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
http://rover.ebay.co...w={searchTerms}BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {D426CFA3-F742-4C87-BFCE-76D5EEBC6FF4} - No File
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {6e47d688-85ec-465a-9946-ec58220f14fc} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455}
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203}
http://h20614.www2.h...hpdetect118.cabHandler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 65.32.1.65 65.32.1.70
Chrome:
=======
CHR Extension: (Website Logon) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe [2012-08-25]
CHR Extension: (Hulu - TV Shows) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\babdabjblhdjecooajkeenhbaegcdcgk [2012-08-25]
CHR Extension: (YouTube) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-08-25]
CHR Extension: (Facebook) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2012-08-25]
CHR Extension: (Last updated at $time$ on $date$) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2012-08-25]
CHR Extension: (Hulu on fire) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\chgllnbkldfofeogfpbhciondkbendep [2012-08-25]
CHR Extension: (Google Search) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-09]
CHR Extension: (Netflix) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\deceagebecbceejblnlcjooeohmmeldh [2012-08-25]
CHR Extension: (avast! WebRep) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2013-02-28]
CHR Extension: (Skype Click to Call) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-08-25]
CHR Extension: (Happy Wheels) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljdngafdeknonigdklkdlolkefpigejp [2012-11-22]
CHR Extension: (Fieldrunners) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkpikhjbfbffdblahfidklcohlaeabak [2012-12-09]
CHR Extension: (Guitar Geek) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpijogomejcpdhifkigopflephcmopal [2013-01-04]
CHR Extension: (3Dnator) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhgjpfdjhlimkkdgnecbgnefdafbcncc [2012-08-25]
CHR Extension: (Gmail) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-09]
CHR Extension: (Abstract-Blue) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2012-08-25]
CHR Extension: (Canvas Rider) - C:\Users\Gabe\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk [2012-08-25]
CHR HKLM-x32\...\Chrome\Extension: [aepeildmfnnehghlknddebgjghlompfe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-02-11]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
==================== Services (Whitelisted) =================
S4 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [68096 2012-11-25] ()
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-12-05] (Advanced Micro Devices, Inc.)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [245264 2012-09-03] (CyberLink)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2013-12-10] (Razer, Inc.)
S2 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
S2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)
==================== Drivers (Whitelisted) ====================
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52320 2013-03-29] (
http://libusb-win32.sourceforge.net)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2013-12-10] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2013-12-10] (Razer, Inc.)
R3 stdpms; C:\Windows\System32\DRIVERS\stdpms.sys [28904 2013-10-22] (Splashtop Inc.)
S3 ALSysIO; \??\C:\Users\Aarons\AppData\Local\Temp\ALSysIO64.sys [X]
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-30 19:45 - 2014-01-30 19:45 - 01069920 _____ (Solid State Networks) C:\Users\Aarons\Downloads\install_reader11_en_mssa_aaa_aih.exe
2014-01-30 19:44 - 2014-01-30 19:44 - 00026568 _____ () C:\Users\Aarons\Desktop\download (1).htm
2014-01-30 19:43 - 2014-01-30 19:43 - 00026568 _____ () C:\Users\Aarons\Desktop\download.htm
2014-01-29 18:58 - 2014-01-29 18:58 - 00037362 _____ () C:\ComboFix.txt
2014-01-29 17:47 - 2014-01-29 19:01 - 00000000 ____D () C:\Qoobox
2014-01-28 13:52 - 2014-01-28 13:52 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-28 13:52 - 2014-01-28 13:52 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-28 13:52 - 2014-01-28 13:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-28 13:52 - 2014-01-28 13:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-28 13:52 - 2014-01-28 13:52 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-28 13:52 - 2014-01-28 13:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-28 13:52 - 2014-01-28 13:52 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-28 13:52 - 2014-01-28 13:52 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-28 13:52 - 2014-01-28 13:52 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-28 13:52 - 2014-01-28 13:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-28 13:52 - 2014-01-28 13:52 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-28 13:50 - 2014-01-28 13:52 - 00003397 _____ () C:\Windows\IE9_main.log
2014-01-28 13:46 - 2014-01-28 13:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-27 21:28 - 2014-01-29 18:44 - 00000000 ____D () C:\Windows\erdnt
2014-01-27 21:28 - 2011-06-26 01:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-01-27 21:28 - 2010-11-07 12:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-01-27 21:28 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-27 21:28 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-27 21:28 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-27 21:28 - 2000-08-30 19:00 - 00098816 _____ () C:\Windows\sed.exe
2014-01-27 21:28 - 2000-08-30 19:00 - 00080412 _____ () C:\Windows\grep.exe
2014-01-27 21:28 - 2000-08-30 19:00 - 00068096 _____ () C:\Windows\zip.exe
2014-01-27 21:25 - 2014-01-27 21:25 - 00001142 _____ () C:\Users\Gabe\Downloads\fixlist.txt
2014-01-27 17:55 - 2014-02-09 11:28 - 00000000 ____D () C:\Users\Gabe\Desktop\FRST-OlderVersion
2014-01-27 17:48 - 2014-01-27 17:52 - 00000000 ____D () C:\AdwCleaner
2014-01-27 17:47 - 2014-01-27 17:47 - 01236282 _____ () C:\Users\Gabe\Downloads\AdwCleaner.exe
2014-01-27 17:47 - 2014-01-27 17:47 - 01236282 _____ () C:\Users\Gabe\Desktop\AdwCleaner.exe
2014-01-27 17:41 - 2014-01-27 17:12 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-01-27 17:14 - 2014-01-27 17:43 - 00062758 _____ () C:\zoek-results.log
2014-01-27 17:12 - 2014-01-27 17:36 - 00000000 ____D () C:\zoek_backup
2014-01-27 17:11 - 2014-01-27 17:11 - 01283072 _____ () C:\Users\Gabe\Downloads\zoek.exe
2014-01-27 17:11 - 2014-01-27 17:11 - 01283072 _____ () C:\Users\Gabe\Desktop\zoek.exe
2014-01-27 16:49 - 2014-01-27 16:49 - 03036672 _____ () C:\Users\Gabe\Downloads\Gorilla_Uninstaller_Download_File.exe
2014-01-26 22:03 - 2014-01-27 17:57 - 00033074 _____ () C:\Users\Gabe\Desktop\Addition.txt
2014-01-26 22:01 - 2014-02-09 11:29 - 00014619 _____ () C:\Users\Gabe\Desktop\FRST.txt
2014-01-26 22:01 - 2014-02-09 11:29 - 00000000 ____D () C:\FRST
2014-01-26 22:00 - 2014-02-09 11:28 - 02170880 _____ (Farbar) C:\Users\Gabe\Desktop\FRST64.exe
2014-01-26 21:32 - 2014-01-26 21:37 - 02685646 _____ () C:\Users\Aarons\Desktop\Sneakker Geeekz.psd
2014-01-26 17:18 - 2014-01-26 17:18 - 00332994 _____ () C:\Users\Gabe\Downloads\OTLfull.Txt
2014-01-26 17:06 - 2014-01-26 17:06 - 00675988 _____ () C:\Users\Gabe\Downloads\Minecraft.exe
2014-01-26 16:28 - 2014-01-26 16:28 - 00106178 _____ () C:\Users\Gabe\Downloads\Extras.Txt
2014-01-26 16:26 - 2014-01-26 17:18 - 00332994 _____ () C:\Users\Gabe\Downloads\OTL.Txt
2014-01-26 16:13 - 2014-01-26 16:13 - 00602112 _____ (OldTimer Tools) C:\Users\Gabe\Downloads\OTL.exe
2014-01-25 23:54 - 2014-01-25 23:54 - 00022150 _____ () C:\Users\Gabe\Downloads\123704420311.zip
2014-01-25 23:50 - 2014-01-25 23:50 - 00002090 _____ () C:\Users\Gabe\Downloads\125952568110.stk
2014-01-25 23:34 - 2014-01-25 23:34 - 00000990 _____ () C:\Users\Public\Desktop\Pivot Animator.lnk
2014-01-25 23:34 - 2014-01-25 23:34 - 00000000 ____D () C:\ProgramData\Pivot Animator
2014-01-25 23:34 - 2014-01-25 23:34 - 00000000 ____D () C:\Program Files (x86)\Pivot Animator
2014-01-25 23:33 - 2014-01-25 23:33 - 01765888 _____ () C:\Users\Gabe\Downloads\Pivot_hrdc_ns.exe
2014-01-25 17:25 - 2014-02-01 20:12 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-01-25 17:25 - 2014-01-25 17:25 - 00000923 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-01-25 17:24 - 2014-01-25 17:24 - 01133552 _____ () C:\Users\Aarons\Downloads\SteamSetup.exe
2014-01-25 17:21 - 2014-01-29 12:50 - 00001409 _____ () C:\Users\Aarons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-25 12:19 - 2014-01-28 17:50 - 00001409 _____ () C:\Users\Gabe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-25 02:46 - 2014-01-25 02:46 - 00000000 ____D () C:\Users\Gabe\AppData\Roaming\mineshafter_squared
2014-01-25 01:28 - 2014-01-25 01:28 - 01133552 _____ () C:\Users\Gabe\Downloads\SteamSetup (1).exe
2014-01-21 18:07 - 2014-01-21 18:07 - 00002150 _____ () C:\Users\Gabe\Desktop\Splashtop Streamer.lnk
2014-01-21 17:52 - 2014-01-21 17:52 - 05966934 _____ (Splashtop Inc.) C:\Users\Gabe\Downloads\Splashtop_Business_Win_v2.4.5.2.exe
2014-01-18 15:22 - 2014-01-18 15:22 - 00942519 _____ () C:\Users\Aarons\Downloads\(11) Facebook.htm
2014-01-18 15:22 - 2014-01-18 15:22 - 00000000 ____D () C:\Users\Aarons\Downloads\(11) Facebook_files
2014-01-17 20:16 - 2014-01-17 20:17 - 05326304 _____ () C:\Users\Gabe\Downloads\Synaptics_v17_0_19_C_XP32_Vista32_Win7-32_XP64_Vista64_Win7-64_Acme_Inc.zip
2014-01-17 20:10 - 2014-01-17 20:10 - 01133552 _____ () C:\Users\Gabe\Downloads\SteamSetup.exe
2014-01-16 15:20 - 2013-11-26 20:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-16 15:20 - 2013-11-26 20:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-16 15:20 - 2013-11-26 20:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-16 15:20 - 2013-11-26 20:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-16 15:20 - 2013-11-26 20:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-16 15:20 - 2013-11-26 20:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-16 15:20 - 2013-11-26 20:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-16 15:20 - 2013-11-26 06:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-16 15:20 - 2013-11-26 05:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 13:10 - 2014-01-14 13:10 - 00458680 _____ () C:\Users\Aarons\Downloads\Setup (1).exe
==================== One Month Modified Files and Folders =======
2014-02-09 11:29 - 2014-01-26 22:01 - 00014619 _____ () C:\Users\Gabe\Desktop\FRST.txt
2014-02-09 11:29 - 2014-01-26 22:01 - 00000000 ____D () C:\FRST
2014-02-09 11:29 - 2012-08-19 13:27 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{87765B85-AB53-462B-9F7A-6ABABA16FBBD}
2014-02-09 11:28 - 2014-01-27 17:55 - 00000000 ____D () C:\Users\Gabe\Desktop\FRST-OlderVersion
2014-02-09 11:28 - 2014-01-26 22:00 - 02170880 _____ (Farbar) C:\Users\Gabe\Desktop\FRST64.exe
2014-02-09 11:27 - 2012-11-22 11:04 - 01052477 _____ () C:\Windows\WindowsUpdate.log
2014-02-09 11:27 - 2009-07-13 23:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-09 11:27 - 2009-07-13 23:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-09 11:25 - 2009-07-14 00:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-09 11:24 - 2013-03-21 19:46 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-09 11:20 - 2014-01-06 02:47 - 00007866 _____ () C:\Windows\setupact.log
2014-02-09 11:20 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-06 18:42 - 2013-05-09 18:59 - 00000408 ____H () C:\Windows\Tasks\Norton Security Scan for Aarons.job
2014-02-06 18:30 - 2012-06-25 18:11 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-06 17:52 - 2013-03-21 19:46 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-06 12:58 - 2013-02-08 10:25 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAarons
2014-02-06 12:58 - 2013-02-08 10:25 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForAarons.job
2014-02-06 12:37 - 2012-08-30 07:14 - 00000000 ____D () C:\Users\Aarons\AppData\Local\Adobe
2014-02-06 12:33 - 2012-02-24 11:26 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{63C9AABB-0CD9-41B8-B9CB-F7224580E5E5}
2014-02-04 17:30 - 2012-06-25 18:11 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-04 17:30 - 2012-06-25 18:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 17:30 - 2012-06-25 18:11 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 12:54 - 2014-01-06 08:50 - 00002143 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-01 20:12 - 2014-01-25 17:25 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-01 14:45 - 2009-07-14 00:13 - 00783360 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-01 14:00 - 2012-08-10 16:50 - 00000000 ____D () C:\Users\Aarons\AppData\Roaming\Skype
2014-01-30 19:45 - 2014-01-30 19:45 - 01069920 _____ (Solid State Networks) C:\Users\Aarons\Downloads\install_reader11_en_mssa_aaa_aih.exe
2014-01-30 19:44 - 2014-01-30 19:44 - 00026568 _____ () C:\Users\Aarons\Desktop\download (1).htm
2014-01-30 19:43 - 2014-01-30 19:43 - 00026568 _____ () C:\Users\Aarons\Desktop\download.htm
2014-01-30 13:53 - 2014-01-06 02:47 - 00177282 _____ () C:\Windows\PFRO.log
2014-01-29 19:01 - 2014-01-29 17:47 - 00000000 ____D () C:\Qoobox
2014-01-29 18:58 - 2014-01-29 18:58 - 00037362 _____ () C:\ComboFix.txt
2014-01-29 18:44 - 2014-01-27 21:28 - 00000000 ____D () C:\Windows\erdnt
2014-01-29 18:11 - 2009-07-13 21:34 - 00000215 _____ () C:\Windows\system.ini
2014-01-29 12:50 - 2014-01-25 17:21 - 00001409 _____ () C:\Users\Aarons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-29 12:50 - 2012-08-30 06:50 - 00001403 _____ () C:\Users\Aarons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-28 21:28 - 2013-01-03 03:53 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForGabe
2014-01-28 21:28 - 2013-01-03 03:53 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForGabe.job
2014-01-28 19:56 - 2012-08-19 13:42 - 00000000 ____D () C:\Users\Gabe\AppData\Roaming\.minecraft
2014-01-28 19:33 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-01-28 17:50 - 2014-01-25 12:19 - 00001409 _____ () C:\Users\Gabe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-01-28 17:50 - 2012-08-19 13:27 - 00001403 _____ () C:\Users\Gabe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-28 17:23 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-01-28 13:52 - 2014-01-28 13:52 - 17847296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 12344320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 09739264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-28 13:52 - 2014-01-28 13:52 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-28 13:52 - 2014-01-28 13:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-28 13:52 - 2014-01-28 13:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-28 13:52 - 2014-01-28 13:52 - 02334720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-28 13:52 - 2014-01-28 13:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-28 13:52 - 2014-01-28 13:52 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01347072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 01105408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-28 13:52 - 2014-01-28 13:52 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-28 13:52 - 2014-01-28 13:52 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-28 13:52 - 2014-01-28 13:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-28 13:52 - 2014-01-28 13:52 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-28 13:52 - 2014-01-28 13:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-28 13:52 - 2014-01-28 13:52 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-28 13:52 - 2014-01-28 13:50 - 00003397 _____ () C:\Windows\IE9_main.log
2014-01-28 13:49 - 2014-01-28 13:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-27 21:26 - 2009-07-14 00:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-01-27 21:25 - 2014-01-27 21:25 - 00001142 _____ () C:\Users\Gabe\Downloads\fixlist.txt
2014-01-27 17:57 - 2014-01-26 22:03 - 00033074 _____ () C:\Users\Gabe\Desktop\Addition.txt
2014-01-27 17:52 - 2014-01-27 17:48 - 00000000 ____D () C:\AdwCleaner
2014-01-27 17:47 - 2014-01-27 17:47 - 01236282 _____ () C:\Users\Gabe\Downloads\AdwCleaner.exe
2014-01-27 17:47 - 2014-01-27 17:47 - 01236282 _____ () C:\Users\Gabe\Desktop\AdwCleaner.exe
2014-01-27 17:43 - 2014-01-27 17:14 - 00062758 _____ () C:\zoek-results.log
2014-01-27 17:36 - 2014-01-27 17:12 - 00000000 ____D () C:\zoek_backup
2014-01-27 17:28 - 2012-08-19 13:26 - 00000000 ____D () C:\Users\Gabe
2014-01-27 17:28 - 2012-02-24 12:02 - 00000000 ____D () C:\Users\Aarons
2014-01-27 17:12 - 2014-01-27 17:41 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-01-27 17:11 - 2014-01-27 17:11 - 01283072 _____ () C:\Users\Gabe\Downloads\zoek.exe
2014-01-27 17:11 - 2014-01-27 17:11 - 01283072 _____ () C:\Users\Gabe\Desktop\zoek.exe
2014-01-27 16:50 - 2012-09-07 15:32 - 00000000 ____D () C:\Users\Gabe\AppData\Local\CrashDumps
2014-01-27 16:49 - 2014-01-27 16:49 - 03036672 _____ () C:\Users\Gabe\Downloads\Gorilla_Uninstaller_Download_File.exe
2014-01-27 02:00 - 2012-09-09 17:12 - 00000000 ____D () C:\Users\Gabe\AppData\Local\Adobe
2014-01-26 21:37 - 2014-01-26 21:32 - 02685646 _____ () C:\Users\Aarons\Desktop\Sneakker Geeekz.psd
2014-01-26 17:18 - 2014-01-26 17:18 - 00332994 _____ () C:\Users\Gabe\Downloads\OTLfull.Txt
2014-01-26 17:18 - 2014-01-26 16:26 - 00332994 _____ () C:\Users\Gabe\Downloads\OTL.Txt
2014-01-26 17:06 - 2014-01-26 17:06 - 00675988 _____ () C:\Users\Gabe\Downloads\Minecraft.exe
2014-01-26 16:28 - 2014-01-26 16:28 - 00106178 _____ () C:\Users\Gabe\Downloads\Extras.Txt
2014-01-26 16:13 - 2014-01-26 16:13 - 00602112 _____ (OldTimer Tools) C:\Users\Gabe\Downloads\OTL.exe
2014-01-26 13:18 - 2009-07-14 00:08 - 00032644 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-26 01:01 - 2014-01-02 22:38 - 00435200 _____ () C:\Users\Gabe\AppData\Roaming\RZR_01925f6a4f7eaeedfb42bcd2a208.db
2014-01-25 23:54 - 2014-01-25 23:54 - 00022150 _____ () C:\Users\Gabe\Downloads\123704420311.zip
2014-01-25 23:50 - 2014-01-25 23:50 - 00002090 _____ () C:\Users\Gabe\Downloads\125952568110.stk
2014-01-25 23:34 - 2014-01-25 23:34 - 00000990 _____ () C:\Users\Public\Desktop\Pivot Animator.lnk
2014-01-25 23:34 - 2014-01-25 23:34 - 00000000 ____D () C:\ProgramData\Pivot Animator
2014-01-25 23:34 - 2014-01-25 23:34 - 00000000 ____D () C:\Program Files (x86)\Pivot Animator
2014-01-25 23:33 - 2014-01-25 23:33 - 01765888 _____ () C:\Users\Gabe\Downloads\Pivot_hrdc_ns.exe
2014-01-25 17:25 - 2014-01-25 17:25 - 00000923 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-01-25 17:24 - 2014-01-25 17:24 - 01133552 _____ () C:\Users\Aarons\Downloads\SteamSetup.exe
2014-01-25 11:49 - 2007-01-01 20:25 - 00000000 ____D () C:\Windows\Panther
2014-01-25 02:46 - 2014-01-25 02:46 - 00000000 ____D () C:\Users\Gabe\AppData\Roaming\mineshafter_squared
2014-01-25 01:28 - 2014-01-25 01:28 - 01133552 _____ () C:\Users\Gabe\Downloads\SteamSetup (1).exe
2014-01-24 22:37 - 2013-02-28 18:14 - 00000000 ____D () C:\Windows\pss
2014-01-24 22:37 - 2012-08-19 13:27 - 00000000 ___RD () C:\Users\Gabe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-22 16:16 - 2012-02-24 12:38 - 00000000 ____D () C:\Users\Aarons\AppData\Local\CrashDumps
2014-01-21 18:07 - 2014-01-21 18:07 - 00002150 _____ () C:\Users\Gabe\Desktop\Splashtop Streamer.lnk
2014-01-21 17:52 - 2014-01-21 17:52 - 05966934 _____ (Splashtop Inc.) C:\Users\Gabe\Downloads\Splashtop_Business_Win_v2.4.5.2.exe
2014-01-18 15:22 - 2014-01-18 15:22 - 00942519 _____ () C:\Users\Aarons\Downloads\(11) Facebook.htm
2014-01-18 15:22 - 2014-01-18 15:22 - 00000000 ____D () C:\Users\Aarons\Downloads\(11) Facebook_files
2014-01-17 20:17 - 2014-01-17 20:16 - 05326304 _____ () C:\Users\Gabe\Downloads\Synaptics_v17_0_19_C_XP32_Vista32_Win7-32_XP64_Vista64_Win7-64_Acme_Inc.zip
2014-01-17 20:10 - 2014-01-17 20:10 - 01133552 _____ () C:\Users\Gabe\Downloads\SteamSetup.exe
2014-01-16 18:01 - 2009-07-13 23:45 - 04990000 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 22:34 - 2012-09-11 19:19 - 00000000 ____D () C:\Users\Gabe\AppData\Roaming\SoftGrid Client
2014-01-14 13:10 - 2014-01-14 13:10 - 00458680 _____ () C:\Users\Aarons\Downloads\Setup (1).exe
2014-01-11 22:51 - 2013-02-08 10:25 - 00003220 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAARONS-HP$
2014-01-11 22:51 - 2013-02-08 10:25 - 00000344 _____ () C:\Windows\Tasks\HPCeeScheduleForAARONS-HP$.job
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-29 15:48
==================== End Of Log ============================
Here is the Addition:Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-02-2014 02
Ran by Gabe at 2014-02-09 11:29:59
Running from C:\Users\Gabe\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Acoustica Mixcraft 6 (x32 Version: b216 - Acoustica)
ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe AIR (x32 Version: 3.6.0.6090 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.6.0.6090 - Adobe Systems Incorporated) Hidden
Adobe Creative Cloud (x32 Version: 2.0.2.189 - Adobe Systems Incorporated)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop.com Inspiration Browser (x32 Version: 3.04 - Adobe Systems Incorporated)
Adobe Photoshop.com Inspiration Browser (x32 Version: 3.04 - Adobe Systems Incorporated) Hidden
Adobe Reader X MUI (x32 Version: 10.0.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112 - Adobe Systems, Inc.)
AMD APP SDK Runtime (Version: 10.0.851.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 3.0.859.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2011.1205.2215.39827 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.61205.2219 - Advanced Micro Devices, Inc.) Hidden
AMD System Monitor (x32 Version: 1.0.5 - Advanced Micro Devices, Inc.)
AMD VISION Engine Control Center (x32 Version: 2011.1205.2215.39827 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
AuthenTec TrueAPI (Version: 1.2.1.33 - AuthenTec, Inc.) Hidden
Bamboo Dock (x32 Version: 4.1 - Wacom Co., Ltd.)
Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden
Bamboo Tablets Tutorial (x32 Version: 3.0.20 - Wacom) Hidden
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.1205.2215.39827 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.1205.2215.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2011.1205.2214.39827 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2011.1205.2215.39827 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.04 - Piriform)
Core Temp 1.0 RC3 (Version: 1.0 - Alcpu)
CyberLink PowerDVD (x32 Version: 10.0.5.4504 - CyberLink Corp.)
CyberLink PowerDVD (x32 Version: 10.0.5.4504 - CyberLink Corp.) Hidden
CyberLink YouCam (x32 Version: 3.5.1.4606 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.4606 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (Version: 2.10 - Piriform)
DomDomSoft Manga Downloader (remove only) (x32 Version: - )
Download Navigator (x32 Version: 3.4.0 - SEIKO EPSON CORPORATION)
Driver Genius Professional Edition (x32 Version: 10.0 - Driver-Soft Inc.)
DVD Shrink 3.2 (x32 Version: - DVD Shrink)
Energy Star Digital Logo (x32 Version: 1.0.1 - Hewlett-Packard)
EPSON Artisan 1430 Series Printer Uninstall (Version: - SEIKO EPSON Corporation)
Epson Connect (x32 Version: - )
Epson Customer Participation (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (x32 Version: 2.40.0001 - SEIKO EPSON CORPORATION)
EPSON NX420 Series Printer Uninstall (Version: - SEIKO EPSON Corporation)
Epson Print CD (x32 Version: 2.05.00 - SEIKO EPSON CORPORATION)
EPSON Scan (x32 Version: - Seiko Epson Corporation)
EpsonNet Print (x32 Version: 2.5.00 - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (x32 Version: 3.3b - SEIKO EPSON CORPORATION)
ESU for Microsoft Windows 7 (x32 Version: 1.0.0 - Hewlett-Packard)
Evernote v. 4.2.2 (x32 Version: 4.2.2.3979 - Evernote Corp.)
Express Burn (x32 Version: 4.68 - NCH Software)
exPressit SE (x32 Version: 3.10.0000 - Medea International Ltd)
FVD Converter 1.0.2 (x32 Version: - flashvideodownloader.org)
GadgetBox (x32 Version: 1.0 - GadgetBox) <==== ATTENTION
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GorillaPrice (x32 Version: - )
HandBrake 0.9.9.1 (x32 Version: 0.9.9.1 - )
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
HP 3D DriveGuard (Version: 4.1.5.1 - Hewlett-Packard Company)
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Connection Manager (x32 Version: 4.0.45.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (x32 Version: 1.2.0.0 - Hewlett-Packard)
HP DVB-T TV Tuner 8.0.64.43 (x32 Version: 8.0.64.43 - )
HP MovieStore (x32 Version: 1.0.047 - Hewlett-Packard) Hidden
HP MovieStore (x32 Version: 2.0 - Hewlett-Packard)
HP On Screen Display (x32 Version: 1.1.2 - Hewlett-Packard Company)
HP Power Manager (x32 Version: 1.2.1 - Hewlett-Packard Company)
HP Product Detection (x32 Version: 11.14.0001 - HP)
HP Quick Launch (x32 Version: 2.3.6 - Hewlett-Packard Company)
HP Setup (x32 Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (x32 Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP SimplePass 2011 (x32 Version: 5.1.0.495 - Hewlett-Packard)
HP Software Framework (x32 Version: 4.1.6.1 - Hewlett-Packard Company)
HP Support Assistant (x32 Version: 5.2.9.2 - Hewlett-Packard Company)
HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
IDT Audio (x32 Version: 1.0.6329.0 - IDT)
ImageCompressor (x32 Version: 1.0.0 - Rajput Y H)
iTunes (Version: 10.7.0.21 - Apple Inc.)
Java 7 Update 25 (x32 Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 4 (64-bit) (Version: 1.7.0.40 - Oracle)
Java 7 Update 4 (64-bit) (Version: 7.0.40 - Oracle)
JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (x32 Version: 1.3 - Riot Games)
Magic DVD Copier V8.1.0 (x32 Version: - Magic DVD Software, Inc.)
Memorex exPressit Label Design Studio (x32 Version: - )
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Click-to-Run 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - English (x32 Version: 14.0.5131.5000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.) Hidden
MotioninJoy Gamepad tool 0.7.1001 (Version: 0.7.1001 - www.motioninjoy.com)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
Norton Security Scan (x32 Version: 4.0.0.48 - Symantec Corporation)
ooVoo (x32 Version: 3.6.1008 - ooVoo LLC.)
PDFCreator (x32 Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
Pivot Animator version 4.1.10 (x32 Version: 4.1.10 - Motus Software Ltd)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 9.2 - Qualcomm Atheros)
QuickShare (x32 Version: 1.6.1.931 - Linkury Inc.) <==== ATTENTION
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Ralink RT5390 802.11b/g/n WiFi Adapter (x32 Version: 3.01.16.1 - Ralink)
Razer Comms (x32 Version: 1.82.15 - Razer Inc.)
Razer Core (x32 Version: 1.0.1.56 - Razer Inc)
Razer Game Booster (x32 Version: 4.1.59.0 - Razer Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011 - Realtek)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (x32 Version: 6.1.7600.80 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
RoxioNow Player (x32 Version: 1.9.5.103 - RoxioNow)
Safe Saver (x32 Version: 1.27.153.8 - Safe Saver)
SixaxisPairTool 0.2.3 (x32 Version: 0.2.3 - Dancing Pixel Studios)
Skype Click to Call (x32 Version: 6.13.13771 - Skype Technologies S.A.)
Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.)
Steam (x32 Version: - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.3.29.0 - Synaptics Incorporated)
TightVNC (Version: 2.7.10.0 - GlavSoft LLC.)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation)
Validity Sensors DDK (Version: 3.1.374 - Validity Sensors, Inc.)
Validity WBF DDK (Version: 4.3.118.0 - Validity Sensors, Inc.)
Video Screensaver 1.0 (x32 Version: 1.0 - rodflash.com)
VideoPad Video Editor (x32 Version: 3.04 - NCH Software)
VirtualDJ Home FREE (x32 Version: 7.0.5 - Atomix Productions)
Wacom (Version: 5.3.2-1 - Wacom Technology Corp.)
WBFS Manager 3.0 (x32 Version: 3.0 - AlexDP)
Webexp Enhanced (x32 Version: 1.1 - Webexp Enhanced) <==== ATTENTION
WebTablet FB Plugin 32 bit (x32 Version: 2.1.0.2 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (Version: 2.1.0.2 - Wacom Technology Corp.)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Movie Maker 2.6 (x32 Version: 2.6.4037.0 - Microsoft Corporation)
WinRAR 4.20 (32-bit) (x32 Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
29-01-2014 22:47:55 ComboFix created restore point
01-02-2014 18:28:16 Windows Update
09-02-2014 16:25:27 Windows Update
==================== Hosts content: ==========================
2009-07-13 21:34 - 2013-04-26 01:31 - 00000878 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {19115EF8-9702-4CCA-B3B1-2DF41BFCA889} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-27] (Google Inc.)
Task: {1EFD3500-48C3-4B68-BFE3-136E81ADD383} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {358E9F26-0F15-4F5F-86B3-C9F5B83E8073} - System32\Tasks\Safe Saver-firefoxinstaller => C:\Program Files (x86)\Safe Saver\Safe Saver-firefoxinstaller.exe
Task: {3AFFD0E9-B0D3-4A11-88E9-86AA7DF9D0CA} - System32\Tasks\HPCeeScheduleForAARONS-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {463D73E6-B699-488D-9B8A-90A5DB530D14} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-27] (Google Inc.)
Task: {48F04C03-DE0D-46D1-AEE3-D768F58CABC3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {4D911614-0140-49A3-BA6D-ECB22061B3AE} - System32\Tasks\AdobeAAMUpdater-1.0-Aarons-HP-Aarons => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {79365052-E51F-4C42-BC4F-7B53D5682161} - System32\Tasks\VisualBeeRecovery => C:\Users\Gabe\AppData\Local\VisualBeeExe\VisualBeeRecovery.exe
Task: {9BF559D5-26FF-408E-837B-985606EF4811} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)
Task: {A048CD7F-C316-4DDB-9E97-30294C47701C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company)
Task: {A5D4CB4C-872E-4882-A312-3DF48D1B9E93} - System32\Tasks\HPCeeScheduleForAarons => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {A6C526F5-2C68-439C-B659-AB9069136FA4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-10-06] (CyberLink)
Task: {C8414ADB-CB54-4AB0-888B-B189EC3BF602} - System32\Tasks\Norton Security Scan for Aarons => C:\Program Files (x86)\Norton Security Scan\Engine\4.0.0.48\Nss.exe [2013-05-07] (Symantec Corporation)
Task: {E6D5AF10-58C9-42D2-9BF3-8C23C9915441} - System32\Tasks\HPCeeScheduleForGabe => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {F020A4A5-16DD-4A89-8583-3244366C9EA4} - System32\Tasks\AdobeAAMUpdater-1.0-Aarons-HP-Gabe => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {F6F76818-125E-4E9E-AB52-95F29CFB6EBA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2012-02-22] (Microsoft)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForAARONS-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForAarons.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForGabe.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Norton Security Scan for Aarons.job => C:\PROGRA~2\NORTON~2\Engine\400~1.48\Nss.exe
==================== Loaded Modules (whitelisted) =============
2013-06-19 23:45 - 2013-06-19 23:45 - 03317616 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll
2010-06-24 04:21 - 2010-06-24 04:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll
2014-01-06 09:21 - 2012-11-20 16:13 - 00264192 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\D3DX8Wrapper.dll
2014-01-06 09:21 - 2013-11-12 09:57 - 00098304 _____ () C:\Program Files (x86)\Razer\Razer Game Booster\EasyHook32.dll
2014-02-04 12:54 - 2014-02-01 18:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-04 12:54 - 2014-02-01 18:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-04 12:54 - 2014-02-01 18:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-04 12:54 - 2014-02-01 18:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-04 12:54 - 2014-02-01 18:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sndappv2 => ""="service"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/09/2014 11:22:08 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/06/2014 00:27:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/05/2014 11:22:39 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/04/2014 11:58:10 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/03/2014 01:10:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/02/2014 02:02:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/01/2014 07:21:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/01/2014 01:24:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2014 01:55:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/29/2014 00:50:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (02/09/2014 11:21:33 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (02/06/2014 00:28:20 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (02/05/2014 11:22:01 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (02/04/2014 11:57:31 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (02/03/2014 01:10:45 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (02/02/2014 02:01:44 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (02/01/2014 07:21:19 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (02/01/2014 01:24:03 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (01/30/2014 01:55:17 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)
Error: (01/29/2014 06:10:18 PM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Microsoft Office Sessions:
=========================
Error: (02/09/2014 11:22:08 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/06/2014 00:27:47 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/05/2014 11:22:39 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/04/2014 11:58:10 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/03/2014 01:10:04 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/02/2014 02:02:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/01/2014 07:21:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/01/2014 01:24:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/30/2014 01:55:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/29/2014 00:50:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2014-01-27 21:43:01.106
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2014-01-27 21:43:01.066
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 43%
Total physical RAM: 3834.9 MB
Available physical RAM: 2175.33 MB
Total Pagefile: 9584.08 MB
Available Pagefile: 7241 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:450.84 GB) (Free:214.66 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:14.63 GB) (Free:1.62 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 8D715ADE)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=451 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
==================== End Of Log ============================