Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Computer not completely frozen, but sits and spins [Solved]


  • This topic is locked This topic is locked

#1
cowpuncher

cowpuncher

    Member

  • Member
  • PipPip
  • 58 posts
When I click on Internet Explorer to, for instance , check my e-mails, The entire page won't completely show. Or if I go ahead and click on mail, that page might! show up and if it does, I can click on a message and it will just disappear. And the arrow in the top left corner will continue to just spin. Sorry I don't know all the correct terminology, but I have been reading the Forum and it looks like ya'll would be the ones that could help me. :help:
  • 0

Advertisements


#2
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Howdy there Cowpuncher, Posted Image Welcome to the forums!
Posted Image. My name is Biscuithd and I will be assisting you with your Computer issues.

I know how upsetting it can be when one's computer is experiencing problems. I will try to help get things squared away. For a start please make sure that you...

  • Carefully read every post completely before doing anything.
  • If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Do not run any other scans or other software on your computer unless asked as it may make this repair more difficult.
Ok, let's get started. In order to figure out what is wrong with your computer, I'll need a diagnostic scan.

Download 'OTL by OldTimer' and save it to your desktop or move your existing copy into the said location.

  • Simply double-click the program icon to run it. It will ask for administrator privileges.

    Posted Image
  • Copy and paste the following into the Custom Scans/Fixes box:

    netsvcs BASESERVICES %SYSTEMDRIVE%\*.exe dir "%systemdrive%\*" /S /A:L /C /md5start services.* explorer.exe Userinit.exe svchost.exe /md5stop CREATERESTOREPOINT

  • Click Run Scan.
  • Files are being searched and it may take some time. Once done, two Notepad windows will appear, named OTL.txt and Extras.txt.
  • Alternatively, you can also find these at your desktop.
  • Copy and paste (CTRL + A and CTRL + C) the content of these logs in your next reply.

  • 0

#3
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Please ignore my previous post as there are errors within. Follow the instructions in post instead.

Howdy there Cowpuncher, Posted Image Welcome to the forums!
Posted Image. My name is Biscuithd and I will be assisting you with your Computer issues.

I know how upsetting it can be when one's computer is experiencing problems. I will try to help get things squared away. For a start please make sure that you...

  • Carefully read every post completely before doing anything.
  • If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Do not run any other scans or other software on your computer unless asked as it may make this repair more difficult.
Ok, let's get started. In order to figure out what is wrong with your computer, I'll need a diagnostic scan.

Download 'OTL by OldTimer' and save it to your desktop or move your existing copy into the said location.

  • Simply double-click the program icon to run it. It will ask for administrator privileges.

    Posted Image
  • Copy and paste the following into the Custom Scans/Fixes box:

netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
/md5start
rpcss.dll
/md5stop
CREATERESTOREPOINT




  • Click Run Scan.
  • Files are being searched and it may take some time. Once done, two Notepad windows will appear, named OTL.txt and Extras.txt.
  • Alternatively, you can also find these at your desktop.
  • Copy and paste (CTRL + A and CTRL + C) the content of these logs in your next reply.

  • 0

#4
cowpuncher

cowpuncher

    Member

  • Topic Starter
  • Member
  • PipPip
  • 58 posts
Thank you, Biscuithd! I have run the OTL logfile created on: 3/4/2014 11:23:47 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\star\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 2.82 Gb Available Physical Memory | 75.31% Memory free
9.37 Gb Paging File | 7.49 Gb Available in Paging File | 79.93% Paging File free
Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.33 Gb Total Space | 853.69 Gb Free Space | 93.06% Space Free | Partition Type: NTFS
Drive E: | 3.72 Gb Total Space | 3.72 Gb Free Space | 100.00% Space Free | Partition Type: FAT32

Computer Name: RIVERQUEEN | User Name: star | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found --
PRC - [2014/03/03 18:34:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\star\Downloads\OTL.exe
PRC - [2014/02/14 23:29:33 | 002,552,856 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
PRC - [2014/02/13 23:01:11 | 001,772,056 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe
PRC - [2014/02/13 23:01:11 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe
PRC - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe
PRC - [2013/10/03 12:56:36 | 000,206,880 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\UpdDlg.exe
PRC - [2013/09/10 02:50:14 | 000,079,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\saHookMain.exe
PRC - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe
PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2013/05/24 12:13:32 | 006,563,184 | ---- | M] (Systweak) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe
PRC - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe
PRC - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\SysWOW64\AsHookDevice.exe
PRC - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe


========== Modules (No Company Name) ==========

MOD - [2014/02/14 23:29:33 | 002,552,856 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
MOD - [2014/02/14 03:40:12 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\868ad9d8acc0bf80a973c0e4e9cae4fa\System.Core.ni.dll
MOD - [2014/02/14 03:40:08 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4412bbbb473c356b5ea3e1ea13b25f52\System.Management.ni.dll
MOD - [2014/02/14 03:39:41 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d682d06abf8257c72ce11cefd1d74cf5\CustomMarshalers.ni.dll
MOD - [2014/02/14 03:34:54 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\b34b348a9935338b1282fd0c9309eb1f\System.ServiceProcess.ni.dll
MOD - [2014/02/14 03:34:47 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b0f9a4f138cc569a7526f97b93808d3e\System.Web.Services.ni.dll
MOD - [2014/02/14 03:34:40 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\faf3ae85f2470505e1b32d2154de60ef\System.EnterpriseServices.ni.dll
MOD - [2014/02/14 03:34:39 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\fe1942c05eda4f9744f80afb4ae76a2d\System.Data.ni.dll
MOD - [2014/02/14 03:34:39 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\cd3556d1162e8f7df77611c9c4253f7c\System.Transactions.ni.dll
MOD - [2014/02/14 03:34:20 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll
MOD - [2014/02/14 03:34:14 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll
MOD - [2014/02/14 03:34:13 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7c233151b685c540524f87931632423a\System.Deployment.ni.dll
MOD - [2014/02/14 03:33:59 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll
MOD - [2014/02/14 03:33:56 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll
MOD - [2014/02/14 03:33:55 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll
MOD - [2014/02/14 03:33:48 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll
MOD - [2014/02/13 23:01:11 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\log4cplusU.dll
MOD - [2013/11/06 17:05:00 | 000,198,688 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\BPTrayPlugin.dll
MOD - [2013/10/03 12:56:36 | 000,206,880 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\UpdDlg.exe
MOD - [2013/05/24 12:13:32 | 001,730,928 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\aspsys.dll
MOD - [2013/01/22 10:28:40 | 000,403,048 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\Win32RenderingEngine.dll
MOD - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe
MOD - [2012/07/25 11:03:14 | 000,886,272 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll
MOD - [2012/07/25 11:03:12 | 000,168,448 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\unrar.dll
MOD - [2010/11/04 19:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010/11/04 19:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
MOD - [2009/09/29 21:33:07 | 000,024,576 | ---- | M] () -- C:\Windows\SysWOW64\AsIO.dll
MOD - [2009/06/10 15:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
MOD - [2009/03/25 17:53:14 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
MOD - [2009/01/15 15:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll


========== Services (SafeList) ==========

SRV:64bit: - [2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013/08/07 12:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2013/08/07 12:34:16 | 000,241,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2011/04/20 01:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2014/02/21 05:26:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/02/13 23:01:11 | 001,772,056 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe -- (vToolbarUpdater17.3.0)
SRV - [2014/02/06 09:27:58 | 000,036,392 | ---- | M] (Just Develop It) [Auto | Running] -- C:\Program Files (x86)\MyPC Backup\BackupStack.exe -- (BackupStack)
SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe -- (RumorServer)
SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe -- (myAgtSvc)
SRV - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service)
SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe -- (YNanoService)
SRV - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/03/18 15:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AsHookDevice.exe -- (Device Handle Service)
SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/02/13 23:01:11 | 000,046,368 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:64bit: - [2013/08/07 12:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2013/08/07 12:39:04 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)
DRV:64bit: - [2013/08/07 12:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2013/08/07 12:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2013/08/07 12:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2013/06/25 10:34:22 | 000,109,336 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:64bit: - [2013/05/21 16:38:50 | 000,036,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)
DRV:64bit: - [2013/04/10 10:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013/02/19 13:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2012/08/23 08:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 08:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/03/01 00:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/04/20 00:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/03/02 05:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2010/02/16 12:44:18 | 000,191,960 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs.sys -- (CbFs)
DRV:64bit: - [2010/01/27 19:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009/11/10 02:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)
DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 14:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009/06/10 14:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/04 19:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.iyogi.com/
IE - HKLM\..\URLSearchHook: {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...r={searchTerms}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://start.sweetpa...E-BCAEC599FA63}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blankhttp://www.yahoo.com/ [binary data]
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {251acd30-3292-4703-a43a-859c0a54df3b} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{206AFE87-FBBD-4527-974C-1E2332BF0A4F}: "URL" = http://search.yahoo....p={SearchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{313AF08E-E3AF-4587-BF46-2626F917FCC1}: "URL" = http://www.google.co...utputEncoding?}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{3949FC8F-E518-4A46-9CC0-252A3F83A760}: "URL" = http://search.yahoo....rtPage?}&fr=ie8
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg....sa&d=2014-02-13 23:02:02&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...r={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{C3FD9CD1-13D1-4172-A57C-72FAB7C3EEA2}: "URL" = http://rover.ebay.co...e={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{C6DFFB82-F7B4-44A3-857A-C2FEAFE20728}: "URL" = http://www.microsoft...s={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{DA5C4FE5-7F87-4573-99F8-44CF88C691A6}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....ms}&fr=chr-tyc8
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (MindSpark)
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\NPMcFFPlg.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]_8h.com: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin [2014/03/02 15:31:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\iYogi\iYogiPasswordManager\iYogiPassMgr.xpi
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\ [2014/03/02 15:31:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK


Hosts file not found
O2:64bit: - BHO: (Updater By SweetPacks) - {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} - C:\Program Files\Updater By SweetPacks\Extension64.dll File not found
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)
O2 - BHO: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
O2 - BHO: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O2 - BHO: (no name) - {66516A07-F617-488A-90CF-4E690CFB3C5F} - No CLSID value found.
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)
O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.3.1.91\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (no name) - {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} - No CLSID value found.
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.3.1.91\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Default Visible - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {251ACD30-3292-4703-A43A-859C0A54DF3B} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {4959472D-5636-006A-76A7-7A786E7484D7} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Allin1Convert Home Page Guard 64 bit] "C:\PROGRA~2\ALLIN1~2\bar\1.bin\AppIntegrator64.exe" File not found
O4 - HKLM..\Run: [McAfee Managed Services Tray] C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.Exe ()
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
O4 - Startup: C:\Users\McAfeeMVSUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
O4 - Startup: C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: //about.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Exclude.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //LanguageSelection.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Message.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryCmd.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryNag.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyNotification.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //NOCLessUpdate.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //quarantine.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //ScanNow.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //strings.vbs/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Template.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Update.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //VirFound.htm/ ([]myui in Trusted sites)
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.104.96.61
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D5E5416-D699-45AF-B5E2-36E94B47D1E7}: DhcpNameServer = 75.104.96.61
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\rebinfo - No CLSID value found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\rebinfo - No CLSID value found
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll (AVG Secure Search)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - File not found
O20:64bit: - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\x64\mgrldr.dll) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: x64 - (c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll) - File not found
O36 - AppCertDlls: x86 - (c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll) - File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/02/28 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2014/02/28 20:30:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2014/02/28 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2014/02/23 16:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Systems
[2014/02/14 03:02:04 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2014/02/14 03:01:04 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2014/02/14 03:01:04 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2014/02/14 03:01:03 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014/02/14 03:01:03 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014/02/14 03:01:02 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014/02/14 03:01:02 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014/02/14 03:01:02 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2014/02/14 03:01:01 | 000,627,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014/02/14 03:01:01 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2014/02/14 03:01:01 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2014/02/14 03:01:01 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014/02/14 03:01:01 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014/02/14 03:01:01 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014/02/14 03:01:00 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014/02/14 03:01:00 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014/02/14 03:01:00 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014/02/14 03:01:00 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2014/02/14 03:01:00 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2014/02/14 03:01:00 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2014/02/14 03:00:59 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014/02/14 03:00:57 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014/02/14 03:00:57 | 001,964,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014/02/14 03:00:52 | 005,768,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014/02/13 23:05:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/02/13 23:03:13 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Local\AVG SafeGuard toolbar
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup
[2014/02/13 23:02:00 | 000,046,368 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2014/02/13 23:01:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search
[2014/02/13 23:01:22 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar
[2014/02/13 23:01:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG SafeGuard toolbar
[2014/02/13 22:57:45 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2014/02/13 10:02:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2014/02/13 10:02:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2014/02/13 10:02:06 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2014/02/13 10:02:06 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2014/02/13 10:02:06 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2014/02/13 10:02:06 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2014/02/13 10:02:05 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2014/02/13 10:02:05 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2014/02/13 10:02:05 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2014/02/13 10:02:04 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2014/02/13 10:02:04 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2014/02/13 10:02:04 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2014/02/13 10:02:04 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2014/02/13 10:02:04 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2014/02/13 10:02:04 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2014/02/13 10:02:03 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2014/02/13 10:02:03 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2014/02/13 10:02:03 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2014/02/13 10:02:03 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2014/02/13 10:01:55 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2014/02/13 10:01:54 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2014/02/11 17:39:02 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2014/02/11 17:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2014/02/11 10:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014/02/07 01:12:01 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 3
[2014/02/07 01:11:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv3
[2014/02/06 23:22:41 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 2
[2014/02/06 23:22:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv2
[2014/02/06 21:41:45 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 1
[2014/02/06 21:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv1
[2014/02/06 20:10:17 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ear Training Coach 3&4
[2014/02/06 20:09:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc34
[2014/02/06 19:24:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc12
[2014/02/06 18:58:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adventus
[2014/02/06 18:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Piano Suite
[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\ZapWallPaper
[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Local\ZapWallPaper
[2014/02/06 17:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZapWallPaper
[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ZapWallPaper
[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZapWallPaper
[2014/02/06 14:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Cisco Systems
[2014/02/06 10:36:44 | 000,000,000 | ---D | C] -- C:\Logs
[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Users\star\AppData\Local\*.tmp files -> C:\Users\star\AppData\Local\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/03/04 11:26:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/03/04 11:08:00 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/03/04 06:25:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/03/03 22:22:28 | 000,742,778 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/03/03 22:22:28 | 000,636,026 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/03/03 22:22:28 | 000,110,484 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/03/03 18:26:33 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/03/03 18:26:33 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/03/03 18:19:19 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2014/03/03 18:19:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/03/03 18:19:02 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys
[2014/02/23 18:23:35 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/02/21 05:26:54 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014/02/21 05:26:54 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014/02/13 23:03:01 | 000,001,973 | ---- | M] () -- C:\Users\star\Desktop\Sync Folder.lnk
[2014/02/13 23:02:53 | 000,001,101 | ---- | M] () -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/02/13 23:02:53 | 000,001,091 | ---- | M] () -- C:\Users\star\Desktop\MyPC Backup.lnk
[2014/02/13 23:01:11 | 000,046,368 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2014/02/11 17:39:02 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2014/02/11 10:35:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/02/06 19:30:37 | 000,271,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014/02/06 05:30:12 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2014/02/06 05:07:39 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014/02/06 05:06:47 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2014/02/06 04:56:03 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014/02/06 04:52:11 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014/02/06 04:49:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2014/02/06 04:48:11 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014/02/06 04:32:49 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014/02/06 04:17:15 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2014/02/06 04:11:37 | 005,768,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014/02/06 04:01:36 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014/02/06 04:00:46 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2014/02/06 03:57:13 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014/02/06 03:52:21 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014/02/06 03:50:32 | 002,041,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014/02/06 03:49:22 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014/02/06 03:47:22 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2014/02/06 03:46:27 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014/02/06 03:25:43 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2014/02/06 03:09:30 | 001,964,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014/02/06 02:40:06 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014/02/06 02:34:31 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014/02/03 14:52:32 | 000,000,134 | ---- | M] () -- C:\Users\star\Desktop\Microsoft Fix it.url
[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Users\star\AppData\Local\*.tmp files -> C:\Users\star\AppData\Local\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/03/03 14:58:16 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl
[2014/02/23 16:35:49 | 000,002,179 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Connect.lnk
[2014/02/13 23:05:00 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/02/13 23:03:01 | 000,001,973 | ---- | C] () -- C:\Users\star\Desktop\Sync Folder.lnk
[2014/02/13 23:02:53 | 000,001,101 | ---- | C] () -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/02/13 23:02:53 | 000,001,091 | ---- | C] () -- C:\Users\star\Desktop\MyPC Backup.lnk
[2014/02/11 10:35:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/02/03 14:52:20 | 000,000,134 | ---- | C] () -- C:\Users\star\Desktop\Microsoft Fix it.url
[2013/08/30 23:33:15 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013/06/13 11:02:19 | 145,212,540 | ---- | C] () -- C:\Users\star\AppData\Roaming\RegBackupiYogi.reg
[2013/06/13 10:52:27 | 152,715,978 | ---- | C] () -- C:\Users\star\AppData\Roaming\RegBackupPCO.reg
[2013/04/13 00:01:43 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013/03/17 17:34:28 | 000,000,036 | ---- | C] () -- C:\Users\star\AppData\Local\housecall.guid.cache
[2011/06/21 00:28:30 | 000,276,773 | ---- | C] () -- C:\Users\star\chain work - Topics - Jewelry Making Daily_aspx.mht
[2011/06/21 00:23:26 | 000,467,368 | ---- | C] () -- C:\Users\star\Five Free Designs for Making Wire Jewelry - Jewelry Making Daily - Jewelry Making Daily_aspx.mht
[2011/06/12 11:00:49 | 000,408,133 | ---- | C] () -- C:\Users\star\Three_Rings.pdf

========== ZeroAccess Check ==========

[2014/03/02 15:45:43 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report> OTL logfile created on: 3/4/2014 5:14:26 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\star\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 2.69 Gb Available Physical Memory | 71.73% Memory free
9.37 Gb Paging File | 7.41 Gb Available in Paging File | 79.10% Paging File free
Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.33 Gb Total Space | 853.63 Gb Free Space | 93.06% Space Free | Partition Type: NTFS
Drive E: | 3.72 Gb Total Space | 3.72 Gb Free Space | 100.00% Space Free | Partition Type: FAT32

Computer Name: RIVERQUEEN | User Name: starla.nicholson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found --
PRC - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
PRC - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe
PRC - [2014/03/04 16:57:59 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe
PRC - [2014/03/03 18:34:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\star\Downloads\OTL.exe
PRC - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe
PRC - [2013/10/03 12:56:36 | 000,206,880 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\UpdDlg.exe
PRC - [2013/09/10 02:50:14 | 000,079,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\saHookMain.exe
PRC - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe
PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2013/05/24 12:13:32 | 006,563,184 | ---- | M] (Systweak) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe
PRC - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe
PRC - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\SysWOW64\AsHookDevice.exe
PRC - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe


========== Modules (No Company Name) ==========

MOD - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
MOD - [2014/03/04 16:57:59 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\log4cplusU.dll
MOD - [2014/02/14 03:40:12 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\868ad9d8acc0bf80a973c0e4e9cae4fa\System.Core.ni.dll
MOD - [2014/02/14 03:40:08 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4412bbbb473c356b5ea3e1ea13b25f52\System.Management.ni.dll
MOD - [2014/02/14 03:39:41 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d682d06abf8257c72ce11cefd1d74cf5\CustomMarshalers.ni.dll
MOD - [2014/02/14 03:34:54 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\b34b348a9935338b1282fd0c9309eb1f\System.ServiceProcess.ni.dll
MOD - [2014/02/14 03:34:47 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b0f9a4f138cc569a7526f97b93808d3e\System.Web.Services.ni.dll
MOD - [2014/02/14 03:34:40 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\faf3ae85f2470505e1b32d2154de60ef\System.EnterpriseServices.ni.dll
MOD - [2014/02/14 03:34:39 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\fe1942c05eda4f9744f80afb4ae76a2d\System.Data.ni.dll
MOD - [2014/02/14 03:34:39 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\cd3556d1162e8f7df77611c9c4253f7c\System.Transactions.ni.dll
MOD - [2014/02/14 03:34:20 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll
MOD - [2014/02/14 03:34:14 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll
MOD - [2014/02/14 03:34:13 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7c233151b685c540524f87931632423a\System.Deployment.ni.dll
MOD - [2014/02/14 03:33:59 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll
MOD - [2014/02/14 03:33:56 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll
MOD - [2014/02/14 03:33:55 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll
MOD - [2014/02/14 03:33:48 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll
MOD - [2013/11/06 17:05:00 | 000,198,688 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\BPTrayPlugin.dll
MOD - [2013/10/03 12:56:36 | 000,206,880 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\UpdDlg.exe
MOD - [2013/05/24 12:13:32 | 001,730,928 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\aspsys.dll
MOD - [2013/01/22 10:28:40 | 000,403,048 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\Win32RenderingEngine.dll
MOD - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe
MOD - [2012/07/25 11:03:14 | 000,886,272 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll
MOD - [2012/07/25 11:03:12 | 000,168,448 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\unrar.dll
MOD - [2010/11/04 19:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010/11/04 19:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
MOD - [2009/09/29 21:33:07 | 000,024,576 | ---- | M] () -- C:\Windows\SysWOW64\AsIO.dll
MOD - [2009/06/10 15:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
MOD - [2009/03/25 17:53:14 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
MOD - [2009/01/15 15:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll


========== Services (SafeList) ==========

SRV:64bit: - [2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013/08/07 12:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2013/08/07 12:34:16 | 000,241,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2011/04/20 01:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe -- (vToolbarUpdater18.0.0)
SRV - [2014/02/21 05:26:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/02/06 09:27:58 | 000,036,392 | ---- | M] (Just Develop It) [Auto | Running] -- C:\Program Files (x86)\MyPC Backup\BackupStack.exe -- (BackupStack)
SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe -- (RumorServer)
SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe -- (myAgtSvc)
SRV - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service)
SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe -- (YNanoService)
SRV - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/03/18 15:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AsHookDevice.exe -- (Device Handle Service)
SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:64bit: - [2013/08/07 12:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2013/08/07 12:39:04 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)
DRV:64bit: - [2013/08/07 12:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2013/08/07 12:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2013/08/07 12:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2013/06/25 10:34:22 | 000,109,336 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:64bit: - [2013/05/21 16:38:50 | 000,036,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)
DRV:64bit: - [2013/04/10 10:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013/02/19 13:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2012/08/23 08:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 08:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/03/01 00:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/04/20 00:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/03/02 05:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2010/02/16 12:44:18 | 000,191,960 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs.sys -- (CbFs)
DRV:64bit: - [2010/01/27 19:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009/11/10 02:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)
DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 14:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009/06/10 14:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/04 19:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft..../?LinkId=255141
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft..../?LinkId=255141
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft..../?LinkId=255141
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.iyogi.com/
IE - HKLM\..\URLSearchHook: {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...r={searchTerms}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://start.sweetpa...E-BCAEC599FA63}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blankhttp://www.yahoo.com/ [binary data]
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {251acd30-3292-4703-a43a-859c0a54df3b} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{206AFE87-FBBD-4527-974C-1E2332BF0A4F}: "URL" = http://search.yahoo....p={SearchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{313AF08E-E3AF-4587-BF46-2626F917FCC1}: "URL" = http://www.google.co...utputEncoding?}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{3949FC8F-E518-4A46-9CC0-252A3F83A760}: "URL" = http://search.yahoo....rtPage?}&fr=ie8
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg....sa&d=2014-02-13 23:02:02&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...r={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{C3FD9CD1-13D1-4172-A57C-72FAB7C3EEA2}: "URL" = http://rover.ebay.co...e={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{C6DFFB82-F7B4-44A3-857A-C2FEAFE20728}: "URL" = http://www.microsoft...s={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{DA5C4FE5-7F87-4573-99F8-44CF88C691A6}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....ms}&fr=chr-tyc8
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?ilc=1
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1003\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1004\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (MindSpark)
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\NPMcFFPlg.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]_8h.com: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin [2014/03/02 15:31:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\iYogi\iYogiPasswordManager\iYogiPassMgr.xpi
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\ [2014/03/02 15:31:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK


Hosts file not found
O2:64bit: - BHO: (Updater By SweetPacks) - {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} - C:\Program Files\Updater By SweetPacks\Extension64.dll File not found
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)
O2 - BHO: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O2 - BHO: (no name) - {66516A07-F617-488A-90CF-4E690CFB3C5F} - No CLSID value found.
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (no name) - {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} - No CLSID value found.
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Default Visible - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {251ACD30-3292-4703-A43A-859C0A54DF3B} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {4959472D-5636-006A-76A7-7A786E7484D7} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Allin1Convert Home Page Guard 64 bit] "C:\PROGRA~2\ALLIN1~2\bar\1.bin\AppIntegrator64.exe" File not found
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [McAfee Managed Services Tray] C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.Exe ()
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1894108233-2390997088-678213063-1004..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-1894108233-2390997088-678213063-1004..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
O4 - Startup: C:\Users\McAfeeMVSUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
O4 - Startup: C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: //about.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Exclude.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //LanguageSelection.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Message.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryCmd.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryNag.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyNotification.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //NOCLessUpdate.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //quarantine.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //ScanNow.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //strings.vbs/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Template.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Update.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //VirFound.htm/ ([]myui in Trusted sites)
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.104.96.61
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D5E5416-D699-45AF-B5E2-36E94B47D1E7}: DhcpNameServer = 75.104.96.61
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\rebinfo - No CLSID value found
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\rebinfo - No CLSID value found
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - File not found
O20:64bit: - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\x64\mgrldr.dll) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corp.)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corp.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: x64 - (c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll) - File not found
O36 - AppCertDlls: x86 - (c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll) - File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)


========== Files/Folders - Created Within 30 Days ==========

[2014/03/04 16:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2014/03/04 16:58:07 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\cache
[2014/02/28 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2014/02/28 20:30:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2014/02/28 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2014/02/23 16:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Systems
[2014/02/14 03:02:04 | 000,548,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2014/02/14 03:01:04 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2014/02/14 03:01:04 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2014/02/14 03:01:03 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014/02/14 03:01:03 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014/02/14 03:01:02 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014/02/14 03:01:02 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014/02/14 03:01:02 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2014/02/14 03:01:01 | 000,627,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014/02/14 03:01:01 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2014/02/14 03:01:01 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2014/02/14 03:01:01 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014/02/14 03:01:01 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014/02/14 03:01:01 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014/02/14 03:01:00 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014/02/14 03:01:00 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014/02/14 03:01:00 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014/02/14 03:01:00 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2014/02/14 03:01:00 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2014/02/14 03:01:00 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2014/02/14 03:00:59 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014/02/14 03:00:57 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014/02/14 03:00:57 | 001,964,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014/02/14 03:00:52 | 005,768,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014/02/13 23:05:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/02/13 23:03:13 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Local\AVG SafeGuard toolbar
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup
[2014/02/13 23:02:00 | 000,050,976 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2014/02/13 23:01:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search
[2014/02/13 23:01:22 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar
[2014/02/13 23:01:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG SafeGuard toolbar
[2014/02/13 22:57:45 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2014/02/13 10:02:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2014/02/13 10:02:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2014/02/13 10:02:06 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2014/02/13 10:02:06 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2014/02/13 10:02:06 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2014/02/13 10:02:06 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2014/02/13 10:02:05 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2014/02/13 10:02:05 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2014/02/13 10:02:05 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2014/02/13 10:02:04 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2014/02/13 10:02:04 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2014/02/13 10:02:04 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2014/02/13 10:02:04 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2014/02/13 10:02:04 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2014/02/13 10:02:04 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2014/02/13 10:02:03 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2014/02/13 10:02:03 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2014/02/13 10:02:03 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2014/02/13 10:02:03 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2014/02/13 10:01:55 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2014/02/13 10:01:54 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2014/02/11 17:39:02 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2014/02/11 17:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2014/02/11 10:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014/02/07 01:12:01 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 3
[2014/02/07 01:11:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv3
[2014/02/06 23:22:41 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 2
[2014/02/06 23:22:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv2
[2014/02/06 21:41:45 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 1
[2014/02/06 21:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv1
[2014/02/06 20:10:17 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ear Training Coach 3&4
[2014/02/06 20:09:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc34
[2014/02/06 19:24:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc12
[2014/02/06 18:58:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adventus
[2014/02/06 18:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Piano Suite
[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\ZapWallPaper
[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Local\ZapWallPaper
[2014/02/06 17:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZapWallPaper
[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ZapWallPaper
[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZapWallPaper
[2014/02/06 14:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Cisco Systems
[2014/02/06 10:36:44 | 000,000,000 | ---D | C] -- C:\Logs
[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Users\star\AppData\Local\*.tmp files -> C:\Users\star\AppData\Local\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/03/04 17:08:00 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2014/03/04 16:26:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/03/04 06:25:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/03/03 22:22:28 | 000,742,778 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/03/03 22:22:28 | 000,636,026 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/03/03 22:22:28 | 000,110,484 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/03/03 18:26:33 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/03/03 18:26:33 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/03/03 18:19:19 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2014/03/03 18:19:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/03/03 18:19:02 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys
[2014/02/23 18:23:35 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/02/21 05:26:54 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014/02/21 05:26:54 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014/02/13 23:03:01 | 000,001,973 | ---- | M] () -- C:\Users\star\Desktop\Sync Folder.lnk
[2014/02/13 23:02:53 | 000,001,101 | ---- | M] () -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/02/13 23:02:53 | 000,001,091 | ---- | M] () -- C:\Users\star\Desktop\MyPC Backup.lnk
[2014/02/11 17:39:02 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2014/02/11 10:35:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/02/06 19:30:37 | 000,271,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014/02/06 05:30:12 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2014/02/06 05:07:39 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014/02/06 05:06:47 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2014/02/06 04:56:03 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014/02/06 04:52:11 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014/02/06 04:49:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2014/02/06 04:48:11 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014/02/06 04:32:49 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014/02/06 04:17:15 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2014/02/06 04:11:37 | 005,768,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014/02/06 04:01:36 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014/02/06 04:00:46 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2014/02/06 03:57:13 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014/02/06 03:52:21 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014/02/06 03:50:32 | 002,041,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014/02/06 03:49:22 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014/02/06 03:47:22 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2014/02/06 03:46:27 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014/02/06 03:25:43 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2014/02/06 03:09:30 | 001,964,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014/02/06 02:40:06 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014/02/06 02:34:31 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014/02/03 14:52:32 | 000,000,134 | ---- | M] () -- C:\Users\star\Desktop\Microsoft Fix it.url
[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Users\star\AppData\Local\*.tmp files -> C:\Users\star\AppData\Local\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/03/03 14:58:16 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl
[2014/02/23 16:35:49 | 000,002,179 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Connect.lnk
[2014/02/13 23:05:00 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/02/13 23:03:01 | 000,001,973 | ---- | C] () -- C:\Users\star\Desktop\Sync Folder.lnk
[2014/02/13 23:02:53 | 000,001,101 | ---- | C] () -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/02/13 23:02:53 | 000,001,091 | ---- | C] () -- C:\Users\star\Desktop\MyPC Backup.lnk
[2014/02/11 10:35:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/02/03 14:52:20 | 000,000,134 | ---- | C] () -- C:\Users\star\Desktop\Microsoft Fix it.url
[2013/08/30 23:33:15 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013/06/13 11:02:19 | 145,212,540 | ---- | C] () -- C:\Users\star\AppData\Roaming\RegBackupiYogi.reg
[2013/06/13 10:52:27 | 152,715,978 | ---- | C] () -- C:\Users\star\AppData\Roaming\RegBackupPCO.reg
[2013/04/13 00:01:43 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013/03/17 17:34:28 | 000,000,036 | ---- | C] () -- C:\Users\star\AppData\Local\housecall.guid.cache
[2011/06/21 00:28:30 | 000,276,773 | ---- | C] () -- C:\Users\star\chain work - Topics - Jewelry Making Daily_aspx.mht
[2011/06/21 00:23:26 | 000,467,368 | ---- | C] () -- C:\Users\star\Five Free Designs for Making Wire Jewelry - Jewelry Making Daily - Jewelry Making Daily_aspx.mht
[2011/06/12 11:00:49 | 000,408,133 | ---- | C] () -- C:\Users\star\Three_Rings.pdf

========== ZeroAccess Check ==========

[2014/03/02 15:45:43 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== Custom Scans ==========

========== Base Services ==========
SRV:64bit: - [2009/07/13 19:40:01 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:64bit: - [2013/02/26 23:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:64bit: - [2009/07/13 19:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:64bit: - [2010/11/20 07:27:23 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:64bit: - [2010/11/20 07:25:45 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:64bit: - [2013/09/24 19:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
SRV:64bit: - [2009/07/13 19:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2009/07/13 19:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:64bit: - [2012/07/04 16:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:64bit: - [2013/07/08 23:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV - [2013/07/08 22:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
SRV:64bit: - [2010/11/20 07:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:64bit: - [2010/11/20 07:26:04 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2010/11/20 06:18:30 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2011/03/03 00:24:16 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:64bit: - [2009/07/13 19:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
SRV:64bit: - [2009/07/13 19:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2009/07/13 19:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:64bit: - [2009/07/13 19:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:64bit: - [2010/11/20 07:26:39 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:64bit: - [2009/07/13 19:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:64bit: - [2009/07/13 19:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:64bit: - [2009/07/13 19:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:64bit: - [2009/07/13 19:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
SRV - [2009/07/13 19:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
SRV:64bit: - [2012/10/03 11:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:64bit: - [2009/07/13 19:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:64bit: - [2011/05/24 05:42:55 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:64bit: - [2012/02/11 00:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
SRV:64bit: - [2013/09/24 19:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
No service found with a name of EMDMgmt
SRV:64bit: - [2009/07/13 19:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:64bit: - [2010/11/20 07:27:24 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:64bit: - [2010/11/20 07:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:64bit: - [2010/11/20 07:27:25 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:64bit: - [2013/09/24 19:03:24 | 000,030,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:64bit: - [2009/07/13 19:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:64bit: - [2010/11/20 07:27:26 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:64bit: - [2010/11/20 07:27:25 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2010/11/20 06:21:19 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:64bit: - [2010/11/20 07:27:25 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:64bit: - [2010/11/20 07:27:26 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2010/11/20 06:21:28 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:64bit: - [2009/07/13 19:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2012/04/30 23:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:64bit: - [2010/11/20 07:25:27 | 001,600,512 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:64bit: - [2010/11/20 07:25:42 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
SRV:64bit: - [2010/11/20 07:25:42 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2010/11/20 07:27:25 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010/11/20 07:27:28 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
SRV:64bit: - [2010/11/20 07:26:59 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:64bit: - [2010/11/20 07:27:28 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:64bit: - [2010/11/20 07:24:58 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
SRV - [2010/11/20 06:17:22 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
SRV:64bit: - [2009/07/13 19:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:64bit: - [2012/06/02 16:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:64bit: - [2010/11/20 07:26:07 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:64bit: - [2009/07/13 19:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
SRV:64bit: - [2010/11/20 07:27:28 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)

< %SYSTEMDRIVE%/*.exe >
Invalid Switch: *.exe

< c:\programfiles(x86)\Google\Desktop >

< c:\programfiles\Google\Desktop >

< dir"%systemdrive%\*"/S/A:L/C >

< MD5 for: RPCSS.DLL >
[2010/11/20 07:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=5C627D1B1138676C0A7AB2C2C190D123 -- C:\Windows\SysNative\rpcss.dll
[2010/11/20 07:27:24 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=5C627D1B1138676C0A7AB2C2C190D123 -- C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d\rpcss.dll
[2009/07/13 19:41:53 | 000,509,440 | ---- | M] (Microsoft Corporation) MD5=7266972E86890E2B30C0C322E906B027 -- C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll

< CREATESTOREPOINT >

< End of report >
I've never copy and pasted before, so if only the first report showed, I will send the other.
  • 0

#5
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Hi cowpuncher

I've never copy and pasted before, so if only the first report showed, I will send the other.

Don't worry, you're doing fine. Though yes, the posting for the Extras.txt is missing. You should be able to use notepad to open the logfile located at C:\Users\star\Downloads\extras.txt

Either open Notepad and use Open on the File pull down or use Explorer to navigate to C:\Users\star\Downloads\extras.txt. Then double click the file and Notepad will open and you can copy/paste the contents into the reply.

If you are unable to locate the file, let me know and we'll figure out a "Plan B".
  • 0

#6
cowpuncher

cowpuncher

    Member

  • Topic Starter
  • Member
  • PipPip
  • 58 posts
Ok, I'm ready for another round!
OTL Extras logfile created on: 3/4/2014 5:14:26 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\star\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 2.69 Gb Available Physical Memory | 71.73% Memory free
9.37 Gb Paging File | 7.41 Gb Available in Paging File | 79.10% Paging File free
Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.33 Gb Total Space | 853.63 Gb Free Space | 93.06% Space Free | Partition Type: NTFS
Drive E: | 3.72 Gb Total Space | 3.72 Gb Free Space | 100.00% Space Free | Partition Type: FAT32

Computer Name: RIVERQUEEN | User Name: starla.nicholson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- C:\Program Files (x86)\Advanced System Protector\filetypehelper.exe -scanunknown "%1" (Systweak)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- C:\Program Files (x86)\Advanced System Protector\filetypehelper.exe -scanunknown "%1" (Systweak)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{084744AB-57AF-442C-8142-9B1FAE8B73F7}" = rport=138 | protocol=17 | dir=out | app=system |
"{113DA6E4-402D-4BFE-AC18-228B9A3FE227}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1738673F-5546-4916-91E6-E076D16FB373}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{2CB1BF3F-7C20-47F5-B089-C0F1552FB45B}" = lport=137 | protocol=17 | dir=in | app=system |
"{32660725-9364-430A-97F3-5F6F09E26917}" = lport=10243 | protocol=6 | dir=in | app=system |
"{5E3CA4AD-D86C-4455-8673-7F534209E318}" = rport=137 | protocol=17 | dir=out | app=system |
"{6DAA4CCB-C01F-4D23-851F-A893930A2CAA}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7187595F-30DC-4854-99A5-6308E31A067E}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{72EDBF25-6D7C-4E8D-8061-5448D6B0F544}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{75AD4F77-13A6-4436-B06B-001B3D1F84CA}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8EE947EE-F14A-4309-94D9-815B0FC80FED}" = lport=445 | protocol=6 | dir=in | app=system |
"{A1CA0F05-47E4-4690-95B0-FA7E9C57F585}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{B41B4206-931A-45C8-8DB4-C781682BC82F}" = rport=10243 | protocol=6 | dir=out | app=system |
"{B62ACEF9-836E-45F0-958B-44D31170F8DC}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{BD02A680-E07F-4B10-B275-DF43FD2B0DB8}" = rport=445 | protocol=6 | dir=out | app=system |
"{BD4E5F9A-8826-480A-B784-96EC8BD30720}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D7EDE0F9-65A5-44A4-99C6-41C024E5DB7B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D9F4C69C-2913-4BB1-8CDF-59F67B848C13}" = lport=2869 | protocol=6 | dir=in | app=system |
"{DB1AB554-CC8F-474A-A2C7-04AB1EED44D8}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DC0F769A-1A68-499F-961C-C887AC266EEC}" = rport=139 | protocol=6 | dir=out | app=system |
"{E23D8378-38D1-4061-BB8C-B4E3C622E3D1}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{E2C717F0-08E8-41B8-A25F-B3448CAE7FF1}" = lport=139 | protocol=6 | dir=in | app=system |
"{E722B2E7-A117-4416-A49A-C3D6718019E6}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{FA05D8A5-FBDC-4220-8113-3A60F97C99D4}" = lport=138 | protocol=17 | dir=in | app=system |
"{FEA83973-6722-41F9-BC2F-21189E47D3DF}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0849188B-5832-4207-BC82-3E0ECECDA7F6}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe |
"{173BE2D9-E736-405B-BEB2-900407AA81E4}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe |
"{1853CB62-8A53-4EBF-B378-A3E0C65E6694}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{202AAB7C-D336-45A2-B5BF-7715C7323469}" = protocol=6 | dir=in | app=c:\windows\syswow64\arfc\wrtc.exe |
"{249F5753-DB95-4FE2-A71B-39870D4D92F3}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{25372126-694F-4E83-91AA-E74009BAC818}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{28105396-572C-4A33-BDDD-5EBF2DEA076B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2E5057D2-8919-4503-88E6-8B9D7819BF08}" = protocol=6 | dir=in | app=c:\program files\hp\hp officejet 7500 e910\bin\devicesetup.exe |
"{3370E634-7C15-4E6C-A1E4-8EB365C9EABB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3B42268C-1195-412A-AA06-2DFD8C3DED9C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{456EAFAC-3575-4FC7-8FA5-3AF5858960B2}" = protocol=17 | dir=in | app=c:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe |
"{508FE0C9-80E5-45FB-87D4-C3A1D6D30AAE}" = protocol=17 | dir=in | app=c:\program files (x86)\mcafee\managed virusscan\agent\myagtsvc.exe |
"{51EC5282-7599-4B7B-8F95-701BE4255B75}" = protocol=6 | dir=in | app=c:\windows\syswow64\arfc\wrtc.exe |
"{57084FC7-771E-4AA6-9B1C-5EE55AA66F39}" = protocol=17 | dir=in | app=c:\program files\hp\hp officejet 7500 e910\bin\devicesetup.exe |
"{63415093-A63F-4359-9B32-D2FBA74EB2C6}" = protocol=6 | dir=in | app=c:\program files (x86)\mcafee\managed virusscan\agent\myagtsvc.exe |
"{676C5FF5-6A39-4B06-A82D-12EDA2515395}" = protocol=1 | dir=out | [email protected],-28544 |
"{7156E99B-5CDA-4331-8F77-3FB3A1E93FFA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{71C42C47-9FDE-4FA5-9422-18ABD5354B2C}" = protocol=58 | dir=in | [email protected],-28545 |
"{72827C39-579B-464F-A1C3-89B95639C949}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe |
"{72DD1FB3-C617-442E-9868-E4F4331CA5B1}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{78718F54-3D6B-4097-B87A-F06D3C27C6E9}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe |
"{8234992D-DCB0-45AF-B489-E4AA607C87A4}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{842E5C79-096A-4A57-843F-784A0BA31CAC}" = protocol=58 | dir=in | app=system |
"{84C4FF9E-C9D3-43FD-AD6F-0B329B5BFFE4}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe |
"{89537D58-CA4E-4CBA-AC46-1D0D5F81A960}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe |
"{89CD8488-CF51-4748-86E8-402D078DD625}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{8FFA02D3-F1C1-4F3A-94D6-21BA7D38F97E}" = protocol=6 | dir=out | app=system |
"{9BDA1F7D-3E48-4DF2-8975-5FFE536641AE}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe |
"{9DBFEC2B-0FEF-428C-B4FF-6941C3BBD321}" = protocol=17 | dir=in | app=c:\program files (x86)\imesh applications\mediabar\datamngr\srtool~1\dtuser.exe |
"{9E1C6293-3A56-4123-964C-DF5253F61329}" = protocol=58 | dir=out | [email protected],-28546 |
"{A12BB9BC-9A0C-4AED-86EF-AFE6C3397428}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{AD632990-FA21-49B1-90C6-F8370C03F21F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe |
"{B9BC3A78-3DAB-4BF5-BB81-8DD1D969B4DD}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{BC3DC2FC-1AA6-4404-BB3A-DFBD585F96DD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BCB4B3D1-709B-453F-AFC8-000152E810DC}" = protocol=6 | dir=in | app=c:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe |
"{BE4242C6-E7A3-49C6-B683-B17B24989419}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe |
"{C10360CA-3B41-49D9-BFC8-BE7DA87D67D8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe |
"{C4D1F410-B43F-4571-AE4B-07FA8FEF4F45}" = protocol=6 | dir=in | app=c:\program files (x86)\imesh applications\mediabar\datamngr\srtool~1\dtuser.exe |
"{C58772F0-87CA-4FDC-B5EE-9FC54BA4EB2E}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{CE94D9AE-4B96-49AB-A351-8A392559524A}" = protocol=1 | dir=in | [email protected],-28543 |
"{D02C93E9-977D-4BA6-A9D3-9472C4BD5BCC}" = protocol=58 | dir=out | [email protected],-503 |
"{D0F61F5C-ED0A-4E42-991C-58FAAEFFFC8C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D62069E2-F941-44C3-96A3-C8D2C4E24392}" = protocol=6 | dir=in | app=c:\program files (x86)\mcafee\managed virusscan\agent\myagtsvc.exe |
"{D83921D4-B3EA-46E1-958E-CD47EECCCBAA}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe |
"{DEF6F7C4-D582-4F61-9BF0-98246C61469D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe |
"{E19A6A38-A858-4C4E-943C-359D1281F77F}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe |
"{E2D1D145-3689-41FD-8430-B14E757F6231}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E728E060-8358-4537-834C-58BDC2A3BDFE}" = protocol=17 | dir=in | app=c:\windows\syswow64\arfc\wrtc.exe |
"{EC84B9F1-61D6-431A-986D-4955C3E7E109}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{F1ED18C4-CC05-4E02-B66C-2C19F2C3EBA2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F3884964-A15E-41AC-AA77-D50FE6A57516}" = protocol=17 | dir=in | app=c:\windows\syswow64\arfc\wrtc.exe |
"{F5212D1F-819F-4F46-B266-01A3A23D8EFA}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{F73D37CA-BBFA-4018-80CF-C7B89003E27C}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{FA79DE54-2254-4380-831E-9ADB7F6F251C}" = protocol=17 | dir=in | app=c:\program files (x86)\mcafee\managed virusscan\agent\myagtsvc.exe |
"{FE683A82-41B2-46A5-AA29-2D5AC51B3CC9}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe |
"TCP Query User{33CF4EA9-CFD3-4418-AA70-51552DA866F2}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{C37B4FA1-69C9-4363-940A-0A7BD8E00E98}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0C798FBB-2BA6-D113-C055-936965550F33}" = ATI Catalyst Install Manager
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1BBC748D-A0C7-435C-9139-1398A4580F86}" = HP Officejet 7500 E910 Product Improvement Study
"{1C55470A-7C9E-4C63-B466-6AFFC69E94E9}" = Windows Live Family Safety
"{289809B1-078A-49F3-83D0-7E51715B3915}" = Windows Live Family Safety
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{56BFB765-EC27-4BBE-4562-7D524A4E6876}" = ccc-utility64
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}" = Windows Live Remote Service Resources
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{71EE298A-7B6D-4303-8438-C3E50567DA1F}" = HP Officejet 7500 E910 Basic Device Software
"{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}_is1" = Updater By SweetPacks 2.0.0.586
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{9301985B-D116-4A93-A93D-94580084FF86}" = 64 Bit HP CIO Components Installer
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B22C8566-D522-4B40-A7AF-525F5A70D832}" = Windows Live Family Safety
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{C9F05151-95A9-4B9B-B534-1760E2D014A5}" = Windows Live Remote Client Resources
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FBBC4667-2521-4E78-B1BD-8706F774549B}" = Best Buy pc app
"{FE4BE0BD-1EDB-4D24-9614-847B3C472887}" = Windows Live Family Safety
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MyPC Backup" = MyPC Backup

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007F778D-F15C-4EAB-AE92-071D21FAF632}" = Adobe Photoshop Elements 9
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{09F56A49-A7B1-4AAB-95B9-D13094254AD1}" = Windows Live UX Platform Language Pack
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0BE5C4DB-8EA2-483D-BD71-D7EB09040CDE}" = Windows Live UX Platform Language Pack
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{124C9BD0-8C52-40AB-8238-0605703B1C28}" = ASUS Backup Wizard
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{16FCDD97-AE09-476B-88CD-261D852BD34C}" = Marketsplash Shortcuts
"{179C9DAD-8A7E-E177-A099-9881BA6DB7E1}" = CCC Help Korean
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1CA97896-6527-EFF2-15AF-F754A8345DB3}" = CCC Help Polish
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1DE16DAD-6C8C-CE4B-6D0A-3B9C826EA7DF}" = Catalyst Control Center InstallProxy
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{207FE8B9-976B-8106-B8D8-75FD538B21AE}" = Catalyst Control Center Graphics Light
"{20A981DF-6170-422C-8A29-7DC5CFC904DC}" = Visual C++ 8.0 x64 Runtime Setup Package
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}" = HP Officejet 7500 E910 Help
"{25175695-4B20-4298-9F34-C2C57CD277B3}" = Elements STI Installer
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2CA12532-C407-66B7-7872-998E86EB078A}" = CCC Help Thai
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{30646370-6577-DA44-F956-5179BD4FC81F}" = CCC Help Norwegian
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{36D8DF3D-B1E1-D8CA-C0F7-5FECF2ADB431}" = Catalyst Control Center Graphics Previews Vista
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
"{433EACD8-4747-4A6A-826A-FFA9F39B0D40}" = Elements 9 Organizer
"{4850B023-A9C0-4D15-8DE6-326028CAB499}" = Visual C++ 8.0 x86 Runtime Setup Package
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{4A275FD1-2F24-4274-8C01-813F5AD1A92D}" = Windows Live Messenger
"{4AF95DE2-B54D-4C3F-9494-FD3B558E2C2D}" = AI Manager
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4EF645BD-65B0-4F98-AD56-D0437B7045F6}_is1" = RebateInformer
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5E990010-3CFC-3451-1F07-ABD632895DED}" = Catalyst Control Center Localization All
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{61933675-EFC7-4190-90B6-5AD56E1D9294}" = Marketsplash Print Software
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{653771EC-5AA7-9E1D-EBF9-BF6E9BDC0649}" = CCC Help Greek
"{6748E773-5DA0-4D19-8AA5-273B4133A09B}" = SmartSound Quicktracks for Premiere Elements 9.0
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6A563426-3474-41C6-B847-42B39F1485B2}" = Windows Live Messenger
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.0.0
"{704985E4-596B-B30C-1B01-49A4E6386DF7}" = CCC Help Italian
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7388AE07-F4E0-503F-6ADD-4FB9BED4C47E}" = CCC Help Czech
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{8142D25E-028A-4563-86ED-5755783C8029}" = Messenger Companion
"{838DA1F1-23F8-4C70-B190-AC51CB5A5ECD}" = Alcor Micro USB Card Reader Driver
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{8AE34925-34D7-4E53-FE56-B38C003FCE59}" = CCC Help Chinese Traditional
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}" = EPU-4 Engine
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{913694EF-D62F-B372-7778-7C0DFD287EED}" = Catalyst Control Center Graphics Previews Common
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{939C80FA-96C9-44A6-B318-8E7D8BD8481B}" = Messenger Companion
"{93F8D79A-EEC2-11F6-DE59-70EA8E50CAE2}" = CCC Help German
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver
"{98FBED7A-E9E1-5578-F5FD-391D51799524}" = CCC Help French
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9E48FF52-082C-4CC2-BB67-6E10D09C0431}" = Windows Live UX Platform Language Pack
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A127C3C0-055E-38CF-B38F-1E85F8BBBFFE}" = Adobe Community Help
"{A259C1B6-7C3F-6827-657B-D6EDE5BF3CAE}" = CCC Help Finnish
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A436F67F-687E-4736-BD2B-537121A804CF}" = HP Product Detection
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A6D87A37-8620-FE7B-54C2-E654F4F92B95}" = Catalyst Control Center Graphics Full New
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96174C8-BB27-8E86-2AA8-22486DDF7B4B}" = Catalyst Control Center Core Implementation
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.5.5 MUI
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AE9C87B3-0BF3-6FE1-404C-FA0EA33B4EC3}" = CCC Help Japanese
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B1A1ACA0-54BF-6279-CD75-D4772DD16197}" = CCC Help Danish
"{B2C78D7A-D4D2-A1EF-DFAA-48A4152A5771}" = ccc-core-static
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C32CE55C-12BA-4951-8797-0967FDEF556F}" = Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C7A9BAF2-DA72-8503-F27F-44C6C2FF9F49}" = CCC Help Swedish
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D5348885-EB52-4355-C21B-27BD0E4CBA31}" = CCC Help Hungarian
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D780486E-4F96-B025-4BBB-30D56E3C9418}" = CCC Help Portuguese
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE30220D-B7A6-EB8F-13E0-2521880E2F49}" = Catalyst Control Center Graphics Full Existing
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2AE009D-37E5-4724-A6B8-0ED6A6BA4F68}" = Elements STI Installer
"{E32BC396-8E51-BA3F-7001-EE463BB4EA75}" = CCC Help English
"{E481A482-A6A2-D3ED-0980-C741A9AAA96B}" = CCC Help Chinese Standard
"{E4AA1490-A0AE-5693-2C0B-4FF21C3721D8}" = CCC Help Dutch
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EB9955F8-467C-47FC-90F8-12CD5DF684C3}" = Adobe Premiere Elements 9
"{EBF0AA20-D891-1908-10CB-010E289C36CD}" = CCC Help Russian
"{EC8282AB-48DD-91D2-7387-01CD6E100A5D}" = Adobe Photoshop.com Inspiration Browser
"{ED86C4AB-D1E5-42CF-BFA3-56BAAE617D4E}" = Windows Live UX Platform Language Pack
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F3D2DEDC-4732-4188-8A3A-1A3FFBD4D6C8}" = ebi.BookReader3J
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{F9B431CB-5ACF-A7C1-5B96-9DF33AA25290}" = CCC Help Spanish
"{FBBC4667-2521-4E78-B1BD-8706F774549B}" = Best Buy pc app
"{FD59A4BA-8486-43C8-97C7-2536725FD09C}" = McAfee SiteAdvisor Enterprise
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FFE7F452-F093-5859-C96E-E75310248A10}" = CCC Help Turkish
"00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1" = Advanced System Protector
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX
"Adobe Photoshop Elements 9" = Adobe Photoshop Elements 9
"ASUS VIBE" = ASUS VIBE
"AVG SafeGuard toolbar" = AVG SafeGuard toolbar
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Children's Music Journey Volume 1 1.27" = Children's Music Journey Volume 1 1.27
"Children's Music Journey Volume 2 1.27" = Children's Music Journey Volume 2 1.27
"Children's Music Journey Volume 3 1.27" = Children's Music Journey Volume 3 1.27
"Cisco Connect" = Cisco Connect
"Ear Training Coach 1&2 1.1" = Ear Training Coach 1&2 1.1
"Ear Training Coach 3&4 1.1" = Ear Training Coach 3&4 1.1
"FastAgain PC Booster_is1" = FastAgain PC Booster
"Google Chrome" = Google Chrome
"HP Photo Creations" = HP Photo Creations
"imeshtoolbarguid" = Search-Results Toolbar
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"InstallShield_{6748E773-5DA0-4D19-8AA5-273B4133A09B}" = SmartSound Quicktracks for Premiere Elements 9.0
"InstallShield_{838DA1F1-23F8-4C70-B190-AC51CB5A5ECD}" = Alcor Micro USB Card Reader Driver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"McAfeeBrowserProtection" = McAfee Browser Protection Service
"MVS" = McAfee Virus and Spyware Protection Service
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"PhotoshopdotcomInspirationBrowser.4C35C4D325D350FE0114230CBADCA2DDD0AC8D25.1" = Adobe Photoshop.com Inspiration Browser
"PhotoStudio_4281508C_4DA1_4d4e_81EB_725D55EC30DC_is1" = Systweak PhotoStudio 2.1
"Piano Suite 2.94" = Piano Suite 2.94
"PremElem90" = Adobe Premiere Elements 9
"WinLiveSuite" = Windows Live Essentials
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Mail" = Yahoo! Internet Mail
"Yahoo! Mail Advisor" = Yahoo! Mail Advisor
"Yahoo! NanoClient" = Yahoo! Axis
"Yahoo! Software Update" = Yahoo! Software Update
"YInstHelper" = Yahoo! Install Manager
"ZapBing" = ZapBing

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"48e4cff94f039634" = Best Buy pc app

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"48e4cff94f039634" = Best Buy pc app

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 3/1/2014 10:30:54 PM | Computer Name = riverqueen | Source = MsiInstaller | ID = 11606
Description =

Error - 3/1/2014 10:30:54 PM | Computer Name = riverqueen | Source = MsiInstaller | ID = 11606
Description =

Error - 3/2/2014 5:01:54 AM | Computer Name = riverqueen | Source = MsiInstaller | ID = 11606
Description =

Error - 3/2/2014 5:01:54 AM | Computer Name = riverqueen | Source = MsiInstaller | ID = 11606
Description =

Error - 3/3/2014 12:14:35 AM | Computer Name = riverqueen | Source = Application Hang | ID = 1002
Description = The program sdclt.exe version 6.1.7601.17514 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 1518 Start
Time: 01cf3696be4721f1 Termination Time: 60000 Application Path: C:\Windows\System32\sdclt.exe

Report
Id: 21a35601-a28a-11e3-9432-bcaec599fa63

Error - 3/3/2014 4:57:06 PM | Computer Name = riverqueen | Source = RasClient | ID = 20227
Description =

Error - 3/3/2014 5:03:58 PM | Computer Name = riverqueen | Source = CVHSVC | ID = 100
Description = Information only. (Patch task for {90140011-0066-0409-0000-0000000FF1CE}):
DownloadLatest Failed: There are currently no active network connections. Background
Intelligent Transfer Service (BITS) will try again when an adapter is connected.


Error - 3/3/2014 5:20:01 PM | Computer Name = riverqueen | Source = RasClient | ID = 20227
Description =

Error - 3/3/2014 5:26:41 PM | Computer Name = riverqueen | Source = RasClient | ID = 20227
Description =

Error - 3/3/2014 5:27:45 PM | Computer Name = riverqueen | Source = RasClient | ID = 20227
Description =

[ System Events ]
Error - 3/4/2014 8:15:25 AM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 8:15:26 AM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 8:15:29 AM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 2:04:09 PM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 4:48:44 PM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 4:48:49 PM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 4:48:51 PM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 4:48:51 PM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 4:48:55 PM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 3/4/2014 4:48:58 PM | Computer Name = riverqueen | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.


< End of report > :thumbsup:
  • 0

#7
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Hello Cowpuncher

Please perform the following instructions.

Uninstall Software

  • Click on the Start Posted Image button and select Control Panel
  • Click on Programs then click on Uninstall a program or Programs and Features
  • You will now see a list of your installed software, double click on the following one by one to uninstall them:
MyPC Backup
RebateInformer

Once you have done this, reboot your computer

OTL Fix


  • Run OTL as you did before.
  • Copy the text in the quote box below (do not copy the word "quote") and paste in the in the box marked Custom Scans/Fixes as shown in the graphic below.

Posted Image

:Commands
[createrestorepoint]

:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.iyogi.com/
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\iYogi\iYogiPasswordManager\iYogiPassMgr.xpi
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...r={searchTerms}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://start.sweetpa...E-BCAEC599FA63}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {251acd30-3292-4703-a43a-859c0a54df3b} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - No CLSID value found
O2:64bit: - BHO: (Updater By SweetPacks) - {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} - C:\Program Files\Updater By SweetPacks\Extension64.dll File not found
O2 - BHO: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O2 - BHO: (no name) - {66516A07-F617-488A-90CF-4E690CFB3C5F} - No CLSID value found.
O2 - BHO: (no name) - {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Default Visible - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {251ACD30-3292-4703-A43A-859C0A54DF3B} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {4959472D-5636-006A-76A7-7A786E7484D7} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Allin1Convert Home Page Guard 64 bit] "C:\PROGRA~2\ALLIN1~2\bar\1.bin\AppIntegrator64.exe" File not found
O4 - Startup: C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O15 - HKLM\..Trusted Domains: //about.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Exclude.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //LanguageSelection.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Message.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryCmd.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryNag.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyNotification.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //NOCLessUpdate.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //quarantine.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //ScanNow.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //strings.vbs/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Template.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Update.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //VirFound.htm/ ([]myui in Trusted sites)
O27:64bit: - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup

:Commands
[emptytemp]
[resethosts]


Then press the Run Fix button

Your computer will reboot. If it does not, please manually reboot.

Re-Run OTL

Run OTL again and click Quick Scan.

Copy and paste the contents of the log that it produces into your next post back to me.

Run AdwCleaner

Please download AdwCleaner onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner.txt as well.
Make sure you post the OTL log (just one file for this run) and the ADW log. Also, let me know how the fixes went and how the machine is working now.
  • 0

#8
cowpuncher

cowpuncher

    Member

  • Topic Starter
  • Member
  • PipPip
  • 58 posts
Wow! You got back to me really quick. I'll run what you suggested and send you the results.
  • 0

#9
cowpuncher

cowpuncher

    Member

  • Topic Starter
  • Member
  • PipPip
  • 58 posts
I uninstalled My PC Backup and while trying to uninstall Rebate Informer, received "error occurred, would you like to remove from list?" I clicked Yes. New OTL log after "run fix" and then re-run OTL "quick scan". Error: Unable to interpret <Error: Unable to interpret <OTL logfile created on: 3/6/2014 10:19:37 AM - Run 4> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\star\Downloads> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Internet Explorer (Version = 9.11.9600.16518)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <3.75 Gb Total Physical Memory | 2.48 Gb Available Physical Memory | 66.02% Memory free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <9.37 Gb Paging File | 7.94 Gb Available in Paging File | 84.72% Paging File free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Drive C: | 917.33 Gb Total Space | 866.68 Gb Free Space | 94.48% Space Free | Partition Type: NTFS> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Computer Name: RIVERQUEEN | User Name: starla.nicholson | Logged in as Administrator.> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Processes (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/03 18:34:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\starla.nicholsonOTL logfile created on: 3/6/2014 10:19:37 AM - Run 4> in the current context!
Error: Unable to interpret <OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\starla.nicholson\Downloads> in the current context!
Error: Unable to interpret <64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation> in the current context!
Error: Unable to interpret <Internet Explorer (Version = 9.11.9600.16518)> in the current context!
Error: Unable to interpret <Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <3.75 Gb Total Physical Memory | 2.48 Gb Available Physical Memory | 66.02% Memory free> in the current context!
Error: Unable to interpret <9.37 Gb Paging File | 7.94 Gb Available in Paging File | 84.72% Paging File free> in the current context!
Error: Unable to interpret <Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)> in the current context!
Error: Unable to interpret <Drive C: | 917.33 Gb Total Space | 866.68 Gb Free Space | 94.48% Space Free | Partition Type: NTFS> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Computer Name: RIVERQUEEN | User Name: starla.nicholson | Logged in as Administrator.> in the current context!
Error: Unable to interpret <Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans> in the current context!
Error: Unable to interpret <Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Processes (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!
Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe> in the current context!
Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe> in the current context!
Error: Unable to interpret <PRC - [2014/03/03 18:34:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\starla.nicholson\Downloads\OTL.exe> in the current context!
Error: Unable to interpret <PRC - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe> in the current context!
Error: Unable to interpret <PRC - [2013/09/10 02:50:14 | 000,079,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\saHookMain.exe> in the current context!
Error: Unable to interpret <PRC - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe> in the current context!
Error: Unable to interpret <PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe> in the current context!
Error: Unable to interpret <PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe> in the current context!
Error: Unable to interpret <PRC - [2013/05/24 12:13:32 | 006,563,184 | ---- | M] (Systweak) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe> in the current context!
Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe> in the current context!
Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe> in the current context!
Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe> in the current context!
Error: Unable to interpret <PRC - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!
Error: Unable to interpret <PRC - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe> in the current context!
Error: Unable to interpret <PRC - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe> in the current context!
Error: Unable to interpret <PRC - [2009/12/28 18:49:36 | 000,121,472 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe> in the current context!
Error: Unable to interpret <PRC - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\SysWOW64\AsHookDevice.exe> in the current context!
Error: Unable to interpret <PRC - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!
Error: Unable to interpret <PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Modules (No Company Name) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!
Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\log4cplusU.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:40:12 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\868ad9d8acc0bf80a973c0e4e9cae4fa\System.Core.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:40:08 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4412bbbb473c356b5ea3e1ea13b25f52\System.Management.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:39:41 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d682d06abf8257c72ce11cefd1d74cf5\CustomMarshalers.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:54 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\b34b348a9935338b1282fd0c9309eb1f\System.ServiceProcess.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:47 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b0f9a4f138cc569a7526f97b93808d3e\System.Web.Services.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:40 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\faf3ae85f2470505e1b32d2154de60ef\System.EnterpriseServices.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\fe1942c05eda4f9744f80afb4ae76a2d\System.Data.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\cd3556d1162e8f7df77611c9c4253f7c\System.Transactions.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:20 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:14 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:13 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7c233151b685c540524f87931632423a\System.Deployment.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:59 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:56 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:55 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:48 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2013/11/06 17:05:00 | 000,198,688 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\BPTrayPlugin.dll> in the current context!
Error: Unable to interpret <MOD - [2013/05/24 12:13:32 | 001,730,928 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\aspsys.dll> in the current context!
Error: Unable to interpret <MOD - [2013/01/22 10:28:40 | 000,403,048 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\Win32RenderingEngine.dll> in the current context!
Error: Unable to interpret <MOD - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!
Error: Unable to interpret <MOD - [2012/07/25 11:03:14 | 000,886,272 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll> in the current context!
Error: Unable to interpret <MOD - [2010/11/04 19:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll> in the current context!
Error: Unable to interpret <MOD - [2010/11/04 19:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll> in the current context!
Error: Unable to interpret <MOD - [2009/09/29 21:33:07 | 000,024,576 | ---- | M] () -- C:\Windows\SysWOW64\AsIO.dll> in the current context!
Error: Unable to interpret <MOD - [2009/06/10 15:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll> in the current context!
Error: Unable to interpret <MOD - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!
Error: Unable to interpret <MOD - [2009/01/15 15:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll> in the current context!
Error: Unable to interpret <MOD - [2005/10/24 17:02:46 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\AsMultiLang.dll> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Services (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <SRV:64bit: - [2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:34:16 | 000,241,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2011/04/20 01:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)> in the current context!
Error: Unable to interpret <SRV - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe -- (vToolbarUpdater18.0.0)> in the current context!
Error: Unable to interpret <SRV - [2014/02/21 05:26:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)> in the current context!
Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe -- (RumorServer)> in the current context!
Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe -- (myAgtSvc)> in the current context!
Error: Unable to interpret <SRV - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service)> in the current context!
Error: Unable to interpret <SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)> in the current context!
Error: Unable to interpret <SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)> in the current context!
Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)> in the current context!
Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)> in the current context!
Error: Unable to interpret <SRV - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe -- (YNanoService)> in the current context!
Error: Unable to interpret <SRV - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)> in the current context!
Error: Unable to interpret <SRV - [2010/03/18 15:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)> in the current context!
Error: Unable to interpret <SRV - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AsHookDevice.exe -- (Device Handle Service)> in the current context!
Error: Unable to interpret <SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)> in the current context!
Error: Unable to interpret <SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Driver Services (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <DRV:64bit: - [2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:39:04 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/25 10:34:22 | 000,109,336 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/05/21 16:38:50 | 000,036,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/04/10 10:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/02/19 13:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2012/03/01 00:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/04/20 00:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/03/02 05:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/02/16 12:44:18 | 000,191,960 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs.sys -- (CbFs)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/01/27 19:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/11/10 02:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/05/04 19:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)> in the current context!
Error: Unable to interpret <DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Standard Registry (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Internet Explorer ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes,DefaultScope = > in the current context!
Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...s}&FORM=IE8SRC> in the current context!
Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm> in the current context!
Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = > in the current context!
Error: Unable to interpret <IE - HKLM\..\URLSearchHook: {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <IE - HKLM\..\SearchScopes,DefaultScope = > in the current context!
Error: Unable to interpret <IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...c=IE-SearchBox> in the current context!
Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/> in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = > in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = > in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blankhttp://www.yahoo.com/ [binary data]> in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank> in the current context!
Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes,DefaultScope = {206AFE87-FBBD-4527-974C-1E2332BF0A4F}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{206AFE87-FBBD-4527-974C-1E2332BF0A4F}: "URL" = http://search.yahoo....={SearchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{313AF08E-E3AF-4587-BF46-2626F917FCC1}: "URL" = http://www.google.co...tputEncoding?}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{3949FC8F-E518-4A46-9CC0-252A3F83A760}: "URL" = http://search.yahoo....tPage?}&fr=ie8> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg....sa&d=2014-02-13 23:02:02&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C3FD9CD1-13D1-4172-A57C-72FAB7C3EEA2}: "URL" = http://rover.ebay.co...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C6DFFB82-F7B4-44A3-857A-C2FEAFE20728}: "URL" = http://www.microsoft...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DA5C4FE5-7F87-4573-99F8-44CF88C691A6}: "URL" = http://www.amazon.co...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....s}&fr=chr-tyc8> in the current context!
Error: Unable to interpret <IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== FireFox ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!
Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!
Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (MindSpark)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll ()> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\NPMcFFPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]_8h.com: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin [2014/03/02 15:31:45 | 000,000,000 | ---D | M]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\ [2014/03/02 15:31:53 | 000,000,000 | ---D | M]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <O1 HOSTS File: ([2014/03/05 21:53:05 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts> in the current context!
Error: Unable to interpret <O1 - Hosts: 127.0.0.1 localhost> in the current context!
Error: Unable to interpret <O1 - Hosts: ::1 localhost> in the current context!
Error: Unable to interpret <O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!
Error: Unable to interpret <O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)> in the current context!
Error: Unable to interpret <O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!
Error: Unable to interpret <O4 - HKLM..\Run: [McAfee Managed Services Tray] C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.Exe ()> in the current context!
Error: Unable to interpret <O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1> in the current context!
Error: Unable to interpret <O1364bit: - gopher Prefix: missing> in the current context!
Error: Unable to interpret <O13 - gopher Prefix: missing> in the current context!
Error: Unable to interpret <O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)> in the current context!
Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.104.96.61> in the current context!
Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D5E5416-D699-45AF-B5E2-36E94B47D1E7}: DhcpNameServer = 75.104.96.61> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\livecall - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\msnim - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\rebinfo - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlpg - No CLSID value found> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\rebinfo - No CLSID value found> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)> in the current context!
Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - File not found> in the current context!
Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\x64\mgrldr.dll) - File not found> in the current context!
Error: Unable to interpret <O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found> in the current context!
Error: Unable to interpret <O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!
Error: Unable to interpret <O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!
Error: Unable to interpret <O32 - HKLM CDRom: AutoRun - 1> in the current context!
Error: Unable to interpret <O34 - HKLM BootExecute: (autocheck autochk *)> in the current context!
Error: Unable to interpret <O35:64bit: - HKLM\..comfile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O35:64bit: - HKLM\..exefile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O35 - HKLM\..comfile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O35 - HKLM\..exefile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O36 - AppCertDlls: x64 - (c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll) - File not found> in the current context!
Error: Unable to interpret <O36 - AppCertDlls: x86 - (c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll) - File not found> in the current context!
Error: Unable to interpret <O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!
Error: Unable to interpret <O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!
Error: Unable to interpret <O37 - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!
Error: Unable to interpret <O37 - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!
Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)> in the current context!
Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)> in the current context!
Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Files/Folders - Created Within 30 Days ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/05 21:48:51 | 000,000,000 | ---D | C] -- C:\_OTL> in the current context!
Error: Unable to interpret <[2014/03/04 16:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search> in the current context!
Error: Unable to interpret <[2014/03/04 16:58:07 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\cache> in the current context!
Error: Unable to interpret <[2014/02/28 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero> in the current context!
Error: Unable to interpret <[2014/02/28 20:30:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero> in the current context!
Error: Unable to interpret <[2014/02/28 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero> in the current context!
Error: Unable to interpret <[2014/02/23 16:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Systems> in the current context!
Error: Unable to interpret <[2014/02/13 23:05:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome> in the current context!
Error: Unable to interpret <[2014/02/13 23:03:13 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\AVG SafeGuard toolbar> in the current context!
Error: Unable to interpret <[2014/02/13 23:02:00 | 000,050,976 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!
Error: Unable to interpret <[2014/02/13 23:01:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search> in the current context!
Error: Unable to interpret <[2014/02/13 23:01:22 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar> in the current context!
Error: Unable to interpret <[2014/02/13 23:01:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG SafeGuard toolbar> in the current context!
Error: Unable to interpret <[2014/02/13 22:57:45 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files> in the current context!
Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!
Error: Unable to interpret <[2014/02/11 17:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro> in the current context!
Error: Unable to interpret <[2014/02/11 10:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware> in the current context!
Error: Unable to interpret <[2014/02/07 01:12:01 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 3> in the current context!
Error: Unable to interpret <[2014/02/07 01:11:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv3> in the current context!
Error: Unable to interpret <[2014/02/06 23:22:41 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 2> in the current context!
Error: Unable to interpret <[2014/02/06 23:22:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv2> in the current context!
Error: Unable to interpret <[2014/02/06 21:41:45 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 1> in the current context!
Error: Unable to interpret <[2014/02/06 21:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv1> in the current context!
Error: Unable to interpret <[2014/02/06 20:10:17 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ear Training Coach 3&4> in the current context!
Error: Unable to interpret <[2014/02/06 20:09:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc34> in the current context!
Error: Unable to interpret <[2014/02/06 19:24:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc12> in the current context!
Error: Unable to interpret <[2014/02/06 18:58:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adventus> in the current context!
Error: Unable to interpret <[2014/02/06 18:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Piano Suite> in the current context!
Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 17:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 14:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Cisco Systems> in the current context!
Error: Unable to interpret <[2014/02/06 10:36:44 | 000,000,000 | ---D | C] -- C:\Logs> in the current context!
Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Files - Modified Within 30 Days ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/06 10:18:11 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!
Error: Unable to interpret <[2014/03/06 10:18:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat> in the current context!
Error: Unable to interpret <[2014/03/06 10:18:02 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys> in the current context!
Error: Unable to interpret <[2014/03/06 10:08:05 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job> in the current context!
Error: Unable to interpret <[2014/03/06 09:26:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job> in the current context!
Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | M] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!
Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0> in the current context!
Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0> in the current context!
Error: Unable to interpret <[2014/03/05 21:53:05 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts> in the current context!
Error: Unable to interpret <[2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!
Error: Unable to interpret <[2014/03/04 06:25:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!
Error: Unable to interpret <[2014/03/03 22:22:28 | 000,742,778 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI> in the current context!
Error: Unable to interpret <[2014/03/03 22:22:28 | 000,636,026 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat> in the current context!
Error: Unable to interpret <[2014/03/03 22:22:28 | 000,110,484 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat> in the current context!
Error: Unable to interpret <[2014/02/23 18:23:35 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job> in the current context!
Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!
Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!
Error: Unable to interpret <[2014/02/06 19:30:37 | 000,271,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT> in the current context!
Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Files Created - No Company Name ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | C] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!
Error: Unable to interpret <[2014/03/03 14:58:16 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!
Error: Unable to interpret <[2014/02/23 16:35:49 | 000,002,179 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Connect.lnk> in the current context!
Error: Unable to interpret <[2014/02/13 23:05:00 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!
Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!
Error: Unable to interpret <[2013/08/30 23:33:15 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini> in the current context!
Error: Unable to interpret <[2013/06/13 11:02:19 | 145,212,540 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupiYogi.reg> in the current context!
Error: Unable to interpret <[2013/06/13 10:52:27 | 152,715,978 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupPCO.reg> in the current context!
Error: Unable to interpret <[2013/04/13 00:01:43 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc> in the current context!
Error: Unable to interpret <[2013/03/17 17:34:28 | 000,000,036 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Local\housecall.guid.cache> in the current context!
Error: Unable to interpret <[2011/06/21 00:28:30 | 000,276,773 | ---- | C] () -- C:\Users\starla.nicholson\chain work - Topics - Jewelry Making Daily_aspx.mht> in the current context!
Error: Unable to interpret <[2011/06/21 00:23:26 | 000,467,368 | ---- | C] () -- C:\Users\starla.nicholson\Five Free Designs for Making Wire Jewelry - Jewelry Making Daily - Jewelry Making Daily_aspx.mht> in the current context!
Error: Unable to interpret <[2011/06/12 11:00:49 | 000,408,133 | ---- | C] () -- C:\Users\starla.nicholson\Three_Rings.pdf> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== ZeroAccess Check ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/02 15:45:43 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!
Error: Unable to interpret <"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!
Error: Unable to interpret <"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64> in the current context!
Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Free> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]> in the current context!
Error: Unable to interpret <"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Free> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64> in the current context!
Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Both> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== LOP Check ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/02/15 18:08:14 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\24x7 Help> in the current context!
Error: Unable to interpret <[2011/10/26 15:42:05 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!
Error: Unable to interpret <[2011/03/26 08:02:43 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!
Error: Unable to interpret <[2012/07/06 15:02:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\DriverCure> in the current context!
Error: Unable to interpret <[2013/12/20 14:49:25 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Dropbox> in the current context!
Error: Unable to interpret <[2012/11/24 23:01:20 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\MusicNet> in the current context!
Error: Unable to interpret <[2013/05/17 22:56:48 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\OnlineVault> in the current context!
Error: Unable to interpret <[2013/03/23 13:42:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\QuickScan> in the current context!
Error: Unable to interpret <[2014/02/06 17:38:00 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\SoftGrid Client> in the current context!
Error: Unable to interpret <[2014/03/02 14:47:54 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Systweak> in the current context!
Error: Unable to interpret <[2013/03/15 00:23:33 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Visan> in the current context!
Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\ZapWallPaper> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Purity Check ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret << End of report >> in the current context!
Error: Unable to interpret <OTL logfile created on: 3/6/2014 10:19:37 AM - Run 4> in the current context!
Error: Unable to interpret <OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\starla.nicholson\Downloads> in the current context!
Error: Unable to interpret <64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation> in the current context!
Error: Unable to interpret <Internet Explorer (Version = 9.11.9600.16518)> in the current context!
Error: Unable to interpret <Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <3.75 Gb Total Physical Memory | 2.48 Gb Available Physical Memory | 66.02% Memory free> in the current context!
Error: Unable to interpret <9.37 Gb Paging File | 7.94 Gb Available in Paging File | 84.72% Paging File free> in the current context!
Error: Unable to interpret <Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)> in the current context!
Error: Unable to interpret <Drive C: | 917.33 Gb Total Space | 866.68 Gb Free Space | 94.48% Space Free | Partition Type: NTFS> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Computer Name: RIVERQUEEN | User Name: starla.nicholson | Logged in as Administrator.> in the current context!
Error: Unable to interpret <Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans> in the current context!
Error: Unable to interpret <Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Processes (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!
Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe> in the current context!
Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe> in the current context!
Error: Unable to interpret <PRC - [2014/03/03 18:34:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\starla.nicholson\Downloads\OTL.exe> in the current context!
Error: Unable to interpret <PRC - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe> in the current context!
Error: Unable to interpret <PRC - [2013/09/10 02:50:14 | 000,079,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\saHookMain.exe> in the current context!
Error: Unable to interpret <PRC - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe> in the current context!
Error: Unable to interpret <PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe> in the current context!
Error: Unable to interpret <PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe> in the current context!
Error: Unable to interpret <PRC - [2013/05/24 12:13:32 | 006,563,184 | ---- | M] (Systweak) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe> in the current context!
Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe> in the current context!
Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe> in the current context!
Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe> in the current context!
Error: Unable to interpret <PRC - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!
Error: Unable to interpret <PRC - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe> in the current context!
Error: Unable to interpret <PRC - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe> in the current context!
Error: Unable to interpret <PRC - [2009/12/28 18:49:36 | 000,121,472 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe> in the current context!
Error: Unable to interpret <PRC - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\SysWOW64\AsHookDevice.exe> in the current context!
Error: Unable to interpret <PRC - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!
Error: Unable to interpret <PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Modules (No Company Name) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!
Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\log4cplusU.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:40:12 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\868ad9d8acc0bf80a973c0e4e9cae4fa\System.Core.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:40:08 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4412bbbb473c356b5ea3e1ea13b25f52\System.Management.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:39:41 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d682d06abf8257c72ce11cefd1d74cf5\CustomMarshalers.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:54 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\b34b348a9935338b1282fd0c9309eb1f\System.ServiceProcess.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:47 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b0f9a4f138cc569a7526f97b93808d3e\System.Web.Services.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:40 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\faf3ae85f2470505e1b32d2154de60ef\System.EnterpriseServices.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\fe1942c05eda4f9744f80afb4ae76a2d\System.Data.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\cd3556d1162e8f7df77611c9c4253f7c\System.Transactions.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:20 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:14 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:34:13 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7c233151b685c540524f87931632423a\System.Deployment.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:59 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:56 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:55 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2014/02/14 03:33:48 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll> in the current context!
Error: Unable to interpret <MOD - [2013/11/06 17:05:00 | 000,198,688 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\BPTrayPlugin.dll> in the current context!
Error: Unable to interpret <MOD - [2013/05/24 12:13:32 | 001,730,928 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\aspsys.dll> in the current context!
Error: Unable to interpret <MOD - [2013/01/22 10:28:40 | 000,403,048 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\Win32RenderingEngine.dll> in the current context!
Error: Unable to interpret <MOD - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!
Error: Unable to interpret <MOD - [2012/07/25 11:03:14 | 000,886,272 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll> in the current context!
Error: Unable to interpret <MOD - [2010/11/04 19:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll> in the current context!
Error: Unable to interpret <MOD - [2010/11/04 19:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll> in the current context!
Error: Unable to interpret <MOD - [2009/09/29 21:33:07 | 000,024,576 | ---- | M] () -- C:\Windows\SysWOW64\AsIO.dll> in the current context!
Error: Unable to interpret <MOD - [2009/06/10 15:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll> in the current context!
Error: Unable to interpret <MOD - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!
Error: Unable to interpret <MOD - [2009/01/15 15:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll> in the current context!
Error: Unable to interpret <MOD - [2005/10/24 17:02:46 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\AsMultiLang.dll> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Services (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <SRV:64bit: - [2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:34:16 | 000,241,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2011/04/20 01:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)> in the current context!
Error: Unable to interpret <SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)> in the current context!
Error: Unable to interpret <SRV - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe -- (vToolbarUpdater18.0.0)> in the current context!
Error: Unable to interpret <SRV - [2014/02/21 05:26:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)> in the current context!
Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe -- (RumorServer)> in the current context!
Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe -- (myAgtSvc)> in the current context!
Error: Unable to interpret <SRV - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service)> in the current context!
Error: Unable to interpret <SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)> in the current context!
Error: Unable to interpret <SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)> in the current context!
Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)> in the current context!
Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)> in the current context!
Error: Unable to interpret <SRV - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe -- (YNanoService)> in the current context!
Error: Unable to interpret <SRV - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)> in the current context!
Error: Unable to interpret <SRV - [2010/03/18 15:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)> in the current context!
Error: Unable to interpret <SRV - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AsHookDevice.exe -- (Device Handle Service)> in the current context!
Error: Unable to interpret <SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)> in the current context!
Error: Unable to interpret <SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Driver Services (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <DRV:64bit: - [2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:39:04 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/06/25 10:34:22 | 000,109,336 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/05/21 16:38:50 | 000,036,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/04/10 10:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2013/02/19 13:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2012/03/01 00:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/04/20 00:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/03/02 05:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/02/16 12:44:18 | 000,191,960 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs.sys -- (CbFs)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2010/01/27 19:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/11/10 02:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)> in the current context!
Error: Unable to interpret <DRV:64bit: - [2009/05/04 19:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)> in the current context!
Error: Unable to interpret <DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Standard Registry (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Internet Explorer ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes,DefaultScope = > in the current context!
Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...s}&FORM=IE8SRC> in the current context!
Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm> in the current context!
Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = > in the current context!
Error: Unable to interpret <IE - HKLM\..\URLSearchHook: {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <IE - HKLM\..\SearchScopes,DefaultScope = > in the current context!
Error: Unable to interpret <IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...c=IE-SearchBox> in the current context!
Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/> in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = > in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = > in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blankhttp://www.yahoo.com/ [binary data]> in the current context!
Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank> in the current context!
Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes,DefaultScope = {206AFE87-FBBD-4527-974C-1E2332BF0A4F}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{206AFE87-FBBD-4527-974C-1E2332BF0A4F}: "URL" = http://search.yahoo....={SearchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{313AF08E-E3AF-4587-BF46-2626F917FCC1}: "URL" = http://www.google.co...tputEncoding?}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{3949FC8F-E518-4A46-9CC0-252A3F83A760}: "URL" = http://search.yahoo....tPage?}&fr=ie8> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg....sa&d=2014-02-13 23:02:02&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C3FD9CD1-13D1-4172-A57C-72FAB7C3EEA2}: "URL" = http://rover.ebay.co...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C6DFFB82-F7B4-44A3-857A-C2FEAFE20728}: "URL" = http://www.microsoft...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DA5C4FE5-7F87-4573-99F8-44CF88C691A6}: "URL" = http://www.amazon.co...={searchTerms}> in the current context!
Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....s}&fr=chr-tyc8> in the current context!
Error: Unable to interpret <IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== FireFox ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!
Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!
Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (MindSpark)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll ()> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\NPMcFFPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!
Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]_8h.com: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin [2014/03/02 15:31:45 | 000,000,000 | ---D | M]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\ [2014/03/02 15:31:53 | 000,000,000 | ---D | M]> in the current context!
Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <O1 HOSTS File: ([2014/03/05 21:53:05 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts> in the current context!
Error: Unable to interpret <O1 - Hosts: 127.0.0.1 localhost> in the current context!
Error: Unable to interpret <O1 - Hosts: ::1 localhost> in the current context!
Error: Unable to interpret <O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!
Error: Unable to interpret <O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)> in the current context!
Error: Unable to interpret <O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!
Error: Unable to interpret <O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!
Error: Unable to interpret <O4 - HKLM..\Run: [McAfee Managed Services Tray] C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.Exe ()> in the current context!
Error: Unable to interpret <O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0> in the current context!
Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1> in the current context!
Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1> in the current context!
Error: Unable to interpret <O1364bit: - gopher Prefix: missing> in the current context!
Error: Unable to interpret <O13 - gopher Prefix: missing> in the current context!
Error: Unable to interpret <O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)> in the current context!
Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.104.96.61> in the current context!
Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D5E5416-D699-45AF-B5E2-36E94B47D1E7}: DhcpNameServer = 75.104.96.61> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\livecall - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\msnim - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\rebinfo - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found> in the current context!
Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlpg - No CLSID value found> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\rebinfo - No CLSID value found> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!
Error: Unable to interpret <O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)> in the current context!
Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - File not found> in the current context!
Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\x64\mgrldr.dll) - File not found> in the current context!
Error: Unable to interpret <O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found> in the current context!
Error: Unable to interpret <O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!
Error: Unable to interpret <O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!
Error: Unable to interpret <O32 - HKLM CDRom: AutoRun - 1> in the current context!
Error: Unable to interpret <O34 - HKLM BootExecute: (autocheck autochk *)> in the current context!
Error: Unable to interpret <O35:64bit: - HKLM\..comfile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O35:64bit: - HKLM\..exefile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O35 - HKLM\..comfile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O35 - HKLM\..exefile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <O36 - AppCertDlls: x64 - (c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll) - File not found> in the current context!
Error: Unable to interpret <O36 - AppCertDlls: x86 - (c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll) - File not found> in the current context!
Error: Unable to interpret <O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!
Error: Unable to interpret <O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!
Error: Unable to interpret <O37 - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!
Error: Unable to interpret <O37 - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!
Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)> in the current context!
Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)> in the current context!
Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Files/Folders - Created Within 30 Days ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/05 21:48:51 | 000,000,000 | ---D | C] -- C:\_OTL> in the current context!
Error: Unable to interpret <[2014/03/04 16:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search> in the current context!
Error: Unable to interpret <[2014/03/04 16:58:07 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\cache> in the current context!
Error: Unable to interpret <[2014/02/28 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero> in the current context!
Error: Unable to interpret <[2014/02/28 20:30:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero> in the current context!
Error: Unable to interpret <[2014/02/28 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero> in the current context!
Error: Unable to interpret <[2014/02/23 16:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Systems> in the current context!
Error: Unable to interpret <[2014/02/13 23:05:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome> in the current context!
Error: Unable to interpret <[2014/02/13 23:03:13 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\AVG SafeGuard toolbar> in the current context!
Error: Unable to interpret <[2014/02/13 23:02:00 | 000,050,976 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!
Error: Unable to interpret <[2014/02/13 23:01:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search> in the current context!
Error: Unable to interpret <[2014/02/13 23:01:22 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar> in the current context!
Error: Unable to interpret <[2014/02/13 23:01:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG SafeGuard toolbar> in the current context!
Error: Unable to interpret <[2014/02/13 22:57:45 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files> in the current context!
Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!
Error: Unable to interpret <[2014/02/11 17:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro> in the current context!
Error: Unable to interpret <[2014/02/11 10:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware> in the current context!
Error: Unable to interpret <[2014/02/07 01:12:01 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 3> in the current context!
Error: Unable to interpret <[2014/02/07 01:11:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv3> in the current context!
Error: Unable to interpret <[2014/02/06 23:22:41 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 2> in the current context!
Error: Unable to interpret <[2014/02/06 23:22:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv2> in the current context!
Error: Unable to interpret <[2014/02/06 21:41:45 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 1> in the current context!
Error: Unable to interpret <[2014/02/06 21:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv1> in the current context!
Error: Unable to interpret <[2014/02/06 20:10:17 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ear Training Coach 3&4> in the current context!
Error: Unable to interpret <[2014/02/06 20:09:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc34> in the current context!
Error: Unable to interpret <[2014/02/06 19:24:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc12> in the current context!
Error: Unable to interpret <[2014/02/06 18:58:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adventus> in the current context!
Error: Unable to interpret <[2014/02/06 18:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Piano Suite> in the current context!
Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 17:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZapWallPaper> in the current context!
Error: Unable to interpret <[2014/02/06 14:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Cisco Systems> in the current context!
Error: Unable to interpret <[2014/02/06 10:36:44 | 000,000,000 | ---D | C] -- C:\Logs> in the current context!
Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Files - Modified Within 30 Days ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/06 10:18:11 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!
Error: Unable to interpret <[2014/03/06 10:18:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat> in the current context!
Error: Unable to interpret <[2014/03/06 10:18:02 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys> in the current context!
Error: Unable to interpret <[2014/03/06 10:08:05 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job> in the current context!
Error: Unable to interpret <[2014/03/06 09:26:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job> in the current context!
Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | M] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!
Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0> in the current context!
Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0> in the current context!
Error: Unable to interpret <[2014/03/05 21:53:05 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts> in the current context!
Error: Unable to interpret <[2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!
Error: Unable to interpret <[2014/03/04 06:25:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!
Error: Unable to interpret <[2014/03/03 22:22:28 | 000,742,778 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI> in the current context!
Error: Unable to interpret <[2014/03/03 22:22:28 | 000,636,026 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat> in the current context!
Error: Unable to interpret <[2014/03/03 22:22:28 | 000,110,484 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat> in the current context!
Error: Unable to interpret <[2014/02/23 18:23:35 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job> in the current context!
Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!
Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!
Error: Unable to interpret <[2014/02/06 19:30:37 | 000,271,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT> in the current context!
Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Files Created - No Company Name ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | C] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!
Error: Unable to interpret <[2014/03/03 14:58:16 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!
Error: Unable to interpret <[2014/02/23 16:35:49 | 000,002,179 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Connect.lnk> in the current context!
Error: Unable to interpret <[2014/02/13 23:05:00 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!
Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!
Error: Unable to interpret <[2013/08/30 23:33:15 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini> in the current context!
Error: Unable to interpret <[2013/06/13 11:02:19 | 145,212,540 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupiYogi.reg> in the current context!
Error: Unable to interpret <[2013/06/13 10:52:27 | 152,715,978 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupPCO.reg> in the current context!
Error: Unable to interpret <[2013/04/13 00:01:43 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc> in the current context!
Error: Unable to interpret <[2013/03/17 17:34:28 | 000,000,036 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Local\housecall.guid.cache> in the current context!
Error: Unable to interpret <[2011/06/21 00:28:30 | 000,276,773 | ---- | C] () -- C:\Users\starla.nicholson\chain work - Topics - Jewelry Making Daily_aspx.mht> in the current context!
Error: Unable to interpret <[2011/06/21 00:23:26 | 000,467,368 | ---- | C] () -- C:\Users\starla.nicholson\Five Free Designs for Making Wire Jewelry - Jewelry Making Daily - Jewelry Making Daily_aspx.mht> in the current context!
Error: Unable to interpret <[2011/06/12 11:00:49 | 000,408,133 | ---- | C] () -- C:\Users\starla.nicholson\Three_Rings.pdf> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== ZeroAccess Check ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/03/02 15:45:43 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!
Error: Unable to interpret <"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!
Error: Unable to interpret <"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64> in the current context!
Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Free> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]> in the current context!
Error: Unable to interpret <"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Free> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64> in the current context!
Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)> in the current context!
Error: Unable to interpret <"ThreadingModel" = Both> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== LOP Check ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[2014/02/15 18:08:14 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\24x7 Help> in the current context!
Error: Unable to interpret <[2011/10/26 15:42:05 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!
Error: Unable to interpret <[2011/03/26 08:02:43 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!
Error: Unable to interpret <[2012/07/06 15:02:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\DriverCure> in the current context!
Error: Unable to interpret <[2013/12/20 14:49:25 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Dropbox> in the current context!
Error: Unable to interpret <[2012/11/24 23:01:20 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\MusicNet> in the current context!
Error: Unable to interpret <[2013/05/17 22:56:48 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\OnlineVault> in the current context!
Error: Unable to interpret <[2013/03/23 13:42:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\QuickScan> in the current context!
Error: Unable to interpret <[2014/02/06 17:38:00 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\SoftGrid Client> in the current context!
Error: Unable to interpret <[2014/03/02 14:47:54 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Systweak> in the current context!
Error: Unable to interpret <[2013/03/15 00:23:33 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Visan> in the current context!
Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\ZapWallPaper> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Purity Check ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret << End of report >> in the current context!
Error: Unable to interpret <\Downloads\OTL.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/09/10 02:50:14 | 000,079,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\saHookMain.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/05/24 12:13:32 | 006,563,184 | ---- | M] (Systweak) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2009/12/28 18:49:36 | 000,121,472 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\SysWOW64\AsHookDevice.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Modules (No Company Name) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\log4cplusU.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:40:12 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\868ad9d8acc0bf80a973c0e4e9cae4fa\System.Core.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:40:08 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4412bbbb473c356b5ea3e1ea13b25f52\System.Management.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:39:41 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d682d06abf8257c72ce11cefd1d74cf5\CustomMarshalers.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:54 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\b34b348a9935338b1282fd0c9309eb1f\System.ServiceProcess.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:47 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b0f9a4f138cc569a7526f97b93808d3e\System.Web.Services.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:40 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\faf3ae85f2470505e1b32d2154de60ef\System.EnterpriseServices.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\fe1942c05eda4f9744f80afb4ae76a2d\System.Data.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\cd3556d1162e8f7df77611c9c4253f7c\System.Transactions.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:20 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:14 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:13 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7c233151b685c540524f87931632423a\System.Deployment.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:59 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:56 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:55 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:48 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/11/06 17:05:00 | 000,198,688 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\BPTrayPlugin.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/05/24 12:13:32 | 001,730,928 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\aspsys.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/01/22 10:28:40 | 000,403,048 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\Win32RenderingEngine.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2012/07/25 11:03:14 | 000,886,272 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2010/11/04 19:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2010/11/04 19:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/09/29 21:33:07 | 000,024,576 | ---- | M] () -- C:\Windows\SysWOW64\AsIO.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/06/10 15:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/01/15 15:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2005/10/24 17:02:46 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\AsMultiLang.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Services (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:34:16 | 000,241,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2011/04/20 01:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe -- (vToolbarUpdater18.0.0)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2014/02/21 05:26:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe -- (RumorServer)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe -- (myAgtSvc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe -- (YNanoService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2010/03/18 15:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AsHookDevice.exe -- (Device Handle Service)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Driver Services (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:39:04 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/25 10:34:22 | 000,109,336 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/05/21 16:38:50 | 000,036,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/04/10 10:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/02/19 13:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2012/03/01 00:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/04/20 00:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/03/02 05:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/02/16 12:44:18 | 000,191,960 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs.sys -- (CbFs)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/01/27 19:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/11/10 02:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/05/04 19:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Standard Registry (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Internet Explorer ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes,DefaultScope = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...s}&FORM=IE8SRC> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\URLSearchHook: {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\SearchScopes,DefaultScope = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...c=IE-SearchBox> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blankhttp://www.yahoo.com/ [binary data]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes,DefaultScope = {206AFE87-FBBD-4527-974C-1E2332BF0A4F}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{206AFE87-FBBD-4527-974C-1E2332BF0A4F}: "URL" = http://search.yahoo....={SearchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{313AF08E-E3AF-4587-BF46-2626F917FCC1}: "URL" = http://www.google.co...tputEncoding?}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{3949FC8F-E518-4A46-9CC0-252A3F83A760}: "URL" = http://search.yahoo....tPage?}&fr=ie8> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg....sa&d=2014-02-13 23:02:02&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C3FD9CD1-13D1-4172-A57C-72FAB7C3EEA2}: "URL" = http://rover.ebay.co...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C6DFFB82-F7B4-44A3-857A-C2FEAFE20728}: "URL" = http://www.microsoft...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DA5C4FE5-7F87-4573-99F8-44CF88C691A6}: "URL" = http://www.amazon.co...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....s}&fr=chr-tyc8> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== FireFox ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (MindSpark)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll ()> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\NPMcFFPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]_8h.com: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin [2014/03/02 15:31:45 | 000,000,000 | ---D | M]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\ [2014/03/02 15:31:53 | 000,000,000 | ---D | M]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1 HOSTS File: ([2014/03/05 21:53:05 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1 - Hosts: 127.0.0.1 localhost> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1 - Hosts: ::1 localhost> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O4 - HKLM..\Run: [McAfee Managed Services Tray] C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.Exe ()> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1364bit: - gopher Prefix: missing> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O13 - gopher Prefix: missing> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.104.96.61> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D5E5416-D699-45AF-B5E2-36E94B47D1E7}: DhcpNameServer = 75.104.96.61> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\livecall - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\msnim - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\rebinfo - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlpg - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\rebinfo - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\x64\mgrldr.dll) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O32 - HKLM CDRom: AutoRun - 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O34 - HKLM BootExecute: (autocheck autochk *)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35:64bit: - HKLM\..comfile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35:64bit: - HKLM\..exefile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35 - HKLM\..comfile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35 - HKLM\..exefile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O36 - AppCertDlls: x64 - (c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O36 - AppCertDlls: x86 - (c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37 - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37 - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Files/Folders - Created Within 30 Days ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 21:48:51 | 000,000,000 | ---D | C] -- C:\_OTL> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 16:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 16:58:07 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\cache> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/28 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/28 20:30:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/28 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/23 16:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Systems> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:05:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:03:13 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\AVG SafeGuard toolbar> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:02:00 | 000,050,976 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:01:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:01:22 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:01:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG SafeGuard toolbar> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 22:57:45 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 17:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 10:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/07 01:12:01 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 3> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/07 01:11:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv3> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 23:22:41 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 2> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 23:22:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv2> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 21:41:45 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 21:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 20:10:17 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ear Training Coach 3&4> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 20:09:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc34> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 19:24:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc12> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:58:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adventus> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Piano Suite> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 14:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Cisco Systems> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 10:36:44 | 000,000,000 | ---D | C] -- C:\Logs> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Files - Modified Within 30 Days ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:18:11 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:18:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:18:02 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:08:05 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 09:26:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | M] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 21:53:05 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 06:25:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 22:22:28 | 000,742,778 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 22:22:28 | 000,636,026 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 22:22:28 | 000,110,484 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/23 18:23:35 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 19:30:37 | 000,271,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Files Created - No Company Name ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | C] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 14:58:16 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/23 16:35:49 | 000,002,179 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Connect.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:05:00 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/08/30 23:33:15 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/06/13 11:02:19 | 145,212,540 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupiYogi.reg> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/06/13 10:52:27 | 152,715,978 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupPCO.reg> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/04/13 00:01:43 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/03/17 17:34:28 | 000,000,036 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Local\housecall.guid.cache> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/06/21 00:28:30 | 000,276,773 | ---- | C] () -- C:\Users\starla.nicholson\chain work - Topics - Jewelry Making Daily_aspx.mht> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/06/21 00:23:26 | 000,467,368 | ---- | C] () -- C:\Users\starla.nicholson\Five Free Designs for Making Wire Jewelry - Jewelry Making Daily - Jewelry Making Daily_aspx.mht> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/06/12 11:00:49 | 000,408,133 | ---- | C] () -- C:\Users\starla.nicholson\Three_Rings.pdf> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== ZeroAccess Check ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/02 15:45:43 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Both> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== LOP Check ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/15 18:08:14 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\24x7 Help> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/10/26 15:42:05 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/03/26 08:02:43 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2012/07/06 15:02:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\DriverCure> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/12/20 14:49:25 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Dropbox> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2012/11/24 23:01:20 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\MusicNet> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/05/17 22:56:48 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\OnlineVault> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/03/23 13:42:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\QuickScan> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:38:00 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\SoftGrid Client> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/02 14:47:54 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Systweak> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/03/15 00:23:33 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Visan> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Purity Check ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret << End of report >> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <OTL logfile created on: 3/6/2014 10:19:37 AM - Run 4> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\starla.nicholson\Downloads> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Internet Explorer (Version = 9.11.9600.16518)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <3.75 Gb Total Physical Memory | 2.48 Gb Available Physical Memory | 66.02% Memory free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <9.37 Gb Paging File | 7.94 Gb Available in Paging File | 84.72% Paging File free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Drive C: | 917.33 Gb Total Space | 866.68 Gb Free Space | 94.48% Space Free | Partition Type: NTFS> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Computer Name: RIVERQUEEN | User Name: starla.nicholson | Logged in as Administrator.> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Processes (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/04 16:57:59 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\loggingserver.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2014/03/03 18:34:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\starla.nicholson\Downloads\OTL.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/09/10 02:50:14 | 000,079,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\saHookMain.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/05/24 12:13:32 | 006,563,184 | ---- | M] (Systweak) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2009/12/28 18:49:36 | 000,121,472 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\SysWOW64\AsHookDevice.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Modules (No Company Name) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 002,539,544 | ---- | M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/03/04 16:57:59 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\log4cplusU.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:40:12 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\868ad9d8acc0bf80a973c0e4e9cae4fa\System.Core.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:40:08 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4412bbbb473c356b5ea3e1ea13b25f52\System.Management.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:39:41 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\d682d06abf8257c72ce11cefd1d74cf5\CustomMarshalers.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:54 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\b34b348a9935338b1282fd0c9309eb1f\System.ServiceProcess.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:47 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b0f9a4f138cc569a7526f97b93808d3e\System.Web.Services.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:40 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\faf3ae85f2470505e1b32d2154de60ef\System.EnterpriseServices.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\fe1942c05eda4f9744f80afb4ae76a2d\System.Data.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:39 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\cd3556d1162e8f7df77611c9c4253f7c\System.Transactions.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:20 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:14 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:34:13 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7c233151b685c540524f87931632423a\System.Deployment.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:59 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:56 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:55 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2014/02/14 03:33:48 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/11/06 17:05:00 | 000,198,688 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\BPTrayPlugin.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/05/24 12:13:32 | 001,730,928 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\aspsys.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/01/22 10:28:40 | 000,403,048 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\Win32RenderingEngine.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2012/07/25 11:03:14 | 000,886,272 | ---- | M] () -- C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2010/11/04 19:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2010/11/04 19:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/09/29 21:33:07 | 000,024,576 | ---- | M] () -- C:\Windows\SysWOW64\AsIO.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/06/10 15:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2009/01/15 15:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <MOD - [2005/10/24 17:02:46 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\AsMultiLang.dll> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Services (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2013/08/07 12:34:16 | 000,241,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2011/04/20 01:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2014/03/04 16:57:59 | 001,759,768 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe -- (vToolbarUpdater18.0.0)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2014/02/21 05:26:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe -- (RumorServer)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe -- (myAgtSvc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe -- (YNanoService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2010/03/18 15:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AsHookDevice.exe -- (Device Handle Service)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Driver Services (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:39:04 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/08/07 12:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/06/25 10:34:22 | 000,109,336 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/05/21 16:38:50 | 000,036,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/04/10 10:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2013/02/19 13:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2012/08/23 08:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2012/03/01 00:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/04/20 00:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/03/02 05:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/02/16 12:44:18 | 000,191,960 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs.sys -- (CbFs)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2010/01/27 19:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/11/10 02:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV:64bit: - [2009/05/04 19:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Standard Registry (SafeList) ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Internet Explorer ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes,DefaultScope = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...s}&FORM=IE8SRC> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\URLSearchHook: {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\SearchScopes,DefaultScope = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...c=IE-SearchBox> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blankhttp://www.yahoo.com/ [binary data]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes,DefaultScope = {206AFE87-FBBD-4527-974C-1E2332BF0A4F}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{206AFE87-FBBD-4527-974C-1E2332BF0A4F}: "URL" = http://search.yahoo....={SearchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{313AF08E-E3AF-4587-BF46-2626F917FCC1}: "URL" = http://www.google.co...tputEncoding?}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{3949FC8F-E518-4A46-9CC0-252A3F83A760}: "URL" = http://search.yahoo....tPage?}&fr=ie8> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg....sa&d=2014-02-13 23:02:02&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C3FD9CD1-13D1-4172-A57C-72FAB7C3EEA2}: "URL" = http://rover.ebay.co...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{C6DFFB82-F7B4-44A3-857A-C2FEAFE20728}: "URL" = http://www.microsoft...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DA5C4FE5-7F87-4573-99F8-44CF88C691A6}: "URL" = http://www.amazon.co...={searchTerms}> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....s}&fr=chr-tyc8> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== FireFox ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (MindSpark)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll ()> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\NPMcFFPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]_8h.com: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin [2014/03/02 15:31:45 | 000,000,000 | ---D | M]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\ [2014/03/02 15:31:53 | 000,000,000 | ---D | M]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1 HOSTS File: ([2014/03/05 21:53:05 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1 - Hosts: 127.0.0.1 localhost> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1 - Hosts: ::1 localhost> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.0.0.250\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O4 - HKLM..\Run: [McAfee Managed Services Tray] C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.Exe ()> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe ()> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O1364bit: - gopher Prefix: missing> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O13 - gopher Prefix: missing> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.104.96.61> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D5E5416-D699-45AF-B5E2-36E94B47D1E7}: DhcpNameServer = 75.104.96.61> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\livecall - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\msnim - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\rebinfo - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18:64bit: - Protocol\Handler\wlpg - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\rebinfo - No CLSID value found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (c:\progra~2\musict~1\datamngr\x64\mgrldr.dll) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O32 - HKLM CDRom: AutoRun - 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O34 - HKLM BootExecute: (autocheck autochk *)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35:64bit: - HKLM\..comfile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35:64bit: - HKLM\..exefile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35 - HKLM\..comfile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O35 - HKLM\..exefile [open] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O36 - AppCertDlls: x64 - (c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O36 - AppCertDlls: x86 - (c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll) - File not found> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37 - HKLM\...com [@ = comfile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O37 - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Files/Folders - Created Within 30 Days ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 21:48:51 | 000,000,000 | ---D | C] -- C:\_OTL> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 16:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 16:58:07 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\cache> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/28 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/28 20:30:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/28 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/23 16:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Systems> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:05:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:03:13 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\AVG SafeGuard toolbar> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:02:00 | 000,050,976 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:01:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:01:22 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:01:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG SafeGuard toolbar> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 22:57:45 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 17:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 10:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/07 01:12:01 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 3> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/07 01:11:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv3> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 23:22:41 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 2> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 23:22:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv2> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 21:41:45 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 21:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 20:10:17 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ear Training Coach 3&4> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 20:09:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc34> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 19:24:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\etc12> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:58:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adventus> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Piano Suite> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Roaming\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | C] -- C:\Users\starla.nicholson\AppData\Local\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:32:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 14:20:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Cisco Systems> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 10:36:44 | 000,000,000 | ---D | C] -- C:\Logs> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Files - Modified Within 30 Days ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:18:11 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:18:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:18:02 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 10:08:05 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/06 09:26:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | M] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 22:01:25 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 21:53:05 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/04 06:25:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 22:22:28 | 000,742,778 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 22:22:28 | 000,636,026 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 22:22:28 | 000,110,484 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/23 18:23:35 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 17:39:02 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 19:30:37 | 000,271,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2 C:\Users\starla.nicholson\AppData\Local\*.tmp files -> C:\Users\starla.nicholson\AppData\Local\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Files Created - No Company Name ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/05 23:07:48 | 000,001,713 | ---- | C] () -- C:\Users\starla.nicholson\Desktop\Computer not completely frozen, but sits and spins - Geeks to Go Forums_files - Shortcut.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/03 14:58:16 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/23 16:35:49 | 000,002,179 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Connect.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/13 23:05:00 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/11 10:35:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/08/30 23:33:15 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/06/13 11:02:19 | 145,212,540 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupiYogi.reg> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/06/13 10:52:27 | 152,715,978 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Roaming\RegBackupPCO.reg> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/04/13 00:01:43 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/03/17 17:34:28 | 000,000,036 | ---- | C] () -- C:\Users\starla.nicholson\AppData\Local\housecall.guid.cache> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/06/21 00:28:30 | 000,276,773 | ---- | C] () -- C:\Users\starla.nicholson\chain work - Topics - Jewelry Making Daily_aspx.mht> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/06/21 00:23:26 | 000,467,368 | ---- | C] () -- C:\Users\starla.nicholson\Five Free Designs for Making Wire Jewelry - Jewelry Making Daily - Jewelry Making Daily_aspx.mht> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/06/12 11:00:49 | 000,408,133 | ---- | C] () -- C:\Users\starla.nicholson\Three_Rings.pdf> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== ZeroAccess Check ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/02 15:45:43 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Apartment> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Free> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <"ThreadingModel" = Both> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== LOP Check ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/15 18:08:14 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\24x7 Help> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/10/26 15:42:05 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2011/03/26 08:02:43 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2012/07/06 15:02:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\DriverCure> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/12/20 14:49:25 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Dropbox> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2012/11/24 23:01:20 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\MusicNet> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/05/17 22:56:48 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\OnlineVault> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/03/23 13:42:51 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\QuickScan> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 17:38:00 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\SoftGrid Client> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/03/02 14:47:54 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Systweak> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2013/03/15 00:23:33 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\Visan> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <[2014/02/06 18:05:35 | 000,000,000 | ---D | M] -- C:\Users\starla.nicholson\AppData\Roaming\ZapWallPaper> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret <========== Purity Check ==========> in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret < > in the current context!> in the current context!
Error: Unable to interpret <Error: Unable to interpret << End of report >> in the current context!> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <OTL by OldTimer - Version 3.2.69.0 log created on 03062014_103506> in the current context!

OTL by OldTimer - Version 3.2.69.0 log created on 03062014_104537
  • 0

#10
cowpuncher

cowpuncher

    Member

  • Topic Starter
  • Member
  • PipPip
  • 58 posts
# AdwCleaner v3.020 - Report created 06/03/2014 at 13:48:22
# Updated 27/02/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : star - RIVERQUEEN
# Running from : C:\Users\star\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\star\AppData\Local\AVG SafeGuard toolbar

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Google Chrome v33.0.1750.146

[ File : C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R1].txt - [874 octets] - [06/03/2014 13:44:27]
AdwCleaner[S1].txt - [800 octets] - [06/03/2014 13:48:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [859 octets] ##########
Even after all this.....still extremely slow. I go to Internet Explorer, then click on Yahoo.com, and it continues to 'spin' for almost a minute and then if I click on a news story, it will go to that page and do nothing. When I tried to check my e-mails, I am able to type in my password, and then nothing. :wacko: Still unable to access them. Google Chrome moves pretty quickly to my 'location', then slows considerably, with the same spinning. but I do get there.
I tried to send this log earlier, but got a pop-up for Dropbox. I haven't seen that before.
I'm not sure what I should do next, but I will Not touch anything, till you tell me its ok. :lol:
  • 0

Advertisements


#11
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Hi Cowpuncher,

I think that my instructions lacked some clarity, because it doesn't look like the fix was run. So, let me try again as these tools are a little odd if you're not familiar with running them.


Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Posted Image

:Commands
[createrestorepoint]

:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}: "URL" = http://dts.search.as...q={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.iyogi.com/
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\iYogi\iYogiPasswordManager\iYogiPassMgr.xpi
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...r={searchTerms}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://start.sweetpa...E-BCAEC599FA63}
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {251acd30-3292-4703-a43a-859c0a54df3b} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} - No CLSID value found
IE - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - No CLSID value found
O2:64bit: - BHO: (Updater By SweetPacks) - {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} - C:\Program Files\Updater By SweetPacks\Extension64.dll File not found
O2 - BHO: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O2 - BHO: (no name) - {66516A07-F617-488A-90CF-4E690CFB3C5F} - No CLSID value found.
O2 - BHO: (no name) - {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {31d8407c-62e4-4125-a4a9-717efb1a56ae} - C:\PROGRA~2\IMESHA~1\Mediabar\Datamngr\SRTOOL~1\searchresultsDx.dll File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Default Visible - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {251ACD30-3292-4703-A43A-859C0A54DF3B} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {4959472D-5636-006A-76A7-7A786E7484D7} - No CLSID value found.
O3 - HKU\S-1-5-21-1894108233-2390997088-678213063-1001\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Allin1Convert Home Page Guard 64 bit] "C:\PROGRA~2\ALLIN1~2\bar\1.bin\AppIntegrator64.exe" File not found
O4 - Startup: C:\Users\starla.nicholson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O15 - HKLM\..Trusted Domains: //about.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Exclude.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //LanguageSelection.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Message.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryCmd.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyAgttryNag.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //MyNotification.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //NOCLessUpdate.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //quarantine.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //ScanNow.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //strings.vbs/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Template.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //Update.htm/ ([]myui in Trusted sites)
O15 - HKLM\..Trusted Domains: //VirFound.htm/ ([]myui in Trusted sites)
O27:64bit: - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bitguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserdefender.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browserprotect.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014/02/13 23:02:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup

:Commands
[emptytemp]
[resethosts]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

  • 0

#12
cowpuncher

cowpuncher

    Member

  • Topic Starter
  • Member
  • PipPip
  • 58 posts
Hey, Biscuithd!
I did run the 'Fix', but evidently erased it and posted my 'mistake'. Hope you don't get frustrated with me, but...When I click on an open area of the 'quote' box, like I've done before, these are the choices I see:
Back
Reload
Save as...
Print...
View page sourse
View page info
Inspect Elements
I tried all of them, but none offered a way for me to 'Select, Copy, and then Paste'. Help? again :unsure:
  • 0

#13
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

I did run the 'Fix', but evidently erased it and posted my 'mistake'.

Don't worry, we'll get it figured out. It's unlikely that you erased it.

When I click on an open area of the 'quote' box, like I've done before, these are the choices I see:

That's not how OTL works. When it completes it makes various log files in the directory that you have it loaded into. In your case I can see that it's in C:\Users\star\Downloads\

That said, take a look in that directory and see if there's a fixlog.txt file.If you can find it, open it and copy/paste the results back to me.

If you are not able to find the fixlog file, then re-run the fix in OTL per the above instructions. and copy/paste the contents of the file OTL produces back to me.
  • 0

#14
cowpuncher

cowpuncher

    Member

  • Topic Starter
  • Member
  • PipPip
  • 58 posts
I've always heard that 3rd times a charm...so hear goes, lol!
I was unable to find the requested file, so I reran Fix, it rebooted, I then did Quick Scan, it did not reboot, so I did that.
Hopefully I'm sending the file that you need. By the way, you did send the correct information the first time, I just did not do it properly. (my bad??) :blush:


OTL logfile created on: 3/8/2014 8:47:09 PM - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\star\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 2.73 Gb Available Physical Memory | 72.94% Memory free
9.37 Gb Paging File | 8.00 Gb Available in Paging File | 85.35% Paging File free
Paging file location(s): C:\pagefile.sys 5758 7678 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.33 Gb Total Space | 865.85 Gb Free Space | 94.39% Space Free | Partition Type: NTFS

Computer Name: RIVERQUEEN | User Name: star| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/03/03 18:34:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\star\Downloads\OTL.exe
PRC - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe
PRC - [2013/09/10 02:50:14 | 000,079,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\saHookMain.exe
PRC - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe
PRC - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe
PRC - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe
PRC - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\SysWOW64\AsHookDevice.exe
PRC - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe


========== Modules (No Company Name) ==========

MOD - [2013/11/06 17:05:00 | 000,198,688 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\BPTrayPlugin.dll
MOD - [2013/01/22 10:28:40 | 000,403,048 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\Win32RenderingEngine.dll
MOD - [2013/01/22 10:28:38 | 000,480,872 | ---- | M] () -- C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.exe
MOD - [2009/09/29 21:33:07 | 000,024,576 | ---- | M] () -- C:\Windows\SysWOW64\AsIO.dll
MOD - [2009/06/04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
MOD - [2009/01/15 15:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll


========== Services (SafeList) ==========

SRV:64bit: - [2014/02/06 04:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013/08/07 12:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2013/08/07 12:34:16 | 000,241,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
SRV:64bit: - [2013/05/26 23:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2011/04/20 01:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2014/02/21 05:26:56 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.exe -- (RumorServer)
SRV - [2013/10/03 12:57:52 | 000,295,920 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe -- (myAgtSvc)
SRV - [2013/09/10 02:50:10 | 000,160,800 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service)
SRV - [2013/06/26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/05/23 07:11:32 | 000,157,016 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\YNanoClient\cpn0\YNanoService.exe -- (YNanoService)
SRV - [2010/09/06 04:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010/03/18 15:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/23 14:59:22 | 000,203,392 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AsHookDevice.exe -- (Device Handle Service)
SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:64bit: - [2013/08/07 12:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2013/08/07 12:39:04 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)
DRV:64bit: - [2013/08/07 12:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2013/08/07 12:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2013/08/07 12:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2013/06/26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2013/06/26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2013/06/26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2013/06/26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2013/06/25 10:34:22 | 000,109,336 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:64bit: - [2013/05/21 16:38:50 | 000,036,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)
DRV:64bit: - [2013/04/10 10:09:24 | 000,849,992 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013/02/19 13:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2012/08/23 08:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 08:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/03/01 00:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2011/04/20 01:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/04/20 00:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010/03/19 05:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/03/02 05:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2010/02/16 12:44:18 | 000,191,960 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cbfs.sys -- (CbFs)
DRV:64bit: - [2010/01/27 19:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009/12/22 04:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009/11/10 02:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s)
DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 14:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009/06/10 14:35:35 | 000,620,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/04 19:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKLM\..\URLSearchHook: {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blankhttp://www.yahoo.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn11\yt.dll (Yahoo! Inc.)
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{206AFE87-FBBD-4527-974C-1E2332BF0A4F}: "URL" = http://search.yahoo....p={SearchTerms}
IE - HKCU\..\SearchScopes\{313AF08E-E3AF-4587-BF46-2626F917FCC1}: "URL" = http://www.google.co...utputEncoding?}
IE - HKCU\..\SearchScopes\{3949FC8F-E518-4A46-9CC0-252A3F83A760}: "URL" = http://search.yahoo....rtPage?}&fr=ie8
IE - HKCU\..\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}: "URL" = http://search.mywebs...r={searchTerms}
IE - HKCU\..\SearchScopes\{C3FD9CD1-13D1-4172-A57C-72FAB7C3EEA2}: "URL" = http://rover.ebay.co...e={searchTerms}
IE - HKCU\..\SearchScopes\{C6DFFB82-F7B4-44A3-857A-C2FEAFE20728}: "URL" = http://www.microsoft...s={searchTerms}
IE - HKCU\..\SearchScopes\{DA5C4FE5-7F87-4573-99F8-44CF88C691A6}: "URL" = http://www.amazon.co...s={searchTerms}
IE - HKCU\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....ms}&fr=chr-tyc8
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@bestbuy.com/npBestBuyPcAppDetector,version=1.0: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\NPMcFFPlg.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]_8h.com: C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\ [2014/03/02 15:31:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - plugin: Error reading preferences file
CHR - Extension: Google Docs = C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1\
CHR - Extension: Google Drive = C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\
CHR - Extension: YouTube = C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
CHR - Extension: Google Search = C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
CHR - Extension: McAfee SiteAdvisor Enterprise = C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\Extensions\feobgjncdknhelkhjpiejdbpliekmfaj\3.5.0.1167_1\
CHR - Extension: Google Wallet = C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: Gmail = C:\Users\star\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2014/03/08 20:29:38 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20131220153149.dll (McAfee, Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Axis for IE) - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files (x86)\Yahoo!\YNanoClient\cpn1\YNanoClient_IE.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O4 - HKLM..\Run: [McAfee Managed Services Tray] C:\Program Files (x86)\McAfee\Managed VirusScan\DesktopUI\XTray.Exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.104.96.61
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D5E5416-D699-45AF-B5E2-36E94B47D1E7}: DhcpNameServer = 75.104.96.61
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.)
O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/03/06 13:43:49 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/03/05 21:48:51 | 000,000,000 | ---D | C] -- C:\_OTL
[2014/03/04 16:58:07 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\cache
[2014/02/28 20:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2014/02/28 20:30:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2014/02/28 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2014/02/23 16:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco Systems
[2014/02/13 23:05:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/02/13 23:02:00 | 000,050,976 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2014/02/13 22:57:45 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2014/02/11 17:39:02 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2014/02/11 17:28:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2014/02/11 10:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014/02/07 01:12:01 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 3
[2014/02/07 01:11:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv3
[2014/02/06 23:22:41 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 2
[2014/02/06 23:22:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv2
[2014/02/06 21:41:45 | 000,000,000 | ---D | C] -- C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children's Music Journey Volume 1
[2014/02/06 21:41:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\cmjv1
[2 C:\Users\star\AppData\Local\*.tmp files -> C:\Users\star\AppData\Local\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/03/08 20:40:10 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/03/08 20:40:10 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/03/08 20:32:55 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2014/03/08 20:32:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/03/08 20:32:46 | 3019,247,616 | -HS- | M] () -- C:\hiberfil.sys
[2014/03/08 20:29:38 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2014/03/08 20:26:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/03/08 20:08:00 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/03/06 10:54:42 | 000,000,198 | ---- | M] () -- C:\Users\star\Desktop\New shortcut.lnk
[2014/03/06 10:51:15 | 000,000,822 | ---- | M] () -- C:\Users\star\Desktop\MovedFiles - Shortcut.lnk
[2014/03/04 16:57:59 | 000,050,976 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2014/03/04 06:25:33 | 000,002,106 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/03/03 22:22:28 | 000,742,778 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/03/03 22:22:28 | 000,636,026 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/03/03 22:22:28 | 000,110,484 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/02/23 18:23:35 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/02/11 17:39:02 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2014/02/11 10:35:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2 C:\Users\star\AppData\Local\*.tmp files -> C:\Users\star\AppData\Local\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/03/06 10:54:42 | 000,000,198 | ---- | C] () -- C:\Users\star\Desktop\New shortcut.lnk
[2014/03/06 10:51:15 | 000,000,822 | ---- | C] () -- C:\Users\star\Desktop\MovedFiles - Shortcut.lnk
[2014/03/03 14:58:16 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl
[2014/02/23 16:35:49 | 000,002,179 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Connect.lnk
[2014/02/13 23:05:00 | 000,002,106 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/02/11 10:35:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/08/30 23:33:15 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013/06/13 11:02:19 | 145,212,540 | ---- | C] () -- C:\Users\star\AppData\Roaming\RegBackupiYogi.reg
[2013/06/13 10:52:27 | 152,715,978 | ---- | C] () -- C:\Users\star\AppData\Roaming\RegBackupPCO.reg
[2013/04/13 00:01:43 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013/03/17 17:34:28 | 000,000,036 | ---- | C] () -- C:\Users\star\AppData\Local\housecall.guid.cache
[2011/06/21 00:28:30 | 000,276,773 | ---- | C] () -- C:\Users\star\chain work - Topics - Jewelry Making Daily_aspx.mht
[2011/06/21 00:23:26 | 000,467,368 | ---- | C] () -- C:\Users\star\Five Free Designs for Making Wire Jewelry - Jewelry Making Daily - Jewelry Making Daily_aspx.mht
[2011/06/12 11:00:49 | 000,408,133 | ---- | C] () -- C:\Users\star\Three_Rings.pdf

========== ZeroAccess Check ==========

[2014/03/02 15:45:43 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2011/10/26 15:42:05 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/03/26 08:02:43 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013/12/20 14:49:25 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\Dropbox
[2012/11/24 23:01:20 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\MusicNet
[2013/05/17 22:56:48 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\OnlineVault
[2013/03/23 13:42:51 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\QuickScan
[2014/02/06 17:38:00 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\SoftGrid Client
[2013/03/15 00:23:33 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\Visan
[2014/02/06 18:05:35 | 000,000,000 | ---D | M] -- C:\Users\star\AppData\Roaming\ZapWallPaper

========== Purity Check ==========



========== Custom Scans ==========

< All processes killed >
[2009/07/13 23:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/13 23:08:49 | 000,032,564 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013/09/04 23:43:55 | 000,000,830 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014/01/20 21:50:15 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014/01/20 21:50:16 | 000,000,918 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< ========== COMMANDS ========== >

< Restore point Set: OTL Restore Point >

< ========== OTL ========== >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! >
Invalid Switch: E : value set successfully!

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}\ not found. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}\ not found. >

< HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! >
Invalid Switch: E : value set successfully!

< Registry key HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2001}\ not found. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}\ not found. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}\ not found. >

< HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! >
Invalid Switch: E : value set successfully!

< Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected] not found. >

< File C:\Program Files (x86)\iYogi\iYogiPasswordManager\iYogiPassMgr.xpi not found. >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! >
Invalid Switch: E : value set successfully!

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b0441a0e-a49a-4e16-afc1-74ecced1921f}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. >

< Registry value HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{251acd30-3292-4703-a43a-859c0a54df3b} not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{251acd30-3292-4703-a43a-859c0a54df3b}\ not found. >

< Registry value HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\ not found. >

< Registry value HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D8278076-BC68-4484-9233-6E7F1628B56C} not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}\ not found. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}\ not found. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31d8407c-62e4-4125-a4a9-717efb1a56ae}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31d8407c-62e4-4125-a4a9-717efb1a56ae}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66516A07-F617-488A-90CF-4E690CFB3C5F}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66516A07-F617-488A-90CF-4E690CFB3C5F}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\ not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\ not found. >

< 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 not found. >

< 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. >

< Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{31d8407c-62e4-4125-a4a9-717efb1a56ae} not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31d8407c-62e4-4125-a4a9-717efb1a56ae}\ not found. >

< Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 not found. >

< Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Default Visible not found. >

< Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. >

< Registry value HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{251ACD30-3292-4703-A43A-859C0A54DF3B} not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{251ACD30-3292-4703-A43A-859C0A54DF3B}\ not found. >

< Registry value HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4959472D-5636-006A-76A7-7A786E7484D7} not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4959472D-5636-006A-76A7-7A786E7484D7}\ not found. >

< Registry value HKEY_USERS\S-1-5-21-1894108233-2390997088-678213063-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found. >

< 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Allin1Convert Home Page Guard 64 bit not found. >

< File move failed. C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk scheduled to be moved on reboot. >

< File C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe not found. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//about.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//Exclude.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//LanguageSelection.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//Message.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//MyAgttryCmd.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//MyAgttryNag.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//MyNotification.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//NOCLessUpdate.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//quarantine.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//ScanNow.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//strings.vbs/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//Template.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//Update.htm/\ not found. >
Invalid Switch: \ not found.

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//VirFound.htm/\ not found. >
Invalid Switch: \ not found.

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe\ not found. >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe\ not found. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe\ not found. >

< File move failed. C:\Windows\SysWow64\tasklist.exe scheduled to be moved on reboot. >

< Folder C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\ not found. >

< Folder C:\Program Files (x86)\MyPC Backup\ not found. >

< ========== COMMANDS ========== >

< >

< [EMPTYTEMP] >

< >

< User: All Users >

< >

< User: canadianriverqueen >

< ->Temp folder emptied: 0 bytes >

< ->Temporary Internet Files folder emptied: 0 bytes >

< ->Flash cache emptied: 0 bytes >

< >

< User: Default >

< ->Temp folder emptied: 0 bytes >

< ->Temporary Internet Files folder emptied: 0 bytes >

< ->Flash cache emptied: 0 bytes >

< >

< User: Default User >

< ->Temp folder emptied: 0 bytes >

< ->Temporary Internet Files folder emptied: 0 bytes >

< ->Flash cache emptied: 0 bytes >

< >

< User: McAfeeMVSUser >

< ->Temp folder emptied: 0 bytes >

< ->Temporary Internet Files folder emptied: 128 bytes >

< ->Flash cache emptied: 0 bytes >

< >

< User: Public >

< >

< User: star >

< ->Temp folder emptied: 701041 bytes >

< ->Temporary Internet Files folder emptied: 27217011 bytes >

< ->Google Chrome cache emptied: 18779443 bytes >

< ->Flash cache emptied: 492 bytes >

< >

< %systemdrive% .tmp files removed: 0 bytes >

< %systemroot% .tmp files removed: 0 bytes >

< %systemroot%\System32 .tmp files removed: 0 bytes >

< %systemroot%\System32 (64bit) .tmp files removed: 0 bytes >

< %systemroot%\System32\drivers .tmp files removed: 0 bytes >

< Windows Temp folder emptied: 4554240 bytes >

< %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes >

< RecycleBin emptied: 0 bytes >

< >

< Total Files Cleaned = 49.00 mb >

< >

< C:\Windows\System32\drivers\etc\Hosts moved successfully. >

< HOSTS file reset successfully >

< >

< OTL by OldTimer - Version 3.2.69.0 log created on 03082014_202828 >

< >

< Files\Folders moved on Reboot... >

< File\Folder C:\Users\star\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk not found! >

< File move failed. C:\Windows\SysNative\tasklist.exe scheduled to be moved on reboot. >

< File move failed. C:\Windows\SysWOW64\tasklist.exe scheduled to be moved on reboot. >

< C:\Users\star\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. >

< C:\Users\star\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully. >

< C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully. >

< >

< PendingFileRenameOperations files... >

< >

< Registry entries deleted on Reboot... >

< End of report >


Now that I've done that, I will rerun the AdwCleaner??
  • 0

#15
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Hi Cowpuncher,

I'm still reviewing the OTL logs, but wondering how the machine is working now?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP