Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

proxy settings keep changing and several malware infections [Closed]


  • This topic is locked This topic is locked

#1
skandranon1971

skandranon1971

    Member

  • Member
  • PipPip
  • 67 posts

The proxy keeps changing randomly and several malware infections won't go away.

 

OTL logfile created on: 9/13/2014 12:01:16 PM - Run 9
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Jon Lowry\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17239)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.80 Gb Total Physical Memory | 1.84 Gb Available Physical Memory | 48.50% Memory free
7.60 Gb Paging File | 4.91 Gb Available in Paging File | 64.57% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465.46 Gb Total Space | 104.72 Gb Free Space | 22.50% Space Free | Partition Type: NTFS
 
Computer Name: CARLAGROETZMEIE | User Name: Jon Lowry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014/09/13 11:59:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jon Lowry\Desktop\OTL.exe
PRC - [2014/09/11 11:00:48 | 001,420,520 | ---- | M] () -- C:\Program Files (x86)\RocketTab\Client.exe
PRC - [2014/09/11 10:47:24 | 001,074,688 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
PRC - [2014/09/03 22:28:00 | 000,106,488 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe
PRC - [2014/08/25 01:48:04 | 001,988,968 | ---- | M] (YTDownloader) -- C:\Program Files (x86)\YTDownloader\YTDownloader.exe
PRC - [2014/08/22 12:28:52 | 001,608,000 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2014/08/22 12:23:58 | 000,990,072 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
PRC - [2014/08/18 07:51:26 | 000,408,584 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
PRC - [2014/08/15 11:47:50 | 036,414,752 | ---- | M] (Dropbox, Inc.) -- C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2014/07/31 00:34:48 | 004,085,896 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2014/07/26 09:00:07 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014/07/25 23:57:37 | 000,702,344 | ---- | M] (Cherished Technololgy LIMITED) -- C:\ProgramData\IePluginServices\PluginService.exe
PRC - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2014/06/27 18:08:35 | 000,230,792 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
PRC - [2014/05/20 20:48:02 | 000,054,784 | ---- | M] () -- C:\Program Files\DnsSignal\barelysignal2.exe
PRC - [2014/05/08 04:20:58 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/12/03 19:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2012/02/15 13:58:00 | 000,577,408 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2012/02/15 13:58:00 | 000,034,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2011/03/21 11:56:16 | 001,230,704 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/08/02 12:14:22 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
PRC - [2010/05/21 02:28:36 | 000,140,272 | ---- | M] (CinemaNow, Inc.) -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
PRC - [2010/04/13 09:57:58 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010/04/13 09:57:56 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
PRC - [2010/03/18 12:57:02 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2010/03/18 12:56:56 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2014/09/13 12:00:44 | 000,043,008 | ---- | M] () -- c:\Users\Jon Lowry\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphwbbih.dll
MOD - [2014/09/11 11:00:48 | 001,420,520 | ---- | M] () -- C:\Program Files (x86)\RocketTab\Client.exe
MOD - [2014/09/11 10:47:24 | 001,074,688 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
MOD - [2014/09/11 10:47:23 | 000,599,419 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\Sqlite3.dll
MOD - [2014/09/10 00:35:43 | 000,496,640 | ---- | M] () -- C:\Program Files\DnsSignal\dnssignal2.dll
MOD - [2014/08/19 14:15:03 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f11fcbd60483807eefa81820c92b37db\System.Web.Services.ni.dll
MOD - [2014/08/19 14:14:59 | 011,922,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\40d52224797a152552eee1f8433403e4\System.Web.ni.dll
MOD - [2014/08/19 14:14:38 | 000,774,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\4d2ee13655653e64c6b91238e6b351df\System.Runtime.Remoting.ni.dll
MOD - [2014/08/19 14:13:49 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\434e3a5de2f98ed740aac2b24c6d0890\System.Windows.Forms.ni.dll
MOD - [2014/08/19 14:13:40 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\bce52f0521c930a2e305badb3ea07128\System.Drawing.ni.dll
MOD - [2014/08/19 14:13:30 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\abca6deea510151b5d8e51bdabd17bea\System.Xml.ni.dll
MOD - [2014/08/19 14:13:24 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce5e2af0775efc3c91ba62d5d26fb39\System.Configuration.ni.dll
MOD - [2014/08/19 14:12:55 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\4aa535ef604745958a236cfbbbbf6297\WindowsBase.ni.dll
MOD - [2014/08/19 14:12:47 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\2ee90c95adb50b0e75b814fcb9d87f8e\System.ni.dll
MOD - [2014/08/19 14:12:04 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f8be9e33457f57805b4068f90099e428\mscorlib.ni.dll
MOD - [2014/08/19 14:10:31 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\39d333d05320d912a94364f525776dd5\System.Management.ni.dll
MOD - [2014/08/19 14:10:30 | 000,452,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\21c60b431ec52fdff78a75ea66876a5c\IAStorUtil.ni.dll
MOD - [2014/08/18 07:51:26 | 000,408,584 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
MOD - [2014/08/18 07:51:24 | 000,311,816 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Local\PennyBee\DealplyInstallerHelper.dll
MOD - [2014/08/15 11:46:08 | 003,610,624 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2014/07/26 09:00:09 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014/07/26 09:00:07 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll
MOD - [2013/12/03 19:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll
MOD - [2013/12/03 19:48:03 | 013,586,896 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
MOD - [2013/12/03 19:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
MOD - [2013/12/03 19:47:11 | 000,702,416 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
MOD - [2013/12/03 19:47:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
MOD - [2013/12/03 19:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
MOD - [2013/08/23 12:01:44 | 025,100,288 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2011/03/21 11:57:34 | 000,096,112 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011/03/21 11:56:16 | 001,230,704 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2014/09/03 22:28:00 | 000,106,488 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV:64bit: - [2014/07/26 09:00:07 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2014/07/25 06:00:25 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014/07/25 00:20:10 | 000,709,120 | ---- | M] () [Auto | Running] -- C:\Program Files\005\cyycfhtzro64.exe -- (cyycfhtzro64)
SRV:64bit: - [2014/05/20 20:48:02 | 000,067,584 | ---- | M] () [Auto | Running] -- C:\Program Files\DnsSignal\barelysignal.exe -- (DnsSignal Service)
SRV:64bit: - [2013/05/26 22:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013/04/12 11:29:36 | 000,534,824 | ---- | M] (Aventail Corporation) [Auto | Running] -- C:\Windows\SysNative\ngvpnmgr.exe -- (NgVpnMgr)
SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/06/24 16:24:12 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) [Auto | Running] -- C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe -- (RtVOsdService)
SRV:64bit: - [2010/06/18 16:26:18 | 000,103,992 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe -- (HP Wireless Assistant Service)
SRV:64bit: - [2009/11/17 19:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV:64bit: - [2009/07/13 18:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\svchost.exe -- (RemoteAccess)
SRV - [2014/09/10 00:26:00 | 000,068,608 | ---- | M] (globalUpdate) [On_Demand | Stopped] -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdatem)
SRV - [2014/09/10 00:26:00 | 000,068,608 | ---- | M] (globalUpdate) [Auto | Stopped] -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdate)
SRV - [2014/09/10 00:15:01 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/09/03 10:46:16 | 000,036,936 | ---- | M] (Just Develop It) [Auto | Stopped] -- C:\Program Files (x86)\MyPC Backup\BackupStack.exe -- (BackupStack)
SRV - [2014/08/22 12:23:58 | 000,990,072 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2014/07/25 23:57:37 | 000,702,344 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\ProgramData\IePluginServices\PluginService.exe -- (IePluginServices)
SRV - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014/05/08 04:20:58 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/03/20 15:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2012/09/27 11:55:16 | 000,086,528 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
SRV - [2012/02/15 13:58:00 | 000,034,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
SRV - [2011/04/16 13:49:30 | 000,082,224 | ---- | M] (ElcomSoft Co. Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Elcomsoft Password Recovery\Elcomsoft Wireless Security Auditor\ewsaserv64.exe -- (EWSASERV)
SRV - [2010/06/01 15:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)
SRV - [2010/05/21 02:28:36 | 000,140,272 | ---- | M] (CinemaNow, Inc.) [Auto | Running] -- C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe -- (CinemaNow Service)
SRV - [2010/04/13 09:57:58 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010/04/03 16:01:24 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2010/03/18 12:57:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010/03/18 12:56:56 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010/02/19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys -- (SMUpdd)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV:64bit: - [2014/09/03 22:28:07 | 000,028,184 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd)
DRV:64bit: - [2014/09/03 22:28:00 | 000,448,400 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdisFlt.sys -- (aswNdisFlt)
DRV:64bit: - [2014/07/26 09:00:39 | 000,427,360 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
DRV:64bit: - [2014/07/26 09:00:14 | 001,041,168 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2014/07/26 09:00:14 | 000,224,896 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2014/07/26 09:00:14 | 000,092,008 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
DRV:64bit: - [2014/07/26 09:00:14 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2014/07/26 09:00:14 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2014/07/26 09:00:14 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
DRV:64bit: - [2014/07/26 09:00:13 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2014/07/24 13:25:06 | 000,046,376 | ---- | M] (NetFilterSDK.com) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\netfilter64.sys -- (netfilter64)
DRV:64bit: - [2014/07/24 12:59:46 | 000,061,120 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64.sys -- ({9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64)
DRV:64bit: - [2013/04/12 06:38:40 | 000,103,496 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ngvpn.sys -- (NgVpn)
DRV:64bit: - [2013/04/12 06:38:40 | 000,031,304 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nglog.sys -- (NgLog)
DRV:64bit: - [2013/04/12 06:38:40 | 000,028,744 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ngwfp.sys -- (NgWfp)
DRV:64bit: - [2013/04/12 06:38:40 | 000,026,184 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ngfilter.sys -- (NgFilter)
DRV:64bit: - [2013/02/11 21:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2012/08/23 07:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 07:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012/08/20 16:48:50 | 000,019,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdrvio.sys -- (pwdrvio)
DRV:64bit: - [2012/08/20 16:48:48 | 000,012,384 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdspio.sys -- (pwdspio)
DRV:64bit: - [2012/02/29 23:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/12/19 16:41:32 | 000,029,288 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WsAudio_DeviceS(5).sys -- (WsAudio_DeviceS(5)
DRV:64bit: - [2011/12/19 16:41:32 | 000,029,288 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WsAudio_DeviceS(4).sys -- (WsAudio_DeviceS(4)
DRV:64bit: - [2011/12/19 16:41:32 | 000,029,288 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WsAudio_DeviceS(3).sys -- (WsAudio_DeviceS(3)
DRV:64bit: - [2011/12/19 16:41:32 | 000,029,288 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WsAudio_DeviceS(2).sys -- (WsAudio_DeviceS(2)
DRV:64bit: - [2011/12/19 16:41:32 | 000,029,288 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WsAudio_DeviceS(1).sys -- (WsAudio_DeviceS(1)
DRV:64bit: - [2011/11/28 15:51:44 | 000,033,872 | ---- | M] (AnvSoft Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv)
DRV:64bit: - [2011/10/14 04:37:44 | 000,396,848 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2011/09/05 21:04:00 | 000,243,744 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2011/05/09 18:09:00 | 000,122,368 | ---- | M] (Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT_U_USBSER.sys -- (Generalusbserialser20675)
DRV:64bit: - [2011/03/10 23:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 23:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/12/16 15:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2010/12/01 12:06:31 | 000,125,512 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AnyDVD.sys -- (AnyDVD)
DRV:64bit: - [2010/11/20 06:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 02:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010/09/02 00:52:50 | 003,065,408 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2010/08/02 12:14:48 | 000,032,880 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
DRV:64bit: - [2010/07/28 21:10:42 | 010,610,400 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010/05/31 12:46:50 | 000,333,928 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/04/13 10:44:22 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/02/03 07:38:30 | 000,271,872 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2009/09/17 13:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
DRV:64bit: - [2009/07/24 08:55:10 | 000,011,264 | ---- | M] (Primax Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NMgamingms.sys -- (NMgamingmsFltr)
DRV:64bit: - [2009/07/13 18:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 18:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 18:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 17:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/07/13 17:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/06/19 19:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009/06/10 14:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009/06/10 14:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009/06/10 14:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009/06/10 14:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2009/06/10 13:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009/06/10 13:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64)
DRV:64bit: - [2009/06/10 13:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 13:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 13:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 13:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/03/18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2007/02/15 17:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2014/08/25 01:48:02 | 000,058,728 | ---- | M] (YTDownloader) [Kernel | Auto | Running] -- C:\Program Files (x86)\YTDownloader\sbmntr.sys -- (sbmntr)
DRV - [2010/12/01 12:06:31 | 000,125,512 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2010/01/28 14:46:44 | 000,021,248 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Motive\MREMP50.sys -- (MREMP50)
DRV - [2010/01/28 14:46:42 | 000,020,096 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Motive\MRESP50.sys -- (MRESP50)
DRV - [2009/09/22 18:39:56 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009/07/13 18:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007/02/15 17:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [1999/09/10 13:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Stopped] -- C:\Windows\SysWow64\drivers\ASPI32.SYS -- (ASPI32)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.bing.com/...q={searchTerms}
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/...q={searchTerms}
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{4C6AB4BD-96D7-4335-97AB-C4588C2427C2}: "URL" = http://en.wikipedia....h={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{4FDD993D-F656-4134-8E18-AFCCC84F8912}: "URL" = http://search.yahoo....psg&type=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}: "URL" = http://www-search.ne...q={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{CB469F30-480D-4846-B7EB-63F186F828BD}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search.as...q={searchTerms}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages =  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.co...=1259392873&ir=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
IE - HKCU\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://www.trovi.com...rchTerms}&SSPV=
IE - HKCU\..\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}: "URL" = https://search.yahoo...p={searchTerms}
IE - HKCU\..\SearchScopes\{39D8810E-1A9F-462E-8029-266DFD9E8606}: "URL" = http://www.dnssignal...s={searchTerms}
IE - HKCU\..\SearchScopes\{446260B0-A943-4C26-AFBC-72E2A2E12756}: "URL" = http://start.mysearc...=1820541918&ir=
IE - HKCU\..\SearchScopes\{5FB49AFC-8016-4EB2-A383-78E96790C85E}: "URL" = http://www.google.co...ie=utf8&oe=utf8
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear
IE - HKCU\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://astromenda.co...=1259392873&ir=
IE - HKCU\..\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}: "URL" = http://www-search.ne...q={searchTerms}
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search.as...q={searchTerms}
IE - HKCU\..\SearchScopes\{CC865B26-C31D-4D23-B17B-96548EEF03F6}: "URL" = http://www.trovi.com...rchTerms}&SSPV=
IE - HKCU\..\SearchScopes\F12BAB76371E486CBA05A93378B22524: "URL" = http://search.condui...rchTerms}&SSPV=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:49191;https=127.0.0.1:49191
 
========== FireFox ==========
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: 
FF - prefs.js..extensions.enabledAddons: 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0
FF - prefs.js..browser.search.defaultenginename: "Yahoo!"
FF - prefs.js..browser.search.selectedEngine: "Yahoo!"
FF - prefs.js..keyword.URL: "https://search.yahoo...4519&ilc=12&p="
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@lightspark.github.com/Lightspark;version=1: C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll File not found
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Jon Lowry\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Jon Lowry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}: C:\PROGRAM FILES\UPDATER BY SWEETPACKS\FIREFOX
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/01/26 15:53:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011/06/04 06:43:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011/06/04 06:43:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/09/03 22:28:18 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\FireFox\Extensions\\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}: C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
 
[2013/08/29 07:43:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Extensions
[2012/03/27 19:27:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Extensions\[email protected]
[2014/09/13 11:56:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions
[2014/01/15 16:57:36 | 000,000,000 | ---D | M] (Start Page) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}
[2014/01/15 17:10:59 | 000,000,000 | ---D | M] ("MySearchDial NewTab") -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
[2014/09/10 00:27:02 | 000,000,000 | ---D | M] ("Object Browser") -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com
[2014/09/13 11:56:42 | 000,000,000 | ---D | M] ({{EXT_NAME}}) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
[2014/01/17 00:37:59 | 000,000,000 | ---D | M] (Slick Savings) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
[2013/12/23 11:59:14 | 000,000,000 | ---D | M] (Websteroids) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
[2014/09/10 00:27:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData
[2014/09/10 00:27:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins
[2014/09/10 00:27:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\userCode
[2014/07/28 13:03:46 | 000,018,229 | ---- | M] () (No name found) -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
[2014/01/15 17:10:58 | 000,000,847 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml
[2014/08/27 12:57:53 | 000,000,794 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml
[2013/12/06 00:39:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/10/05 22:14:29 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\USERS\JON LOWRY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8MZBHQ3R.DEFAULT\EXTENSIONS\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC}
File not found (No name found) -- C:\USERS\JON LOWRY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8MZBHQ3R.DEFAULT\EXTENSIONS\{8F02605D-BE4E-41BA-BD00-C39A59C46919}
File not found (No name found) -- C:\USERS\JON LOWRY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8MZBHQ3R.DEFAULT\EXTENSIONS\[email protected]
File not found (No name found) -- C:\USERS\JON LOWRY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8MZBHQ3R.DEFAULT\EXTENSIONS\[email protected]
[2013/10/17 12:25:52 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
[2011/03/10 09:58:36 | 000,002,201 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\scenicreflectionstb.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Yahoo (Enabled)
CHR - default_search_provider: search_url = https://search.yahoo...p={searchTerms}
CHR - default_search_provider: suggest_url = https://ff.search.ya...={searchTerms},
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Users\Jon Lowry\AppData\Roaming\Mozilla\plugins\np-mswmp.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
CHR - plugin: AVG SiteSafety plugin (Disabled) = C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U25 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Jon Lowry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Jon Lowry\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - Extension: Google Drive = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Wallet = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Google Drive = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Wallet = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2014/09/10 00:32:08 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2:64bit: - BHO: (Object Browser) - {11111111-1111-1111-1111-110311281150} - C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll (Object Browser)
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (no name) - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - No CLSID value found.
O2:64bit: - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O2:64bit: - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
O2 - BHO: (Vuze Remote Toolbar) - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Object Browser) - {11111111-1111-1111-1111-110311281150} - C:\Program Files (x86)\Object Browser\Object Browser-bho.dll (Object Browser)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O2 - BHO: (AllDaySavings) - {fbdff406-2c4c-5d35-8469-34bb67ea3353} - C:\Program Files\B021CBBD-E38E-4F8C-8E93-6624B0597A23\kzhxnitccw.dll ()
O3:64bit: - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE64.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CloneCDTray] C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [fst_us_178]  File not found
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe File not found
O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe (YTDownloader)
O4 - HKCU..\Run: [BRS] C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe ()
O4 - HKCU..\Run: [Facebook Update] C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [iLivid] "C:\Users\Jon Lowry\AppData\Local\iLivid\iLivid.exe" -autorun File not found
O4 - HKCU..\Run: [PeenyBee] C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe ()
O4 - HKCU..\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe (YTDownloader)
O4:64bit: - HKLM..\RunOnce: [NCPluginUpdater] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe (Hewlett-Packard)
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O4 - Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk =  File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: MasterCook: Select Image - C:\Program Files (x86)\MasterCook 9\Web\MCIEContext.hta ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: MasterCook: Select Image - C:\Program Files (x86)\MasterCook 9\Web\MCIEContext.hta ()
O9:64bit: - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9:64bit: - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files (x86)\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.16.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A2ECEE45-E66C-43D0-BF61-9B61E89D0E19}: DhcpNameServer = 172.16.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E73B43AB-B625-4EF7-932A-B128EF0F8391}: DhcpNameServer = 192.168.15.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/02/07 01:44:47 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (ä*//www.bleepingcomputer.com/combofix/how-to-use-combofix~n~nnote: you may be infected with a file patching virus 'virut't')
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/09/13 12:03:43 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\Desktop\eBay
[2014/09/13 12:00:32 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jon Lowry\Desktop\OTL.exe
[2014/09/11 11:02:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2014/09/11 11:01:50 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2014/09/11 11:01:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2014/09/11 11:00:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RocketTab
[2014/09/11 10:47:17 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
[2014/09/11 10:47:17 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
[2014/09/11 10:47:11 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\AppData\Local\ICSharpCode.net
[2014/09/11 10:47:04 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\AppData\Local\PennyBee
[2014/09/10 00:33:17 | 000,000,000 | ---D | C] -- C:\ProgramData\DnsSignal
[2014/09/10 00:33:17 | 000,000,000 | ---D | C] -- C:\Program Files\DnsSignal
[2014/09/10 00:27:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FFMPEG
[2014/09/10 00:27:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Video Accelerator
[2014/09/10 00:26:16 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
[2014/09/10 00:25:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Object Browser
[2014/09/10 00:25:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YTDownloader
[2014/09/10 00:25:13 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014/09/10 00:25:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup
[2014/09/06 13:18:16 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\Desktop\Woodworking Plans
[2014/09/03 22:28:40 | 000,028,184 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswKbd.sys
[2014/09/03 22:28:00 | 000,448,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdisFlt.sys
[2014/09/01 23:28:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bench
[2014/08/29 08:26:18 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\Desktop\Disney Recipes_files
[2014/08/29 08:24:11 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home_files
[2014/08/27 12:57:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater
[2014/08/27 12:57:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vuze Remote Toolbar
[2014/08/19 14:39:06 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\Desktop\Bed In A Box
[2014/08/19 14:21:13 | 000,000,000 | ---D | C] -- C:\Users\Jon Lowry\Desktop\Kami  8-19-14_files
[2012/12/22 20:20:34 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Jon Lowry\AppData\Roaming\pcouffin.sys
[1 C:\Users\Jon Lowry\Desktop\*.tmp files -> C:\Users\Jon Lowry\Desktop\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014/09/13 12:47:03 | 000,000,306 | ---- | M] () -- C:\Windows\tasks\WSE_Astromenda.job
[2014/09/13 12:32:33 | 000,003,464 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
[2014/09/13 12:31:08 | 000,000,964 | ---- | M] () -- C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job
[2014/09/13 12:31:04 | 000,003,128 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
[2014/09/13 12:27:39 | 000,002,440 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
[2014/09/13 12:27:39 | 000,002,440 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
[2014/09/13 12:27:39 | 000,002,104 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
[2014/09/13 12:27:01 | 000,002,766 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
[2014/09/13 12:26:08 | 000,004,490 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
[2014/09/13 12:26:04 | 000,003,808 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
[2014/09/13 12:26:01 | 000,003,128 | ---- | M] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
[2014/09/13 12:13:01 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/09/13 12:13:01 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/09/13 12:11:33 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/09/13 12:11:33 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/09/13 12:02:55 | 000,000,503 | ---- | M] () -- C:\Users\Jon Lowry\.swfinfo
[2014/09/13 11:59:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jon Lowry\Desktop\OTL.exe
[2014/09/13 11:56:40 | 000,000,960 | ---- | M] () -- C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job
[2014/09/13 11:56:40 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/09/13 11:55:45 | 3062,255,616 | -HS- | M] () -- C:\hiberfil.sys
[2014/09/13 11:55:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/09/13 11:27:03 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000UA.job
[2014/09/13 10:47:05 | 000,000,068 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Roaming\WB.CFG
[2014/09/13 10:18:12 | 000,000,348 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForJon Lowry.job
[2014/09/13 10:04:53 | 000,070,144 | ---- | M] () -- C:\Windows\SysWow64\tasks.dll
[2014/09/11 11:00:31 | 000,001,848 | ---- | M] () -- C:\Users\Public\Desktop\Vuze.lnk
[2014/09/11 11:00:31 | 000,001,848 | ---- | M] () -- C:\Users\Jon Lowry\Application Data\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk
[2014/09/10 00:33:20 | 000,000,000 | ---- | M] () -- C:\ProgramData\2b2821382e352b272c272e2237302d_c
[2014/09/10 00:32:08 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2014/09/10 00:25:32 | 000,001,969 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\Sync Folder.lnk
[2014/09/10 00:25:13 | 000,001,097 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/09/10 00:25:13 | 000,001,087 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\MyPC Backup.lnk
[2014/09/06 13:27:56 | 004,234,378 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/09/06 13:27:56 | 001,370,672 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/09/06 13:27:56 | 000,006,710 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/09/04 12:09:03 | 000,005,578 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\download.jpg
[2014/09/04 12:05:54 | 000,081,588 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\BickhamScriptProC.jpg
[2014/09/04 11:46:55 | 000,134,481 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\Student Debt-100326-ibr-fact-sheet.pdf
[2014/09/03 22:30:00 | 000,001,932 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2014/09/03 22:28:07 | 000,028,184 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswKbd.sys
[2014/09/03 22:28:00 | 000,448,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdisFlt.sys
[2014/09/03 22:25:15 | 005,019,496 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014/09/02 21:40:26 | 000,045,208 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\crest_big (1).gif
[2014/08/29 08:29:06 | 000,115,954 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\Disney Recipes.htm
[2014/08/29 08:24:11 | 000,538,252 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home.htm
[2014/08/28 14:27:04 | 000,000,922 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000Core.job
[2014/08/26 11:28:32 | 000,084,922 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\Interwoven_unicursal_hexagram.svg.png
[2014/08/26 11:27:22 | 000,009,739 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\Aquarian_Star.jpg
[2014/08/19 14:21:13 | 002,054,186 | ---- | M] () -- C:\Users\Jon Lowry\Desktop\Kami  8-19-14.htm
[2014/08/16 21:45:51 | 000,001,060 | ---- | M] () -- C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[1 C:\Users\Jon Lowry\Desktop\*.tmp files -> C:\Users\Jon Lowry\Desktop\*.tmp -> ]
[1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2014/09/11 11:00:32 | 000,001,848 | ---- | C] () -- C:\Users\Jon Lowry\Application Data\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk
[2014/09/11 11:00:31 | 000,001,848 | ---- | C] () -- C:\Users\Public\Desktop\Vuze.lnk
[2014/09/11 11:00:28 | 000,001,848 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
[2014/09/11 10:47:46 | 000,000,306 | ---- | C] () -- C:\Windows\tasks\WSE_Astromenda.job
[2014/09/10 00:33:20 | 000,000,000 | ---- | C] () -- C:\ProgramData\2b2821382e352b272c272e2237302d_c
[2014/09/10 00:27:35 | 000,002,440 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
[2014/09/10 00:27:34 | 000,002,440 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
[2014/09/10 00:27:24 | 000,002,104 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
[2014/09/10 00:27:13 | 000,002,766 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
[2014/09/10 00:26:56 | 000,003,808 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
[2014/09/10 00:26:38 | 000,003,464 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
[2014/09/10 00:26:31 | 000,003,128 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
[2014/09/10 00:26:15 | 000,004,490 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
[2014/09/10 00:26:13 | 000,000,964 | ---- | C] () -- C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job
[2014/09/10 00:26:11 | 000,000,960 | ---- | C] () -- C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job
[2014/09/10 00:26:04 | 000,003,128 | ---- | C] () -- C:\Windows\tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
[2014/09/10 00:25:32 | 000,001,969 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\Sync Folder.lnk
[2014/09/10 00:25:13 | 000,001,097 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/09/10 00:25:13 | 000,001,087 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\MyPC Backup.lnk
[2014/09/10 00:14:07 | 000,000,503 | ---- | C] () -- C:\Users\Jon Lowry\.swfinfo
[2014/09/04 12:09:07 | 000,005,578 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\download.jpg
[2014/09/04 12:05:53 | 000,081,588 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\BickhamScriptProC.jpg
[2014/09/04 11:46:54 | 000,134,481 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\Student Debt-100326-ibr-fact-sheet.pdf
[2014/09/03 22:30:00 | 000,001,932 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2014/09/02 21:40:26 | 000,045,208 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\crest_big (1).gif
[2014/08/29 08:29:06 | 000,115,954 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\Disney Recipes.htm
[2014/08/29 08:24:09 | 000,538,252 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home.htm
[2014/08/26 11:28:32 | 000,084,922 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\Interwoven_unicursal_hexagram.svg.png
[2014/08/26 11:27:21 | 000,009,739 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\Aquarian_Star.jpg
[2014/08/19 14:21:12 | 002,054,186 | ---- | C] () -- C:\Users\Jon Lowry\Desktop\Kami  8-19-14.htm
[2014/07/28 18:49:06 | 000,000,068 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Roaming\WB.CFG
[2014/07/24 15:16:10 | 000,070,144 | ---- | C] () -- C:\Windows\SysWow64\tasks.dll
[2014/01/15 17:11:21 | 000,366,611 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Local\mysearchdial-speeddial.crx
[2013/12/06 15:53:43 | 000,000,145 | ---- | C] () -- C:\Windows\avast5.ini
[2013/12/02 23:10:54 | 000,172,693 | ---- | C] () -- C:\Windows\hpoins46.dat
[2013/12/02 23:10:54 | 000,000,532 | ---- | C] () -- C:\Windows\hpomdl46.dat
[2013/11/15 14:49:23 | 000,000,042 | ---- | C] () -- C:\Windows\BDNET32.INI
[2013/04/12 11:31:30 | 000,234,280 | ---- | C] () -- C:\Windows\ngmsi.dll
[2013/04/12 11:30:42 | 000,020,776 | ---- | C] () -- C:\Windows\ngutil.exe
[2013/02/07 01:20:05 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/02/07 01:20:05 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/02/07 01:20:05 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/02/07 01:20:05 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/02/07 01:20:05 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013/01/11 15:12:08 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2013/01/04 21:12:28 | 000,006,144 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/12/28 17:23:06 | 000,000,049 | ---- | C] () -- C:\Users\Jon Lowry\jagex_cl_runescape_LIVE2.dat
[2012/12/28 17:21:45 | 000,000,050 | ---- | C] () -- C:\Users\Jon Lowry\jagex_cl_loginapplet_LIVE.dat
[2012/12/28 17:21:45 | 000,000,024 | ---- | C] () -- C:\Users\Jon Lowry\random.dat
[2012/12/28 17:20:04 | 000,000,049 | ---- | C] () -- C:\Users\Jon Lowry\jagex_cl_runescape_LIVE1.dat
[2012/12/22 20:20:34 | 000,007,859 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Roaming\pcouffin.cat
[2012/12/22 20:20:33 | 000,001,167 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Roaming\pcouffin.inf
[2012/11/20 18:36:30 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat
[2012/08/25 12:42:13 | 000,000,258 | RHS- | C] () -- C:\Users\Jon Lowry\ntuser.pol
[2012/05/19 08:48:52 | 000,870,128 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Roaming\mcs.rma
[2012/03/18 16:06:46 | 000,000,132 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012/02/07 01:22:56 | 000,000,032 | ---- | C] () -- C:\Users\Jon Lowry\jagex_cl_runescape_LIVE.dat
[2011/12/23 16:12:26 | 000,000,097 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Local\fusioncache.dat
[2011/06/03 15:10:04 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011/05/16 20:50:25 | 000,001,854 | ---- | C] () -- C:\Users\Jon Lowry\AppData\Roaming\GhostObjGAFix.xml
[2011/02/06 01:26:14 | 000,000,117 | ---- | C] () -- C:\Users\Jon Lowry\jagex_runescape_preferences2.dat
[2011/02/06 01:24:11 | 000,000,034 | ---- | C] () -- C:\Users\Jon Lowry\jagex_runescape_preferences.dat
[2011/01/29 11:50:13 | 000,000,124 | -HS- | C] () -- C:\ProgramData\.zreglib
 
========== ZeroAccess Check ==========
 
[2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/06/24 19:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 18:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 18:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 05:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 18:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2013/03/11 14:37:55 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\.BitTornado
[2014/05/16 16:55:35 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\.minecraft
[2014/07/09 22:45:49 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\amazon
[2013/08/31 00:09:17 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\AnvSoft
[2014/04/24 18:41:05 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\AVAST Software
[2013/07/20 05:01:07 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Aventail
[2013/08/29 22:47:53 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\AVG
[2014/09/13 12:10:56 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Azureus
[2012/06/11 20:24:07 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Barnes & Noble
[2014/04/09 01:37:40 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Battle.net
[2013/03/11 14:37:56 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Blackboard
[2013/02/10 16:39:27 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\calibre
[2012/03/18 19:48:43 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013/09/10 11:33:12 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/02/09 13:01:59 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\com.bitcasa.Bitcasa
[2013/10/18 12:59:00 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\com.wd.WDMyCloud
[2013/02/07 01:59:14 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Curiolab
[2014/08/14 14:16:27 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\device
[2013/11/26 01:25:37 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Digiarty
[2014/06/05 11:08:40 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\DriverCure
[2014/09/13 12:01:09 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Dropbox
[2011/06/23 09:01:39 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Encryptomatic, LLC
[2013/06/15 12:53:08 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\FamilyTreeMaker
[2014/07/24 15:16:08 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\GetPrivate
[2013/10/28 19:31:02 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\GetRightToGo
[2014/07/25 13:49:49 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\GroovorioUpdater
[2011/03/31 13:16:50 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\InterTrust
[2014/07/25 23:50:20 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\istart123
[2011/11/30 02:38:36 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\MusicNet
[2013/08/19 23:26:12 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Nico Mak Computing
[2014/06/05 11:08:40 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\ParetoLogic
[2013/03/11 14:37:56 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Philips
[2013/03/11 14:37:56 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Philips-Songbird
[2011/06/23 09:01:35 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\PSTViewer
[2014/08/19 14:56:25 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\RIFT
[2014/07/09 22:46:05 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\rightbackup
[2014/07/29 09:12:26 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\serv
[2013/11/20 22:50:07 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\SketchUp
[2014/01/21 21:55:08 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Slick Savings
[2013/09/24 06:00:15 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\SoftGrid Client
[2014/09/13 12:39:39 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Spotify
[2014/07/24 15:21:58 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Systweak
[2011/01/25 12:49:18 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\TP
[2012/12/08 12:14:27 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\TuneUp Software
[2011/08/18 19:38:14 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Unity
[2013/12/02 14:34:50 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\uPlayer
[2014/07/26 12:26:55 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\VOPackage
[2013/07/13 00:19:59 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Vso
[2012/01/05 19:25:01 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\wargaming.net
[2013/10/03 20:02:04 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\WDC
[2013/10/17 01:40:37 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Windows Live Writer
[2012/12/14 07:48:20 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Wondershare Video Converter Platinum
[2012/12/16 13:58:00 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\Wondershare Video Converter Ultimate
[2014/09/11 10:47:41 | 000,000,000 | ---D | M] -- C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 178 bytes -> C:\ProgramData\Temp:BF3D62E7
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:0B4227B4
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:373E1720
 
< End of report >
 

  • 0

Advertisements


#2
dbreeze

dbreeze

    Trusted Helper

  • Malware Removal
  • 2,216 posts
Hi skandranon1971,

Welcome to Geeks to Go. My name is dbreeze and I'll be helping you with this problem. Before I get into the removal of malware / correction of your problem, I need you to be aware of the following:
  • As I am in the final phase of training right now, my responses to you may be delayed slightly as they have to be checked by my adviser (good news for you, as there will be two sets of eyes fixing your problem). I promise to be as prompt as possible in helping you, so please bear with me and we will get through this.
  • Please read all of my response through at least once before attempting to follow the procedures described.I would recommend printing them out, if you can, as you can check off each step as you complete it. Also, as some of the cleaning may be done in Safe Mode and there will be no internet connection then, you will find that having the steps printed for reference speeds the cleaning process along. If there's anything you don't understand or isn't totally clear to you, please come back to me for clarification before you start those steps.
  • All of the assistants and staff at Geeks to Go are here on a volunteer basis; please respect our time given to the cause of helping others.If you are going to be away for more than 4 days, please let me know here. (I will do the same for you.) We do realize that 'life happens' and situations arise unexpectedly; we just ask that you keep us up to date. That being said, please notice the following Geeks to Go rule:
  • Posts that are not replied to in four (4) days will result in the topic being closed. We have not forgotten you; this is just an effort to keep the boards organized and flowing. To continue on your closed topic, please PM me or any Moderator to have the topic reactivated. If, at any time during our working together, I have not responded to you in 2 days (48 hours), then please PM me.
  • Malware removal is a complex, multiple step process; please stay with me on this thread (don't start another thread) until I declare that your logs are clean and you are good to go. The absence of apparent issues does not mean your system is clean; I will tell you when everything looks good for you to go and help you remove the tools we have used.
  • If any of the security programs on your system should give any warnings about the software tools I ask you to download and use, please do not be alarmed.All of the tools I will have you use are safe to use (as instructed) and malware free.
  • While we strive to disrupt your system as little as possible, things happen.If you can, it would be best to back up your personal files now (if you do not already have a backup). You can store these on a CD/DVD, USB drive or stick, anywhere but on your same system. This will save you from possible anguish later if something unforeseen happens.
  • Please do not run any other tools or scanners than what I ask you to.Some of the openly available software made for malware removal can make changes to your system that interfere with the cleaning of the malware, or even destroy your system. I will use only what the situation calls for and direct you in the proper use of that software.
  • Please do not attach any log files to your replies unless I specifically ask you.Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.
Let's get started....


Please download Farbar Recovery Scan Tool 64bit and save it to your Desktop.
  • Right click the FRST file on your desktop and select "Run as Administrator..." (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST64.exe). Please also paste that along with the FRST.txt into your reply.

  • 0

#3
skandranon1971

skandranon1971

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Jon Lowry (administrator) on CARLAGROETZMEIE on 16-09-2014 07:56:46
Running from C:\Users\Jon Lowry\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Aventail Corporation) C:\Windows\System32\ngvpnmgr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
() C:\Program Files (x86)\RocketTab\Client.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CinemaNow, Inc.) C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
() C:\Program Files\005\cyycfhtzro64.exe
() C:\Program Files\DnsSignal\barelysignal.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
() C:\Program Files\DnsSignal\barelysignal.exe
() C:\Program Files\DnsSignal\barelysignal2.exe
(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
(Alcatel-Lucent) C:\Program Files\Common Files\Motive\McciCMService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(YTDownloader) C:\Program Files (x86)\YTDownloader\YTDownloader.exe
() C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
() C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Dropbox, Inc.) C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Spigot Inc) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\EXCEL.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6486120 2011-02-22] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation)
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1230704 2011-03-21] ()
HKLM-x32\...\Run: [CloneCDTray] => C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [577408 2012-02-15] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [fst_us_178] => [X]
HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988968 2014-08-25] (YTDownloader)
HKLM-x32\...\Run: [SearchSettings] => C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1608000 2014-08-22] (Spigot, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [NCPluginUpdater] => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\NCPluginUpdater.exe [21720 2014-08-19] (Hewlett-Packard)
HKLM-x32\...\RunOnce: [AvgUninstallURL] => cmd.exe /c start http://www.avg.com/w...&"ver=10.0.1427
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [Facebook Update] => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-08-10] (Facebook Inc.)
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [iLivid] => "C:\Users\Jon Lowry\AppData\Local\iLivid\iLivid.exe" -autorun
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988968 2014-08-25] (YTDownloader)
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [PeenyBee] => C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe [408584 2014-08-18] ()
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [BRS] => C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe [1074688 2014-09-11] ()
Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
BootExecute: ä* //www.bleepingcomputer.com/combofix/how-to-use-combofix~n~nnote: you may be infected with a file patching virus 'virut't'
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
ProxyServer: http=127.0.0.1:49191;https=127.0.0.1:49191
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.co...=1259392873&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE64.dll (Spigot, Inc.)
URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {4C6AB4BD-96D7-4335-97AB-C4588C2427C2} URL = http://en.wikipedia....h={searchTerms}
SearchScopes: HKLM - {4FDD993D-F656-4134-8E18-AFCCC84F8912} URL = http://search.yahoo....psg&type=HPNTDF
SearchScopes: HKLM - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://www-search.ne...q={searchTerms}
SearchScopes: HKLM - {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = 
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.as...q={searchTerms}
SearchScopes: HKCU - DefaultScope {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKCU - F12BAB76371E486CBA05A93378B22524 URL = http://search.condui...rchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com...rchTerms}&SSPV=
SearchScopes: HKCU - {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKCU - {39D8810E-1A9F-462E-8029-266DFD9E8606} URL = http://www.dnssignal...s={searchTerms}
SearchScopes: HKCU - {446260B0-A943-4C26-AFBC-72E2A2E12756} URL = http://start.mysearc...=1820541918&ir=
SearchScopes: HKCU - {4C6AB4BD-96D7-4335-97AB-C4588C2427C2} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://astromenda.co...=1259392873&ir=
SearchScopes: HKCU - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://www-search.ne...q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.as...q={searchTerms}
SearchScopes: HKCU - {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = http://www.trovi.com...rchTerms}&SSPV=
BHO: Object Browser -> {11111111-1111-1111-1111-110311281150} -> C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll (Object Browser)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} ->  No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Vuze Remote Toolbar -> {05478A66-EDB6-4A22-A870-A5987F80A7DA} -> C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
BHO-x32: Object Browser -> {11111111-1111-1111-1111-110311281150} -> C:\Program Files (x86)\Object Browser\Object Browser-bho.dll (Object Browser)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO-x32: AllDaySavings -> {fbdff406-2c4c-5d35-8469-34bb67ea3353} -> C:\Program Files\B021CBBD-E38E-4F8C-8E93-6624B0597A23\kzhxnitccw.dll ()
Toolbar: HKLM - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE64.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 172.16.0.1
 
FireFox:
========
FF ProfilePath: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jon Lowry\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jon Lowry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF user.js: detected! => C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Jon Lowry\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\scenicreflectionstb.xml
FF Extension: Object Browser - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [2014-09-10]
FF Extension: {{EXT_NAME}} - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-09-13]
FF Extension: Slick Savings - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-01-15]
FF Extension: Websteroids - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2013-12-23]
FF Extension: Start Page - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-01-15]
FF Extension: MySearchDial NewTab - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-15]
FF Extension: AllDaySavings - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-07-28]
FF HKLM\...\Firefox\Extensions: [{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}] - C:\Program Files\Updater By SweetPacks\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2011-01-26]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011-06-04]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011-06-04]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-24]
FF HKCU\...\FireFox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC} [Not Found]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919} [Not Found]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://astromenda.com/?f=1&a=ast_secureddownload_14_37_ch&cd=2XzuyEtN2Y1L1Qzu0A0CzztCtCtBtC0CtDyCyD0Czy0FtBtCtN0D0Tzu0SzyzzyCtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyD0DzztDzz0C0DzztGzyyD0DyEtGtDtByCtCtGyBtC0ByCtGtBtBtD0FyD0AtCyCtA0A0FtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyD0ByC0A0D0A0AtG0C0C0EtAtGyE0BtBtAtGzy0AtCyEtG0FzytAtBtD0DyCyDtBtCzy0E2Q&cr=1259392873&ir=
CHR RestoreOnStartup: Default -> "hxxp://www.google.com/"
CHR DefaultSearchKeyword: Default -> yahoo.com search
CHR DefaultSearchProvider: Default -> Yahoo
CHR DefaultSearchURL: Default -> https://search.yahoo...p={searchTerms}
CHR DefaultSuggestURL: Default -> https://ff.search.ya...d={searchTerms}
CHR Profile: C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-21]
CHR Extension: (YouTube) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-21]
CHR Extension: (Google Search) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-21]
CHR Extension: (Google Wallet) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-21]
CHR HKCU\...\Chrome\Extension: [dnmlhhbehhdmajijfenoldcajelckpmn] - C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx []
CHR HKCU\...\Chrome\Extension: [kepfgejmidkmoiimkfdjocdjhbcpmlmg] - C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx []
CHR HKCU\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx []
CHR HKCU\...\Chrome\Extension: [nemfjadlboooiffmcelkafilagddogim] - C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx []
CHR HKCU\...\Chrome\Extension: [njljkdinboobkmkihgcohanchjnjpgjk] - C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx []
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [dfkfeemgjcjcednnaoemnjdiakmjbbbh] - C:\ProgramData\ADDICT-THING\dfkfeemgjcjcednnaoemnjdiakmjbbbh.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [dnmlhhbehhdmajijfenoldcajelckpmn] - C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-07]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-26]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [2013-10-14]
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [2013-12-27]
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Jon Lowry\AppData\Local\Wajam\Chrome\wajam.crx [2012-09-14]
CHR HKLM-x32\...\Chrome\Extension: [kepfgejmidkmoiimkfdjocdjhbcpmlmg] - C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx [2012-09-14]
CHR HKLM-x32\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2012-09-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\Jon Lowry\AppData\Local\Slick Savings\coupons.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [nemfjadlboooiffmcelkafilagddogim] - C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [njljkdinboobkmkihgcohanchjnjpgjk] - C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-07]
CHR HKLM-x32\...\Chrome\Extension: [npffmjkglbnioaoncpfmdbmehnbcldfh] - C:\Program Files (x86)\LyricSing\130.crx [2011-02-07]
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-26] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [106488 2014-09-03] (AVAST Software)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36936 2014-09-03] (Just Develop It)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 cyycfhtzro64; C:\Program Files\005\cyycfhtzro64.exe [709120 2014-07-25] () [File not signed]
R2 DnsSignal Service; C:\Program Files\DnsSignal\barelysignal.exe [67584 2014-05-20] () [File not signed]
S3 EWSASERV; C:\Program Files (x86)\Elcomsoft Password Recovery\Elcomsoft Wireless Security Auditor\ewsaserv64.exe [82224 2011-04-16] (ElcomSoft Co. Ltd.)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-10] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-10] (globalUpdate) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [702344 2014-07-25] (Cherished Technololgy LIMITED)
R2 McciCMService; C:\Program Files (x86)\Common Files\Motive\McciCMService.exe [319488 2010-01-28] (Alcatel-Lucent) [File not signed]
R2 McciCMService64; C:\Program Files\Common Files\Motive\McciCMService.exe [517632 2010-02-02] (Alcatel-Lucent) [File not signed]
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
R2 NgVpnMgr; C:\Windows\system32\ngvpnmgr.exe [534824 2013-04-12] (Aventail Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]
S4 RemoteAccess; C:\Windows\System32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S4 RemoteAccess; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-13] (Microsoft Corporation)
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [File not signed]
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S1 ASPI32; C:\Windows\SysWow64\Drivers\ASPI32.sys [25244 1999-09-10] (Adaptec) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-26] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-09-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-26] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [448400 2014-09-03] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-26] ()
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-15] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-15] (SlySoft, Inc.)
S3 Generalusbserialser20675; C:\Windows\System32\DRIVERS\CT_U_USBSER.sys [122368 2011-05-09] (Incorporated)
S2 MCSTRM; No ImagePath
S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2010-01-28] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2010-01-28] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-07-24] (NetFilterSDK.com)
S3 NgFilter; C:\Windows\System32\DRIVERS\ngfilter.sys [26184 2013-04-12] (Aventail Corporation)
R3 NgLog; C:\Windows\System32\DRIVERS\nglog.sys [31304 2013-04-12] (Aventail Corporation)
R3 NgVpn; C:\Windows\System32\DRIVERS\ngvpn.sys [103496 2013-04-12] (Aventail Corporation)
R3 NgWfp; C:\Windows\System32\DRIVERS\ngwfp.sys [28744 2013-04-12] (Aventail Corporation)
R3 NMgamingmsFltr; C:\Windows\System32\drivers\NMgamingms.sys [11264 2009-07-24] (Primax Ltd)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-08-20] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-08-20] ()
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-22] (Realtek Semiconductor Corp.) [File not signed]
R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58728 2014-08-25] (YTDownloader)
R1 {9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64; C:\Windows\System32\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64.sys [61120 2014-07-24] (StdLib)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
S3 SMUpdd; \??\C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [X]
S1 ssnfd; system32\drivers\ssnfd.sys [X]
S1 SydexFDD; system32\drives\sydexfdd.sys [X]
U2 TMAgent; No ImagePath
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-09-16 07:58 - 2014-09-16 07:58 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$Garb for Faire.xlsx
2014-09-16 07:56 - 2014-09-16 07:56 - 00042448 _____ () C:\Users\Jon Lowry\Desktop\FRST.txt
2014-09-16 07:54 - 2014-09-16 07:54 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Desktop\FRST64.exe
2014-09-16 07:53 - 2014-09-16 07:54 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Downloads\FRST64.exe
2014-09-13 12:31 - 2014-09-13 12:31 - 00172572 _____ () C:\Users\Jon Lowry\Desktop\OTL.Txt
2014-09-13 12:03 - 2014-09-13 12:04 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\eBay
2014-09-13 12:00 - 2014-09-13 11:59 - 00602112 _____ (OldTimer Tools) C:\Users\Jon Lowry\Desktop\OTL.exe
2014-09-13 11:59 - 2014-09-13 11:59 - 00602112 _____ (OldTimer Tools) C:\Users\Jon Lowry\Downloads\OTL.exe
2014-09-13 11:58 - 2014-09-13 11:55 - 327118024 _____ () C:\Users\Jon Lowry\Downloads\PS_AIO_02_USW_Full_Win_WW_130_140.exe
2014-09-13 11:55 - 2014-09-13 11:55 - 00000112 _____ () C:\Windows\setupact.log
2014-09-13 11:55 - 2014-09-13 11:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-11 11:02 - 2014-09-11 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-11 11:01 - 2014-09-11 11:01 - 13087456 _____ (Microsoft Corporation) C:\Users\Jon Lowry\Downloads\Silverlight_x64.exe
2014-09-11 11:01 - 2014-09-11 11:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-11 11:01 - 2014-09-11 11:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-09-11 11:00 - 2014-09-11 11:00 - 00004162 _____ () C:\Windows\System32\Tasks\RocketTab Update Task
2014-09-11 11:00 - 2014-09-11 11:00 - 00003376 _____ () C:\Windows\System32\Tasks\RocketTab
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\Users\Public\Desktop\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00000000 ____D () C:\Program Files (x86)\RocketTab
2014-09-11 10:47 - 2014-09-13 12:47 - 00000306 _____ () C:\Windows\Tasks\WSE_Astromenda.job
2014-09-11 10:47 - 2014-09-11 10:47 - 00003264 _____ () C:\Windows\System32\Tasks\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\PennyBee
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\ICSharpCode.net
2014-09-11 10:47 - 2014-09-11 10:45 - 00071824 _____ (Azureus Software, Inc.) C:\Users\Jon Lowry\Downloads\vuze.exe
2014-09-11 10:45 - 2014-09-11 10:45 - 00800960 _____ ( ) C:\Users\Jon Lowry\Downloads\vuze_setup.exe
2014-09-10 00:33 - 2014-09-11 10:44 - 00000000 ____D () C:\Program Files\DnsSignal
2014-09-10 00:33 - 2014-09-10 00:35 - 00000000 ____D () C:\ProgramData\DnsSignal
2014-09-10 00:33 - 2014-09-10 00:33 - 00000000 _____ () C:\ProgramData\2b2821382e352b272c272e2237302d_c
2014-09-10 00:27 - 2014-09-13 12:27 - 00002766 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002104 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
2014-09-10 00:27 - 2014-09-10 00:27 - 00005796 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1
2014-09-10 00:27 - 2014-09-10 00:27 - 00005470 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5
2014-09-10 00:27 - 2014-09-10 00:27 - 00005134 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2
2014-09-10 00:27 - 2014-09-10 00:27 - 00003562 _____ () C:\Windows\System32\Tasks\FFMPEGUpd
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\ProgramData\Video Accelerator
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\Program Files (x86)\FFMPEG
2014-09-10 00:26 - 2014-09-13 12:40 - 00003464 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
2014-09-10 00:26 - 2014-09-13 12:31 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
2014-09-10 00:26 - 2014-09-13 12:31 - 00000964 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00004490 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00003808 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
2014-09-10 00:26 - 2014-09-13 11:56 - 00000960 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (ParetoLogic, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup.exe
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (ParetoLogic, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup (1).exe
2014-09-10 00:26 - 2014-09-10 00:26 - 00007520 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11
2014-09-10 00:26 - 2014-09-10 00:26 - 00006838 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4
2014-09-10 00:26 - 2014-09-10 00:26 - 00006492 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3
2014-09-10 00:26 - 2014-09-10 00:26 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-10 00:26 - 2014-09-10 00:26 - 00003708 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-10 00:26 - 2014-09-10 00:26 - 00003594 _____ () C:\Windows\System32\Tasks\YTDownloaderUpd
2014-09-10 00:26 - 2014-09-10 00:26 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
2014-09-10 00:25 - 2014-09-10 00:27 - 00000000 ____D () C:\Program Files (x86)\Object Browser
2014-09-10 00:25 - 2014-09-10 00:26 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2014-09-10 00:25 - 2014-09-10 00:25 - 00004048 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-09-10 00:25 - 2014-09-10 00:25 - 00001969 _____ () C:\Users\Jon Lowry\Desktop\Sync Folder.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00001087 _____ () C:\Users\Jon Lowry\Desktop\MyPC Backup.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-09-10 00:14 - 2014-09-13 12:02 - 00000503 _____ () C:\Users\Jon Lowry\.swfinfo
2014-09-09 23:55 - 2014-09-09 23:55 - 00013074 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E10_HDTV_x264-KILLERS.10835767.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00012314 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E11_HDTV_x264-KILLERS.10907765.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00011814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E12_HDTV_x264-KILLERS.10979033.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_HDTV_x264-KILLERS.10527705.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E04_HDTV_x264-KILLERS.10523457.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013485 _____ () C:\Users\Jon Lowry\Downloads\7079A914A2555E676EF2F04A3596979A8E2FCC12.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013281 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E08_REPACK_HDTV_x264-KILLERS.10723613.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013114 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E06_HDTV_x264-KILLERS.10626989.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012974 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E07_HDTV_x264-KILLERS.10665999.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012829 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E10_HDTV_x264-ASAP.8842947.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012399 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_REAL_HDTV_x264-KILLERS.10571218.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012332 _____ () C:\Users\Jon Lowry\Downloads\Graceland.S01E09.HDTV.x264-2HD.[eztv].torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012010 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E02_HDTV_x264-LOL.10391260.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011808 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E12_HDTV_x264-2HD.8922957.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011150 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E03_HDTV_x264-LOL.10429090.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010750 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E01_HDTV_x264-LOL.10342060.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010409 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E09_HDTV_x264-LOL.10764111.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00435920 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E09_HDTV_x264-2HD_[eztv].exe
2014-09-09 23:51 - 2014-09-09 23:51 - 00435920 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E09_HDTV_x264-2HD_[eztv] (2).exe
2014-09-09 23:51 - 2014-09-09 23:51 - 00435920 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E09_HDTV_x264-2HD_[eztv] (1).exe
2014-09-09 23:51 - 2014-09-09 23:51 - 00010728 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E08_HDTV_x264-2HD.8803956.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00010708 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E07_HDTV_x264-2HD.8742467.TPB.torrent
2014-09-09 23:50 - 2014-09-09 23:51 - 00013188 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E06_HDTV_x264-2HD.8715128.TPB.torrent
2014-09-09 08:20 - 2014-09-10 21:41 - 00705508 _____ () C:\Users\Jon Lowry\Desktop\Equestrian Emporium.xlsx
2014-09-08 22:10 - 2014-09-13 12:07 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-09-06 13:18 - 2014-09-06 12:57 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Woodworking Plans
2014-09-04 12:30 - 2014-09-04 12:30 - 04147322 _____ () C:\Users\Jon Lowry\Downloads\Attachments_201494.zip
2014-09-04 12:07 - 2014-09-04 12:07 - 00032102 _____ () C:\Users\Jon Lowry\Downloads\character_rope5.zip
2014-09-04 12:06 - 2014-09-04 12:06 - 00066156 _____ () C:\Users\Jon Lowry\Downloads\lechefrene_lcr-cowboys-rest.zip
2014-09-04 12:05 - 2014-09-04 12:05 - 00089677 _____ () C:\Users\Jon Lowry\Downloads\last-soundtrack_bleeding-cowboys.zip
2014-09-04 12:01 - 2014-09-04 12:01 - 00093452 _____ () C:\Users\Jon Lowry\Downloads\1-shelley-volante_[allfont.net].ttf
2014-09-04 11:46 - 2014-09-04 11:46 - 00616582 _____ () C:\Users\Jon Lowry\Downloads\texas_ranger.zip
2014-09-04 11:46 - 2014-09-04 11:46 - 00012084 _____ () C:\Users\Jon Lowry\Downloads\beans.zip
2014-09-04 11:45 - 2014-09-04 11:45 - 00035005 _____ () C:\Users\Jon Lowry\Downloads\cowboys.zip
2014-09-04 11:44 - 2014-09-04 11:44 - 00031044 _____ () C:\Users\Jon Lowry\Downloads\rancho.zip
2014-09-04 11:43 - 2014-09-04 11:44 - 01296003 _____ () C:\Users\Jon Lowry\Downloads\narnfont.zip
2014-09-04 11:42 - 2014-09-04 11:42 - 00200417 _____ () C:\Users\Jon Lowry\Downloads\burnstown-dam.zip
2014-09-04 10:54 - 2014-09-04 10:54 - 01527000 _____ () C:\Users\Jon Lowry\Downloads\flash_player_14_plugin.exe
2014-09-04 10:54 - 2014-09-04 10:54 - 00144760 _____ (Premium Installer ) C:\Users\Jon Lowry\Downloads\Setup (2).exe
2014-09-03 22:30 - 2014-09-03 22:30 - 00001932 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-09-03 22:28 - 2014-09-03 22:28 - 00448400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-09-03 22:28 - 2014-09-03 22:28 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-09-03 12:52 - 2014-09-03 12:52 - 00013680 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Freed+mp3+chapterized+by+veraprima.torrent
2014-09-03 12:51 - 2014-09-03 12:51 - 00012717 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Darker+mp3+chapteized+by+veraprima.torrent
2014-09-03 12:50 - 2014-09-03 12:50 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima (1).torrent
2014-09-03 12:45 - 2014-09-03 12:45 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima.torrent
2014-09-02 21:36 - 2014-09-02 21:36 - 01265384 _____ () C:\Users\Jon Lowry\Downloads\Setup (1).exe
2014-09-01 23:32 - 2014-09-07 23:49 - 00000003 _____ () C:\Users\Jon Lowry\AppData\Local\proxy.log
2014-09-01 23:28 - 2014-09-11 10:44 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-08-29 21:13 - 2014-08-29 21:59 - 00009168 _____ () C:\Users\Jon Lowry\Desktop\TV Shows.xlsx
2014-08-29 21:13 - 2014-08-29 21:13 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$TV Shows.xlsx
2014-08-29 13:36 - 2014-09-13 12:10 - 00016384 _____ () C:\Users\Jon Lowry\Desktop\Garb for Faire.xlsx
2014-08-29 13:33 - 2014-08-29 13:33 - 00008339 _____ () C:\Users\Jon Lowry\Downloads\The+Lego+Movie+%282014%29+720p+BrRip+x264+-+YIFY.torrent
2014-08-29 08:29 - 2014-08-29 08:29 - 00115954 _____ () C:\Users\Jon Lowry\Desktop\Disney Recipes.htm
2014-08-29 08:26 - 2014-08-29 08:29 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Disney Recipes_files
2014-08-29 08:24 - 2014-08-29 08:24 - 00538252 _____ () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home.htm
2014-08-29 08:24 - 2014-08-29 08:24 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home_files
2014-08-27 13:15 - 2014-09-05 15:03 - 00011768 _____ () C:\Users\Jon Lowry\Desktop\Utilities.xlsx
2014-08-27 13:09 - 2014-08-22 19:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 13:09 - 2014-08-22 18:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 13:09 - 2014-08-22 17:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Vuze Remote Toolbar
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-08-26 13:30 - 2014-08-27 13:18 - 00012260 _____ () C:\Users\Jon Lowry\Desktop\2014-2015 Glass Eye Pub Points.xlsx
2014-08-26 13:16 - 2014-08-26 13:16 - 00049664 _____ () C:\Users\Jon Lowry\Desktop\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:14 - 2014-08-26 13:15 - 00049664 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:12 - 2014-08-26 13:12 - 00037376 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown.xls
2014-08-19 14:39 - 2014-08-26 13:21 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Bed In A Box
2014-08-19 14:21 - 2014-08-19 14:21 - 02054186 _____ () C:\Users\Jon Lowry\Desktop\Kami  8-19-14.htm
2014-08-19 14:21 - 2014-08-19 14:21 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Kami  8-19-14_files
2014-08-19 14:15 - 2014-06-30 15:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-19 14:15 - 2014-06-30 15:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-19 14:15 - 2014-03-09 14:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-19 14:15 - 2014-03-09 14:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-19 14:15 - 2014-03-09 14:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-19 14:15 - 2014-03-09 14:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-19 14:14 - 2014-06-05 23:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-19 14:14 - 2014-06-05 23:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-19 09:27 - 2014-07-15 19:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-18 21:57 - 2014-07-15 20:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-18 21:57 - 2014-06-03 02:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-18 21:57 - 2014-06-03 02:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-18 21:57 - 2014-06-03 02:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-18 21:56 - 2014-06-24 19:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-18 21:56 - 2014-06-24 18:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-18 21:56 - 2014-06-15 19:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-18 21:56 - 2014-06-03 03:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-18 21:56 - 2014-06-03 03:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-18 21:56 - 2014-06-03 03:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-18 21:56 - 2014-06-03 03:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-18 21:55 - 2014-08-06 19:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-18 21:55 - 2014-08-06 19:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-18 21:55 - 2014-07-31 16:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-18 21:55 - 2014-07-31 16:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-18 21:55 - 2014-07-25 07:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-18 21:55 - 2014-07-25 07:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-18 21:55 - 2014-07-25 07:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-18 21:55 - 2014-07-25 06:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-18 21:55 - 2014-07-25 06:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-18 21:55 - 2014-07-25 06:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-18 21:55 - 2014-07-25 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-18 21:55 - 2014-07-25 06:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-18 21:55 - 2014-07-25 06:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-18 21:55 - 2014-07-25 06:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-18 21:55 - 2014-07-25 06:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-18 21:55 - 2014-07-25 06:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-18 21:55 - 2014-07-25 06:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-18 21:55 - 2014-07-25 06:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-18 21:55 - 2014-07-25 06:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-18 21:55 - 2014-07-25 05:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-18 21:55 - 2014-07-25 05:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-18 21:55 - 2014-07-25 05:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-18 21:55 - 2014-07-25 05:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-18 21:55 - 2014-07-25 05:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-18 21:55 - 2014-07-25 05:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-18 21:55 - 2014-07-25 05:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-18 21:55 - 2014-07-25 05:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-18 21:55 - 2014-07-25 05:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 21:55 - 2014-07-25 05:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-18 21:55 - 2014-07-25 05:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-18 21:55 - 2014-07-25 05:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-18 21:55 - 2014-07-25 05:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-18 21:55 - 2014-07-25 05:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-18 21:55 - 2014-07-25 05:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-18 21:55 - 2014-07-25 05:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-18 21:55 - 2014-07-25 05:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-18 21:55 - 2014-07-25 05:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-18 21:55 - 2014-07-25 05:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-18 21:55 - 2014-07-25 04:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-18 21:55 - 2014-07-25 04:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-18 21:55 - 2014-07-25 04:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-18 21:55 - 2014-07-25 04:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-18 21:55 - 2014-07-25 04:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-18 21:55 - 2014-07-25 04:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-18 21:55 - 2014-07-25 04:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-18 21:55 - 2014-07-25 04:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-18 21:55 - 2014-07-25 04:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-18 21:55 - 2014-07-25 04:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-18 21:55 - 2014-07-25 04:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-18 21:55 - 2014-07-25 04:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-18 21:55 - 2014-07-25 04:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-18 21:55 - 2014-07-25 04:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-18 21:55 - 2014-07-25 03:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-18 21:55 - 2014-07-25 03:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-18 21:55 - 2014-07-25 03:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-18 21:55 - 2014-07-25 03:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-18 21:55 - 2014-07-25 03:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-18 21:55 - 2014-07-25 03:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-18 21:55 - 2014-07-13 19:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-18 21:55 - 2014-07-13 18:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-09-16 08:07 - 2011-11-22 07:06 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-09-16 08:07 - 2011-02-14 17:15 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-09-16 08:01 - 2014-07-24 15:16 - 00070144 _____ () C:\Windows\SysWOW64\tasks.dll
2014-09-16 08:01 - 2013-06-07 12:46 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\HpUpdate
2014-09-16 07:58 - 2014-09-16 07:58 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$Garb for Faire.xlsx
2014-09-16 07:58 - 2013-04-23 21:07 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Spotify
2014-09-16 07:57 - 2014-09-16 07:56 - 00042448 _____ () C:\Users\Jon Lowry\Desktop\FRST.txt
2014-09-16 07:56 - 2013-12-10 20:06 - 00000000 ____D () C:\FRST
2014-09-16 07:54 - 2014-09-16 07:54 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Desktop\FRST64.exe
2014-09-16 07:54 - 2014-09-16 07:53 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Downloads\FRST64.exe
2014-09-16 07:51 - 2013-12-06 15:55 - 01949471 _____ () C:\Windows\WindowsUpdate.log
2014-09-16 07:51 - 2013-04-23 21:07 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\Spotify
2014-09-13 12:47 - 2014-09-11 10:47 - 00000306 _____ () C:\Windows\Tasks\WSE_Astromenda.job
2014-09-13 12:40 - 2014-09-10 00:26 - 00003464 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
2014-09-13 12:31 - 2014-09-13 12:31 - 00172572 _____ () C:\Users\Jon Lowry\Desktop\OTL.Txt
2014-09-13 12:31 - 2014-09-10 00:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
2014-09-13 12:31 - 2014-09-10 00:26 - 00000964 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002766 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002104 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00004490 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00003808 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
2014-09-13 12:13 - 2013-01-15 06:19 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-13 12:13 - 2011-06-10 18:33 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-13 12:12 - 2009-07-13 21:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-13 12:12 - 2009-07-13 21:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-13 12:10 - 2014-08-29 13:36 - 00016384 _____ () C:\Users\Jon Lowry\Desktop\Garb for Faire.xlsx
2014-09-13 12:10 - 2011-03-28 15:36 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Azureus
2014-09-13 12:09 - 2013-04-13 14:35 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Carla's stuff
2014-09-13 12:07 - 2014-09-08 22:10 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-09-13 12:07 - 2011-01-24 12:23 - 00000000 ____D () C:\Program Files\HP
2014-09-13 12:07 - 2011-01-24 12:22 - 00027386 _____ () C:\ProgramData\hpzinstall.log
2014-09-13 12:06 - 2014-07-03 23:26 - 00000232 _____ () C:\Users\Jon Lowry\BullseyeCoverageError.txt
2014-09-13 12:04 - 2014-09-13 12:03 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\eBay
2014-09-13 12:04 - 2014-05-03 17:11 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Horse stuff
2014-09-13 12:02 - 2014-09-10 00:14 - 00000503 _____ () C:\Users\Jon Lowry\.swfinfo
2014-09-13 12:01 - 2013-09-06 15:42 - 00000000 ___RD () C:\Users\Jon Lowry\Dropbox
2014-09-13 12:01 - 2013-09-05 01:05 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Dropbox
2014-09-13 12:00 - 2014-04-24 18:33 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-09-13 11:59 - 2014-09-13 12:00 - 00602112 _____ (OldTimer Tools) C:\Users\Jon Lowry\Desktop\OTL.exe
2014-09-13 11:59 - 2014-09-13 11:59 - 00602112 _____ (OldTimer Tools) C:\Users\Jon Lowry\Downloads\OTL.exe
2014-09-13 11:56 - 2014-09-10 00:26 - 00000960 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-13 11:56 - 2011-06-10 18:33 - 00000900 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-13 11:56 - 2009-07-13 22:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-13 11:55 - 2014-09-13 11:58 - 327118024 _____ () C:\Users\Jon Lowry\Downloads\PS_AIO_02_USW_Full_Win_WW_130_140.exe
2014-09-13 11:55 - 2014-09-13 11:55 - 00000112 _____ () C:\Windows\setupact.log
2014-09-13 11:55 - 2014-09-13 11:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-13 11:27 - 2012-08-10 14:22 - 00000944 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000UA.job
2014-09-13 10:47 - 2014-07-28 18:49 - 00000068 _____ () C:\Users\Jon Lowry\AppData\Roaming\WB.CFG
2014-09-13 10:18 - 2014-02-10 11:09 - 00000348 _____ () C:\Windows\Tasks\HPCeeScheduleForJon Lowry.job
2014-09-11 11:02 - 2014-09-11 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-11 11:01 - 2014-09-11 11:01 - 13087456 _____ (Microsoft Corporation) C:\Users\Jon Lowry\Downloads\Silverlight_x64.exe
2014-09-11 11:01 - 2014-09-11 11:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-11 11:01 - 2014-09-11 11:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-09-11 11:00 - 2014-09-11 11:00 - 00004162 _____ () C:\Windows\System32\Tasks\RocketTab Update Task
2014-09-11 11:00 - 2014-09-11 11:00 - 00003376 _____ () C:\Windows\System32\Tasks\RocketTab
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\Users\Public\Desktop\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00000000 ____D () C:\Program Files (x86)\RocketTab
2014-09-11 10:58 - 2014-01-17 00:35 - 00000000 ____D () C:\Program Files (x86)\Vuze
2014-09-11 10:47 - 2014-09-11 10:47 - 00003264 _____ () C:\Windows\System32\Tasks\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\PennyBee
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\ICSharpCode.net
2014-09-11 10:45 - 2014-09-11 10:47 - 00071824 _____ (Azureus Software, Inc.) C:\Users\Jon Lowry\Downloads\vuze.exe
2014-09-11 10:45 - 2014-09-11 10:45 - 00800960 _____ ( ) C:\Users\Jon Lowry\Downloads\vuze_setup.exe
2014-09-11 10:44 - 2014-09-10 00:33 - 00000000 ____D () C:\Program Files\DnsSignal
2014-09-11 10:44 - 2014-09-01 23:28 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-09-11 10:44 - 2009-07-13 20:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-09-10 21:41 - 2014-09-09 08:20 - 00705508 _____ () C:\Users\Jon Lowry\Desktop\Equestrian Emporium.xlsx
2014-09-10 00:41 - 2014-06-05 11:08 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-09-10 00:35 - 2014-09-10 00:33 - 00000000 ____D () C:\ProgramData\DnsSignal
2014-09-10 00:33 - 2014-09-10 00:33 - 00000000 _____ () C:\ProgramData\2b2821382e352b272c272e2237302d_c
2014-09-10 00:32 - 2011-06-03 15:10 - 00000258 __RSH () C:\ProgramData\ntuser.pol
2014-09-10 00:27 - 2014-09-10 00:27 - 00005796 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1
2014-09-10 00:27 - 2014-09-10 00:27 - 00005470 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5
2014-09-10 00:27 - 2014-09-10 00:27 - 00005134 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2
2014-09-10 00:27 - 2014-09-10 00:27 - 00003562 _____ () C:\Windows\System32\Tasks\FFMPEGUpd
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\ProgramData\Video Accelerator
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\Program Files (x86)\FFMPEG
2014-09-10 00:27 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\Object Browser
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (ParetoLogic, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup.exe
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (ParetoLogic, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup (1).exe
2014-09-10 00:26 - 2014-09-10 00:26 - 00007520 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11
2014-09-10 00:26 - 2014-09-10 00:26 - 00006838 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4
2014-09-10 00:26 - 2014-09-10 00:26 - 00006492 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3
2014-09-10 00:26 - 2014-09-10 00:26 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-10 00:26 - 2014-09-10 00:26 - 00003708 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-10 00:26 - 2014-09-10 00:26 - 00003594 _____ () C:\Windows\System32\Tasks\YTDownloaderUpd
2014-09-10 00:26 - 2014-09-10 00:26 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
2014-09-10 00:26 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2014-09-10 00:26 - 2014-07-25 00:18 - 00003744 _____ () C:\Windows\System32\Tasks\SMupdate1
2014-09-10 00:26 - 2014-07-25 00:18 - 00003604 _____ () C:\Windows\System32\Tasks\YTDownloader
2014-09-10 00:26 - 2014-07-25 00:16 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-09-10 00:25 - 2014-09-10 00:25 - 00004048 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-09-10 00:25 - 2014-09-10 00:25 - 00001969 _____ () C:\Users\Jon Lowry\Desktop\Sync Folder.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00001087 _____ () C:\Users\Jon Lowry\Desktop\MyPC Backup.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-09-10 00:15 - 2013-01-15 06:19 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-10 00:14 - 2013-01-15 06:19 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 00:14 - 2011-05-18 05:22 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 00:14 - 2011-01-23 03:18 - 00000000 ____D () C:\Users\Jon Lowry
2014-09-09 23:55 - 2014-09-09 23:55 - 00013074 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E10_HDTV_x264-KILLERS.10835767.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00012314 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E11_HDTV_x264-KILLERS.10907765.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00011814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E12_HDTV_x264-KILLERS.10979033.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_HDTV_x264-KILLERS.10527705.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E04_HDTV_x264-KILLERS.10523457.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013485 _____ () C:\Users\Jon Lowry\Downloads\7079A914A2555E676EF2F04A3596979A8E2FCC12.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013281 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E08_REPACK_HDTV_x264-KILLERS.10723613.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013114 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E06_HDTV_x264-KILLERS.10626989.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012974 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E07_HDTV_x264-KILLERS.10665999.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012829 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E10_HDTV_x264-ASAP.8842947.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012399 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_REAL_HDTV_x264-KILLERS.10571218.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012332 _____ () C:\Users\Jon Lowry\Downloads\Graceland.S01E09.HDTV.x264-2HD.[eztv].torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012010 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E02_HDTV_x264-LOL.10391260.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011808 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E12_HDTV_x264-2HD.8922957.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011150 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E03_HDTV_x264-LOL.10429090.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010750 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E01_HDTV_x264-LOL.10342060.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010409 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E09_HDTV_x264-LOL.10764111.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00435920 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E09_HDTV_x264-2HD_[eztv].exe
2014-09-09 23:51 - 2014-09-09 23:51 - 00435920 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E09_HDTV_x264-2HD_[eztv] (2).exe
2014-09-09 23:51 - 2014-09-09 23:51 - 00435920 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E09_HDTV_x264-2HD_[eztv] (1).exe
2014-09-09 23:51 - 2014-09-09 23:51 - 00010728 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E08_HDTV_x264-2HD.8803956.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00010708 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E07_HDTV_x264-2HD.8742467.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:50 - 00013188 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E06_HDTV_x264-2HD.8715128.TPB.torrent
2014-09-09 23:44 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-08 23:40 - 2011-01-24 12:24 - 00000000 ____D () C:\Program Files (x86)\HP
2014-09-08 23:40 - 2010-07-15 12:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-09-08 23:37 - 2010-12-27 15:16 - 00000000 ____D () C:\Windows\Hewlett-Packard
2014-09-08 22:18 - 2014-02-10 11:09 - 00003210 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForJon Lowry
2014-09-07 23:49 - 2014-09-01 23:32 - 00000003 _____ () C:\Users\Jon Lowry\AppData\Local\proxy.log
2014-09-06 13:27 - 2009-07-13 22:13 - 00006710 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-06 13:26 - 2010-07-15 13:24 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-09-06 12:58 - 2012-03-01 14:57 - 00000000 ____D () C:\Users\Jon Lowry\Documents\Calibre Library
2014-09-06 12:57 - 2014-09-06 13:18 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Woodworking Plans
2014-09-06 11:44 - 2013-11-01 23:17 - 00000000 ____D () C:\Users\Jon Lowry\Documents\Outlook Files
2014-09-05 15:03 - 2014-08-27 13:15 - 00011768 _____ () C:\Users\Jon Lowry\Desktop\Utilities.xlsx
2014-09-04 12:30 - 2014-09-04 12:30 - 04147322 _____ () C:\Users\Jon Lowry\Downloads\Attachments_201494.zip
2014-09-04 12:07 - 2014-09-04 12:07 - 00032102 _____ () C:\Users\Jon Lowry\Downloads\character_rope5.zip
2014-09-04 12:06 - 2014-09-04 12:06 - 00066156 _____ () C:\Users\Jon Lowry\Downloads\lechefrene_lcr-cowboys-rest.zip
2014-09-04 12:05 - 2014-09-04 12:05 - 00089677 _____ () C:\Users\Jon Lowry\Downloads\last-soundtrack_bleeding-cowboys.zip
2014-09-04 12:01 - 2014-09-04 12:01 - 00093452 _____ () C:\Users\Jon Lowry\Downloads\1-shelley-volante_[allfont.net].ttf
2014-09-04 11:46 - 2014-09-04 11:46 - 00616582 _____ () C:\Users\Jon Lowry\Downloads\texas_ranger.zip
2014-09-04 11:46 - 2014-09-04 11:46 - 00012084 _____ () C:\Users\Jon Lowry\Downloads\beans.zip
2014-09-04 11:45 - 2014-09-04 11:45 - 00035005 _____ () C:\Users\Jon Lowry\Downloads\cowboys.zip
2014-09-04 11:44 - 2014-09-04 11:44 - 00031044 _____ () C:\Users\Jon Lowry\Downloads\rancho.zip
2014-09-04 11:44 - 2014-09-04 11:43 - 01296003 _____ () C:\Users\Jon Lowry\Downloads\narnfont.zip
2014-09-04 11:42 - 2014-09-04 11:42 - 00200417 _____ () C:\Users\Jon Lowry\Downloads\burnstown-dam.zip
2014-09-04 10:54 - 2014-09-04 10:54 - 01527000 _____ () C:\Users\Jon Lowry\Downloads\flash_player_14_plugin.exe
2014-09-04 10:54 - 2014-09-04 10:54 - 00144760 _____ (Premium Installer ) C:\Users\Jon Lowry\Downloads\Setup (2).exe
2014-09-03 22:30 - 2014-09-03 22:30 - 00001932 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-09-03 22:30 - 2014-04-24 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-09-03 22:28 - 2014-09-03 22:28 - 00448400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-09-03 22:28 - 2014-09-03 22:28 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-09-03 22:25 - 2009-07-13 21:45 - 05019496 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-03 12:52 - 2014-09-03 12:52 - 00013680 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Freed+mp3+chapterized+by+veraprima.torrent
2014-09-03 12:51 - 2014-09-03 12:51 - 00012717 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Darker+mp3+chapteized+by+veraprima.torrent
2014-09-03 12:50 - 2014-09-03 12:50 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima (1).torrent
2014-09-03 12:45 - 2014-09-03 12:45 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima.torrent
2014-09-02 21:36 - 2014-09-02 21:36 - 01265384 _____ () C:\Users\Jon Lowry\Downloads\Setup (1).exe
2014-08-29 21:59 - 2014-08-29 21:13 - 00009168 _____ () C:\Users\Jon Lowry\Desktop\TV Shows.xlsx
2014-08-29 21:13 - 2014-08-29 21:13 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$TV Shows.xlsx
2014-08-29 13:33 - 2014-08-29 13:33 - 00008339 _____ () C:\Users\Jon Lowry\Downloads\The+Lego+Movie+%282014%29+720p+BrRip+x264+-+YIFY.torrent
2014-08-29 08:29 - 2014-08-29 08:29 - 00115954 _____ () C:\Users\Jon Lowry\Desktop\Disney Recipes.htm
2014-08-29 08:29 - 2014-08-29 08:26 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Disney Recipes_files
2014-08-29 08:24 - 2014-08-29 08:24 - 00538252 _____ () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home.htm
2014-08-29 08:24 - 2014-08-29 08:24 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home_files
2014-08-28 14:27 - 2012-08-10 14:22 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000Core.job
2014-08-28 14:06 - 2013-02-02 11:43 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Books - pdf epub mobi
2014-08-27 13:18 - 2014-08-26 13:30 - 00012260 _____ () C:\Users\Jon Lowry\Desktop\2014-2015 Glass Eye Pub Points.xlsx
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Vuze Remote Toolbar
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Application Updater
2014-08-26 13:21 - 2014-08-19 14:39 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Bed In A Box
2014-08-26 13:16 - 2014-08-26 13:16 - 00049664 _____ () C:\Users\Jon Lowry\Desktop\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:15 - 2014-08-26 13:14 - 00049664 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:12 - 2014-08-26 13:12 - 00037376 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown.xls
2014-08-25 06:53 - 2011-08-20 17:55 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-22 19:07 - 2014-08-27 13:09 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-22 18:45 - 2014-08-27 13:09 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-22 17:59 - 2014-08-27 13:09 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-19 14:56 - 2014-08-02 00:17 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\RIFT
2014-08-19 14:41 - 2011-07-05 01:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-19 14:40 - 2013-09-26 18:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-08-19 14:21 - 2014-08-19 14:21 - 02054186 _____ () C:\Users\Jon Lowry\Desktop\Kami  8-19-14.htm
2014-08-19 14:21 - 2014-08-19 14:21 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Kami  8-19-14_files
2014-08-19 14:12 - 2014-05-11 00:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-19 14:06 - 2014-07-25 14:04 - 00000000 ____D () C:\ProgramData\374311380
2014-08-19 14:05 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
 
Files to move or delete:
====================
C:\Users\Jon Lowry\jagex_cl_loginapplet_LIVE.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE1.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE2.dat
C:\Users\Jon Lowry\jagex_runescape_preferences.dat
C:\Users\Jon Lowry\jagex_runescape_preferences2.dat
C:\Users\Jon Lowry\random.dat
 
 
Some content of TEMP:
====================
C:\Users\Jon Lowry\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\Jon Lowry\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphwbbih.dll
C:\Users\Jon Lowry\AppData\Local\Temp\GPUpd5418514B1.exe
C:\Users\Jon Lowry\AppData\Local\Temp\i4jd8938456812418365063.exe
C:\Users\Jon Lowry\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Jon Lowry\AppData\Local\Temp\System.Data.SQLite18192.dll
C:\Users\Jon Lowry\AppData\Local\Temp\System.Data.SQLite20593.dll
C:\Users\Jon Lowry\AppData\Local\Temp\System.Data.SQLite25696.dll
C:\Users\Jon Lowry\AppData\Local\Temp\System.Data.SQLite44208.dll
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-08-14 15:03
 
==================== End Of Log ============================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014
Ran by Jon Lowry at 2014-09-16 07:53:09
Running from C:\Users\Jon Lowry\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
3D Home Architect Home Design Deluxe 6 (HKLM-x32\...\InstallShield_{D781A6EC-12AC-4993-BF13-B4CF12F1F20C}) (Version: 6.00.0000 - Broderbund)
3D Home Architect Home Design Deluxe 6 (x32 Version: 6.00.0000 - Broderbund) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
AC3Filter (remove only) (HKLM-x32\...\AC3Filter) (Version:  - )
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.3.9120 - Adobe Systems Inc.) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc)
Aimersoft DRM Media Converter(Build 1.4.7.2) (HKLM-x32\...\Aimersoft DRM Media Converter_is1) (Version:  - Aimersoft Software)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Any Video Converter 5.0.9 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 6.7.9.0 - SlySoft)
avast! Internet Security (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Aventail Access Manager (HKCU\...\{72552C46-944B-4E16-BBC8-0D85F31C1800}) (Version: 10.62.196 - SonicWALL Inc)
Aventail Access Manager (x32 Version: 10.62.196 - SonicWALL Inc) Hidden
Aventail Connect (HKLM\...\{C338ACAC-7162-42E3-8B8C-85E5746F4A2E}) (Version: 10.62.320 - SonicWALL Aventail)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (HKLM\...\{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}) (Version: 2.0.2.0 - Apple Inc.)
Bonjour Print Services (HKLM\...\{0DA20600-6130-443B-9D4B-F30520315FA6}) (Version: 2.0.2.0 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
calibre (HKLM-x32\...\{60C18701-A823-4165-8E58-C083673F90DC}) (Version: 1.14.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
CinemaNow Media Manager (HKLM-x32\...\{6C122441-1861-4CD7-B1C5-A163A6984E12}) (Version: 1.9.1.105 - CinemaNow, Inc.)
CloneCD (HKLM-x32\...\CloneCD) (Version:  - SlySoft)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.2.8 - Elaborate Bytes)
Combined Community Codec Pack 2009-09-09 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2009.09.09.0 - CCCP Project)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink DVD Suite (x32 Version: 7.0.3003 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1616 - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 5.0.1616 - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.1.4217 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.1.4217 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3130 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.1.3130 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Define Ext (HKCU\...\Define Ext) (Version: 8 - DefineExt.com) <==== ATTENTION
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E17BF11-A72D-4DA8-BFAA-DD262C17C2DE}) (Version:  - Microsoft)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DivX Setup (HKLM-x32\...\DivX Setup.divx.com) (Version: 2.5.0.11 - DivX, LLC)
DnsSignal 1.0 build 111 (HKLM\...\DnsSignal) (Version:  - )
Dora's Carnival Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.10.28 - Dropbox, Inc.)
Elcomsoft Wireless Security Auditor (HKLM-x32\...\{77BFC300-FFBB-4841-8A55-CAB7BAC68422}) (Version: 4.0.211.448 - Elcomsoft Co. Ltd.)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Escape Rosecliff Island (x32 Version: 2.2.0.95 - WildTangent) Hidden
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Family Tree Maker 2011 (HKLM-x32\...\Family Tree Maker 2011) (Version: 20.0.368 - Ancestry.com)
Family Tree Maker 2011 (x32 Version: 20.0.368 - Ancestry.com) Hidden
Family Tree Maker 2012 (HKLM-x32\...\Family Tree Maker 2012) (Version: 21.0.388 - Ancestry.com, Inc.)
Family Tree Maker 2012 (x32 Version: 21.0.388 - Ancestry.com, Inc.) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
FileParade Bundle (HKLM-x32\...\FileParade Bundle) (Version: 1.0.0.0 - FileParade Bundle) <==== ATTENTION
Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.56.5183 - Gretech Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Heroes of Hellas 2 - Olympia (x32 Version: 2.2.0.95 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Horizon v2.7.1.4 (HKLM-x32\...\d4cfeebc-b821-40b7-9f81-d366b1466f03_is1) (Version: 2.7.1.4 - Daring Development Inc.)
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (HKLM-x32\...\{69ABD67D-5C2E-4724-B519-695DEF3EC23B}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Game Console (x32 Version:  - WildTangent) Hidden
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
HP MediaSmart CinemaNow 2.0 (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.3611 - HP Photo Creations Powered by RocketLife)
HP Power Manager (HKLM-x32\...\{D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB}) (Version: 1.4.7 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{00A42832-B21A-4296-B5F4-D296D0BC4A3E}) (Version: 2.6.3 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{28FE073B-1230-4BF6-830C-7434FD0C0069}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{B5FC1E1B-E70D-45F1-8E40-A3C30698B323}) (Version: 4.0.9.0 - Hewlett-Packard Company)
InstaCodecs (HKLM-x32\...\InstaCodecs_is1) (Version: 1.0 - )
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2131 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.2.1001 - Intel Corporation)
iSEEK AnswerWorks English Runtime (HKLM-x32\...\{18A8E78B-9EF2-496E-B310-BCD8E4C1DAB3}) (Version: 010.000.0101 - Vantage Linguistics)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jewel Quest 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2907 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.2907 - CyberLink Corp.) Hidden
MasterCook Deluxe 9 (HKLM-x32\...\InstallShield_{99B366B0-76B6-4DBA-95A3-A730015A7D01}) (Version: 9.0.000 - ValuSoft)
MasterCook Deluxe 9 (x32 Version: 9.0.000 - ValuSoft) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Default Manager (x32 Version: 2.2.114.0 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Reader (HKLM-x32\...\{B6F7DBE7-2FE2-458F-A738-B10832746036}) (Version:  - )
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Word MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.) Hidden
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Modio (HKLM-x32\...\{3DA224A5-666B-4941-8998-2F19C6D126A5}_is1) (Version:  - GameTuts)
Mplayer 0.6.9 (HKLM-x32\...\Mplayer) (Version: 0.6.9 - )
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Multimedia Toolbar (HKLM-x32\...\Multimedia Toolbar) (Version: 1.0.0.0 - Oneclickbar)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION
Nidesoft DVD to AVI Converter Platinum v5.0 (HKLM-x32\...\Nidesoft DVD to AVI Converter Platinum_is1) (Version:  - Nidesoft Studio)
NOOK for PC (HKLM-x32\...\BN_DesktopReader) (Version: 2.5.6.9575 - Barnesandnoble.com)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NVIDIA PhysX v8.09.04 (HKLM-x32\...\{A7E07C2B-2220-4415-87E3-784D5814BC93}) (Version: 8.09.04 - NVIDIA Corporation)
Object Browser (HKLM-x32\...\Object Browser) (Version: 1.35.3.9 - Object Browser) <==== ATTENTION
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.1 - Pando Networks Inc.)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PennyBee (HKCU\...\PennyBee) (Version: 1.0.2.2 - PennyBee)
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlanetSide 2 (2) (HKCU\...\SOE-PlanetSide 2 (2)) (Version:  - Sony Online Entertainment)
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4204 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4204 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3003 - CyberLink Corp.)
PowerDirector (x32 Version: 8.0.3003 - CyberLink Corp.) Hidden
Quicken 2012 (HKLM-x32\...\{0A1E0BDA-5E8F-436d-8BE5-7E97C5CB899D}) (Version: 21.1.7.18 - Intuit)
QuickTime (HKLM-x32\...\QuickTime) (Version:  - )
Real Alternative 2.0.2 (HKLM-x32\...\RealAlt_is1) (Version: 2.0.2 - )
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6196 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30117 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden
Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
RIFT (HKLM-x32\...\Glyph RIFT) (Version:  - Trion Worlds, Inc.)
RocketTab (HKLM-x32\...\RocketTab) (Version:  - RocketTab) <==== ATTENTION
Roxio CinemaNow 2.0 (x32 Version: 1.0.278 - Hewlett-Packard) Hidden
RtVOsd (HKLM\...\{091A0130-A82F-4A6D-9C61-3BBBB3289030}) (Version: 1.0.6 - Realtek Semiconductor Corp.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.12.10.g89b2a4fc - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Stitch Era Universal (HKLM-x32\...\{117221E4-6B20-4595-BCF8-286468364B57}) (Version: 11.30 - Sierra Technology Group SA)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881083) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8260F0BF-F234-41FC-AB11-218A9925F77B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760249) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7A4AB8E1-C091-4BD3-B308-844BA6EE752A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUS_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{6E2862B8-C10A-4FD0-9B82-8D9761301AAA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2883051) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E2C51083-2E10-4E61-8F36-E6308DD0FA94}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2883051) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E2C51083-2E10-4E61-8F36-E6308DD0FA94}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Updater (HKLM-x32\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B}) (Version: 2.6.53 - Creative Island Media, LLC) <==== ATTENTION
VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden
Virtual Families (x32 Version: 2.2.0.95 - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Visual C++ 8.0 ATL (x86) WinSXS MSM (x32 Version: 8.0.50727.762 - Microsoft Corporation) Hidden
Visual C++ 8.0 CRT (x86) WinSXS MSM (x32 Version: 8.0.50727.762 - Microsoft Corporation) Hidden
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.4.0.0 - Azureus Software, Inc.)
Vuze Remote Toolbar v9.7 (HKLM-x32\...\{B5246CF3-B9FC-456E-8C20-F7E8A15CC18F}) (Version: 9.7 - Spigot, Inc.) <==== ATTENTION
Wajam (HKLM-x32\...\Wajam) (Version: 2.05 - Wajam) <==== ATTENTION
Wheel of Fortune 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
Windows Media Encoder 9 Series (x32 Version: 9.00.2980 - Microsoft Corporation) Hidden
WinImage (HKLM-x32\...\WinImage) (Version:  - )
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
WinX DVD Author 6.3 (HKLM-x32\...\WinX DVD Author_is1) (Version:  - DigiartySoft, Inc.)
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D7}) (Version: 17.0.10283 - WinZip Computing, S.L. )
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
WSE_Astromenda (HKCU\...\WSE_Astromenda) (Version:  - WSE_Astromenda) <==== ATTENTION
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{3560575F-7C2D-48AE-AB45-DAD430A95EBE}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.dll ()
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{8b2299d9-a6ce-4697-954f-718188b26cf6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{cd203956-34d7-406f-978b-3ff3c677708c}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
 
==================== Restore Points  =========================
 
04-09-2014 05:18:21 Windows Update
04-09-2014 05:24:15 avast! antivirus system restore point
04-09-2014 05:28:59 Device Driver Package Install: Avast Network Service
08-09-2014 06:54:54 Windows Update
09-09-2014 06:37:36 Installed HP Update.
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-02-07 01:31 - 2014-09-10 00:32 - 00000098 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1       localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {01B68D5A-8E09-4A29-9387-DA754C41BD4E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-10] (Google Inc.)
Task: {026F61A6-1E79-4C96-B077-DE27CC432D7D} - \BrowserDefendert No Task File <==== ATTENTION
Task: {07655A06-69C8-4209-84DD-64933C0BCD3F} - System32\Tasks\HPCeeScheduleForJon Lowry => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {1A3CE392-422E-47DC-9602-789171E5B529} - System32\Tasks\Test TimeTrigger => C:\Users\JONLOW~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
Task: {1F09685D-CAD9-4E68-946B-B50B5A191459} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {351B0865-9F68-49D7-BE8E-68334DE59293} - System32\Tasks\Registry Optimizer_UPDATES => C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe
Task: {35FBB754-7A87-43F1-B9A6-8446DFB6A6C2} - System32\Tasks\WSE_Astromenda => C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda\UpdateProc\UpdateTask.exe [2014-09-11] ()
Task: {38212487-8142-46E0-8D4E-31B74C431837} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2014-08-25] (YTDownloader) <==== ATTENTION
Task: {3DB4A2F8-0448-459B-A135-FEE9BBAD4ADB} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.exe [2014-09-10] (Object Browser)
Task: {4146542E-A9F0-49D6-9185-95A76109A52D} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe [2014-08-25] (Goobzo) <==== ATTENTION
Task: {43F7265C-490F-4AA9-8B69-02F9F833D97A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {4F5A0FE5-2186-4857-AAE6-91B0862813D9} - System32\Tasks\AdobeAAMUpdater-1.0-JonLowry-HP-Jon Lowry => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {55ABD00A-4220-4F78-A0D7-AEC713771BC6} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.exe [2014-09-10] (Object Browser)
Task: {56A1B9E9-9151-48C3-9B31-BD55787D9B79} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe [2014-08-19] (Microsoft)
Task: {5CCDBEE0-159F-4BF5-88B1-44DE44C0189A} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {602F9486-75D6-415D-B537-F3BDBDE110A1} - System32\Tasks\ParetoLogic Update Version3_triggeronce => c:\program files (x86)\common files\paretologic\uus3\Pareto_Update3.exe
Task: {70A3A76A-8A55-492C-9AC2-01CCE7F4FE56} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10] (Adobe Systems Incorporated)
Task: {73C09C2B-B3BE-4A72-AB85-EA3D923BB7CC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-08-04] (Hewlett-Packard)
Task: {74F1B5C4-50C4-49CF-925C-911287FD19DC} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe [2014-09-10] (Object Browser)
Task: {7FB07DDB-2792-4DE2-9210-A87BA1C86AE6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {979BBFF1-A320-4D44-9572-43CCF72014E2} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.exe [2014-09-10] (Object Browser)
Task: {97F04E5C-4950-428A-9DFC-CA53C569C462} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.exe [2014-09-10] (Object Browser)
Task: {9E671BF1-E82A-48C6-BF41-2DD13DEFBDD2} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
Task: {A1352A50-436B-4071-B228-0B8E2D79784F} - System32\Tasks\RocketTab => C:\Windows\system32\cmd.exe [2010-11-20] (Microsoft Corporation) <==== ATTENTION
Task: {A3E483DF-5EE2-495D-B541-F69C269639DF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A669AEF8-A05B-44A1-9833-CD4A0CF0501C} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {A7D18C7A-90C7-4E57-9DEB-730834176E5D} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1 => C:\Program Files (x86)\Object Browser\Object Browser-codedownloader.exe [2014-09-10] (Object Browser)
Task: {A8C40EB6-7527-4B16-8F5C-BE889C95886A} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {A986945B-2301-4B1D-A825-A862F3670DD8} - System32\Tasks\{F967C586-0347-4CC0-A8D0-5FFDB5547DF0} => C:\Program Files (x86)\NetDragon\ZeroOnline\play.exe
Task: {AC2629A3-16AD-4E7D-9589-FF4CF978C9CF} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.exe [2014-09-10] (Object Browser)
Task: {ADDB8A9E-F812-43FF-9A3E-E2CB947FB2FE} - System32\Tasks\Registry Optimizer_DEFAULT => C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe
Task: {B1A5BF77-03F9-4284-8095-D19F454FF0CE} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-09-26] ()
Task: {B57B8587-1A4E-4B67-A4C8-33074EE6FC52} - System32\Tasks\{295CD046-BB03-4242-9AC9-352599CCE0B9} => C:\Program Files (x86)\NetDragon\ZeroOnline\play.exe
Task: {B86FF56C-40E8-408A-BD75-13B2B89920E4} - System32\Tasks\GPUP => C:\Program Files (x86)\GetPrivate\gpup.exe [2014-07-24] ()
Task: {B9E77F31-4A63-4B57-826B-D176A282D2F2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000UA => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-10] (Facebook Inc.)
Task: {BF3B2CB2-AC8C-4F8C-B436-468B7780F37A} - System32\Tasks\TidyNetwork Update => C:\Users\Jon Lowry\AppData\Local\TidyNetwork.com\tidy2update.exe
Task: {C97C403B-723B-47B3-8A75-9A0D5FAA93E1} - System32\Tasks\RocketTab Update Task => C:\Program Files (x86)\RocketTab\uninstall.exe [2014-09-11] () <==== ATTENTION
Task: {CAD644F0-F30D-4FC3-AAB5-2B883CB6B5EA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {D8A78881-603A-4045-A49C-70FFD91033DA} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe [2014-09-10] (Object Browser)
Task: {DDCBFF31-CDF9-4CDD-87A6-37B4606ADA41} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000Core => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-10] (Facebook Inc.)
Task: {E038FBBD-C5A9-4CC0-9E27-461A3131A519} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {E1406E25-6F18-4A2B-8352-33EACA44E719} - System32\Tasks\Registry Optimizer => C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe
Task: {E7F27CA2-7095-46A3-B555-CA1986F8895D} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {E8CDB12B-32AD-4023-9476-14E9C4D0CED7} - System32\Tasks\FFMPEGUpd => C:\Program Files (x86)\FFMPEG\FFMPEGUpdate.exe [2013-08-08] (Goobzo)
Task: {EB6FA16A-998E-4019-8C5E-BCABA47F746A} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.exe [2014-09-10] (Object Browser)
Task: {F3BA2ECB-51CD-4D63-9876-9E4500693B5B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-10] (Google Inc.)
Task: {F438A944-39F2-4DB5-9518-08D8D99EA88B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {F5AD7045-11F7-42B6-B4E3-BC8CFE550AF1} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-10] (globalUpdate) <==== ATTENTION
Task: {F800B797-8F84-4A00-A941-01C35959EC2E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2010-08-02] (CyberLink)
Task: {F97BD074-2550-4AF3-90DA-6A2CBDF39C03} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [2014-09-03] (MyPC Backup) <==== ATTENTION
Task: {FA93F109-BB75-4A50-871F-313583F9CDB2} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-WOLFLING => C:\Windows\ehome\McxTask.exe [2009-07-13] (Microsoft Corporation)
Task: {FEC81997-A122-47DA-AA7B-828690A77499} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-10] (globalUpdate) <==== ATTENTION
Task: {FF5E7973-E09E-48BA-AE93-723FB58FDEF0} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-26] (AVAST Software)
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job => C:\Program Files (x86)\Object Browser\Object Browser-codedownloader.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000Core.job => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000UA.job => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForJon Lowry.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\ParetoLogic Update Version3_triggeronce.job => c:\program files (x86)\common files\paretologic\uus3\Pareto_Update3.exe
Task: C:\Windows\Tasks\WSE_Astromenda.job => C:\Users\JONLOW~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
 
==================== Loaded Modules (whitelisted) =============
 
2013-04-12 11:31 - 2013-04-12 11:31 - 00234280 _____ () C:\Windows\ngmsi.dll
2014-09-11 11:00 - 2014-09-11 11:00 - 01420520 _____ () C:\Program Files (x86)\RocketTab\Client.exe
2014-09-10 00:33 - 2014-09-10 00:35 - 00565760 _____ () C:\Program Files\DnsSignal\dnssignal.dll
2014-07-27 11:41 - 2014-07-27 11:41 - 08892576 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-07-25 00:20 - 2014-07-25 00:20 - 00709120 _____ () C:\Program Files\005\cyycfhtzro64.exe
2014-09-10 00:33 - 2014-05-20 20:48 - 00067584 _____ () C:\Program Files\DnsSignal\barelysignal.exe
2014-09-10 00:33 - 2014-05-20 20:48 - 00054784 _____ () C:\Program Files\DnsSignal\barelysignal2.exe
2014-08-18 07:51 - 2014-08-18 07:51 - 00408584 _____ () C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
2014-09-11 10:47 - 2014-09-11 10:47 - 01074688 _____ () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
2011-03-21 11:56 - 2011-03-21 11:56 - 01230704 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2014-09-03 10:39 - 2014-09-03 10:39 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2014-09-03 10:34 - 2014-09-03 10:34 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2010-06-18 16:26 - 2010-06-18 16:26 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2014-07-26 09:00 - 2014-07-26 09:00 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-09-11 10:50 - 2014-09-11 10:50 - 02862592 _____ () C:\Program Files\AVAST Software\Avast\defs\14091301\algo.dll
2014-09-16 07:59 - 2014-09-16 07:59 - 02862592 _____ () C:\Program Files\AVAST Software\Avast\defs\14091600\algo.dll
2014-09-10 00:33 - 2014-09-10 00:35 - 00496640 _____ () C:\Program Files\DnsSignal\dnssignal2.dll
2014-08-18 07:51 - 2014-08-18 07:51 - 00311816 _____ () C:\Users\Jon Lowry\AppData\Local\PennyBee\DealplyInstallerHelper.dll
2014-09-11 10:47 - 2014-09-11 10:47 - 00599419 _____ () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\sqlite3.dll
2014-09-13 12:00 - 2014-09-13 12:00 - 00043008 _____ () c:\Users\Jon Lowry\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphwbbih.dll
2013-08-23 12:01 - 2013-08-23 12:01 - 25100288 _____ () C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\libcef.dll
2011-03-21 11:57 - 2011-03-21 11:57 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-07-26 09:00 - 2014-07-26 09:00 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-19 14:10 - 2014-08-19 14:10 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\ff776f423f882faadb7887cdd927f141\IsdiInterop.ni.dll
2010-12-27 15:13 - 2010-04-13 09:52 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll
2014-07-27 11:41 - 2014-07-27 11:41 - 08892576 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-12-05 14:21 - 2013-12-03 19:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-05 14:21 - 2013-12-03 19:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-05 14:21 - 2013-12-03 19:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-05 14:21 - 2013-12-03 19:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-05 14:21 - 2013-12-03 19:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
AlternateDataStreams: C:\ProgramData\Temp:0B4227B4
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:BF3D62E7
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
 
==================== Faulty Device Manager Devices =============
 
Name: ssnfd
Description: ssnfd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: ssnfd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
Name: Deskjet F4500 series
Description: Deskjet F4500 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (09/16/2014 08:11:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1435
 
Error: (09/16/2014 08:11:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1435
 
Error: (09/16/2014 08:11:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/16/2014 08:09:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2667
 
Error: (09/16/2014 08:09:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2667
 
Error: (09/16/2014 08:09:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/16/2014 08:09:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1279
 
Error: (09/16/2014 08:09:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1279
 
Error: (09/16/2014 08:09:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/16/2014 08:03:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1482
 
 
System errors:
=============
Error: (09/13/2014 11:59:02 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
ASPI32
ssnfd
SydexFDD
 
Error: (09/13/2014 11:57:16 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MCSTRM service failed to start due to the following error: 
%%2
 
Error: (09/13/2014 11:57:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Computer Backup (MyPC Backup) service failed to start due to the following error: 
%%1053
 
Error: (09/13/2014 11:57:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Computer Backup (MyPC Backup) service to connect.
 
Error: (09/13/2014 11:55:41 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ASPI32.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (09/11/2014 10:47:02 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
ASPI32
ssnfd
SydexFDD
 
Error: (09/11/2014 10:46:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Windows Live ID Sign-in Assistant service failed to start due to the following error: 
%%1053
 
Error: (09/11/2014 10:46:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Live ID Sign-in Assistant service to connect.
 
Error: (09/11/2014 10:46:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MCSTRM service failed to start due to the following error: 
%%2
 
Error: (09/11/2014 10:46:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Computer Backup (MyPC Backup) service failed to start due to the following error: 
%%1053
 
 
Microsoft Office Sessions:
=========================
Error: (09/16/2014 08:11:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1435
 
Error: (09/16/2014 08:11:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1435
 
Error: (09/16/2014 08:11:00 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/16/2014 08:09:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2667
 
Error: (09/16/2014 08:09:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2667
 
Error: (09/16/2014 08:09:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/16/2014 08:09:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1279
 
Error: (09/16/2014 08:09:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1279
 
Error: (09/16/2014 08:09:47 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/16/2014 08:03:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1482
 
 
CodeIntegrity Errors:
===================================
  Date: 2013-12-06 16:01:19.260
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-12-06 16:01:18.949
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-12-06 16:01:18.621
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-12-06 16:01:18.279
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.814
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.642
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.455
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.284
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 16:55:57.680
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 16:55:57.508
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Pentium® CPU P6100 @ 2.00GHz
Percentage of memory in use: 44%
Total physical RAM: 3893.86 MB
Available physical RAM: 2148.18 MB
Total Pagefile: 7785.9 MB
Available Pagefile: 4460.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:465.46 GB) (Free:104.69 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 1D505CB8)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=103 MB) - (Type=0C)
 
==================== End Of Log ============================

  • 0

#4
dbreeze

dbreeze

    Trusted Helper

  • Malware Removal
  • 2,216 posts

Wow!!! How long has this been going on?

Does Avast give you any warnings or find any malware (we will deal with that later; I'm just asking right now since you do seem to have a security solution)?

I did notice that ComboFix has been run in the past. Can I ask what that was for, was that self-directed or advised by a different malware forum and was it successful or not?

Let's get to work, shall we?

First, BackDoor Warning

You have a backdoor infection!

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

I would counsel you to disconnect this PC from the Internet immediately and use this system online as little as possible. If you do any banking or other financial transactions on this PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the trojan(s) has(have) been identified and can be killed(removed), because of its backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
When Should I Format, How Should I Reinstall

That said, I can still help you clean out the malware as best as I can without going that route, so I have included the steps to remove what the logs show. If you decide that you do want to do a format and reinstall of Windows, please let me know that in your next post.


Second, P2P / Torrents Warning
 

:upset: :upset: :upset: ALERT!!! P2P WARNING ALERT!!! :upset: :upset: :upset:


You have a P2P / file sharing application on your system!! While this may not be a surprise to you (most likely installed by you or another user on the system) and the file sharing application itself may be safe, the files shared could be a little more than you hoped for. File sharing has been shown to be a major source for trojans, virii, worms and webbot attacks to spread on the internet. There are exploits in file sharing software that can be used to compromise your system and personal information. You may be sharing a lot more than just a little bandwidth to 'help the community share' information.

Geeks to Go recommends that you uninstall your P2P software; you have to have open pathways (network ports) in and out of your system and you could be helping to move illegal files (copyrighted material (software, movies, video, etc.) even if you don't 'download' them yourself.

If you choose to keep your P2P program installed, I must ask that you de-activate / shutdown the software and not use it until the cleaning of your system is done.

Application to uninstall: I'll admit that the application is not appearent to me now but the torrent files are all over the lists. So this is something to think about mostly.

Need more info? Read these:


Thirdly, Manual uninstall some programs

Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed):

Define Ext
DnsSignal 1.0 build 111
FileParade Bundle
InstaCodecs
MyPC Backup
PennyBee
RocketTab
Updater (HKLM-x32\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B})
Vuze Remote Toolbar v9.7
Wajam
WSE_Astromenda



To do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window.

Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software.


Fourth, run a FRST Fixlist script

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. Save it to your desktop as fixlist.txt



start
CloseProcesses:
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
C:\ProgramData\IePluginServices
() C:\Program Files (x86)\RocketTab\Client.exe
C:\Program Files (x86)\RocketTab
(Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
C:\Program Files (x86)\Application Updater
() C:\Program Files\005\cyycfhtzro64.exe
C:\Program Files\005
() C:\Program Files\DnsSignal\barelysignal.exe
() C:\Program Files\DnsSignal\barelysignal.exe
() C:\Program Files\DnsSignal\barelysignal2.exe
C:\Program Files\DnsSignal
(YTDownloader) C:\Program Files (x86)\YTDownloader\YTDownloader.exe
C:\Program Files (x86)\YTDownloader
() C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
C:\Users\Jon Lowry\AppData\Local\PennyBee
() C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
C:\Program Files (x86)\MyPC Backup
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Spigot Inc) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe
C:\Program Files (x86)\Common Files\Spigot
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
C:\Program Files (x86)\Mobogenie
HKLM-x32\...\Run: [fst_us_178] => [X]
HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988968 2014-08-25] (YTDownloader)
C:\Program Files (x86)\YTDownloader
HKLM-x32\...\Run: [SearchSettings] => C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1608000 2014-08-22] (Spigot, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\RunOnce: [AvgUninstallURL] => cmd.exe /c start http://www.avg.com/w...&"ver=10.0.1427
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [iLivid] => "C:\Users\Jon Lowry\AppData\Local\iLivid\iLivid.exe" -autorun
C:\Users\Jon Lowry\AppData\Local\iLivid
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988968 2014-08-25] (YTDownloader)
C:\Program Files (x86)\YTDownloader
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [PeenyBee] => C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe [408584 2014-08-18] ()
C:\Users\Jon Lowry\AppData\Local\PennyBee
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [BRS] => C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe [1074688 2014-09-11] ()
C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
BootExecute: ä* //www.bleepingcomputer.com/combofix/how-to-use-combofix~n~nnote: you may be infected with a file patching virus 'virut't'
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyServer: http=127.0.0.1:49191;https=127.0.0.1:49191
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.co...=1259392873&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE64.dll (Spigot, Inc.)
URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
C:\Program Files (x86)\Vuze Remote Toolbar
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {4C6AB4BD-96D7-4335-97AB-C4588C2427C2} URL = http://en.wikipedia....h={searchTerms}
SearchScopes: HKLM - {4FDD993D-F656-4134-8E18-AFCCC84F8912} URL = http://search.yahoo....psg&type=HPNTDF
SearchScopes: HKLM - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://www-search.ne...q={searchTerms}
SearchScopes: HKLM - {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL =
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.as...q={searchTerms}
SearchScopes: HKCU - DefaultScope {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKCU - F12BAB76371E486CBA05A93378B22524 URL = http://search.condui...rchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com...rchTerms}&SSPV=
SearchScopes: HKCU - {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKCU - {39D8810E-1A9F-462E-8029-266DFD9E8606} URL = http://www.dnssignal...s={searchTerms}
SearchScopes: HKCU - {446260B0-A943-4C26-AFBC-72E2A2E12756} URL = http://start.mysearc...=1820541918&ir=
SearchScopes: HKCU - {4C6AB4BD-96D7-4335-97AB-C4588C2427C2} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://astromenda.co...=1259392873&ir=
SearchScopes: HKCU - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://www-search.ne...q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.as...q={searchTerms}
SearchScopes: HKCU - {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = http://www.trovi.com...rchTerms}&SSPV=
BHO: Object Browser -> {11111111-1111-1111-1111-110311281150} -> C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll (Object Browser)
C:\Program Files (x86)\Object Browser
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO-x32: Vuze Remote Toolbar -> {05478A66-EDB6-4A22-A870-A5987F80A7DA} -> C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
BHO-x32: Object Browser -> {11111111-1111-1111-1111-110311281150} -> C:\Program Files (x86)\Object Browser\Object Browser-bho.dll (Object Browser)
BHO-x32: AllDaySavings -> {fbdff406-2c4c-5d35-8469-34bb67ea3353} -> C:\Program Files\B021CBBD-E38E-4F8C-8E93-6624B0597A23\kzhxnitccw.dll ()
C:\Program Files\B021CBBD-E38E-4F8C-8E93-6624B0597A23
Toolbar: HKLM - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE64.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
FF Keyword.URL: https://search.yahoo...94519&ilc=12&p=
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
C:\Program Files (x86)\globalUpdate
FF user.js: detected! => C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\user.js
FF SearchPlugin: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\scenicreflectionstb.xml
C:\Program Files (x86)\mozilla firefox\searchplugins\scenicreflectionstb.xml
FF Extension: Object Browser - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [2014-09-10]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com
FF Extension: {{EXT_NAME}} - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-09-13]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF Extension: Slick Savings - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-01-15]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF Extension: Websteroids - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2013-12-23]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF Extension: Start Page - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-01-15]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}
FF Extension: MySearchDial NewTab - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-15]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
FF Extension: AllDaySavings - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-07-28]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF HKLM\...\Firefox\Extensions: [{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}] - C:\Program Files\Updater By SweetPacks\Firefox
C:\Program Files\Updater By SweetPacks
FF HKCU\...\FireFox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
C:\Program Files (x86)\Wajam
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC} [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC}
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919} [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919}
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
CHR HomePage: Default -> hxxp://astromenda.com/?f=1&a=ast_secureddownload_14_37_ch&cd=2XzuyEtN2Y1L1Qzu0A0CzztCtCtBtC0CtDyCyD0Czy0FtBtCtN0D0Tzu0SzyzzyCtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyD0DzztDzz0C0DzztGzyyD0DyEtGtDtByCtCtGyBtC0ByCtGtBtBtD0FyD0AtCyCtA0A0FtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyD0ByC0A0D0A0AtG0C0C0EtAtGyE0BtBtAtGzy0AtCyEtG0FzytAtBtD0DyCyDtBtCzy0E2Q&cr=1259392873&ir=
CHR DefaultSuggestURL: Default -> https://ff.search.ya...d={searchTerms}
CHR Extension: (Google Search) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-21]
C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
CHR HKCU\...\Chrome\Extension: [dnmlhhbehhdmajijfenoldcajelckpmn] - C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx []
CHR HKCU\...\Chrome\Extension: [kepfgejmidkmoiimkfdjocdjhbcpmlmg] - C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx []
CHR HKCU\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx []
CHR HKCU\...\Chrome\Extension: [nemfjadlboooiffmcelkafilagddogim] - C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx []
CHR HKCU\...\Chrome\Extension: [njljkdinboobkmkihgcohanchjnjpgjk] - C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx []
C:\Users\Jon Lowry\AppData\Local\CRE
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx [2014-01-15]
C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [dfkfeemgjcjcednnaoemnjdiakmjbbbh] - C:\ProgramData\ADDICT-THING\dfkfeemgjcjcednnaoemnjdiakmjbbbh.crx [2014-01-15]
C:\ProgramData\ADDICT-THING
CHR HKLM-x32\...\Chrome\Extension: [dnmlhhbehhdmajijfenoldcajelckpmn] - C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [2013-10-14]
C:\Program Files (x86)\Common Files\Spigot
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [2013-12-27]
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Jon Lowry\AppData\Local\Wajam\Chrome\wajam.crx [2012-09-14]
C:\Users\Jon Lowry\AppData\Local\Wajam
CHR HKLM-x32\...\Chrome\Extension: [kepfgejmidkmoiimkfdjocdjhbcpmlmg] - C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx [2012-09-14]
CHR HKLM-x32\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2012-09-14]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\Jon Lowry\AppData\Local\Slick Savings\coupons.crx [2014-01-15]
C:\Users\Jon Lowry\AppData\Local\Slick Savings
CHR HKLM-x32\...\Chrome\Extension: [nemfjadlboooiffmcelkafilagddogim] - C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [njljkdinboobkmkihgcohanchjnjpgjk] - C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [npffmjkglbnioaoncpfmdbmehnbcldfh] - C:\Program Files (x86)\LyricSing\130.crx [2011-02-07]
C:\Program Files (x86)\LyricSing
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx [2014-01-15]
C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]
C:\Program Files (x86)\Common Files\Spigot
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36936 2014-09-03] (Just Develop It)
C:\Program Files (x86)\MyPC Backup
R2 cyycfhtzro64; C:\Program Files\005\cyycfhtzro64.exe [709120 2014-07-25] () [File not signed]
C:\Program Files\005
R2 DnsSignal Service; C:\Program Files\DnsSignal\barelysignal.exe [67584 2014-05-20] () [File not signed]
C:\Program Files\DnsSignal
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-10] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-10] (globalUpdate) [File not signed]
C:\Program Files (x86)\globalUpdate
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [702344 2014-07-25] (Cherished Technololgy LIMITED)
C:\ProgramData\IePluginServices
R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58728 2014-08-25] (YTDownloader)
C:\Program Files (x86)\YTDownloader
R1 {9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64; C:\Windows\System32\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64.sys [61120 2014-07-24] (StdLib)
C:\Windows\System32\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64.sys
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
C:\ComboFix\catchme.sys
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
C:\Windows\system32\drivers\EagleX64.sys
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
S3 SMUpdd; \??\C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [X]
C:\Program Files\Common Files\Goobzo
S1 ssnfd; system32\drivers\ssnfd.sys [X]
U2 TMAgent; No ImagePath
2014-09-16 07:58 - 2014-09-16 07:58 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$Garb for Faire.xlsx
2014-09-13 12:47 - 2014-09-11 10:47 - 00000306 _____ () C:\Windows\Tasks\WSE_Astromenda.job
2014-09-13 12:40 - 2014-09-10 00:26 - 00003464 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
2014-09-13 12:31 - 2014-09-10 00:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
2014-09-13 12:31 - 2014-09-10 00:26 - 00000964 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002766 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002104 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00004490 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00003808 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
2014-09-13 11:56 - 2014-09-10 00:26 - 00000960 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-13 11:56 - 2011-06-10 18:33 - 00000900 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-11 11:00 - 2014-09-11 11:00 - 00004162 _____ () C:\Windows\System32\Tasks\RocketTab Update Task
2014-09-11 11:00 - 2014-09-11 11:00 - 00003376 _____ () C:\Windows\System32\Tasks\RocketTab
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\Users\Public\Desktop\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00000000 ____D () C:\Program Files (x86)\RocketTab
2014-09-11 10:58 - 2014-01-17 00:35 - 00000000 ____D () C:\Program Files (x86)\Vuze
2014-09-11 10:47 - 2014-09-13 12:47 - 00000306 _____ () C:\Windows\Tasks\WSE_Astromenda.job
2014-09-11 10:47 - 2014-09-11 10:47 - 00003264 _____ () C:\Windows\System32\Tasks\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\PennyBee
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\ICSharpCode.net
2014-09-11 10:47 - 2014-09-11 10:45 - 00071824 _____ (Azureus Software, Inc.) C:\Users\Jon Lowry\Downloads\vuze.exe
2014-09-11 10:45 - 2014-09-11 10:45 - 00800960 _____ ( ) C:\Users\Jon Lowry\Downloads\vuze_setup.exe
2014-09-11 10:44 - 2014-09-10 00:33 - 00000000 ____D () C:\Program Files\DnsSignal
2014-09-11 10:44 - 2014-09-01 23:28 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-09-10 00:41 - 2014-06-05 11:08 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-09-10 00:35 - 2014-09-10 00:33 - 00000000 ____D () C:\ProgramData\DnsSignal
2014-09-10 00:33 - 2014-09-11 10:44 - 00000000 ____D () C:\Program Files\DnsSignal
2014-09-10 00:33 - 2014-09-10 00:33 - 00000000 _____ () C:\ProgramData\2b2821382e352b272c272e2237302d_c
2014-09-10 00:27 - 2014-09-13 12:27 - 00002766 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002104 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
2014-09-10 00:27 - 2014-09-10 00:27 - 00005796 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1
2014-09-10 00:27 - 2014-09-10 00:27 - 00005470 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5
2014-09-10 00:27 - 2014-09-10 00:27 - 00005134 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2
2014-09-10 00:27 - 2014-09-10 00:27 - 00003562 _____ () C:\Windows\System32\Tasks\FFMPEGUpd
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\ProgramData\Video Accelerator
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\Program Files (x86)\FFMPEG
2014-09-10 00:27 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\Object Browser
2014-09-10 00:26 - 2014-09-13 12:40 - 00003464 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
2014-09-10 00:26 - 2014-09-13 12:31 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
2014-09-10 00:26 - 2014-09-13 12:31 - 00000964 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00004490 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00003808 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
2014-09-10 00:26 - 2014-09-13 11:56 - 00000960 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (ParetoLogic, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup.exe
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (ParetoLogic, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup (1).exe
2014-09-10 00:26 - 2014-09-10 00:26 - 00007520 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11
2014-09-10 00:26 - 2014-09-10 00:26 - 00006838 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4
2014-09-10 00:26 - 2014-09-10 00:26 - 00006492 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3
2014-09-10 00:26 - 2014-09-10 00:26 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-10 00:26 - 2014-09-10 00:26 - 00003708 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-10 00:26 - 2014-09-10 00:26 - 00003594 _____ () C:\Windows\System32\Tasks\YTDownloaderUpd
2014-09-10 00:26 - 2014-09-10 00:26 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
2014-09-10 00:26 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2014-09-10 00:26 - 2014-07-25 00:18 - 00003744 _____ () C:\Windows\System32\Tasks\SMupdate1
2014-09-10 00:26 - 2014-07-25 00:18 - 00003604 _____ () C:\Windows\System32\Tasks\YTDownloader
2014-09-10 00:26 - 2014-07-25 00:16 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-09-10 00:25 - 2014-09-10 00:27 - 00000000 ____D () C:\Program Files (x86)\Object Browser
2014-09-10 00:25 - 2014-09-10 00:25 - 00004048 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-09-10 00:25 - 2014-09-10 00:25 - 00001969 _____ () C:\Users\Jon Lowry\Desktop\Sync Folder.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00001087 _____ () C:\Users\Jon Lowry\Desktop\MyPC Backup.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-09-04 10:54 - 2014-09-04 10:54 - 01527000 _____ () C:\Users\Jon Lowry\Downloads\flash_player_14_plugin.exe
2014-09-04 10:54 - 2014-09-04 10:54 - 00144760 _____ (Premium Installer ) C:\Users\Jon Lowry\Downloads\Setup (2).exe
2014-08-29 21:13 - 2014-08-29 21:13 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$TV Shows.xlsx
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Vuze Remote Toolbar
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Application Updater
C:\Users\Jon Lowry\jagex_cl_loginapplet_LIVE.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE1.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE2.dat
C:\Users\Jon Lowry\jagex_runescape_preferences.dat
C:\Users\Jon Lowry\jagex_runescape_preferences2.dat
C:\Users\Jon Lowry\random.dat
C:\Users\Jon Lowry\AppData\Local\Temp\GPUpd5418514B1.exe
C:\Users\Jon Lowry\AppData\Local\Temp\i4jd8938456812418365063.exe
Task: {026F61A6-1E79-4C96-B077-DE27CC432D7D} - \BrowserDefendert No Task File <==== ATTENTION
Task: {1A3CE392-422E-47DC-9602-789171E5B529} - System32\Tasks\Test TimeTrigger => C:\Users\JONLOW~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
C:\Users\JONLOW~1\AppData\Local\Temp\Runner.exe
Task: {35FBB754-7A87-43F1-B9A6-8446DFB6A6C2} - System32\Tasks\WSE_Astromenda => C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda\UpdateProc\UpdateTask.exe [2014-09-11] ()
C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
Task: {38212487-8142-46E0-8D4E-31B74C431837} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2014-08-25] (YTDownloader) <==== ATTENTION
C:\Program Files (x86)\YTDownloader
Task: {3DB4A2F8-0448-459B-A135-FEE9BBAD4ADB} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.exe [2014-09-10] (Object Browser)
C:\Program Files (x86)\Object Browser
Task: {4146542E-A9F0-49D6-9185-95A76109A52D} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe [2014-08-25] (Goobzo) <==== ATTENTION
Task: {55ABD00A-4220-4F78-A0D7-AEC713771BC6} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.exe [2014-09-10] (Object Browser)
Task: {5CCDBEE0-159F-4BF5-88B1-44DE44C0189A} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {602F9486-75D6-415D-B537-F3BDBDE110A1} - System32\Tasks\ParetoLogic Update Version3_triggeronce => c:\program files (x86)\common files\paretologic\uus3\Pareto_Update3.exe
c:\program files (x86)\common files\paretologic
Task: {74F1B5C4-50C4-49CF-925C-911287FD19DC} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe [2014-09-10] (Object Browser)
Task: {979BBFF1-A320-4D44-9572-43CCF72014E2} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.exe [2014-09-10] (Object Browser)
Task: {97F04E5C-4950-428A-9DFC-CA53C569C462} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.exe [2014-09-10] (Object Browser)
Task: {9E671BF1-E82A-48C6-BF41-2DD13DEFBDD2} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
C:\Program Files (x86)\Optimizer Pro
Task: {A1352A50-436B-4071-B228-0B8E2D79784F} - System32\Tasks\RocketTab => C:\Windows\system32\cmd.exe [2010-11-20] (Microsoft Corporation) <==== ATTENTION
Task: {A669AEF8-A05B-44A1-9833-CD4A0CF0501C} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {A7D18C7A-90C7-4E57-9DEB-730834176E5D} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1 => C:\Program Files (x86)\Object Browser\Object Browser-codedownloader.exe [2014-09-10] (Object Browser)
Task: {A8C40EB6-7527-4B16-8F5C-BE889C95886A} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {AC2629A3-16AD-4E7D-9589-FF4CF978C9CF} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.exe [2014-09-10] (Object Browser)
Task: {BF3B2CB2-AC8C-4F8C-B436-468B7780F37A} - System32\Tasks\TidyNetwork Update => C:\Users\Jon Lowry\AppData\Local\TidyNetwork.com\tidy2update.exe
C:\Users\Jon Lowry\AppData\Local\TidyNetwork.com
Task: {C97C403B-723B-47B3-8A75-9A0D5FAA93E1} - System32\Tasks\RocketTab Update Task => C:\Program Files (x86)\RocketTab\uninstall.exe [2014-09-11] () <==== ATTENTION
C:\Program Files (x86)\RocketTab
Task: {D8A78881-603A-4045-A49C-70FFD91033DA} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe [2014-09-10] (Object Browser)
Task: {E7F27CA2-7095-46A3-B555-CA1986F8895D} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {E8CDB12B-32AD-4023-9476-14E9C4D0CED7} - System32\Tasks\FFMPEGUpd => C:\Program Files (x86)\FFMPEG\FFMPEGUpdate.exe [2013-08-08] (Goobzo)
C:\Program Files (x86)\FFMPEG
Task: {EB6FA16A-998E-4019-8C5E-BCABA47F746A} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.exe [2014-09-10] (Object Browser)
Task: {F5AD7045-11F7-42B6-B4E3-BC8CFE550AF1} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-10] (globalUpdate) <==== ATTENTION
C:\Program Files (x86)\globalUpdate
Task: {F97BD074-2550-4AF3-90DA-6A2CBDF39C03} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [2014-09-03] (MyPC Backup) <==== ATTENTION
C:\Program Files (x86)\MyPC Backup
Task: {FEC81997-A122-47DA-AA7B-828690A77499} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-10] (globalUpdate) <==== ATTENTION
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job => C:\Program Files (x86)\Object Browser\Object Browser-codedownloader.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\ParetoLogic Update Version3_triggeronce.job => c:\program files (x86)\common files\paretologic\uus3\Pareto_Update3.exe
Task: C:\Windows\Tasks\WSE_Astromenda.job => C:\Users\JONLOW~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Users\JONLOW~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE
2014-09-11 11:00 - 2014-09-11 11:00 - 01420520 _____ () C:\Program Files (x86)\RocketTab\Client.exe
2014-09-10 00:33 - 2014-09-10 00:35 - 00565760 _____ () C:\Program Files\DnsSignal\dnssignal.dll
2014-07-25 00:20 - 2014-07-25 00:20 - 00709120 _____ () C:\Program Files\005\cyycfhtzro64.exe
2014-09-10 00:33 - 2014-05-20 20:48 - 00067584 _____ () C:\Program Files\DnsSignal\barelysignal.exe
2014-09-10 00:33 - 2014-05-20 20:48 - 00054784 _____ () C:\Program Files\DnsSignal\barelysignal2.exe
2014-08-18 07:51 - 2014-08-18 07:51 - 00408584 _____ () C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
2014-09-11 10:47 - 2014-09-11 10:47 - 01074688 _____ () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
2014-09-03 10:39 - 2014-09-03 10:39 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2014-09-03 10:34 - 2014-09-03 10:34 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2014-09-10 00:33 - 2014-09-10 00:35 - 00496640 _____ () C:\Program Files\DnsSignal\dnssignal2.dll
2014-08-18 07:51 - 2014-08-18 07:51 - 00311816 _____ () C:\Users\Jon Lowry\AppData\Local\PennyBee\DealplyInstallerHelper.dll
2014-09-11 10:47 - 2014-09-11 10:47 - 00599419 _____ () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\sqlite3.dll
AlternateDataStreams: C:\ProgramData\Temp:0B4227B4
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:BF3D62E7
EmptyTemp:
end

NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Notice: Because of the length of the file listed, I have attached a copy of the file here if this is easier for you. ==>> Attached File  Fixlist.txt   34.62KB   267 downloads

Run FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.


Last, a Follow up FRST64 scan


  • Right click the FRST64 file on your desktop and select "Run as Administrator..." (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Select the Addition.txt check box in the Optional Scan box. Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • Because we asked for the scan, FRST64 generated the other log (Addition.txt - also located in the same directory as FRST64.exe). Please also paste that along with the FRST.txt into your reply.


Things for you next reply >>>>

  • Answer about ComboFix please.
  • Any questions about the P2P or BackDoor warning? Do you still want to try and clean the system?
  • Did the uninstalls go alright? Any programs that did not uninstall or say the installation was corrupt?
  • The FRST64 Fixlog.txt log text.
  • The new FRST and Addition logs.
  • Any questions you have. How is the system now?

  • 0

#5
skandranon1971

skandranon1971

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts
The computer is already running better. We have had problems before so combofix was used.  I didn't know about the backdoor.  I am aware of the P2P.  The results of the manual uninstalls are:
 
Define Ext - corrupted or not there
DnsSignal 1.0 build 111 -uninstalled
FileParade Bundle - hangs system every attempt
InstaCodecs - uninstalled
MyPC Backup - not in list
PennyBee - uninstalled
RocketTab
- not in list
Updater (HKLM-x32\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B})- not in list
Vuze Remote Toolbar v9.7 - uninstalled
Wajam - uninstalled
WSE_Astromenda - 
- not in list
 
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014
Ran by Jon Lowry at 2014-09-18 13:27:37 Run:1
Running from C:\Users\Jon Lowry\Desktop
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
start
CloseProcesses:
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
C:\ProgramData\IePluginServices
() C:\Program Files (x86)\RocketTab\Client.exe
C:\Program Files (x86)\RocketTab
(Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
C:\Program Files (x86)\Application Updater
() C:\Program Files\005\cyycfhtzro64.exe
C:\Program Files\005
() C:\Program Files\DnsSignal\barelysignal.exe
() C:\Program Files\DnsSignal\barelysignal.exe
() C:\Program Files\DnsSignal\barelysignal2.exe
C:\Program Files\DnsSignal
(YTDownloader) C:\Program Files (x86)\YTDownloader\YTDownloader.exe
C:\Program Files (x86)\YTDownloader
() C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
C:\Users\Jon Lowry\AppData\Local\PennyBee
() C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
(MyPCBackup.com) C:\Program Files (x86)\MYPC BACKUP\MyPC Backup.exe
C:\Program Files (x86)\MyPC Backup
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Spigot Inc) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe
C:\Program Files (x86)\Common Files\Spigot
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
C:\Program Files (x86)\Mobogenie
HKLM-x32\...\Run: [fst_us_178] => [X]
HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988968 2014-08-25] (YTDownloader)
C:\Program Files (x86)\YTDownloader
HKLM-x32\...\Run: [SearchSettings] => C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1608000 2014-08-22] (Spigot, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\RunOnce: [AvgUninstallURL] => cmd.exe /c start http://www.avg.com/w...&"ver=10.0.1427
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [iLivid] => "C:\Users\Jon Lowry\AppData\Local\iLivid\iLivid.exe" -autorun
C:\Users\Jon Lowry\AppData\Local\iLivid
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1988968 2014-08-25] (YTDownloader)
C:\Program Files (x86)\YTDownloader
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [PeenyBee] => C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe [408584 2014-08-18] ()
C:\Users\Jon Lowry\AppData\Local\PennyBee
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [BRS] => C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe [1074688 2014-09-11] ()
C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
BootExecute: ä* //www.bleepingcomputer.com/combofix/how-to-use-combofix~n~nnote: you may be infected with a file patching virus 'virut't'
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyServer: http=127.0.0.1:49191;https=127.0.0.1:49191
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.co...=1259392873&ir=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istart123...q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istart123...q={searchTerms}
URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE64.dll (Spigot, Inc.)
URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
C:\Program Files (x86)\Vuze Remote Toolbar
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {4C6AB4BD-96D7-4335-97AB-C4588C2427C2} URL = http://en.wikipedia....h={searchTerms}
SearchScopes: HKLM - {4FDD993D-F656-4134-8E18-AFCCC84F8912} URL = http://search.yahoo....psg&type=HPNTDF
SearchScopes: HKLM - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://www-search.ne...q={searchTerms}
SearchScopes: HKLM - {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL =
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.as...q={searchTerms}
SearchScopes: HKCU - DefaultScope {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKCU - F12BAB76371E486CBA05A93378B22524 URL = http://search.condui...rchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com...rchTerms}&SSPV=
SearchScopes: HKCU - {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = https://search.yahoo...p={searchTerms}
SearchScopes: HKCU - {39D8810E-1A9F-462E-8029-266DFD9E8606} URL = http://www.dnssignal...s={searchTerms}
SearchScopes: HKCU - {446260B0-A943-4C26-AFBC-72E2A2E12756} URL = http://start.mysearc...=1820541918&ir=
SearchScopes: HKCU - {4C6AB4BD-96D7-4335-97AB-C4588C2427C2} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://astromenda.co...=1259392873&ir=
SearchScopes: HKCU - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://www-search.ne...q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.as...q={searchTerms}
SearchScopes: HKCU - {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = http://www.trovi.com...rchTerms}&SSPV=
BHO: Object Browser -> {11111111-1111-1111-1111-110311281150} -> C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll (Object Browser)
C:\Program Files (x86)\Object Browser
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO-x32: Vuze Remote Toolbar -> {05478A66-EDB6-4A22-A870-A5987F80A7DA} -> C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
BHO-x32: Object Browser -> {11111111-1111-1111-1111-110311281150} -> C:\Program Files (x86)\Object Browser\Object Browser-bho.dll (Object Browser)
BHO-x32: AllDaySavings -> {fbdff406-2c4c-5d35-8469-34bb67ea3353} -> C:\Program Files\B021CBBD-E38E-4F8C-8E93-6624B0597A23\kzhxnitccw.dll ()
C:\Program Files\B021CBBD-E38E-4F8C-8E93-6624B0597A23
Toolbar: HKLM - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE64.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.7\vuzeToolbarIE.dll (Spigot, Inc.)
WINSOCK: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
C:\Program Files (x86)\globalUpdate
FF user.js: detected! => C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\user.js
FF SearchPlugin: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\MOZILLA FIREFOX\searchplugins\scenicreflectionstb.xml
C:\Program Files (x86)\mozilla firefox\searchplugins\scenicreflectionstb.xml
FF Extension: Object Browser - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [2014-09-10]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com
FF Extension: {{EXT_NAME}} - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-09-13]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF Extension: Slick Savings - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-01-15]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF Extension: Websteroids - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2013-12-23]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF Extension: Start Page - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} [2014-01-15]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}
FF Extension: MySearchDial NewTab - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} [2014-01-15]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
FF Extension: AllDaySavings - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] [2014-07-28]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]
FF HKLM\...\Firefox\Extensions: [{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}] - C:\Program Files\Updater By SweetPacks\Firefox
C:\Program Files\Updater By SweetPacks
FF HKCU\...\FireFox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
C:\Program Files (x86)\Wajam
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC} [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC}
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919} [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919}
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]
CHR HomePage: Default -> hxxp://astromenda.com/?f=1&a=ast_secureddownload_14_37_ch&cd=2XzuyEtN2Y1L1Qzu0A0CzztCtCtBtC0CtDyCyD0Czy0FtBtCtN0D0Tzu0SzyzzyCtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyD0DzztDzz0C0DzztGzyyD0DyEtGtDtByCtCtGyBtC0ByCtGtBtBtD0FyD0AtCyCtA0A0FtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyD0ByC0A0D0A0AtG0C0C0EtAtGyE0BtBtAtGzy0AtCyEtG0FzytAtBtD0DyCyDtBtCzy0E2Q&cr=1259392873&ir=
CHR DefaultSuggestURL: Default -> https://ff.search.ya...d={searchTerms}
CHR Extension: (Google Search) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-21]
C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
CHR HKCU\...\Chrome\Extension: [dnmlhhbehhdmajijfenoldcajelckpmn] - C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx []
CHR HKCU\...\Chrome\Extension: [kepfgejmidkmoiimkfdjocdjhbcpmlmg] - C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx []
CHR HKCU\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx []
CHR HKCU\...\Chrome\Extension: [nemfjadlboooiffmcelkafilagddogim] - C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx []
CHR HKCU\...\Chrome\Extension: [njljkdinboobkmkihgcohanchjnjpgjk] - C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx []
C:\Users\Jon Lowry\AppData\Local\CRE
CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx [2014-01-15]
C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [dfkfeemgjcjcednnaoemnjdiakmjbbbh] - C:\ProgramData\ADDICT-THING\dfkfeemgjcjcednnaoemnjdiakmjbbbh.crx [2014-01-15]
C:\ProgramData\ADDICT-THING
CHR HKLM-x32\...\Chrome\Extension: [dnmlhhbehhdmajijfenoldcajelckpmn] - C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [2013-10-14]
C:\Program Files (x86)\Common Files\Spigot
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [2013-12-27]
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Jon Lowry\AppData\Local\Wajam\Chrome\wajam.crx [2012-09-14]
C:\Users\Jon Lowry\AppData\Local\Wajam
CHR HKLM-x32\...\Chrome\Extension: [kepfgejmidkmoiimkfdjocdjhbcpmlmg] - C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx [2012-09-14]
CHR HKLM-x32\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2012-09-14]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\Jon Lowry\AppData\Local\Slick Savings\coupons.crx [2014-01-15]
C:\Users\Jon Lowry\AppData\Local\Slick Savings
CHR HKLM-x32\...\Chrome\Extension: [nemfjadlboooiffmcelkafilagddogim] - C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [njljkdinboobkmkihgcohanchjnjpgjk] - C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx [2014-01-15]
CHR HKLM-x32\...\Chrome\Extension: [npffmjkglbnioaoncpfmdbmehnbcldfh] - C:\Program Files (x86)\LyricSing\130.crx [2011-02-07]
C:\Program Files (x86)\LyricSing
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx [2014-01-15]
C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]
C:\Program Files (x86)\Common Files\Spigot
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36936 2014-09-03] (Just Develop It)
C:\Program Files (x86)\MyPC Backup
R2 cyycfhtzro64; C:\Program Files\005\cyycfhtzro64.exe [709120 2014-07-25] () [File not signed]
C:\Program Files\005
R2 DnsSignal Service; C:\Program Files\DnsSignal\barelysignal.exe [67584 2014-05-20] () [File not signed]
C:\Program Files\DnsSignal
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-10] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-10] (globalUpdate) [File not signed]
C:\Program Files (x86)\globalUpdate
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [702344 2014-07-25] (Cherished Technololgy LIMITED)
C:\ProgramData\IePluginServices
R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58728 2014-08-25] (YTDownloader)
C:\Program Files (x86)\YTDownloader
R1 {9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64; C:\Windows\System32\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64.sys [61120 2014-07-24] (StdLib)
C:\Windows\System32\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64.sys
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
C:\ComboFix\catchme.sys
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
C:\Windows\system32\drivers\EagleX64.sys
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SPYHUNTER\esgiguard.sys [X]
C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
S3 SMUpdd; \??\C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [X]
C:\Program Files\Common Files\Goobzo
S1 ssnfd; system32\drivers\ssnfd.sys [X]
U2 TMAgent; No ImagePath
2014-09-16 07:58 - 2014-09-16 07:58 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$Garb for Faire.xlsx
2014-09-13 12:47 - 2014-09-11 10:47 - 00000306 _____ () C:\Windows\Tasks\WSE_Astromenda.job
2014-09-13 12:40 - 2014-09-10 00:26 - 00003464 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
2014-09-13 12:31 - 2014-09-10 00:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
2014-09-13 12:31 - 2014-09-10 00:26 - 00000964 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002766 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
2014-09-13 12:27 - 2014-09-10 00:27 - 00002104 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00004490 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00003808 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
2014-09-13 12:26 - 2014-09-10 00:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
2014-09-13 11:56 - 2014-09-10 00:26 - 00000960 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-13 11:56 - 2011-06-10 18:33 - 00000900 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-11 11:00 - 2014-09-11 11:00 - 00004162 _____ () C:\Windows\System32\Tasks\RocketTab Update Task
2014-09-11 11:00 - 2014-09-11 11:00 - 00003376 _____ () C:\Windows\System32\Tasks\RocketTab
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\Users\Public\Desktop\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00001848 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
2014-09-11 11:00 - 2014-09-11 11:00 - 00000000 ____D () C:\Program Files (x86)\RocketTab
2014-09-11 10:58 - 2014-01-17 00:35 - 00000000 ____D () C:\Program Files (x86)\Vuze
2014-09-11 10:47 - 2014-09-13 12:47 - 00000306 _____ () C:\Windows\Tasks\WSE_Astromenda.job
2014-09-11 10:47 - 2014-09-11 10:47 - 00003264 _____ () C:\Windows\System32\Tasks\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\PennyBee
2014-09-11 10:47 - 2014-09-11 10:47 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\ICSharpCode.net
2014-09-11 10:47 - 2014-09-11 10:45 - 00071824 _____ (Azureus Software, Inc.) C:\Users\Jon Lowry\Downloads\vuze.exe
2014-09-11 10:45 - 2014-09-11 10:45 - 00800960 _____ ( ) C:\Users\Jon Lowry\Downloads\vuze_setup.exe
2014-09-11 10:44 - 2014-09-10 00:33 - 00000000 ____D () C:\Program Files\DnsSignal
2014-09-11 10:44 - 2014-09-01 23:28 - 00000000 ____D () C:\Program Files (x86)\Bench
2014-09-10 00:41 - 2014-06-05 11:08 - 00000000 ____D () C:\ProgramData\PARETOLOGIC
2014-09-10 00:35 - 2014-09-10 00:33 - 00000000 ____D () C:\ProgramData\DnsSignal
2014-09-10 00:33 - 2014-09-11 10:44 - 00000000 ____D () C:\Program Files\DnsSignal
2014-09-10 00:33 - 2014-09-10 00:33 - 00000000 _____ () C:\ProgramData\2b2821382e352b272c272e2237302d_c
2014-09-10 00:27 - 2014-09-13 12:27 - 00002766 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002440 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job
2014-09-10 00:27 - 2014-09-13 12:27 - 00002104 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job
2014-09-10 00:27 - 2014-09-10 00:27 - 00005796 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1
2014-09-10 00:27 - 2014-09-10 00:27 - 00005470 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5
2014-09-10 00:27 - 2014-09-10 00:27 - 00005134 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2
2014-09-10 00:27 - 2014-09-10 00:27 - 00003562 _____ () C:\Windows\System32\Tasks\FFMPEGUpd
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\ProgramData\Video Accelerator
2014-09-10 00:27 - 2014-09-10 00:27 - 00000000 ____D () C:\Program Files (x86)\FFMPEG
2014-09-10 00:27 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\Object Browser
2014-09-10 00:26 - 2014-09-13 12:40 - 00003464 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job
2014-09-10 00:26 - 2014-09-13 12:31 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job
2014-09-10 00:26 - 2014-09-13 12:31 - 00000964 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00004490 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00003808 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job
2014-09-10 00:26 - 2014-09-13 12:26 - 00003128 _____ () C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job
2014-09-10 00:26 - 2014-09-13 11:56 - 00000960 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (PARETOLOGIC, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup.exe
2014-09-10 00:26 - 2014-09-10 00:26 - 06753656 _____ (ParetoLogic, Inc.) C:\Users\Jon Lowry\Downloads\RegCureProSetup (1).exe
2014-09-10 00:26 - 2014-09-10 00:26 - 00007520 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11
2014-09-10 00:26 - 2014-09-10 00:26 - 00006838 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4
2014-09-10 00:26 - 2014-09-10 00:26 - 00006492 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7
2014-09-10 00:26 - 2014-09-10 00:26 - 00006158 _____ () C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3
2014-09-10 00:26 - 2014-09-10 00:26 - 00003962 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-10 00:26 - 2014-09-10 00:26 - 00003708 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-10 00:26 - 2014-09-10 00:26 - 00003594 _____ () C:\Windows\System32\Tasks\YTDownloaderUpd
2014-09-10 00:26 - 2014-09-10 00:26 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
2014-09-10 00:26 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\YTDownloader
2014-09-10 00:26 - 2014-07-25 00:18 - 00003744 _____ () C:\Windows\System32\Tasks\SMupdate1
2014-09-10 00:26 - 2014-07-25 00:18 - 00003604 _____ () C:\Windows\System32\Tasks\YTDownloader
2014-09-10 00:26 - 2014-07-25 00:16 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-09-10 00:25 - 2014-09-10 00:27 - 00000000 ____D () C:\Program Files (x86)\Object Browser
2014-09-10 00:25 - 2014-09-10 00:25 - 00004048 _____ () C:\Windows\System32\Tasks\LaunchSignup
2014-09-10 00:25 - 2014-09-10 00:25 - 00001969 _____ () C:\Users\Jon Lowry\Desktop\Sync Folder.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00001087 _____ () C:\Users\Jon Lowry\Desktop\MyPC Backup.lnk
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-09-10 00:25 - 2014-09-10 00:25 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-09-04 10:54 - 2014-09-04 10:54 - 01527000 _____ () C:\Users\Jon Lowry\Downloads\flash_player_14_plugin.exe
2014-09-04 10:54 - 2014-09-04 10:54 - 00144760 _____ (Premium Installer ) C:\Users\Jon Lowry\Downloads\Setup (2).exe
2014-08-29 21:13 - 2014-08-29 21:13 - 00000165 ____H () C:\Users\Jon Lowry\Desktop\~$TV Shows.xlsx
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Vuze Remote Toolbar
2014-08-27 12:57 - 2014-08-27 12:57 - 00000000 ____D () C:\Program Files (x86)\Application Updater
C:\Users\Jon Lowry\jagex_cl_loginapplet_LIVE.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE1.dat
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE2.dat
C:\Users\Jon Lowry\jagex_runescape_preferences.dat
C:\Users\Jon Lowry\jagex_runescape_preferences2.dat
C:\Users\Jon Lowry\random.dat
C:\Users\Jon Lowry\AppData\Local\Temp\GPUpd5418514B1.exe
C:\Users\Jon Lowry\AppData\Local\Temp\i4jd8938456812418365063.exe
Task: {026F61A6-1E79-4C96-B077-DE27CC432D7D} - \BrowserDefendert No Task File <==== ATTENTION
Task: {1A3CE392-422E-47DC-9602-789171E5B529} - System32\Tasks\Test TimeTrigger => C:\Users\JONLOW~1\AppData\Local\Temp\Runner.exe <==== ATTENTION
C:\Users\JONLOW~1\AppData\Local\Temp\Runner.exe
Task: {35FBB754-7A87-43F1-B9A6-8446DFB6A6C2} - System32\Tasks\WSE_Astromenda => C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda\UpdateProc\UpdateTask.exe [2014-09-11] ()
C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda
Task: {38212487-8142-46E0-8D4E-31B74C431837} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2014-08-25] (YTDownloader) <==== ATTENTION
C:\Program Files (x86)\YTDownloader
Task: {3DB4A2F8-0448-459B-A135-FEE9BBAD4ADB} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.exe [2014-09-10] (Object Browser)
C:\Program Files (x86)\Object Browser
Task: {4146542E-A9F0-49D6-9185-95A76109A52D} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe [2014-08-25] (Goobzo) <==== ATTENTION
Task: {55ABD00A-4220-4F78-A0D7-AEC713771BC6} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.exe [2014-09-10] (Object Browser)
Task: {5CCDBEE0-159F-4BF5-88B1-44DE44C0189A} - \BackgroundContainer Startup Task No Task File <==== ATTENTION
Task: {602F9486-75D6-415D-B537-F3BDBDE110A1} - System32\Tasks\ParetoLogic Update Version3_triggeronce => c:\program files (x86)\common files\paretologic\uus3\Pareto_Update3.exe
c:\program files (x86)\common files\paretologic
Task: {74F1B5C4-50C4-49CF-925C-911287FD19DC} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe [2014-09-10] (Object Browser)
Task: {979BBFF1-A320-4D44-9572-43CCF72014E2} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.exe [2014-09-10] (Object Browser)
Task: {97F04E5C-4950-428A-9DFC-CA53C569C462} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.exe [2014-09-10] (Object Browser)
Task: {9E671BF1-E82A-48C6-BF41-2DD13DEFBDD2} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
C:\Program Files (x86)\Optimizer Pro
Task: {A1352A50-436B-4071-B228-0B8E2D79784F} - System32\Tasks\RocketTab => C:\Windows\system32\cmd.exe [2010-11-20] (Microsoft Corporation) <==== ATTENTION
Task: {A669AEF8-A05B-44A1-9833-CD4A0CF0501C} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {A7D18C7A-90C7-4E57-9DEB-730834176E5D} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1 => C:\Program Files (x86)\Object Browser\Object Browser-codedownloader.exe [2014-09-10] (Object Browser)
Task: {A8C40EB6-7527-4B16-8F5C-BE889C95886A} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {AC2629A3-16AD-4E7D-9589-FF4CF978C9CF} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.exe [2014-09-10] (Object Browser)
Task: {BF3B2CB2-AC8C-4F8C-B436-468B7780F37A} - System32\Tasks\TidyNetwork Update => C:\Users\Jon Lowry\AppData\Local\TidyNetwork.com\tidy2update.exe
C:\Users\Jon Lowry\AppData\Local\TidyNetwork.com
Task: {C97C403B-723B-47B3-8A75-9A0D5FAA93E1} - System32\Tasks\RocketTab Update Task => C:\Program Files (x86)\RocketTab\uninstall.exe [2014-09-11] () <==== ATTENTION
C:\Program Files (x86)\RocketTab
Task: {D8A78881-603A-4045-A49C-70FFD91033DA} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe [2014-09-10] (Object Browser)
Task: {E7F27CA2-7095-46A3-B555-CA1986F8895D} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {E8CDB12B-32AD-4023-9476-14E9C4D0CED7} - System32\Tasks\FFMPEGUpd => C:\Program Files (x86)\FFMPEG\FFMPEGUpdate.exe [2013-08-08] (Goobzo)
C:\Program Files (x86)\FFMPEG
Task: {EB6FA16A-998E-4019-8C5E-BCABA47F746A} - System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7 => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.exe [2014-09-10] (Object Browser)
Task: {F5AD7045-11F7-42B6-B4E3-BC8CFE550AF1} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-10] (globalUpdate) <==== ATTENTION
C:\Program Files (x86)\globalUpdate
Task: {F97BD074-2550-4AF3-90DA-6A2CBDF39C03} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [2014-09-03] (MyPC Backup) <==== ATTENTION
C:\Program Files (x86)\MyPC Backup
Task: {FEC81997-A122-47DA-AA7B-828690A77499} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-10] (globalUpdate) <==== ATTENTION
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job => C:\Program Files (x86)\Object Browser\Object Browser-codedownloader.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.exe
Task: C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job => C:\Program Files (x86)\Object Browser\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\ParetoLogic Update Version3_triggeronce.job => c:\program files (x86)\common files\paretologic\uus3\Pareto_Update3.exe
Task: C:\Windows\Tasks\WSE_Astromenda.job => C:\Users\JONLOW~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Users\JONLOW~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE
2014-09-11 11:00 - 2014-09-11 11:00 - 01420520 _____ () C:\Program Files (x86)\RocketTab\Client.exe
2014-09-10 00:33 - 2014-09-10 00:35 - 00565760 _____ () C:\Program Files\DnsSignal\dnssignal.dll
2014-07-25 00:20 - 2014-07-25 00:20 - 00709120 _____ () C:\Program Files\005\cyycfhtzro64.exe
2014-09-10 00:33 - 2014-05-20 20:48 - 00067584 _____ () C:\Program Files\DnsSignal\barelysignal.exe
2014-09-10 00:33 - 2014-05-20 20:48 - 00054784 _____ () C:\Program Files\DnsSignal\barelysignal2.exe
2014-08-18 07:51 - 2014-08-18 07:51 - 00408584 _____ () C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe
2014-09-11 10:47 - 2014-09-11 10:47 - 01074688 _____ () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe
2014-09-03 10:39 - 2014-09-03 10:39 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2014-09-03 10:34 - 2014-09-03 10:34 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2014-09-10 00:33 - 2014-09-10 00:35 - 00496640 _____ () C:\Program Files\DnsSignal\dnssignal2.dll
2014-08-18 07:51 - 2014-08-18 07:51 - 00311816 _____ () C:\Users\Jon Lowry\AppData\Local\PennyBee\DealplyInstallerHelper.dll
2014-09-11 10:47 - 2014-09-11 10:47 - 00599419 _____ () C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\sqlite3.dll
AlternateDataStreams: C:\ProgramData\Temp:0B4227B4
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:BF3D62E7
EmptyTemp:
end
*****************
 
Processes closed successfully.
C:\ProgramData\IePluginServices\PluginService.exe => No running process found
C:\ProgramData\IePluginServices => Moved successfully.
C:\Program Files (x86)\RocketTab\Client.exe => No running process found
C:\Program Files (x86)\RocketTab => Moved successfully.
C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe => No running process found
"C:\Program Files (x86)\Application Updater" => File/Directory not found.
C:\Program Files\005\cyycfhtzro64.exe => No running process found
C:\Program Files\005 => Moved successfully.
C:\Program Files\DnsSignal\barelysignal.exe => No running process found
C:\Program Files\DnsSignal\barelysignal.exe => No running process found
C:\Program Files\DnsSignal\barelysignal2.exe => No running process found
"C:\Program Files\DnsSignal" => File/Directory not found.
C:\Program Files (x86)\YTDownloader\YTDownloader.exe => No running process found
C:\Program Files (x86)\YTDownloader => Moved successfully.
C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe => No running process found
C:\Users\Jon Lowry\AppData\Local\PennyBee => Moved successfully.
C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe => No running process found
C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda => Moved successfully.
C:\Program Files (x86)\MYPC BACKUP\MyPC Backup.exe => No running process found
C:\Program Files (x86)\MyPC Backup => Moved successfully.
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe => No running process found
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe => No running process found
C:\Program Files (x86)\Common Files\Spigot => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => value deleted successfully.
C:\Program Files (x86)\Mobogenie => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\fst_us_178 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\YTDownloader => value deleted successfully.
"C:\Program Files (x86)\YTDownloader" => File/Directory not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SearchSettings => Value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\AvgUninstallURL => value deleted successfully.
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\Software\Microsoft\Windows\CurrentVersion\Run\\iLivid => value deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\iLivid" => File/Directory not found.
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\Software\Microsoft\Windows\CurrentVersion\Run\\YTDownloader => value deleted successfully.
"C:\Program Files (x86)\YTDownloader" => File/Directory not found.
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\Software\Microsoft\Windows\CurrentVersion\Run\\PeenyBee => Value not found.
"C:\Users\Jon Lowry\AppData\Local\PennyBee" => File/Directory not found.
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\Software\Microsoft\Windows\CurrentVersion\Run\\BRS => Value not found.
"C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk not found.
C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe not found.
HKLM\System\CurrentControlSet\Control\Session Manager\\BootExecute => Value was restored successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{05478A66-EDB6-4A22-A870-A5987F80A7DA} => Value not found.
"HKCR\CLSID\{05478A66-EDB6-4A22-A870-A5987F80A7DA}" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{05478A66-EDB6-4A22-A870-A5987F80A7DA} => Value not found.
"C:\Program Files (x86)\Vuze Remote Toolbar" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4C6AB4BD-96D7-4335-97AB-C4588C2427C2}" => Key deleted successfully.
"HKCR\CLSID\{4C6AB4BD-96D7-4335-97AB-C4588C2427C2}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4FDD993D-F656-4134-8E18-AFCCC84F8912}" => Key deleted successfully.
"HKCR\CLSID\{4FDD993D-F656-4134-8E18-AFCCC84F8912}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}" => Key deleted successfully.
"HKCR\CLSID\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CC865B26-C31D-4D23-B17B-96548EEF03F6}" => Key deleted successfully.
"HKCR\CLSID\{CC865B26-C31D-4D23-B17B-96548EEF03F6}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}" => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\F12BAB76371E486CBA05A93378B22524" => Key deleted successfully.
"HKCR\CLSID\F12BAB76371E486CBA05A93378B22524" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" => Key deleted successfully.
"HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}" => Key not found.
"HKCR\CLSID\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{39D8810E-1A9F-462E-8029-266DFD9E8606}" => Key not found.
"HKCR\CLSID\{39D8810E-1A9F-462E-8029-266DFD9E8606}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{446260B0-A943-4C26-AFBC-72E2A2E12756}" => Key deleted successfully.
"HKCR\CLSID\{446260B0-A943-4C26-AFBC-72E2A2E12756}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4C6AB4BD-96D7-4335-97AB-C4588C2427C2}" => Key deleted successfully.
"HKCR\CLSID\{4C6AB4BD-96D7-4335-97AB-C4588C2427C2}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully.
"HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}" => Key deleted successfully.
"HKCR\CLSID\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}" => Key deleted successfully.
"HKCR\CLSID\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}" => Key deleted successfully.
"HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CC865B26-C31D-4D23-B17B-96548EEF03F6}" => Key deleted successfully.
"HKCR\CLSID\{CC865B26-C31D-4D23-B17B-96548EEF03F6}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}" => Key not found.
"HKCR\CLSID\{11111111-1111-1111-1111-110311281150}" => Key not found.
C:\Program Files (x86)\Object Browser => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}" => Key deleted successfully.
"HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05478A66-EDB6-4A22-A870-A5987F80A7DA}" => Key not found.
"HKCR\Wow6432Node\CLSID\{05478A66-EDB6-4A22-A870-A5987F80A7DA}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}" => Key not found.
"HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311281150}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fbdff406-2c4c-5d35-8469-34bb67ea3353}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{fbdff406-2c4c-5d35-8469-34bb67ea3353}" => Key deleted successfully.
C:\Program Files\B021CBBD-E38E-4F8C-8E93-6624B0597A23 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{05478A66-EDB6-4A22-A870-A5987F80A7DA} => Value not found.
"HKCR\CLSID\{05478A66-EDB6-4A22-A870-A5987F80A7DA}" => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{05478A66-EDB6-4A22-A870-A5987F80A7DA} => Value not found.
"HKCR\Wow6432Node\CLSID\{05478A66-EDB6-4A22-A870-A5987F80A7DA}" => Key not found.
Winsock: Catalog5 entry 000000000001\\LibraryPath  was set successfully to %SystemRoot%\system32\NLAapi.dll
Winsock: Catalog5-x64 entry 000000000001\\LibraryPath  was set successfully to %SystemRoot%\system32\NLAapi.dll
Firefox Keyword.URL deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key Deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10" => Key not found.
C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4" => Key not found.
C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll not found.
C:\Program Files (x86)\globalUpdate => Moved successfully.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\user.js => Moved successfully.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\Mysearchdial.xml" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\searchplugins\yahoo_ff.xml" => File/Directory not found.
C:\Program Files (x86)\MOZILLA FIREFOX\searchplugins\scenicreflectionstb.xml => Moved successfully.
"C:\Program Files (x86)\mozilla firefox\searchplugins\scenicreflectionstb.xml" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected] => Moved successfully.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\[email protected]" => File/Directory not found.
HKLM\Software\Mozilla\Firefox\Extensions\\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD} => value deleted successfully.
"C:\Program Files\Updater By SweetPacks" => File/Directory not found.
HKCU\Software\Mozilla\FireFox\Extensions\\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2} => value deleted successfully.
"C:\Program Files (x86)\Wajam" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC} not found.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC}" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919} not found.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919}" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] not found.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] not found.
"C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected]" => File/Directory not found.
Chrome HomePage deleted successfully.
Chrome DefaultSuggestURL deleted successfully.
C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf => Moved successfully.
"C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf" => File/Directory not found.
"HKCU\SOFTWARE\Google\Chrome\Extensions\dnmlhhbehhdmajijfenoldcajelckpmn" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx" => File/Directory not found.
"HKCU\SOFTWARE\Google\Chrome\Extensions\kepfgejmidkmoiimkfdjocdjhbcpmlmg" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx" => File/Directory not found.
"HKCU\SOFTWARE\Google\Chrome\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx" => File/Directory not found.
"HKCU\SOFTWARE\Google\Chrome\Extensions\nemfjadlboooiffmcelkafilagddogim" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx" => File/Directory not found.
"HKCU\SOFTWARE\Google\Chrome\Extensions\njljkdinboobkmkihgcohanchjnjpgjk" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\CRE" => File/Directory not found.
"HKCU\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff" => Key deleted successfully.
C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx => Moved successfully.
"C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dfkfeemgjcjcednnaoemnjdiakmjbbbh" => Key deleted successfully.
"C:\ProgramData\ADDICT-THING\dfkfeemgjcjcednnaoemnjdiakmjbbbh.crx" => File/Directory not found.
"C:\ProgramData\ADDICT-THING" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dnmlhhbehhdmajijfenoldcajelckpmn" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\dnmlhhbehhdmajijfenoldcajelckpmn.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj" => Key Deleted successfully.
"C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx" => File/Directory not found.
"C:\Program Files (x86)\Common Files\Spigot" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj" => Key Deleted successfully.
"C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp" => Key deleted successfully.
C:\Users\Jon Lowry\AppData\Local\Wajam\Chrome\wajam.crx => Moved successfully.
C:\Users\Jon Lowry\AppData\Local\Wajam => Moved successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kepfgejmidkmoiimkfdjocdjhbcpmlmg" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\kepfgejmidkmoiimkfdjocdjhbcpmlmg.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk" => Key deleted successfully.
C:\Users\Jon Lowry\AppData\Local\Slick Savings\coupons.crx => Moved successfully.
C:\Users\Jon Lowry\AppData\Local\Slick Savings => Moved successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nemfjadlboooiffmcelkafilagddogim" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\njljkdinboobkmkihgcohanchjnjpgjk" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\npffmjkglbnioaoncpfmdbmehnbcldfh" => Key deleted successfully.
"C:\Program Files (x86)\LyricSing\130.crx" => File/Directory not found.
"C:\Program Files (x86)\LyricSing" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff" => Key deleted successfully.
"C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx" => File/Directory not found.
"C:\Users\JONLOW~1\AppData\Local\mysearchdial-speeddial.crx" => File/Directory not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp" => Key Deleted successfully.
"C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx" => File/Directory not found.
"C:\Program Files (x86)\Common Files\Spigot" => File/Directory not found.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
BackupStack => Service not found.
"C:\Program Files (x86)\MyPC Backup" => File/Directory not found.
cyycfhtzro64 => Service deleted successfully.
"C:\Program Files\005" => File/Directory not found.
DnsSignal Service => Service not found.
"C:\Program Files\DnsSignal" => File/Directory not found.
globalUpdate => Service not found.
globalUpdatem => Service not found.
"C:\Program Files (x86)\globalUpdate" => File/Directory not found.
IePluginServices => Service deleted successfully.
"C:\ProgramData\IePluginServices" => File/Directory not found.
sbmntr => Service not found.
"C:\Program Files (x86)\YTDownloader" => File/Directory not found.
{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64 => Service stopped successfully.
{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64 => Service deleted successfully.
C:\Windows\System32\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}Gw64.sys => Moved successfully.
catchme => Service deleted successfully.
"C:\ComboFix\catchme.sys" => File/Directory not found.
EagleX64 => Service deleted successfully.
"C:\Windows\system32\drivers\EagleX64.sys" => File/Directory not found.
esgiguard => Service deleted successfully.
"C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" => File/Directory not found.
SMUpdd => Service deleted successfully.
C:\Program Files\Common Files\Goobzo => Moved successfully.
ssnfd => Service deleted successfully.
TMAgent => Service deleted successfully.
C:\Users\Jon Lowry\Desktop\~$Garb for Faire.xlsx => Moved successfully.
"C:\Windows\Tasks\WSE_Astromenda.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job" => File/Directory not found.
"C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job" => File/Directory not found.
"C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job" => File/Directory not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
"C:\Windows\System32\Tasks\RocketTab Update Task" => File/Directory not found.
"C:\Windows\System32\Tasks\RocketTab" => File/Directory not found.
C:\Users\Public\Desktop\Vuze.lnk => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk => Moved successfully.
"C:\Program Files (x86)\RocketTab" => File/Directory not found.
C:\Program Files (x86)\Vuze => Moved successfully.
"C:\Windows\Tasks\WSE_Astromenda.job" => File/Directory not found.
"C:\Windows\System32\Tasks\WSE_Astromenda" => File/Directory not found.
C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda => Moved successfully.
"C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\PennyBee" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\ICSharpCode.net" => File/Directory not found.
"C:\Users\Jon Lowry\Downloads\vuze.exe" => File/Directory not found.
"C:\Users\Jon Lowry\Downloads\vuze_setup.exe" => File/Directory not found.
"C:\Program Files\DnsSignal" => File/Directory not found.
C:\Program Files (x86)\Bench => Moved successfully.
C:\ProgramData\PARETOLOGIC => Moved successfully.
"C:\ProgramData\DnsSignal" => File/Directory not found.
"C:\Program Files\DnsSignal" => File/Directory not found.
C:\ProgramData\2b2821382e352b272c272e2237302d_c => Moved successfully.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2" => File/Directory not found.
"C:\Windows\System32\Tasks\FFMPEGUpd" => File/Directory not found.
C:\ProgramData\Video Accelerator => Moved successfully.
"C:\Program Files (x86)\FFMPEG" => File/Directory not found.
"C:\Program Files (x86)\Object Browser" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job" => File/Directory not found.
"C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job" => File/Directory not found.
"C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job" => File/Directory not found.
"C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job" => File/Directory not found.
"C:\Users\Jon Lowry\Downloads\RegCureProSetup.exe" => File/Directory not found.
"C:\Users\Jon Lowry\Downloads\RegCureProSetup (1).exe" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7" => File/Directory not found.
"C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3" => File/Directory not found.
"C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA" => File/Directory not found.
"C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore" => File/Directory not found.
"C:\Windows\System32\Tasks\YTDownloaderUpd" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader" => File/Directory not found.
"C:\Program Files (x86)\YTDownloader" => File/Directory not found.
C:\Windows\System32\Tasks\SMupdate1 => Moved successfully.
C:\Windows\System32\Tasks\YTDownloader => Moved successfully.
"C:\Program Files (x86)\globalUpdate" => File/Directory not found.
"C:\Program Files (x86)\Object Browser" => File/Directory not found.
"C:\Windows\System32\Tasks\LaunchSignup" => File/Directory not found.
"C:\Users\Jon Lowry\Desktop\Sync Folder.lnk" => File/Directory not found.
"C:\Users\Jon Lowry\Desktop\MyPC Backup.lnk" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup" => File/Directory not found.
"C:\Program Files (x86)\MyPC Backup" => File/Directory not found.
C:\Users\Jon Lowry\Downloads\flash_player_14_plugin.exe => Moved successfully.
C:\Users\Jon Lowry\Downloads\Setup (2).exe => Moved successfully.
C:\Users\Jon Lowry\Desktop\~$TV Shows.xlsx => Moved successfully.
"C:\Program Files (x86)\Vuze Remote Toolbar" => File/Directory not found.
"C:\Program Files (x86)\Application Updater" => File/Directory not found.
C:\Users\Jon Lowry\jagex_cl_loginapplet_LIVE.dat => Moved successfully.
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE.dat => Moved successfully.
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE1.dat => Moved successfully.
C:\Users\Jon Lowry\jagex_cl_runescape_LIVE2.dat => Moved successfully.
C:\Users\Jon Lowry\jagex_runescape_preferences.dat => Moved successfully.
C:\Users\Jon Lowry\jagex_runescape_preferences2.dat => Moved successfully.
C:\Users\Jon Lowry\random.dat => Moved successfully.
"C:\Users\Jon Lowry\AppData\Local\Temp\GPUpd5418514B1.exe" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\Temp\i4jd8938456812418365063.exe" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{026F61A6-1E79-4C96-B077-DE27CC432D7D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{026F61A6-1E79-4C96-B077-DE27CC432D7D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserDefendert" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1A3CE392-422E-47DC-9602-789171E5B529}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A3CE392-422E-47DC-9602-789171E5B529}" => Key deleted successfully.
C:\Windows\System32\Tasks\Test TimeTrigger => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Test TimeTrigger" => Key deleted successfully.
"C:\Users\JONLOW~1\AppData\Local\Temp\Runner.exe" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35FBB754-7A87-43F1-B9A6-8446DFB6A6C2}" => Key not found.
C:\Windows\System32\Tasks\WSE_Astromenda not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_Astromenda" => Key not found.
"C:\Users\Jon Lowry\AppData\Roaming\WSE_Astromenda" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38212487-8142-46E0-8D4E-31B74C431837}" => Key not found.
C:\Windows\System32\Tasks\YTDownloader not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTDownloader" => Key deleted successfully.
"C:\Program Files (x86)\YTDownloader" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3DB4A2F8-0448-459B-A135-FEE9BBAD4ADB}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3" => Key not found.
"C:\Program Files (x86)\Object Browser" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4146542E-A9F0-49D6-9185-95A76109A52D}" => Key not found.
C:\Windows\System32\Tasks\YTDownloaderUpd not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTDownloaderUpd" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55ABD00A-4220-4F78-A0D7-AEC713771BC6}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5CCDBEE0-159F-4BF5-88B1-44DE44C0189A}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CCDBEE0-159F-4BF5-88B1-44DE44C0189A}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BackgroundContainer Startup Task" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{602F9486-75D6-415D-B537-F3BDBDE110A1}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{602F9486-75D6-415D-B537-F3BDBDE110A1}" => Key deleted successfully.
C:\Windows\System32\Tasks\ParetoLogic Update Version3_triggeronce => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ParetoLogic Update Version3_triggeronce" => Key deleted successfully.
"c:\program files (x86)\common files\paretologic" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74F1B5C4-50C4-49CF-925C-911287FD19DC}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{979BBFF1-A320-4D44-9572-43CCF72014E2}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97F04E5C-4950-428A-9DFC-CA53C569C462}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9E671BF1-E82A-48C6-BF41-2DD13DEFBDD2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9E671BF1-E82A-48C6-BF41-2DD13DEFBDD2}" => Key deleted successfully.
C:\Windows\System32\Tasks\Optimizer Pro Schedule => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimizer Pro Schedule" => Key deleted successfully.
"C:\Program Files (x86)\Optimizer Pro" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A1352A50-436B-4071-B228-0B8E2D79784F}" => Key not found.
C:\Windows\System32\Tasks\RocketTab not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RocketTab" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A669AEF8-A05B-44A1-9833-CD4A0CF0501C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A669AEF8-A05B-44A1-9833-CD4A0CF0501C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7D18C7A-90C7-4E57-9DEB-730834176E5D}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A8C40EB6-7527-4B16-8F5C-BE889C95886A}" => Key not found.
C:\Windows\System32\Tasks\SMupdate1 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SMupdate1" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC2629A3-16AD-4E7D-9589-FF4CF978C9CF}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF3B2CB2-AC8C-4F8C-B436-468B7780F37A}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF3B2CB2-AC8C-4F8C-B436-468B7780F37A}" => Key deleted successfully.
C:\Windows\System32\Tasks\TidyNetwork Update => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TidyNetwork Update" => Key deleted successfully.
"C:\Users\Jon Lowry\AppData\Local\TidyNetwork.com" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C97C403B-723B-47B3-8A75-9A0D5FAA93E1}" => Key not found.
C:\Windows\System32\Tasks\RocketTab Update Task not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RocketTab Update Task" => Key not found.
"C:\Program Files (x86)\RocketTab" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8A78881-603A-4045-A49C-70FFD91033DA}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E7F27CA2-7095-46A3-B555-CA1986F8895D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7F27CA2-7095-46A3-B555-CA1986F8895D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoforFilesUpdate" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E8CDB12B-32AD-4023-9476-14E9C4D0CED7}" => Key not found.
C:\Windows\System32\Tasks\FFMPEGUpd not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FFMPEGUpd" => Key not found.
"C:\Program Files (x86)\FFMPEG" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB6FA16A-998E-4019-8C5E-BCABA47F746A}" => Key not found.
C:\Windows\System32\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5AD7045-11F7-42B6-B4E3-BC8CFE550AF1}" => Key not found.
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key not found.
"C:\Program Files (x86)\globalUpdate" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F97BD074-2550-4AF3-90DA-6A2CBDF39C03}" => Key not found.
C:\Windows\System32\Tasks\LaunchSignup not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchSignup" => Key not found.
"C:\Program Files (x86)\MyPC Backup" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FEC81997-A122-47DA-AA7B-828690A77499}" => Key not found.
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-1.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-11.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-2.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-3.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-4.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-5_user.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-6.job not found.
C:\Windows\Tasks\a43d8f61-a231-4945-aae1-b5af94ff9ff9-7.job not found.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job not found.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job not found.
C:\Windows\Tasks\ParetoLogic Update Version3_triggeronce.job => Moved successfully.
C:\Windows\Tasks\WSE_Astromenda.job not found.
"C:\Users\JONLOW~1\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE" => File/Directory not found.
"C:\Program Files (x86)\RocketTab\Client.exe" => File/Directory not found.
"C:\Program Files\DnsSignal\dnssignal.dll" => File/Directory not found.
"C:\Program Files\005\cyycfhtzro64.exe" => File/Directory not found.
"C:\Program Files\DnsSignal\barelysignal.exe" => File/Directory not found.
"C:\Program Files\DnsSignal\barelysignal2.exe" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\PennyBee\PennyBeeW.exe" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\brs.exe" => File/Directory not found.
"C:\Program Files (x86)\MyPC Backup\GetText.dll" => File/Directory not found.
"C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll" => File/Directory not found.
"C:\Program Files\DnsSignal\dnssignal2.dll" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\PennyBee\DealplyInstallerHelper.dll" => File/Directory not found.
"C:\Users\Jon Lowry\AppData\Local\WSE_Astromenda\BRS\sqlite3.dll" => File/Directory not found.
C:\ProgramData\Temp => ":0B4227B4" ADS removed successfully.
C:\ProgramData\Temp => ":373E1720" ADS removed successfully.
C:\ProgramData\Temp => ":BF3D62E7" ADS removed successfully.
EmptyTemp: => Removed 5.5 GB temporary data.
 
 
The system needed a reboot. 
 
==== End of Fixlog ====
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Jon Lowry (administrator) on CARLAGROETZMEIE on 18-09-2014 13:11:49
Running from C:\Users\Jon Lowry\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Aventail Corporation) C:\Windows\System32\ngvpnmgr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CinemaNow, Inc.) C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
(Alcatel-Lucent) C:\Program Files\Common Files\Motive\McciCMService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Dropbox, Inc.) C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6486120 2011-02-22] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation)
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1230704 2011-03-21] ()
HKLM-x32\...\Run: [CloneCDTray] => C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-29] (SlySoft, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [577408 2012-02-15] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [BService] => C:\Program Files (x86)\Bench\BService\1.1\bservice.exe
HKLM-x32\...\Run: [BService64] => C:\Program Files (x86)\Bench\BService\1.1\bservice64.exe
HKLM-x32\...\Run: [Wd] => C:\Program Files (x86)\Bench\Wd\wd.exe
HKLM-x32\...\Run: [Bench Settings Cleaner] => C:\Program Files (x86)\Bench\Proxy\cl.exe
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-08-19] (Hewlett-Packard)
HKLM-x32\...\RunOnce: [Browser Warden-repairJob] => wscript.exe "C:\Users\Jon Lowry\AppData\Local\Browser Warden\repair.js" "Browser Warden-repairJob"
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-538650268-2924358156-1730836174-1000\...\Run: [Facebook Update] => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-08-10] (Facebook Inc.)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [224728 2014-09-02] (Client Connect LTD)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [181720 2014-09-02] (Client Connect LTD)
Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trovi.com...B3A5CF4F7&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Browser Warden BHO -> {2C09954F-CDA8-4BD1-8794-1D543E050378} -> C:\Program Files (x86)\Browser Warden\FrameworkBHO64.dll ()
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Browser Warden BHO -> {2C09954F-CDA8-4BD1-8794-1D543E050378} -> C:\Program Files (x86)\Browser Warden\FrameworkBHO.dll ()
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
 
FireFox:
========
FF ProfilePath: C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jon Lowry\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jon Lowry\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Jon Lowry\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\Extensions\{79994657-8246-64F3-EABE-44FD7B5D43AA} [2014-09-01]
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2011-01-26]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011-06-04]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011-06-04]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-24]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{2A47DBFD-567F-4159-AD6A-B0D9CF6CCDFC} [Not Found]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\{8f02605d-be4e-41ba-bd00-c39a59c46919} [Not Found]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [Not Found]
FF Extension: No Name - C:\Users\Jon Lowry\AppData\Roaming\Mozilla\Firefox\Profiles\8mzbhq3r.default\extensions\[email protected] [Not Found]
 
Chrome: 
=======
CHR RestoreOnStartup: Default -> "hxxp://www.google.com/"
CHR DefaultSearchKeyword: Default -> yahoo.com search
CHR DefaultSearchProvider: Default -> Yahoo
CHR DefaultSearchURL: Default -> https://search.yahoo...p={searchTerms}
CHR Profile: C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-08-21]
CHR Extension: (YouTube) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-21]
CHR Extension: (Object Browser) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\enebomhlllfaccbelnjhfgblnalofhch [2014-09-16]
CHR Extension: (Browser Warden) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk [2014-09-01]
CHR Extension: (Google Wallet) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Jon Lowry\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-21]
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-07]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-26]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-07]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-26] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [106488 2014-09-03] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2998232 2014-09-02] (Client Connect LTD)
S3 EWSASERV; C:\Program Files (x86)\Elcomsoft Password Recovery\Elcomsoft Wireless Security Auditor\ewsaserv64.exe [82224 2011-04-16] (ElcomSoft Co. Ltd.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 McciCMService; C:\Program Files (x86)\Common Files\Motive\McciCMService.exe [319488 2010-01-28] (Alcatel-Lucent) [File not signed]
R2 McciCMService64; C:\Program Files\Common Files\Motive\McciCMService.exe [517632 2010-02-02] (Alcatel-Lucent) [File not signed]
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NgVpnMgr; C:\Windows\system32\ngvpnmgr.exe [534824 2013-04-12] (Aventail Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S4 RemoteAccess; C:\Windows\System32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S4 RemoteAccess; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-13] (Microsoft Corporation)
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [File not signed]
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S1 ASPI32; C:\Windows\SysWow64\Drivers\ASPI32.sys [25244 1999-09-10] (Adaptec) [File not signed]
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-26] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-09-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-26] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [448400 2014-09-03] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-26] ()
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-15] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-15] (SlySoft, Inc.)
S3 Generalusbserialser20675; C:\Windows\System32\DRIVERS\CT_U_USBSER.sys [122368 2011-05-09] (Incorporated)
S2 MCSTRM; No ImagePath
S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2010-01-28] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2010-01-28] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-07-24] (NetFilterSDK.com)
S3 NgFilter; C:\Windows\System32\DRIVERS\ngfilter.sys [26184 2013-04-12] (Aventail Corporation)
R3 NgLog; C:\Windows\System32\DRIVERS\nglog.sys [31304 2013-04-12] (Aventail Corporation)
R3 NgVpn; C:\Windows\System32\DRIVERS\ngvpn.sys [103496 2013-04-12] (Aventail Corporation)
R3 NgWfp; C:\Windows\System32\DRIVERS\ngwfp.sys [28744 2013-04-12] (Aventail Corporation)
R3 NMgamingmsFltr; C:\Windows\System32\drivers\NMgamingms.sys [11264 2009-07-24] (Primax Ltd)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-08-20] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-08-20] ()
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-22] (Realtek Semiconductor Corp.) [File not signed]
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]
S1 SydexFDD; system32\drives\sydexfdd.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-09-18 13:27 - 2014-09-18 13:26 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Desktop\FRST64.exe
2014-09-18 13:26 - 2014-09-18 13:26 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Downloads\FRST64.exe
2014-09-18 13:11 - 2014-09-18 13:13 - 00026536 _____ () C:\Users\Jon Lowry\Desktop\FRST.txt
2014-09-17 11:32 - 2014-09-17 11:32 - 00006359 _____ () C:\Users\Jon Lowry\Desktop\Kindle Cloud Reader.htm
2014-09-17 11:32 - 2014-09-17 11:32 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Kindle Cloud Reader_files
2014-09-17 11:02 - 2014-09-17 11:02 - 00001992 _____ () C:\Users\Public\Desktop\avast! SafeZone.lnk
2014-09-17 10:59 - 2014-09-18 13:19 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-09-17 10:54 - 2014-09-17 12:07 - 00000000 ____D () C:\Program Files (x86)\SearchSnacks
2014-09-17 10:53 - 2014-09-17 10:53 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\SearchProtect
2014-09-16 07:56 - 2014-09-16 07:52 - 00090769 _____ () C:\Users\Jon Lowry\Desktop\FRST old.txt
2014-09-16 07:53 - 2014-09-16 07:52 - 00072878 _____ () C:\Users\Jon Lowry\Desktop\Addition old.txt
2014-09-13 12:31 - 2014-09-13 12:31 - 00172572 _____ () C:\Users\Jon Lowry\Desktop\OTL.Txt
2014-09-13 12:03 - 2014-09-13 12:04 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\eBay
2014-09-11 11:01 - 2014-09-17 12:07 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-11 11:01 - 2014-09-17 12:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-09-10 00:14 - 2014-09-13 12:02 - 00000503 _____ () C:\Users\Jon Lowry\.swfinfo
2014-09-09 23:55 - 2014-09-09 23:55 - 00013074 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E10_HDTV_x264-KILLERS.10835767.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00012314 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E11_HDTV_x264-KILLERS.10907765.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00011814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E12_HDTV_x264-KILLERS.10979033.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_HDTV_x264-KILLERS.10527705.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E04_HDTV_x264-KILLERS.10523457.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013485 _____ () C:\Users\Jon Lowry\Downloads\7079A914A2555E676EF2F04A3596979A8E2FCC12.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013281 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E08_REPACK_HDTV_x264-KILLERS.10723613.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013114 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E06_HDTV_x264-KILLERS.10626989.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012974 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E07_HDTV_x264-KILLERS.10665999.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012829 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E10_HDTV_x264-ASAP.8842947.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012399 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_REAL_HDTV_x264-KILLERS.10571218.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012332 _____ () C:\Users\Jon Lowry\Downloads\Graceland.S01E09.HDTV.x264-2HD.[eztv].torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012010 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E02_HDTV_x264-LOL.10391260.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011808 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E12_HDTV_x264-2HD.8922957.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011150 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E03_HDTV_x264-LOL.10429090.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010750 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E01_HDTV_x264-LOL.10342060.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010409 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E09_HDTV_x264-LOL.10764111.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00010728 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E08_HDTV_x264-2HD.8803956.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00010708 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E07_HDTV_x264-2HD.8742467.TPB.torrent
2014-09-09 23:50 - 2014-09-09 23:51 - 00013188 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E06_HDTV_x264-2HD.8715128.TPB.torrent
2014-09-09 08:20 - 2014-09-10 21:41 - 00705508 _____ () C:\Users\Jon Lowry\Desktop\Equestrian Emporium.xlsx
2014-09-06 13:18 - 2014-09-06 12:57 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Woodworking Plans
2014-09-04 12:30 - 2014-09-04 12:30 - 04147322 _____ () C:\Users\Jon Lowry\Downloads\Attachments_201494.zip
2014-09-04 12:07 - 2014-09-04 12:07 - 00032102 _____ () C:\Users\Jon Lowry\Downloads\character_rope5.zip
2014-09-04 12:06 - 2014-09-04 12:06 - 00066156 _____ () C:\Users\Jon Lowry\Downloads\lechefrene_lcr-cowboys-rest.zip
2014-09-04 12:05 - 2014-09-04 12:05 - 00089677 _____ () C:\Users\Jon Lowry\Downloads\last-soundtrack_bleeding-cowboys.zip
2014-09-04 12:01 - 2014-09-04 12:01 - 00093452 _____ () C:\Users\Jon Lowry\Downloads\1-shelley-volante_[allfont.net].ttf
2014-09-04 11:46 - 2014-09-04 11:46 - 00616582 _____ () C:\Users\Jon Lowry\Downloads\texas_ranger.zip
2014-09-04 11:46 - 2014-09-04 11:46 - 00012084 _____ () C:\Users\Jon Lowry\Downloads\beans.zip
2014-09-04 11:45 - 2014-09-04 11:45 - 00035005 _____ () C:\Users\Jon Lowry\Downloads\cowboys.zip
2014-09-04 11:44 - 2014-09-04 11:44 - 00031044 _____ () C:\Users\Jon Lowry\Downloads\rancho.zip
2014-09-04 11:43 - 2014-09-04 11:44 - 01296003 _____ () C:\Users\Jon Lowry\Downloads\narnfont.zip
2014-09-04 11:42 - 2014-09-04 11:42 - 00200417 _____ () C:\Users\Jon Lowry\Downloads\burnstown-dam.zip
2014-09-03 22:30 - 2014-09-17 11:02 - 00001932 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-09-03 22:28 - 2014-09-03 22:28 - 00448400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-09-03 22:28 - 2014-09-03 22:28 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-09-03 22:22 - 2014-09-18 13:05 - 00023236 _____ () C:\Windows\PFRO.log
2014-09-03 12:52 - 2014-09-03 12:52 - 00013680 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Freed+mp3+chapterized+by+veraprima.torrent
2014-09-03 12:51 - 2014-09-03 12:51 - 00012717 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Darker+mp3+chapteized+by+veraprima.torrent
2014-09-03 12:50 - 2014-09-03 12:50 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima (1).torrent
2014-09-03 12:45 - 2014-09-03 12:45 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima.torrent
2014-09-02 21:36 - 2014-09-02 21:36 - 01265384 _____ () C:\Users\Jon Lowry\Downloads\Setup (1).exe
2014-09-02 11:44 - 2014-09-18 13:05 - 00002016 _____ () C:\Windows\setupact.log
2014-09-02 11:44 - 2014-09-02 11:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-01 23:32 - 2014-09-07 23:49 - 00000003 _____ () C:\Users\Jon Lowry\AppData\Local\proxy.log
2014-09-01 23:29 - 2014-09-17 12:07 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Warden
2014-09-01 23:28 - 2014-09-17 12:07 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\Browser Warden
2014-09-01 23:28 - 2014-09-17 12:07 - 00000000 ____D () C:\Program Files (x86)\Browser Warden
2014-09-01 23:28 - 2014-09-17 11:48 - 00000352 _____ () C:\Windows\Tasks\bench-S-1-5-21-538650268-2924358156-1730836174-1000.job
2014-09-01 23:28 - 2014-09-08 00:34 - 00000352 _____ () C:\Windows\Tasks\bench-sys.job
2014-09-01 23:28 - 2014-09-01 23:32 - 00003234 _____ () C:\Windows\System32\Tasks\bench-S-1-5-21-538650268-2924358156-1730836174-1000
2014-09-01 23:28 - 2014-09-01 23:28 - 00003248 _____ () C:\Windows\System32\Tasks\bench-sys
2014-08-29 21:13 - 2014-08-29 21:59 - 00009168 _____ () C:\Users\Jon Lowry\Desktop\TV Shows.xlsx
2014-08-29 13:36 - 2014-09-16 07:52 - 00016165 _____ () C:\Users\Jon Lowry\Desktop\Garb for Faire.xlsx
2014-08-29 13:33 - 2014-08-29 13:33 - 00008339 _____ () C:\Users\Jon Lowry\Downloads\The+Lego+Movie+%282014%29+720p+BrRip+x264+-+YIFY.torrent
2014-08-29 08:29 - 2014-08-29 08:29 - 00115954 _____ () C:\Users\Jon Lowry\Desktop\Disney Recipes.htm
2014-08-29 08:26 - 2014-08-29 08:29 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Disney Recipes_files
2014-08-29 08:24 - 2014-08-29 08:24 - 00538252 _____ () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home.htm
2014-08-29 08:24 - 2014-08-29 08:24 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home_files
2014-08-29 08:19 - 2014-09-17 12:07 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\The Disney Diner_files
2014-08-27 13:34 - 2014-09-17 12:07 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-08-27 13:15 - 2014-09-05 15:03 - 00011768 _____ () C:\Users\Jon Lowry\Desktop\Utilities.xlsx
2014-08-27 13:09 - 2014-08-22 19:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 13:09 - 2014-08-22 18:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 13:09 - 2014-08-22 17:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-26 13:30 - 2014-08-27 13:18 - 00012260 _____ () C:\Users\Jon Lowry\Desktop\2014-2015 Glass Eye Pub Points.xlsx
2014-08-26 13:16 - 2014-08-26 13:16 - 00049664 _____ () C:\Users\Jon Lowry\Desktop\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:14 - 2014-08-26 13:15 - 00049664 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:12 - 2014-08-26 13:12 - 00037376 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown.xls
2014-08-26 11:34 - 2014-09-17 12:07 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Aquarian Star Charms_files
2014-08-26 10:38 - 2014-09-17 12:07 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Words with Friends Cheat - Words with Friends Helper_files
2014-08-19 14:39 - 2014-08-26 13:21 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Bed In A Box
2014-08-19 14:21 - 2014-08-19 14:21 - 02054186 _____ () C:\Users\Jon Lowry\Desktop\Kami  8-19-14.htm
2014-08-19 14:21 - 2014-08-19 14:21 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Kami  8-19-14_files
2014-08-19 14:15 - 2014-06-30 15:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-19 14:15 - 2014-06-30 15:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-19 14:15 - 2014-03-09 14:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-19 14:15 - 2014-03-09 14:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-19 14:15 - 2014-03-09 14:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-19 14:15 - 2014-03-09 14:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-19 14:14 - 2014-06-05 23:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-19 14:14 - 2014-06-05 23:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-19 09:27 - 2014-07-15 19:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-09-18 13:46 - 2013-12-23 12:04 - 00000000 ____D () C:\Program Files (x86)\GRETECH
2014-09-18 13:27 - 2009-07-13 20:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-18 13:26 - 2014-09-18 13:27 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Desktop\FRST64.exe
2014-09-18 13:26 - 2014-09-18 13:26 - 02105856 _____ (Farbar) C:\Users\Jon Lowry\Downloads\FRST64.exe
2014-09-18 13:25 - 2014-07-24 15:16 - 00070144 _____ () C:\Windows\SysWOW64\tasks.dll
2014-09-18 13:24 - 2009-07-13 21:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-18 13:24 - 2009-07-13 21:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-18 13:19 - 2014-09-17 10:59 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-09-18 13:13 - 2014-09-18 13:11 - 00026536 _____ () C:\Users\Jon Lowry\Desktop\FRST.txt
2014-09-18 13:13 - 2013-01-15 06:19 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-18 13:13 - 2011-06-10 18:33 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-18 13:12 - 2013-12-06 15:55 - 01380230 _____ () C:\Windows\WindowsUpdate.log
2014-09-18 13:11 - 2013-12-10 20:06 - 00000000 ____D () C:\FRST
2014-09-18 13:11 - 2013-09-06 15:41 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-18 13:11 - 2013-04-23 21:07 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Spotify
2014-09-18 13:09 - 2013-09-06 15:42 - 00000000 ___RD () C:\Users\Jon Lowry\Dropbox
2014-09-18 13:09 - 2013-09-05 01:05 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Dropbox
2014-09-18 13:08 - 2014-04-24 18:33 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-09-18 13:06 - 2012-08-25 12:42 - 00000008 __RSH () C:\Users\Jon Lowry\ntuser.pol
2014-09-18 13:06 - 2011-06-03 15:10 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-09-18 13:06 - 2011-01-23 03:18 - 00000000 ____D () C:\Users\Jon Lowry
2014-09-18 13:05 - 2014-09-03 22:22 - 00023236 _____ () C:\Windows\PFRO.log
2014-09-18 13:05 - 2014-09-02 11:44 - 00002016 _____ () C:\Windows\setupact.log
2014-09-18 13:05 - 2009-07-13 22:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-17 12:26 - 2011-07-10 00:42 - 00000000 ____D () C:\ProgramData\Recovery
2014-09-17 12:07 - 2014-09-17 10:54 - 00000000 ____D () C:\Program Files (x86)\SearchSnacks
2014-09-17 12:07 - 2014-09-11 11:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-17 12:07 - 2014-09-11 11:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-09-17 12:07 - 2014-09-01 23:29 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Warden
2014-09-17 12:07 - 2014-09-01 23:28 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\Browser Warden
2014-09-17 12:07 - 2014-09-01 23:28 - 00000000 ____D () C:\Program Files (x86)\Browser Warden
2014-09-17 12:07 - 2014-08-29 08:19 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\The Disney Diner_files
2014-09-17 12:07 - 2014-08-27 13:34 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-09-17 12:07 - 2014-08-26 11:34 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Aquarian Star Charms_files
2014-09-17 12:07 - 2014-08-26 10:38 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Words with Friends Cheat - Words with Friends Helper_files
2014-09-17 12:07 - 2014-05-11 00:17 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-17 12:07 - 2013-09-26 18:42 - 00000000 ____D () C:\Windows\AutoKMS
2014-09-17 12:07 - 2013-06-10 04:25 - 00000000 ____D () C:\ProgramData\Aventail
2014-09-17 12:07 - 2013-05-18 22:18 - 00000000 ____D () C:\Users\Mcx1-WOLFLING.WOLFLING
2014-09-17 12:07 - 2013-01-15 06:19 - 00000000 ____D () C:\Windows\system32\Macromed
2014-09-17 12:07 - 2011-03-28 15:36 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\Azureus
2014-09-17 12:07 - 2011-01-25 12:48 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-09-17 12:07 - 2011-01-24 12:24 - 00000000 ____D () C:\Program Files (x86)\HP
2014-09-17 12:07 - 2010-12-27 15:26 - 00000000 ____D () C:\ProgramData\CinemaNow
2014-09-17 12:07 - 2010-07-15 12:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-09-17 12:07 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-09-17 12:07 - 2009-07-13 20:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-09-17 12:06 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\registration
2014-09-17 11:48 - 2014-09-01 23:28 - 00000352 _____ () C:\Windows\Tasks\bench-S-1-5-21-538650268-2924358156-1730836174-1000.job
2014-09-17 11:32 - 2014-09-17 11:32 - 00006359 _____ () C:\Users\Jon Lowry\Desktop\Kindle Cloud Reader.htm
2014-09-17 11:32 - 2014-09-17 11:32 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Kindle Cloud Reader_files
2014-09-17 11:27 - 2012-08-10 14:22 - 00000944 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000UA.job
2014-09-17 11:26 - 2013-06-07 12:46 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\HpUpdate
2014-09-17 11:13 - 2013-01-15 06:19 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-17 11:13 - 2013-01-15 06:19 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-17 11:13 - 2011-05-18 05:22 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-17 11:02 - 2014-09-17 11:02 - 00001992 _____ () C:\Users\Public\Desktop\avast! SafeZone.lnk
2014-09-17 11:02 - 2014-09-03 22:30 - 00001932 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-09-17 11:02 - 2014-04-24 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-09-17 10:55 - 2014-07-03 23:26 - 00000232 _____ () C:\Users\Jon Lowry\BullseyeCoverageError.txt
2014-09-17 10:54 - 2011-11-22 07:06 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-09-17 10:54 - 2011-02-14 17:15 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-09-17 10:53 - 2014-09-17 10:53 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\SearchProtect
2014-09-17 10:53 - 2014-02-10 11:09 - 00000348 _____ () C:\Windows\Tasks\HPCeeScheduleForJon Lowry.job
2014-09-17 10:53 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-16 07:52 - 2014-09-16 07:56 - 00090769 _____ () C:\Users\Jon Lowry\Desktop\FRST old.txt
2014-09-16 07:52 - 2014-09-16 07:53 - 00072878 _____ () C:\Users\Jon Lowry\Desktop\Addition old.txt
2014-09-16 07:52 - 2014-08-29 13:36 - 00016165 _____ () C:\Users\Jon Lowry\Desktop\Garb for Faire.xlsx
2014-09-16 07:51 - 2013-04-23 21:07 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Local\Spotify
2014-09-13 12:31 - 2014-09-13 12:31 - 00172572 _____ () C:\Users\Jon Lowry\Desktop\OTL.Txt
2014-09-13 12:07 - 2011-01-24 12:22 - 00027386 _____ () C:\ProgramData\hpzinstall.log
2014-09-13 12:04 - 2014-09-13 12:03 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\eBay
2014-09-13 12:04 - 2014-05-03 17:11 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Horse stuff
2014-09-13 12:02 - 2014-09-10 00:14 - 00000503 _____ () C:\Users\Jon Lowry\.swfinfo
2014-09-10 21:41 - 2014-09-09 08:20 - 00705508 _____ () C:\Users\Jon Lowry\Desktop\Equestrian Emporium.xlsx
2014-09-09 23:55 - 2014-09-09 23:55 - 00013074 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E10_HDTV_x264-KILLERS.10835767.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00012314 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E11_HDTV_x264-KILLERS.10907765.TPB.torrent
2014-09-09 23:55 - 2014-09-09 23:55 - 00011814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E12_HDTV_x264-KILLERS.10979033.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_HDTV_x264-KILLERS.10527705.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013814 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E04_HDTV_x264-KILLERS.10523457.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013485 _____ () C:\Users\Jon Lowry\Downloads\7079A914A2555E676EF2F04A3596979A8E2FCC12.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013281 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E08_REPACK_HDTV_x264-KILLERS.10723613.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00013114 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E06_HDTV_x264-KILLERS.10626989.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012974 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E07_HDTV_x264-KILLERS.10665999.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012829 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E10_HDTV_x264-ASAP.8842947.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012399 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E05_REAL_HDTV_x264-KILLERS.10571218.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012332 _____ () C:\Users\Jon Lowry\Downloads\Graceland.S01E09.HDTV.x264-2HD.[eztv].torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00012010 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E02_HDTV_x264-LOL.10391260.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011808 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E12_HDTV_x264-2HD.8922957.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00011150 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E03_HDTV_x264-LOL.10429090.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010750 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E01_HDTV_x264-LOL.10342060.TPB.torrent
2014-09-09 23:54 - 2014-09-09 23:54 - 00010409 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S02E09_HDTV_x264-LOL.10764111.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00010728 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E08_HDTV_x264-2HD.8803956.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:51 - 00010708 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E07_HDTV_x264-2HD.8742467.TPB.torrent
2014-09-09 23:51 - 2014-09-09 23:50 - 00013188 _____ () C:\Users\Jon Lowry\Downloads\Graceland_S01E06_HDTV_x264-2HD.8715128.TPB.torrent
2014-09-08 23:37 - 2010-12-27 15:16 - 00000000 ____D () C:\Windows\Hewlett-Packard
2014-09-08 22:18 - 2014-02-10 11:09 - 00003210 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForJon Lowry
2014-09-08 00:34 - 2014-09-01 23:28 - 00000352 _____ () C:\Windows\Tasks\bench-sys.job
2014-09-07 23:49 - 2014-09-01 23:32 - 00000003 _____ () C:\Users\Jon Lowry\AppData\Local\proxy.log
2014-09-06 13:27 - 2009-07-13 22:13 - 00006710 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-06 13:26 - 2010-07-15 13:24 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-09-06 12:58 - 2012-03-01 14:57 - 00000000 ____D () C:\Users\Jon Lowry\Documents\Calibre Library
2014-09-06 12:57 - 2014-09-06 13:18 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Woodworking Plans
2014-09-06 11:44 - 2013-11-01 23:17 - 00000000 ____D () C:\Users\Jon Lowry\Documents\Outlook Files
2014-09-05 15:03 - 2014-08-27 13:15 - 00011768 _____ () C:\Users\Jon Lowry\Desktop\Utilities.xlsx
2014-09-04 12:30 - 2014-09-04 12:30 - 04147322 _____ () C:\Users\Jon Lowry\Downloads\Attachments_201494.zip
2014-09-04 12:07 - 2014-09-04 12:07 - 00032102 _____ () C:\Users\Jon Lowry\Downloads\character_rope5.zip
2014-09-04 12:06 - 2014-09-04 12:06 - 00066156 _____ () C:\Users\Jon Lowry\Downloads\lechefrene_lcr-cowboys-rest.zip
2014-09-04 12:05 - 2014-09-04 12:05 - 00089677 _____ () C:\Users\Jon Lowry\Downloads\last-soundtrack_bleeding-cowboys.zip
2014-09-04 12:01 - 2014-09-04 12:01 - 00093452 _____ () C:\Users\Jon Lowry\Downloads\1-shelley-volante_[allfont.net].ttf
2014-09-04 11:46 - 2014-09-04 11:46 - 00616582 _____ () C:\Users\Jon Lowry\Downloads\texas_ranger.zip
2014-09-04 11:46 - 2014-09-04 11:46 - 00012084 _____ () C:\Users\Jon Lowry\Downloads\beans.zip
2014-09-04 11:45 - 2014-09-04 11:45 - 00035005 _____ () C:\Users\Jon Lowry\Downloads\cowboys.zip
2014-09-04 11:44 - 2014-09-04 11:44 - 00031044 _____ () C:\Users\Jon Lowry\Downloads\rancho.zip
2014-09-04 11:44 - 2014-09-04 11:43 - 01296003 _____ () C:\Users\Jon Lowry\Downloads\narnfont.zip
2014-09-04 11:42 - 2014-09-04 11:42 - 00200417 _____ () C:\Users\Jon Lowry\Downloads\burnstown-dam.zip
2014-09-03 22:28 - 2014-09-03 22:28 - 00448400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-09-03 22:28 - 2014-09-03 22:28 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-09-03 22:25 - 2009-07-13 21:45 - 05019496 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-03 12:52 - 2014-09-03 12:52 - 00013680 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Freed+mp3+chapterized+by+veraprima.torrent
2014-09-03 12:51 - 2014-09-03 12:51 - 00012717 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+Darker+mp3+chapteized+by+veraprima.torrent
2014-09-03 12:50 - 2014-09-03 12:50 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima (1).torrent
2014-09-03 12:45 - 2014-09-03 12:45 - 00012899 _____ () C:\Users\Jon Lowry\Downloads\Fifty+Shades+of+Grey+mp3+chapterized+by+veraprima.torrent
2014-09-02 21:36 - 2014-09-02 21:36 - 01265384 _____ () C:\Users\Jon Lowry\Downloads\Setup (1).exe
2014-09-02 11:44 - 2014-09-02 11:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-01 23:32 - 2014-09-01 23:28 - 00003234 _____ () C:\Windows\System32\Tasks\bench-S-1-5-21-538650268-2924358156-1730836174-1000
2014-09-01 23:28 - 2014-09-01 23:28 - 00003248 _____ () C:\Windows\System32\Tasks\bench-sys
2014-08-29 21:59 - 2014-08-29 21:13 - 00009168 _____ () C:\Users\Jon Lowry\Desktop\TV Shows.xlsx
2014-08-29 13:33 - 2014-08-29 13:33 - 00008339 _____ () C:\Users\Jon Lowry\Downloads\The+Lego+Movie+%282014%29+720p+BrRip+x264+-+YIFY.torrent
2014-08-29 08:29 - 2014-08-29 08:29 - 00115954 _____ () C:\Users\Jon Lowry\Desktop\Disney Recipes.htm
2014-08-29 08:29 - 2014-08-29 08:26 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Disney Recipes_files
2014-08-29 08:24 - 2014-08-29 08:24 - 00538252 _____ () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home.htm
2014-08-29 08:24 - 2014-08-29 08:24 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\21 Disney Parks Recipes You Can Make At Home_files
2014-08-28 14:27 - 2012-08-10 14:22 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000Core.job
2014-08-28 14:07 - 2013-04-13 14:35 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Carla's stuff
2014-08-28 14:06 - 2013-02-02 11:43 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Books - pdf epub mobi
2014-08-27 13:18 - 2014-08-26 13:30 - 00012260 _____ () C:\Users\Jon Lowry\Desktop\2014-2015 Glass Eye Pub Points.xlsx
2014-08-26 13:21 - 2014-08-19 14:39 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Bed In A Box
2014-08-26 13:16 - 2014-08-26 13:16 - 00049664 _____ () C:\Users\Jon Lowry\Desktop\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:15 - 2014-08-26 13:14 - 00049664 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown (1).xls
2014-08-26 13:12 - 2014-08-26 13:12 - 00037376 _____ () C:\Users\Jon Lowry\Downloads\GEP 2014 Dues breakdown.xls
2014-08-25 06:53 - 2011-08-20 17:55 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-22 19:07 - 2014-08-27 13:09 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-22 18:45 - 2014-08-27 13:09 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-22 17:59 - 2014-08-27 13:09 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-19 14:56 - 2014-08-02 00:17 - 00000000 ____D () C:\Users\Jon Lowry\AppData\Roaming\RIFT
2014-08-19 14:41 - 2011-07-05 01:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-19 14:40 - 2013-09-26 18:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-08-19 14:21 - 2014-08-19 14:21 - 02054186 _____ () C:\Users\Jon Lowry\Desktop\Kami  8-19-14.htm
2014-08-19 14:21 - 2014-08-19 14:21 - 00000000 ____D () C:\Users\Jon Lowry\Desktop\Kami  8-19-14_files
2014-08-19 14:06 - 2014-07-25 14:04 - 00000000 ____D () C:\ProgramData\374311380
2014-08-19 14:05 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
 
Some content of TEMP:
====================
C:\Users\Jon Lowry\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplhg8ei.dll
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-08-14 15:03
 
==================== End Of Log ============================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014
Ran by Jon Lowry at 2014-09-18 13:14:21
Running from C:\Users\Jon Lowry\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
3D Home Architect Home Design Deluxe 6 (HKLM-x32\...\InstallShield_{D781A6EC-12AC-4993-BF13-B4CF12F1F20C}) (Version: 6.00.0000 - Broderbund)
3D Home Architect Home Design Deluxe 6 (x32 Version: 6.00.0000 - Broderbund) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
AC3Filter (remove only) (HKLM-x32\...\AC3Filter) (Version:  - )
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.3.9120 - Adobe Systems Inc.) Hidden
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc)
Aimersoft DRM Media Converter(Build 1.4.7.2) (HKLM-x32\...\Aimersoft DRM Media Converter_is1) (Version:  - Aimersoft Software)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Any Video Converter 5.0.9 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 6.7.9.0 - SlySoft)
avast! Internet Security (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Aventail Access Manager (HKCU\...\{72552C46-944B-4E16-BBC8-0D85F31C1800}) (Version: 10.62.196 - SonicWALL Inc)
Aventail Access Manager (x32 Version: 10.62.196 - SonicWALL Inc) Hidden
Aventail Connect (HKLM\...\{C338ACAC-7162-42E3-8B8C-85E5746F4A2E}) (Version: 10.62.320 - SonicWALL Aventail)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (HKLM\...\{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}) (Version: 2.0.2.0 - Apple Inc.)
Bonjour Print Services (HKLM\...\{0DA20600-6130-443B-9D4B-F30520315FA6}) (Version: 2.0.2.0 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
Browser Warden (HKLM-x32\...\39012_Browser Warden) (Version: 1.0 - Gratifying Apps)
Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
calibre (HKLM-x32\...\{60C18701-A823-4165-8E58-C083673F90DC}) (Version: 1.14.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
CinemaNow Media Manager (HKLM-x32\...\{6C122441-1861-4CD7-B1C5-A163A6984E12}) (Version: 1.9.1.105 - CinemaNow, Inc.)
CloneCD (HKLM-x32\...\CloneCD) (Version:  - SlySoft)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.2.8 - Elaborate Bytes)
Combined Community Codec Pack 2009-09-09 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2009.09.09.0 - CCCP Project)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink DVD Suite (x32 Version: 7.0.3003 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1616 - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 5.0.1616 - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.1.4217 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.1.4217 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3130 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.1.3130 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E17BF11-A72D-4DA8-BFAA-DD262C17C2DE}) (Version:  - Microsoft)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DivX Setup (HKLM-x32\...\DivX Setup.divx.com) (Version: 2.5.0.11 - DivX, LLC)
Dora's Carnival Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)
Elcomsoft Wireless Security Auditor (HKLM-x32\...\{77BFC300-FFBB-4841-8A55-CAB7BAC68422}) (Version: 4.0.211.448 - Elcomsoft Co. Ltd.)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Escape Rosecliff Island (x32 Version: 2.2.0.95 - WildTangent) Hidden
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Family Tree Maker 2011 (HKLM-x32\...\Family Tree Maker 2011) (Version: 20.0.368 - Ancestry.com)
Family Tree Maker 2011 (x32 Version: 20.0.368 - Ancestry.com) Hidden
Family Tree Maker 2012 (HKLM-x32\...\Family Tree Maker 2012) (Version: 21.0.388 - Ancestry.com, Inc.)
Family Tree Maker 2012 (x32 Version: 21.0.388 - Ancestry.com, Inc.) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
FileParade Bundle (HKLM-x32\...\FileParade Bundle) (Version: 1.0.0.0 - FileParade Bundle) <==== ATTENTION
Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Heroes of Hellas 2 - Olympia (x32 Version: 2.2.0.95 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Horizon v2.7.1.4 (HKLM-x32\...\d4cfeebc-b821-40b7-9f81-d366b1466f03_is1) (Version: 2.7.1.4 - Daring Development Inc.)
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Documentation (HKLM-x32\...\{69ABD67D-5C2E-4724-B519-695DEF3EC23B}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Game Console (x32 Version:  - WildTangent) Hidden
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
HP MediaSmart CinemaNow 2.0 (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.3611 - HP Photo Creations Powered by RocketLife)
HP Power Manager (HKLM-x32\...\{D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB}) (Version: 1.4.7 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{00A42832-B21A-4296-B5F4-D296D0BC4A3E}) (Version: 2.6.3 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{28FE073B-1230-4BF6-830C-7434FD0C0069}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{B5FC1E1B-E70D-45F1-8E40-A3C30698B323}) (Version: 4.0.9.0 - Hewlett-Packard Company)
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2131 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.2.1001 - Intel Corporation)
iSEEK AnswerWorks English Runtime (HKLM-x32\...\{18A8E78B-9EF2-496E-B310-BCD8E4C1DAB3}) (Version: 010.000.0101 - Vantage Linguistics)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jewel Quest 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2907 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.2907 - CyberLink Corp.) Hidden
MasterCook Deluxe 9 (HKLM-x32\...\InstallShield_{99B366B0-76B6-4DBA-95A3-A730015A7D01}) (Version: 9.0.000 - ValuSoft)
MasterCook Deluxe 9 (x32 Version: 9.0.000 - ValuSoft) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Default Manager (x32 Version: 2.2.114.0 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Reader (HKLM-x32\...\{B6F7DBE7-2FE2-458F-A738-B10832746036}) (Version:  - )
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version:  - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Word MUI (English) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.) Hidden
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Modio (HKLM-x32\...\{3DA224A5-666B-4941-8998-2F19C6D126A5}_is1) (Version:  - GameTuts)
Mplayer 0.6.9 (HKLM-x32\...\Mplayer) (Version: 0.6.9 - )
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Multimedia Toolbar (HKLM-x32\...\Multimedia Toolbar) (Version: 1.0.0.0 - Oneclickbar)
Nidesoft DVD to AVI Converter Platinum v5.0 (HKLM-x32\...\Nidesoft DVD to AVI Converter Platinum_is1) (Version:  - Nidesoft Studio)
NOOK for PC (HKLM-x32\...\BN_DesktopReader) (Version: 2.5.6.9575 - Barnesandnoble.com)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NVIDIA PhysX v8.09.04 (HKLM-x32\...\{A7E07C2B-2220-4415-87E3-784D5814BC93}) (Version: 8.09.04 - NVIDIA Corporation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.1 - Pando Networks Inc.)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlanetSide 2 (2) (HKCU\...\SOE-PlanetSide 2 (2)) (Version:  - Sony Online Entertainment)
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4204 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4204 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3003 - CyberLink Corp.)
PowerDirector (x32 Version: 8.0.3003 - CyberLink Corp.) Hidden
Quicken 2012 (HKLM-x32\...\{0A1E0BDA-5E8F-436d-8BE5-7E97C5CB899D}) (Version: 21.1.7.18 - Intuit)
QuickTime (HKLM-x32\...\QuickTime) (Version:  - )
Real Alternative 2.0.2 (HKLM-x32\...\RealAlt_is1) (Version: 2.0.2 - )
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6196 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30117 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden
Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
RIFT (HKLM-x32\...\Glyph RIFT) (Version:  - Trion Worlds, Inc.)
Roxio CinemaNow 2.0 (x32 Version: 1.0.278 - Hewlett-Packard) Hidden
RtVOsd (HKLM\...\{091A0130-A82F-4A6D-9C61-3BBBB3289030}) (Version: 1.0.6 - Realtek Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.17.2.3 - Client Connect LTD) <==== ATTENTION
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.12.10.g89b2a4fc - Spotify AB)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Stitch Era Universal (HKLM-x32\...\{117221E4-6B20-4595-BCF8-286468364B57}) (Version: 11.30 - Sierra Technology Group SA)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881083) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8260F0BF-F234-41FC-AB11-218A9925F77B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760249) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7A4AB8E1-C091-4BD3-B308-844BA6EE752A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUS_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{6E2862B8-C10A-4FD0-9B82-8D9761301AAA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2883051) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E2C51083-2E10-4E61-8F36-E6308DD0FA94}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2883051) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E2C51083-2E10-4E61-8F36-E6308DD0FA94}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden
Virtual Families (x32 Version: 2.2.0.95 - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
Visual C++ 8.0 ATL (x86) WinSXS MSM (x32 Version: 8.0.50727.762 - Microsoft Corporation) Hidden
Visual C++ 8.0 CRT (x86) WinSXS MSM (x32 Version: 8.0.50727.762 - Microsoft Corporation) Hidden
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.2.0.0 - Azureus Software, Inc.)
Wheel of Fortune 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
Windows Media Encoder 9 Series (x32 Version: 9.00.2980 - Microsoft Corporation) Hidden
WinImage (HKLM-x32\...\WinImage) (Version:  - )
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
WinX DVD Author 6.3 (HKLM-x32\...\WinX DVD Author_is1) (Version:  - DigiartySoft, Inc.)
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D7}) (Version: 17.0.10283 - WinZip Computing, S.L. )
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{3560575F-7C2D-48AE-AB45-DAD430A95EBE}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.dll ()
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{8b2299d9-a6ce-4697-954f-718188b26cf6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{cd203956-34d7-406f-978b-3ff3c677708c}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
CustomCLSID: HKU\S-1-5-21-538650268-2924358156-1730836174-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll No File
 
==================== Restore Points  =========================
 
04-09-2014 05:24:15 avast! antivirus system restore point
04-09-2014 05:28:59 Device Driver Package Install: Avast Network Service
08-09-2014 06:54:54 Windows Update
09-09-2014 06:37:36 Installed HP Update.
17-09-2014 17:54:56 avast! antivirus system restore point
17-09-2014 18:01:49 Device Driver Package Install: Avast Network Service
18-09-2014 20:16:34 Removed Vuze Remote Toolbar v9.7.
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2013-02-07 01:31 - 2014-09-01 23:28 - 00000145 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1       localhost
???????????????????????
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {01B68D5A-8E09-4A29-9387-DA754C41BD4E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-10] (Google Inc.)
Task: {07655A06-69C8-4209-84DD-64933C0BCD3F} - System32\Tasks\HPCeeScheduleForJon Lowry => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {1F09685D-CAD9-4E68-946B-B50B5A191459} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {2F4314BF-B21D-49D5-85E8-2F2371B8492E} - \YTDownloader No Task File <==== ATTENTION
Task: {351B0865-9F68-49D7-BE8E-68334DE59293} - System32\Tasks\Registry Optimizer_UPDATES => C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe
Task: {43F7265C-490F-4AA9-8B69-02F9F833D97A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {4F5A0FE5-2186-4857-AAE6-91B0862813D9} - System32\Tasks\AdobeAAMUpdater-1.0-JonLowry-HP-Jon Lowry => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {58BBE8CC-DBA9-474E-9D23-FCEF262ED255} - System32\Tasks\bench-sys => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION
Task: {6A93200F-0532-4223-A3BC-BAF255AA2F2E} - System32\Tasks\bench-S-1-5-21-538650268-2924358156-1730836174-1000 => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION
Task: {70A3A76A-8A55-492C-9AC2-01CCE7F4FE56} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-17] (Adobe Systems Incorporated)
Task: {73C09C2B-B3BE-4A72-AB85-EA3D923BB7CC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-09-03] (Hewlett-Packard)
Task: {7FB07DDB-2792-4DE2-9210-A87BA1C86AE6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {A3E483DF-5EE2-495D-B541-F69C269639DF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A49BDAEA-596D-4275-B6C9-AC2A4FD92C88} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-09-26] ()
Task: {A986945B-2301-4B1D-A825-A862F3670DD8} - System32\Tasks\{F967C586-0347-4CC0-A8D0-5FFDB5547DF0} => C:\Program Files (x86)\NetDragon\ZeroOnline\play.exe
Task: {ADDB8A9E-F812-43FF-9A3E-E2CB947FB2FE} - System32\Tasks\Registry Optimizer_DEFAULT => C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe
Task: {B57B8587-1A4E-4B67-A4C8-33074EE6FC52} - System32\Tasks\{295CD046-BB03-4242-9AC9-352599CCE0B9} => C:\Program Files (x86)\NetDragon\ZeroOnline\play.exe
Task: {B86FF56C-40E8-408A-BD75-13B2B89920E4} - System32\Tasks\GPUP => C:\Program Files (x86)\GetPrivate\gpup.exe [2014-07-24] ()
Task: {B9E77F31-4A63-4B57-826B-D176A282D2F2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000UA => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-10] (Facebook Inc.)
Task: {BEB97EFE-7882-4345-9140-A63A5F8951CA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-26] (AVAST Software)
Task: {CAD644F0-F30D-4FC3-AAB5-2B883CB6B5EA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {DDCBFF31-CDF9-4CDD-87A6-37B4606ADA41} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000Core => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-10] (Facebook Inc.)
Task: {E038FBBD-C5A9-4CC0-9E27-461A3131A519} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {E1406E25-6F18-4A2B-8352-33EACA44E719} - System32\Tasks\Registry Optimizer => C:\Program Files (x86)\WinZip Registry Optimizer\Winzipro.exe
Task: {F3BA2ECB-51CD-4D63-9876-9E4500693B5B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-06-10] (Google Inc.)
Task: {F438A944-39F2-4DB5-9518-08D8D99EA88B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {F7D21D26-0B40-4982-A426-3FD378ECBB75} - \SMupdate1 No Task File <==== ATTENTION
Task: {F800B797-8F84-4A00-A941-01C35959EC2E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2010-08-02] (CyberLink)
Task: {FA93F109-BB75-4A50-871F-313583F9CDB2} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-WOLFLING => C:\Windows\ehome\McxTask.exe [2009-07-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\bench-S-1-5-21-538650268-2924358156-1730836174-1000.job => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\bench-sys.job => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000Core.job => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-538650268-2924358156-1730836174-1000UA.job => C:\Users\Jon Lowry\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForJon Lowry.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 
==================== Loaded Modules (whitelisted) =============
 
2013-04-12 11:31 - 2013-04-12 11:31 - 00234280 _____ () C:\Windows\ngmsi.dll
2014-07-27 11:41 - 2014-07-27 11:41 - 08892576 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2011-02-08 16:31 - 2010-03-15 12:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-03-21 11:56 - 2011-03-21 11:56 - 01230704 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2010-06-18 16:26 - 2010-06-18 16:26 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2014-07-26 09:00 - 2014-07-26 09:00 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-09-18 13:15 - 2014-09-18 13:15 - 02864128 _____ () C:\Program Files\AVAST Software\Avast\defs\14091804\algo.dll
2011-03-21 11:57 - 2011-03-21 11:57 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-07-26 09:00 - 2014-07-26 09:00 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-09-18 13:08 - 2014-09-18 13:08 - 00043008 _____ () c:\Users\Jon Lowry\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplhg8ei.dll
2013-08-23 12:01 - 2013-08-23 12:01 - 25100288 _____ () C:\Users\Jon Lowry\AppData\Roaming\Dropbox\bin\libcef.dll
2014-08-19 14:10 - 2014-08-19 14:10 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\ff776f423f882faadb7887cdd927f141\IsdiInterop.ni.dll
2010-12-27 15:13 - 2010-04-13 09:52 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
 
==================== Faulty Device Manager Devices =============
 
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
Name: WD My Cloud
Description: WD My Cloud
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: Deskjet F4500 series
Description: Deskjet F4500 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (09/18/2014 01:08:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program uninstaller.exe version 1.0.0.11 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: f60
 
Start Time: 01cfd37d9eb7b4d3
 
Termination Time: 6
 
Application Path: C:\Program Files (x86)\sweetpacks bundle uninstaller\uninstaller.exe
 
Report Id: 2b5245d4-3f6f-11e4-bd5a-415645000030
 
Error: (09/18/2014 01:15:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2199
 
Error: (09/18/2014 01:15:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2199
 
Error: (09/18/2014 01:15:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/18/2014 01:15:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1154
 
Error: (09/18/2014 01:15:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1154
 
Error: (09/18/2014 01:15:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/18/2014 01:20:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1357
 
Error: (09/18/2014 01:20:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1357
 
Error: (09/18/2014 01:20:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
 
System errors:
=============
Error: (09/18/2014 01:07:11 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
ASPI32
SydexFDD
 
Error: (09/18/2014 01:06:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The MCSTRM service failed to start due to the following error: 
%%2
 
Error: (09/18/2014 01:05:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ASPI32.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
 
Error: (09/18/2014 01:43:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.
 
Module Path: C:\Windows\System32\bcmihvsrv64.dll
 
Error: (09/18/2014 01:43:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.
 
Module Path: C:\Windows\System32\bcmihvsrv64.dll
 
Error: (09/18/2014 01:43:49 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has stopped unexpectedly.
 
Module Path: C:\Windows\System32\bcmihvsrv64.dll
 
Error: (09/18/2014 01:32:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The cyycfhtzro64 service failed to start due to the following error: 
%%2
 
Error: (09/18/2014 01:28:08 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: 
%%1056
 
Error: (09/18/2014 01:27:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.
 
Error: (09/18/2014 01:27:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The SQL Server (SQLEXPRESS) service terminated unexpectedly.  It has done this 1 time(s).
 
 
Microsoft Office Sessions:
=========================
Error: (09/18/2014 01:08:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: uninstaller.exe1.0.0.11f6001cfd37d9eb7b4d36C:\Program Files (x86)\sweetpacks bundle uninstaller\uninstaller.exe2b5245d4-3f6f-11e4-bd5a-415645000030
 
Error: (09/18/2014 01:15:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2199
 
Error: (09/18/2014 01:15:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2199
 
Error: (09/18/2014 01:15:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/18/2014 01:15:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1154
 
Error: (09/18/2014 01:15:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1154
 
Error: (09/18/2014 01:15:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (09/18/2014 01:20:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1357
 
Error: (09/18/2014 01:20:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1357
 
Error: (09/18/2014 01:20:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
 
CodeIntegrity Errors:
===================================
  Date: 2013-12-06 16:01:19.260
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-12-06 16:01:18.949
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-12-06 16:01:18.621
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-12-06 16:01:18.279
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.814
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.642
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.455
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 17:07:34.284
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 16:55:57.680
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-01 16:55:57.508
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Pentium® CPU P6100 @ 2.00GHz
Percentage of memory in use: 45%
Total physical RAM: 3893.86 MB
Available physical RAM: 2123.98 MB
Total Pagefile: 7785.9 MB
Available Pagefile: 5518.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:465.46 GB) (Free:109.26 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 1D505CB8)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=103 MB) - (Type=0C)
 
==================== End Of Log ============================

  • 0

#6
dbreeze

dbreeze

    Trusted Helper

  • Malware Removal
  • 2,216 posts

I suppect that there is something more at play here than what is in the logs.

 

Please run a free scan with Dr. Web CureIt.

 

Download Dr.Web CureIt from here

 

The directions for loading and running a scan with the utility are on that web page also. 

 

Once the scan has finished, click on Open report and copy / paste the log in a reply post here. 

 

Please close CureIt after you get the report posted (Do Not use it to try to fix anything at this time).


  • 0

#7
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0

#8
CompCav

CompCav

    Member 5k

  • Expert
  • 12,454 posts
OP returned.
  • 0

#9
dbreeze

dbreeze

    Trusted Helper

  • Malware Removal
  • 2,216 posts

If you are having trouble posting the CureIt log, you can use a file hosting site (like filehosting.org | free easy unlimited filehosting) and post a download link to the file.


  • 0

#10
Dakeyras

Dakeyras

    Anti-Malware Mammoth

  • Expert
  • 9,772 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP