[Jodi St Marie Scyphers]

I went to install the drivers for my Wacom tablet and during the install I got an error message stating that it could not install due to missing libxl2.dll file. Computer seems to work fine, besides my tablet.

Your time and knowledge is greatly appreciated!

Jodi




here is my OTL log:

OTL logfile created on: 1/29/2012 7:15:09 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Jscyphers\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.30 Gb Available Physical Memory | 57.38% Memory free
4.97 Gb Paging File | 3.18 Gb Available in Paging File | 63.86% Paging File free
Paging file location(s): c:\pagefile.sys 1000 8000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 223.84 Gb Total Space | 57.31 Gb Free Space | 25.60% Space Free | Partition Type: NTFS
Drive D: | 213.34 Gb Total Space | 62.96 Gb Free Space | 29.51% Space Free | Partition Type: NTFS
Drive E: | 159.27 Gb Total Space | 143.72 Gb Free Space | 90.24% Space Free | Partition Type: NTFS
Drive F: | 241.92 Gb Total Space | 156.02 Gb Free Space | 64.49% Space Free | Partition Type: NTFS
Drive H: | 976.70 Mb Total Space | 778.94 Mb Free Space | 79.75% Space Free | Partition Type: FAT
Drive I: | 3.03 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: JSCYPHERS-PC | User Name: Jscyphers | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/01/29 19:14:41 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Jscyphers\Downloads\OTL.exe
PRC - [2012/01/22 18:41:11 | 000,184,320 | ---- | M] () -- C:\Windows\SysWOW64\setter.exe
PRC - [2012/01/20 02:15:54 | 000,483,328 | ---- | M] () -- C:\Program Files (x86)\NetNucleous\ActiveCollector\ActiveCollector.exe
PRC - [2012/01/20 02:14:38 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\NetNucleous\ActiveCollector\ACRecover.exe
PRC - [2012/01/03 04:51:20 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011/12/27 08:07:41 | 000,512,848 | ---- | M] () -- C:\Program Files (x86)\InstallBrainService\InstallBrainService.exe
PRC - [2011/10/11 15:34:48 | 000,111,632 | ---- | M] (TMRG, Inc.) -- C:\Program Files (x86)\RelevantKnowledge\rlservice.exe
PRC - [2011/10/11 15:34:43 | 002,943,320 | ---- | M] (TMRG, Inc.) -- C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe
PRC - [2011/09/26 19:45:40 | 000,646,232 | ---- | M] () -- C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
PRC - [2011/06/06 10:16:41 | 000,273,544 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2011/05/24 22:09:14 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/05/20 21:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/04/26 12:23:02 | 000,223,088 | ---- | M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
PRC - [2011/04/26 12:22:44 | 000,681,840 | ---- | M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
PRC - [2011/04/01 04:11:52 | 000,428,640 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
PRC - [2011/02/25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2010/09/17 11:14:50 | 000,098,304 | ---- | M] (Firebird Project) -- C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
PRC - [2010/09/17 11:14:42 | 003,735,552 | ---- | M] (Firebird Project) -- C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
PRC - [2010/08/07 00:36:20 | 000,604,704 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SOUNDMAN.EXE
PRC - [2010/05/20 10:43:22 | 011,921,208 | ---- | M] () -- C:\Program Files (x86)\Driver Checker\DriverChecker.exe
PRC - [2010/02/22 03:57:06 | 000,406,992 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
PRC - [2009/10/30 03:57:08 | 000,369,200 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe


========== Modules (No Company Name) ==========

MOD - [2012/01/22 18:41:11 | 000,184,320 | ---- | M] () -- C:\Windows\SysWOW64\setter.exe
MOD - [2012/01/20 02:15:54 | 000,483,328 | ---- | M] () -- C:\Program Files (x86)\NetNucleous\ActiveCollector\ActiveCollector.exe
MOD - [2012/01/20 02:14:38 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\NetNucleous\ActiveCollector\ACRecover.exe
MOD - [2012/01/09 14:06:20 | 000,076,800 | ---- | M] () -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{167d9323-f7cc-48f5-948a-6f012831a69f}\components\RadioWMPCoreGecko9.dll
MOD - [2012/01/03 04:51:20 | 002,124,760 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011/12/21 12:31:36 | 000,088,064 | ---- | M] () -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{9051303c-7e41-4311-a783-d6fe5ef2832d}\components\gecko9\fvd_connector.dll
MOD - [2011/12/16 18:23:21 | 008,527,008 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
MOD - [2011/09/26 19:45:40 | 000,646,232 | ---- | M] () -- C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
MOD - [2011/05/20 21:35:00 | 000,247,400 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2011/04/26 12:22:44 | 000,681,840 | ---- | M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
MOD - [2010/05/20 10:43:22 | 011,921,208 | ---- | M] () -- C:\Program Files (x86)\Driver Checker\DriverChecker.exe
MOD - [2010/02/22 03:50:20 | 000,060,416 | ---- | M] () -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\zlib1.dll
MOD - [2008/08/07 18:38:12 | 000,507,904 | ---- | M] () -- C:\Program Files (x86)\Driver Checker\DcDriver.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/04/27 16:21:18 | 000,288,272 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2011/04/27 16:21:18 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2009/07/13 17:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2011/12/27 08:07:41 | 000,512,848 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\InstallBrainService\InstallBrainService.exe -- (InstallBrainService)
SRV - [2011/10/11 15:34:48 | 000,111,632 | ---- | M] (TMRG, Inc.) [Auto | Running] -- C:\Program Files (x86)\RelevantKnowledge\rlservice.exe -- (RelevantKnowledge)
SRV - [2011/05/24 22:09:14 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/05/20 21:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/04/26 12:23:02 | 000,223,088 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe -- (MotoHelper)
SRV - [2011/04/01 04:11:52 | 000,428,640 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2011/02/28 17:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010/09/17 11:14:50 | 000,098,304 | ---- | M] (Firebird Project) [Auto | Running] -- C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2010/09/17 11:14:42 | 003,735,552 | ---- | M] (Firebird Project) [On_Demand | Running] -- C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/06/10 13:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/01/27 10:26:42 | 000,398,336 | ---- | M] (Ares Development Group) [On_Demand | Stopped] -- C:\Program Files (x86)\Ares\chatServer.exe -- (AresChatServer)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/01/14 04:29:03 | 000,066,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV:64bit: - [2011/08/01 05:26:18 | 000,034,040 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wmamp3DriverV32.sys -- (wmamp3DriverV32)
DRV:64bit: - [2011/04/27 14:25:24 | 000,084,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2011/04/24 08:44:02 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011/04/01 04:07:54 | 004,184,672 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech HD Webcam C310(UVC)
DRV:64bit: - [2011/04/01 04:06:22 | 000,341,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2011/03/10 22:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 22:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/12/24 10:43:40 | 000,029,288 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apowersoft_AudioDevice.sys -- (Apowersoft_AudioDevice)
DRV:64bit: - [2010/11/20 05:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 03:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 02:49:51 | 000,146,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rmcast.sys -- (RMCAST)
DRV:64bit: - [2010/08/07 00:36:20 | 003,491,616 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTKVAC64.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV:64bit: - [2010/07/15 07:44:20 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
DRV:64bit: - [2010/07/15 07:44:20 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
DRV:64bit: - [2010/02/24 02:20:40 | 000,191,616 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\acedrv11.sys -- (acedrv11)
DRV:64bit: - [2009/07/13 17:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 17:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 17:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 16:09:49 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023.sys -- (USB_RNDIS) Linksys Cable Modem (CM100)
DRV:64bit: - [2009/06/10 12:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009/06/10 12:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 12:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 12:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 12:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/04/29 15:28:30 | 000,030,208 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV:64bit: - [2009/04/08 14:28:46 | 000,068,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2009/02/24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcdbus.sys -- (mcdbus)
DRV:64bit: - [2007/03/27 17:18:58 | 010,550,272 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3)
DRV:64bit: - [2005/09/23 21:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
DRV:64bit: - [2005/04/19 17:28:00 | 000,295,168 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\smwdm.sys -- (smwdm)
DRV - [2010/08/07 02:05:08 | 000,021,712 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\DrvAgent64.SYS -- (DrvAgent64)
DRV - [2010/07/15 07:44:20 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
DRV - [2010/07/15 07:44:20 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2009/07/13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009/02/24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\mcdbus.sys -- (mcdbus)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.tangosear...om/?useie5=1&q=
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.fizzw.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://oc-startpage.aol.com
IE - HKCU\..\URLSearchHook: {167d9323-f7cc-48f5-948a-6f012831a69f} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:58323

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AOL Search"
FF - prefs.js..browser.search.defaultthis.engineName: "WhiteSmoke Bar Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.condui...={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://my.msn.com/default.aspx"
FF - prefs.js..keyword.URL: "http://www.scanbasic...scNN&keywords="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 58323
FF - prefs.js..network.proxy.type: 0


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: File not found
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.4: C:\Program Files (x86)\TabletPlugins\npwacom.dll File not found
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5: C:\Program Files (x86)\TabletPlugins\npwacom.dll File not found
FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/06/06 10:16:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\superfish@superfish.com: C:\ProgramDataMozilla\Extensions\superfish@superfish.com [2011/06/14 18:44:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}: C:\Program Files (x86)\RelevantKnowledge [2012/01/29 18:23:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{9051303c-7e41-4311-a783-d6fe5ef2832d}: C:\Program Files (x86)\FVD Suite\addons\Firefox\2 [2011/11/24 17:37:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{e45a0de0-b4de-11de-8a39-0800200c9a66}: C:\Users\Jscyphers\AppData\Roaming\Mozilla\FireFox\{e45a0de0-b4de-11de-8a39-0800200c9a66}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{5cea9a87-a3a5-4c2a-b08d-8a1876d4931c}: C:\Users\Jscyphers\AppData\Roaming\Mozilla\FireFox\{5cea9a87-a3a5-4c2a-b08d-8a1876d4931c}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/01/06 11:26:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/01/06 11:26:02 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\wcapturex@deskperience.com: C:\Program Files (x86)\WhiteSmokeTranslator\WCaptureMoz

[2011/11/22 02:05:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Extensions
[2010/08/16 17:53:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\extensions
[2010/08/16 17:53:39 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2012/01/28 22:26:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions
[2012/01/09 08:29:16 | 000,000,000 | ---D | M] (WhiteSmoke Bar Community Toolbar) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{167d9323-f7cc-48f5-948a-6f012831a69f}
[2011/11/02 19:27:34 | 000,000,000 | ---D | M] (Games.com Toolbar) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{493b4069-8c4f-4b4a-8f8c-506200c9887a}
[2012/01/09 05:53:15 | 000,000,000 | ---D | M] (Fvd Suite Community Toolbar) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{6414808a-6bbd-4b88-abce-d80baefe9aad}
[2011/12/28 20:51:16 | 000,000,000 | ---D | M] ("FVD Suite Toolbar") -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{9051303c-7e41-4311-a783-d6fe5ef2832d}
[2011/12/24 06:01:38 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/01/12 06:30:35 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2011/12/16 00:09:48 | 000,000,000 | ---D | M] (Ant Video Downloader) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\anttoolbar@ant.com
[2011/09/16 05:38:00 | 000,000,000 | ---D | M] (Yontoo Layers) -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\extensions\plugin@yontoo.com
[2011/11/02 19:30:47 | 000,002,362 | ---- | M] () -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\searchplugins\aol-search.xml
[2011/12/21 17:20:00 | 000,000,931 | ---- | M] () -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\searchplugins\conduit.xml
[2011/11/18 13:37:24 | 000,002,515 | ---- | M] () -- C:\Users\Jscyphers\AppData\Roaming\Mozilla\Firefox\Profiles\sxdmtqdg.default\searchplugins\Search_Results.xml
[2012/01/22 19:09:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/01/22 19:09:43 | 000,000,000 | ---D | M] (ScanBasic) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{4421245A-234D-46FC-B7EA-1270F60ACBEB}
[2011/12/27 08:10:12 | 000,000,000 | ---D | M] (BasicScan) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}
() (No name found) -- C:\USERS\JSCYPHERS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SXDMTQDG.DEFAULT\EXTENSIONS\{AE93811A-5C9A-4D34-8462-F7B864FC4696}.XPI
() (No name found) -- C:\USERS\JSCYPHERS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SXDMTQDG.DEFAULT\EXTENSIONS\{C0C9A2C7-2E5C-4447-BC53-97718BC91E1B}.XPI
() (No name found) -- C:\USERS\JSCYPHERS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SXDMTQDG.DEFAULT\EXTENSIONS\ARTUR.DUBOVOY@GMAIL.COM.XPI
() (No name found) -- C:\USERS\JSCYPHERS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SXDMTQDG.DEFAULT\EXTENSIONS\IFAMEBOOK@STORMVISION.IT.XPI
() (No name found) -- C:\USERS\JSCYPHERS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SXDMTQDG.DEFAULT\EXTENSIONS\INFO@YOUTUBE-MP3.ORG.XPI
() (No name found) -- C:\USERS\JSCYPHERS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SXDMTQDG.DEFAULT\EXTENSIONS\YOUTUBE2MP3@MONDAYX.DE.XPI
[2012/01/03 04:51:20 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/10/01 00:00:25 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/11/18 13:37:24 | 000,002,515 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
[2011/11/10 20:37:32 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Jscyphers\AppData\Local\Google\Chrome\User Data\Default\Extensions\edogkopmmbiomlflahmmpchnobahleib\
CHR - Extension: No name found = C:\Users\Jscyphers\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgailgaldchajpkkmbjdlbimhdnmmgld\
CHR - Extension: No name found = C:\Users\Jscyphers\AppData\Local\Google\Chrome\User Data\Default\Extensions\maopdgeieiiiifooolcjjfmjdlkmhfdh\
CHR - Extension: No name found = C:\Users\Jscyphers\AppData\Local\Google\Chrome\User Data\Default\Extensions\plccnhhjonaiagjelpfkclblmlppjcik\

O1 HOSTS File: ([2011/03/27 09:09:45 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll File not found
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg64.dll (Google Inc.)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - Reg Error: Value error. File not found
O2 - BHO: (Groove GFS Browser Helper) - {281C2892-505E-0110-0D85-43FF3FA66985} - Reg Error: Value error. File not found
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Window Shopper) - {74F475FA-6C75-43BD-AAB9-ECDA6184F600} - C:\Program Files (x86)\Superfish\Window Shopper\SuperfishIEAddon.dll (Superfish)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - Reg Error: Value error. File not found
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - Reg Error: Value error. File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - Reg Error: Value error. File not found
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
O2 - BHO: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - Reg Error: Value error. File not found
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - Reg Error: Value error. File not found
O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo Layers Runtime\YontooIEClient.dll (Yontoo LLC)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll File not found
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [snpstd3] C:\Windows\vsnpstd3.exe ()
O4:64bit: - HKLM..\Run: [SoundMan] C:\Windows\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ActiveCollector] C:\Program Files (x86)\NetNucleous\ActiveCollector\ActiveCollector.exe ()
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [ActiveCollector] C:\Program Files\NetNucleous\ActiveCollector\ActiveCollector.exe File not found
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [ares] C:\Program Files (x86)\Ares\Ares.exe (Ares Development Group)
O4 - HKCU..\Run: [D[c1gC8Fjtub91WR] C:\Users\Jscyphers\AppData\Roaming\Microsoft\Windows\nsj83A3.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EPSON Stylus Photo RX595 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICLA.EXE /FU "C:\Windows\TEMP\E_SB12F.tmp" /EF "HKCU" File not found
O4 - HKCU..\Run: [EPSON Stylus Photo RX595 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICLA.EXE /FU "C:\Windows\TEMP\E_SF274.tmp" /EF "HKCU" File not found
O4 - HKCU..\Run: [Helper] C:\Users\Jscyphers\AppData\Roaming\VideoLAN\installconfirm.exe (TODO: <Company name>)
O4 - HKCU..\Run: [LonelyWalker] C:\Program Files (x86)\NetNucleous\ActiveCollector\ACRecover.exe ()
O4 - HKCU..\Run: [Setter] C:\Windows\SysWOW64\setter.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Window Shopper - {A69A551A-1AAE-4B67-8C2E-52F8B8A19504} - C:\Program Files (x86)\Superfish\Window Shopper\SuperfishIEAddon.dll (Superfish)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: worldwinner.com ([www] https in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.116.2.50 24.116.2.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D8726149-F50B-49F7-B6E3-B7EA593BD77B}: DhcpNameServer = 24.116.2.50 24.116.2.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DBF498DC-A3B5-474F-84CD-5A398AB1F52C}: DhcpNameServer = 24.116.2.50 24.116.2.34
O18:64bit: - Protocol\Handler\belarc - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKCU Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (C:\Users\Jscyphers\AppData\Roaming\dwm.exe) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/04/20 06:49:39 | 000,000,027 | R--- | M] () - I:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{307b84a5-14c0-11e1-83a9-0019bbeb504f}\Shell - "" = AutoRun
O33 - MountPoints2\{307b84a5-14c0-11e1-83a9-0019bbeb504f}\Shell\AutoRun\command - "" = L:\setup.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKCU\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/01/29 18:38:09 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\Wacom
[2012/01/29 18:38:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bamboo Dock
[2012/01/29 18:38:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Wacom
[2012/01/29 18:37:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bamboo Dock
[2012/01/29 18:23:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
[2012/01/27 21:16:00 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\Alawar Stargaze
[2012/01/27 19:36:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Law & Order Criminal Intent 2 - Dark Obsession
[2012/01/27 19:36:19 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Law & Order Criminal Intent 2 - Dark Obsession
[2012/01/27 19:31:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Law & Order - The Vengeful Heart
[2012/01/24 01:01:02 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\3011
[2012/01/22 19:25:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2012/01/22 19:25:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
[2012/01/22 19:07:05 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\NetNucleous
[2012/01/22 19:07:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NetNucleous
[2012/01/22 18:41:22 | 000,000,000 | ---D | C] -- C:\ProgramData\ScanBasic
[2012/01/22 18:41:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ScanBasic
[2012/01/22 18:40:22 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\Blammi
[2012/01/22 18:40:17 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\VideoLAN
[2012/01/20 21:36:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaMonkey
[2012/01/19 14:09:40 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\House of 1000 Doors - Family Secrets CE
[2012/01/18 20:18:46 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\MediaMonkey
[2012/01/14 04:29:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Audio Cable
[2012/01/14 04:29:02 | 000,066,728 | ---- | C] (Eugene V. Muzychenko) -- C:\Windows\SysNative\drivers\vrtaucbl.sys
[2012/01/14 04:27:24 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\Desktop\vac
[2012/01/14 04:02:44 | 000,000,000 | ---D | C] -- C:\Program Files\Virtual Audio Cable
[2012/01/13 21:12:53 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\Desktop\music
[2012/01/13 21:10:47 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\Desktop\25 Days to Better Thinking and Better Living {www.speed.cd}
[2012/01/12 09:56:22 | 000,000,000 | ---D | C] -- C:\Temp
[2012/01/12 09:55:28 | 000,000,000 | ---D | C] -- C:\Program Files\Motorola Inc
[2012/01/12 09:55:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola
[2012/01/12 09:55:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Motorola Shared
[2012/01/12 09:55:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Motorola
[2012/01/10 01:01:56 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\3055
[2012/01/08 17:07:40 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\Desktop\Ex_Files_AICS5_1x1_Fun
[2012/01/07 12:20:37 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM
[2012/01/07 11:48:24 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\PeerNetworking
[2012/01/06 14:48:34 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\AppData\Roaming\Serif
[2012/01/06 14:40:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Serif
[2012/01/06 14:25:19 | 000,000,000 | ---D | C] -- C:\Users\Jscyphers\Desktop\New folder
[2012/01/06 11:25:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012/01/06 11:25:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2012/01/06 11:25:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012/01/03 01:01:01 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\2078
[2011/04/23 17:00:12 | 000,586,752 | -HS- | C] (Microsoft Corporation) -- C:\Users\Jscyphers\AppData\Local\hqv.exe
[2007/03/12 10:41:52 | 000,061,440 | ---- | C] ( ) -- C:\Windows\SysWow64\vsnpstd3.dll

========== Files - Modified Within 30 Days ==========

[2012/01/29 19:17:10 | 000,013,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/29 19:17:10 | 000,013,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/29 18:54:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/01/29 18:38:01 | 000,001,112 | ---- | M] () -- C:\Users\Public\Desktop\Bamboo Dock.lnk
[2012/01/29 18:26:03 | 000,000,300 | -H-- | M] () -- C:\Windows\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2012/01/29 18:20:22 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/01/29 18:19:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/01/29 18:19:52 | 3220,893,696 | -HS- | M] () -- C:\hiberfil.sys
[2012/01/27 23:35:39 | 000,000,786 | ---- | M] () -- C:\Windows\wininit.ini
[2012/01/24 01:01:02 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\At1.job
[2012/01/22 22:51:54 | 003,779,219 | ---- | M] () -- C:\Users\Jscyphers\Desktop\hold me tight.mp3
[2012/01/22 22:50:54 | 018,513,907 | ---- | M] () -- C:\Users\Jscyphers\Documents\hol me tight
[2012/01/22 22:46:31 | 006,193,770 | ---- | M] () -- C:\Users\Jscyphers\Desktop\hols me tight.mp3
[2012/01/22 22:45:14 | 030,437,224 | ---- | M] () -- C:\Users\Jscyphers\Documents\hols me tight
[2012/01/22 21:26:32 | 004,986,704 | ---- | M] () -- C:\Users\Jscyphers\Desktop\acdc mix.mp3
[2012/01/22 21:25:22 | 007,376,786 | ---- | M] () -- C:\Users\Jscyphers\Documents\movie.8.flv
[2012/01/22 19:07:26 | 000,892,928 | ---- | M] () -- C:\Windows\SysWow64\078.dll
[2012/01/22 18:41:11 | 000,184,320 | ---- | M] () -- C:\Windows\SysWow64\setter.exe
[2012/01/21 22:57:05 | 007,667,209 | ---- | M] () -- C:\Users\Jscyphers\Documents\movie.7.flv
[2012/01/20 21:36:37 | 000,000,560 | ---- | M] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2012/01/20 20:27:44 | 000,000,132 | ---- | M] () -- C:\Users\Jscyphers\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012/01/15 10:21:00 | 000,001,064 | ---- | M] () -- C:\Users\Jscyphers\Documents - Shortcut (3).lnk
[2012/01/14 04:29:03 | 000,066,728 | ---- | M] (Eugene V. Muzychenko) -- C:\Windows\SysNative\drivers\vrtaucbl.sys
[2012/01/12 09:56:13 | 000,729,816 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/01/12 09:56:13 | 000,626,262 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/01/12 09:56:13 | 000,107,538 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/01/11 07:06:10 | 627,056,640 | ---- | M] () -- C:\Users\Jscyphers\Desktop\Lynda.com Illustrator Insider Training - Rethinking the Essentials.iso
[2012/01/11 05:58:41 | 007,029,384 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/01/07 11:48:26 | 000,033,134 | ---- | M] () -- C:\Users\Jscyphers\AppData\Roaming\UserTile.png
[2012/01/06 11:25:54 | 000,001,810 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012/01/05 03:20:33 | 000,000,002 | ---- | M] () -- C:\Users\Jscyphers\tenmy.ini
[2012/01/04 23:27:22 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_xusb21_01007.Wdf
[2012/01/02 04:26:24 | 007,592,147 | ---- | M] () -- C:\Users\Jscyphers\Documents\movie.6.flv

========== Files Created - No Company Name ==========

[2012/01/29 18:38:01 | 000,001,112 | ---- | C] () -- C:\Users\Public\Desktop\Bamboo Dock.lnk
[2012/01/22 22:51:14 | 003,779,219 | ---- | C] () -- C:\Users\Jscyphers\Desktop\hold me tight.mp3
[2012/01/22 22:50:39 | 018,513,907 | ---- | C] () -- C:\Users\Jscyphers\Documents\hol me tight
[2012/01/22 22:45:39 | 006,193,770 | ---- | C] () -- C:\Users\Jscyphers\Desktop\hols me tight.mp3
[2012/01/22 22:44:50 | 030,437,224 | ---- | C] () -- C:\Users\Jscyphers\Documents\hols me tight
[2012/01/22 21:25:44 | 004,986,704 | ---- | C] () -- C:\Users\Jscyphers\Desktop\acdc mix.mp3
[2012/01/22 21:21:58 | 007,376,786 | ---- | C] () -- C:\Users\Jscyphers\Documents\movie.8.flv
[2012/01/22 18:41:06 | 000,184,320 | ---- | C] () -- C:\Windows\SysWow64\setter.exe
[2012/01/22 18:40:59 | 000,892,928 | ---- | C] () -- C:\Windows\SysWow64\078.dll
[2012/01/21 22:56:58 | 007,667,209 | ---- | C] () -- C:\Users\Jscyphers\Documents\movie.7.flv
[2012/01/20 21:36:37 | 000,000,560 | ---- | C] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2012/01/15 10:21:00 | 000,001,064 | ---- | C] () -- C:\Users\Jscyphers\Documents - Shortcut (3).lnk
[2012/01/07 12:21:07 | 000,001,635 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CS5.1.lnk
[2012/01/07 12:19:15 | 000,001,154 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.1.lnk
[2012/01/07 12:17:46 | 000,001,247 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.5.lnk
[2012/01/07 12:13:08 | 000,001,348 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.5.lnk
[2012/01/07 12:12:45 | 000,001,520 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.5.lnk
[2012/01/07 12:10:13 | 000,000,962 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
[2012/01/07 12:09:17 | 627,056,640 | ---- | C] () -- C:\Users\Jscyphers\Desktop\Lynda.com Illustrator Insider Training - Rethinking the Essentials.iso
[2012/01/07 11:48:26 | 000,033,134 | ---- | C] () -- C:\Users\Jscyphers\AppData\Roaming\UserTile.png
[2012/01/06 11:25:54 | 000,001,810 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2012/01/05 03:20:33 | 000,000,002 | ---- | C] () -- C:\Users\Jscyphers\tenmy.ini
[2012/01/04 23:27:22 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_xusb21_01007.Wdf
[2012/01/02 04:26:11 | 007,592,147 | ---- | C] () -- C:\Users\Jscyphers\Documents\movie.6.flv
[2011/12/27 08:08:55 | 000,000,000 | ---- | C] () -- C:\ProgramData\9513c6e87ca3eb4c4b02ec809e613f8d_c
[2011/12/04 19:18:18 | 000,000,786 | ---- | C] () -- C:\Windows\wininit.ini
[2011/10/11 08:56:29 | 000,000,132 | ---- | C] () -- C:\Users\Jscyphers\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2011/09/24 01:33:06 | 000,005,120 | ---- | C] () -- C:\Users\Jscyphers\AppData\Local\Databases.db
[2011/08/16 17:53:01 | 000,001,456 | ---- | C] () -- C:\Users\Jscyphers\AppData\Local\Adobe Save for Web 12.0 Prefs
[2011/06/14 22:50:40 | 002,336,384 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe
[2011/06/14 22:50:40 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe
[2011/06/14 22:50:40 | 000,014,848 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll
[2011/06/14 22:50:40 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys
[2011/06/14 22:50:40 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys
[2011/06/03 02:40:59 | 000,014,336 | ---- | C] () -- C:\Users\Jscyphers\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/05/28 14:57:57 | 000,511,552 | ---- | C] () -- C:\Windows\SysWow64\qWaves32.dll
[2011/05/20 21:35:28 | 000,304,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011/04/27 21:57:40 | 000,001,675 | ---- | C] () -- C:\Users\Jscyphers\AppData\Roaming\SAS7_000.DAT
[2011/04/23 17:00:30 | 000,010,262 | -HS- | C] () -- C:\Users\Jscyphers\AppData\Local\58bx7eu82nw807u43225osy0i56032q6uj62
[2011/04/23 17:00:30 | 000,010,262 | -HS- | C] () -- C:\ProgramData\58bx7eu82nw807u43225osy0i56032q6uj62
[2011/04/17 20:59:39 | 000,073,220 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2011/04/17 20:59:39 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2011/04/17 20:59:39 | 000,029,114 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2011/04/17 20:59:39 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2011/04/17 20:59:39 | 000,021,021 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2011/04/17 20:59:39 | 000,015,670 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2011/04/17 20:59:39 | 000,013,280 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2011/04/17 20:59:39 | 000,010,673 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2011/04/17 20:59:39 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2011/04/17 20:59:39 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2011/04/17 20:59:39 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2011/04/17 20:59:39 | 000,001,137 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2011/04/17 20:59:39 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2011/04/17 20:59:39 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2011/04/17 20:59:39 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2011/04/17 20:59:39 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2011/04/01 04:07:02 | 010,877,272 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2011/04/01 04:07:02 | 000,102,744 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2011/04/01 04:06:56 | 000,331,608 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2011/03/30 01:06:44 | 000,000,132 | ---- | C] () -- C:\Users\Jscyphers\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011/03/20 13:49:42 | 000,000,000 | ---- | C] () -- C:\Windows\Secrets.INI
[2011/02/03 19:44:21 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\d3dx99_34.dll
[2011/01/25 14:07:07 | 000,743,066 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/08/13 20:45:44 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/08/07 00:40:31 | 000,154,144 | ---- | C] () -- C:\Windows\SysWow64\RTLCPAPI.dll
[2010/08/07 00:40:30 | 000,044,064 | ---- | C] () -- C:\Windows\CPLUtl64.exe
[2009/07/13 21:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 18:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 18:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/13 16:12:22 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\hhh.exe
[2009/07/13 16:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 16:03:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\dmimee.dll
[2009/07/13 15:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 13:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 13:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006/09/19 08:07:28 | 000,827,392 | ---- | C] () -- C:\Windows\vsnpstd3.exe
[2004/02/27 15:36:18 | 000,015,498 | ---- | C] () -- C:\Windows\snpstd3.ini

========== LOP Check ==========

[2011/08/20 19:01:10 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Acapela Group
[2011/02/06 11:05:54 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Alawar
[2012/01/19 14:10:56 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Alawar Entertainment
[2012/01/27 21:16:00 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Alawar Stargaze
[2011/06/21 12:17:00 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Apowersoft
[2011/04/09 08:21:13 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Artogon
[2011/08/24 17:01:31 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\ATTNaturalVoices
[2011/12/17 00:57:42 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Audacity
[2011/05/07 23:28:52 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Big Fish Games
[2011/12/13 21:31:45 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\BitTorrent
[2012/01/25 14:14:24 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Blammi
[2011/03/07 08:59:01 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Blue Tea Games
[2011/11/25 01:54:54 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Boomzap
[2011/04/10 14:21:34 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Camel101
[2011/04/13 03:04:19 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/01/27 00:09:09 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\DAEMON Tools Lite
[2011/05/17 08:35:55 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\DailyMagic
[2011/12/01 05:50:52 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\DieselPuppet
[2011/08/04 11:50:35 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Easeware
[2011/12/13 10:33:43 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\EleFun Games
[2011/09/19 20:45:24 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Elephant Games
[2011/04/10 16:29:12 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Enki Games
[2011/04/17 21:08:43 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\EPSON
[2012/01/25 02:34:15 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\ERS Game Studios
[2011/04/24 14:26:34 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\fallenShadowsStrategyGuide
[2012/01/04 23:05:40 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\FileZilla
[2011/07/14 18:01:07 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Firestorm
[2010/11/02 11:58:05 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Flood Light Games
[2011/04/05 09:28:07 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Friday's games
[2011/05/02 08:00:52 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Funswitch
[2011/05/22 13:38:38 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\GameMill Entertainment
[2011/01/02 05:26:46 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Games
[2011/04/10 14:21:30 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\GarageGames
[2011/06/14 18:49:51 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\GetRightToGo
[2010/09/06 05:57:05 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Ghost Ship Studios
[2011/12/16 10:50:27 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Gogii
[2011/04/24 10:05:22 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Happy Muffin Top
[2011/08/26 10:37:41 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\HdO Adventure
[2011/04/28 23:14:22 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Imprudence
[2011/03/03 22:05:51 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\margrave3_full
[2011/11/08 20:35:44 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\MediaArt
[2012/01/20 21:20:45 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\MediaMonkey
[2011/05/07 06:45:53 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\MediaProSoft Free YouTube to FLV Converter
[2011/05/11 09:31:35 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Monkey Barrel Games
[2010/08/21 19:35:22 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\MP3Rocket
[2011/05/27 21:03:22 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\MumboJumbo
[2011/11/18 13:37:48 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\MusicNet
[2011/02/03 12:57:45 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Namco
[2011/08/23 02:01:50 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\nbt
[2012/01/22 19:07:05 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\NetNucleous
[2011/04/27 20:58:25 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Nuance
[2011/11/02 04:34:00 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\OpenCandy
[2011/04/26 00:41:54 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Orneon
[2012/01/07 11:48:24 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\PeerNetworking
[2011/01/20 00:14:19 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Phantasmat_bf_ce1
[2010/09/05 01:20:56 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\PlayFirst
[2011/04/21 06:20:17 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\ProtectDISC
[2011/02/05 15:49:47 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\QB9
[2011/11/26 02:00:17 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\SecondLife
[2012/01/06 14:48:34 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Serif
[2010/09/03 18:09:17 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Specialbit
[2011/12/04 04:21:39 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/07/21 05:49:22 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\SulusGames
[2011/08/20 18:33:09 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Thinstall
[2011/01/28 14:38:33 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\TikisLab
[2011/05/27 15:26:13 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Ubisoft
[2011/09/19 21:08:38 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Urban Legends The Maze Strategy Guide
[2012/01/29 18:45:53 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\uTorrent
[2011/04/05 08:25:27 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Vast Studios
[2012/01/22 19:07:33 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\VideoLAN
[2011/08/26 19:09:13 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Vogat Interactive
[2012/01/29 18:38:09 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\Wacom
[2011/02/04 05:49:37 | 000,000,000 | ---D | M] -- C:\Users\Jscyphers\AppData\Roaming\WhiteBirdsProductions
[2012/01/24 01:01:02 | 000,000,340 | ---- | M] () -- C:\Windows\Tasks\At1.job
[2011/10/30 11:37:39 | 000,032,634 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/01/29 18:26:03 | 000,000,300 | -H-- | M] () -- C:\Windows\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 64 bytes -> C:\Users\Jscyphers\Desktop\DSCF5870.AVI:TOC.WMV
@Alternate Data Stream - 186 bytes -> C:\ProgramData\TEMP:A4E7D25F
@Alternate Data Stream - 180 bytes -> C:\ProgramData\TEMP:4CD3F344
@Alternate Data Stream - 169 bytes -> C:\ProgramData\TEMP:587F3582
@Alternate Data Stream - 159 bytes -> C:\ProgramData\TEMP:1604D047
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:C2F24DB5
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:85AA7074
@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:B3C7433B
@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:97C8977B
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:F5D01D7C
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:689AB7E9
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:ED2D63E4
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:23834E1E
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:6387AA6C
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:65C4D44A
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:B0456F0C
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:ECF3C50F
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:9C3AAD57
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:6E2D80C8
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:2D2461E7
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:0785072C
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:E8C44CB4
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:D1C69C9C
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:2AF322BF
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:F35A93AD
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:59465B40
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:AD7183FA
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:75798D9A

< End of report >

[Advertisements]

Hello Jodi From what I see your machine is infected with malware!!
I suspect that you have some malware on your computer causing issues that we are not able to solve through means we can use here in the Tech Forums. I suggest you read the 'Start Here' topic found HERE. With these self-help tools you have a high chance of fixing the problems on your own. If you are still having problems after following Step 3 of the guide, continue with Step 4 and 5 and post in the Malware Forum. If you are unable to run any programs, Please create a topic stating what you have tried so far and that you are unable to run any programs. Also, Please do NOT post the logs in this thread.

If you are still having issues after the malware expert gives you a clean bill of health, Please return to THIS thread and we will pursue other options to help you solve your current problem(s).
Add a link to this topic so that malware tech can see what steps have been taken here

I am 100% certain malware lurks on your machine.When the malware techs give you the all clear then please feel free to come back here to get your issue resolved.

Edited by rockmilk, 29 January 2012 - 09:38 PM.

[rockmilk]

Hello Jodi From what I see your machine is infected with malware!!
I suspect that you have some malware on your computer causing issues that we are not able to solve through means we can use here in the Tech Forums. I suggest you read the 'Start Here' topic found HERE. With these self-help tools you have a high chance of fixing the problems on your own. If you are still having problems after following Step 3 of the guide, continue with Step 4 and 5 and post in the Malware Forum. If you are unable to run any programs, Please create a topic stating what you have tried so far and that you are unable to run any programs. Also, Please do NOT post the logs in this thread.

If you are still having issues after the malware expert gives you a clean bill of health, Please return to THIS thread and we will pursue other options to help you solve your current problem(s).
Add a link to this topic so that malware tech can see what steps have been taken here

I am 100% certain malware lurks on your machine.When the malware techs give you the all clear then please feel free to come back here to get your issue resolved.

Edited by rockmilk, 29 January 2012 - 09:38 PM.