I downloaded an .exe file named zsv.exe. I clicked on it and nothing happened, standard virus protocol. A friend of mine who is experienced with this took a look at the file and told me it was the ZeuS Virus. I installed Malware Bytes after a system restore and I got this.
And here is my OTL Log.
OTL logfile created on: 12/28/2014 10:52:05 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Tommy\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17041)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.99 Gb Total Physical Memory | 1.76 Gb Available Physical Memory | 44.11% Memory free
7.98 Gb Paging File | 5.76 Gb Available in Paging File | 72.14% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 927.52 Gb Total Space | 785.95 Gb Free Space | 84.74% Space Free | Partition Type: NTFS
Drive D: | 3.99 Gb Total Space | 3.94 Gb Free Space | 98.82% Space Free | Partition Type: NTFS
Drive E: | 4.20 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive F: | 967.73 Mb Total Space | 924.22 Mb Free Space | 95.50% Space Free | Partition Type: FAT
Computer Name: BONES2 | User Name: Tommy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014/12/28 10:51:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tommy\Downloads\OTL.exe
PRC - [2014/11/29 02:52:32 | 001,853,392 | ---- | M] (Piotr Pawlowski) -- C:\Program Files (x86)\foobar2000\foobar2000.exe
PRC - [2014/11/26 11:40:18 | 000,337,520 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014/11/21 06:12:46 | 007,229,752 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014/11/18 15:23:36 | 001,519,808 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
PRC - [2014/11/18 15:23:34 | 001,940,160 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
PRC - [2009/11/06 14:36:32 | 002,469,888 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WG111v3\WG111v3.exe
PRC - [2009/08/03 20:42:02 | 000,342,496 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WG111v3\AST_WG111v3.exe
PRC - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
========== Modules (No Company Name) ==========
MOD - [2014/11/29 02:52:32 | 001,391,592 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_input_std.dll
MOD - [2014/11/29 02:52:32 | 001,082,856 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_ui_std.dll
MOD - [2014/11/29 02:52:32 | 000,159,184 | ---- | M] () -- C:\Program Files (x86)\foobar2000\shared.dll
MOD - [2014/11/29 02:51:34 | 000,198,656 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_dsp_eq.dll
MOD - [2014/11/29 02:51:22 | 000,351,232 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_albumlist.dll
MOD - [2014/11/29 02:51:12 | 000,199,680 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_dsp_std.dll
MOD - [2014/11/29 02:51:00 | 000,301,568 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_freedb2.dll
MOD - [2014/11/29 02:50:56 | 000,289,280 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_fileops.dll
MOD - [2014/11/29 02:50:48 | 000,530,944 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_converter.dll
MOD - [2014/11/29 02:50:38 | 000,257,024 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_unpack.dll
MOD - [2014/11/29 02:50:28 | 000,356,864 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_rgscan.dll
MOD - [2014/11/29 02:50:28 | 000,304,640 | ---- | M] () -- C:\Program Files (x86)\foobar2000\components\foo_cdda.dll
MOD - [2014/11/26 11:40:45 | 003,758,192 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2014/11/18 15:23:50 | 002,227,904 | ---- | M] () -- C:\Program Files (x86)\Steam\video.dll
MOD - [2014/11/18 15:23:34 | 000,690,880 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.dll
MOD - [2014/11/11 13:48:12 | 001,171,456 | ---- | M] () -- C:\Program Files (x86)\Steam\libavcodec-56.dll
MOD - [2014/11/11 13:48:12 | 000,485,888 | ---- | M] () -- C:\Program Files (x86)\Steam\libswscale-3.dll
MOD - [2014/11/11 13:48:12 | 000,442,368 | ---- | M] () -- C:\Program Files (x86)\Steam\libavutil-54.dll
MOD - [2014/11/11 13:48:12 | 000,403,968 | ---- | M] () -- C:\Program Files (x86)\Steam\libavformat-56.dll
MOD - [2014/11/11 13:48:12 | 000,332,800 | ---- | M] () -- C:\Program Files (x86)\Steam\libavresample-2.dll
MOD - [2014/11/11 13:48:04 | 034,589,888 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
MOD - [2014/11/11 13:48:02 | 000,837,824 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\ffmpegsumo.dll
MOD - [2014/11/11 13:47:56 | 000,774,656 | ---- | M] () -- C:\Program Files (x86)\Steam\SDL2.dll
MOD - [2013/05/04 06:57:08 | 000,095,712 | ---- | M] () -- C:\Program Files (x86)\foobar2000\zlib1.dll
MOD - [2009/11/06 14:36:32 | 002,469,888 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WG111v3\WG111v3.exe
MOD - [2009/08/03 20:42:02 | 000,342,496 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WG111v3\AST_WG111v3.exe
MOD - [2009/03/04 09:52:36 | 000,372,736 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WG111v3\WlanDll.dll
MOD - [2008/12/29 17:13:24 | 000,204,800 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WG111v3\KJLog.dll
========== Services (SafeList) ==========
SRV:64bit: - [2014/05/19 14:37:22 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2014/05/19 14:05:36 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2014/11/26 11:40:37 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/11/21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014/11/21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/09/16 16:10:54 | 000,569,024 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2014/12/28 10:16:11 | 000,129,752 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:64bit: - [2014/11/21 06:14:22 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:64bit: - [2014/11/21 06:14:08 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2014/05/19 14:56:15 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2014/05/19 14:56:15 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2014/05/19 14:32:53 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2014/05/19 14:32:53 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2014/05/19 14:17:39 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2014/05/19 14:12:45 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2014/05/19 14:12:45 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/11/18 17:47:46 | 000,446,976 | ---- | M] (NETGEAR Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wg111v3.sys -- (RTL8187B)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 16:59:33 | 005,020,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/06/10 15:35:02 | 000,281,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1y60x64.sys -- (e1yexpress)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.cwer.ws
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.cwer.ws
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.isUS: true
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:34.0.5
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 34.0.5\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 34.0.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2014/12/25 21:57:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tommy\AppData\Roaming\Mozilla\Extensions
[2014/12/28 10:11:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tommy\AppData\Roaming\Mozilla\Firefox\Profiles\tc12o7fe.default-1419771930229\extensions
[2014/12/28 08:06:22 | 000,979,699 | ---- | M] () (No name found) -- C:\Users\Tommy\AppData\Roaming\Mozilla\Firefox\Profiles\tc12o7fe.default-1419771930229\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014/12/28 10:01:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014/12/28 10:01:06 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
========== Chrome ==========
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.8_0\
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Tommy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKCU..\Run: [BitTorrent] C:\Users\Tommy\Downloads\BitTorrent.exe (BitTorrent Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{789F3544-0971-4655-820D-AEE8575F30FB}: DhcpNameServer = 192.168.1.1
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/01/21 15:00:00 | 000,000,122 | R--- | M] () - E:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2014/12/28 10:48:15 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2014/12/28 10:16:11 | 000,129,752 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/12/28 10:14:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/12/28 10:14:45 | 000,093,400 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/12/28 10:14:45 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2014/12/28 10:14:45 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014/12/28 10:14:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2014/12/28 10:14:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/12/28 09:57:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/12/28 09:54:06 | 000,446,976 | ---- | C] (NETGEAR Inc. ) -- C:\Windows\SysNative\drivers\wg111v3.sys
[2014/12/28 08:45:52 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2014/12/28 08:13:18 | 000,000,000 | ---D | C] -- C:\Program Files\Speccy
[2014/12/28 08:09:08 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Google
[2014/12/28 08:09:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2014/12/28 08:08:55 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Apps
[2014/12/28 08:08:54 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Deployment
[2014/12/28 07:51:42 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\AppData\Local\EmieBrowserModeList
[2014/12/28 07:49:28 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\uTorrent
[2014/12/28 07:40:43 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\BitTorrent
[2014/12/28 03:35:43 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\WinRAR
[2014/12/28 03:35:18 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2014/12/28 02:34:24 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2014/12/28 00:06:49 | 000,000,000 | ---D | C] -- C:\Users\Tommy\Documents\Lightshot
[2014/12/28 00:06:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
[2014/12/28 00:06:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skillbrains
[2014/12/28 00:06:23 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Programs
[2014/12/27 13:38:16 | 000,000,000 | ---D | C] -- C:\nxtl
[2014/12/27 13:38:13 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Nodemoney
[2014/12/27 13:37:45 | 000,000,000 | ---D | C] -- C:\Users\Tommy\Desktop\Node
[2014/12/27 12:31:42 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Skyrim
[2014/12/27 11:38:17 | 000,000,000 | RHSD | C] -- C:\Windows Activation Technologies
[2014/12/27 11:37:02 | 000,000,000 | ---D | C] -- C:\Windows\KJ
[2014/12/27 10:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014/12/27 09:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Ralink Driver
[2014/12/27 09:51:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ralink
[2014/12/27 09:50:25 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\InstallShield
[2014/12/27 07:06:48 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Skype
[2014/12/27 07:06:46 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Skype
[2014/12/27 07:06:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skype
[2014/12/27 05:22:01 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\MultiBit
[2014/12/27 05:16:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MultiBit-0.5.18
[2014/12/27 05:16:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2014/12/27 05:16:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2014/12/27 05:16:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2014/12/27 05:16:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2014/12/27 00:56:26 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\.purple
[2014/12/27 00:55:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pidgin
[2014/12/26 15:33:42 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\My Games
[2014/12/26 15:33:40 | 000,000,000 | ---D | C] -- C:\Users\Tommy\Documents\My Games
[2014/12/26 06:47:07 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Spotify
[2014/12/26 06:30:46 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Spotify
[2014/12/26 02:14:44 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2014/12/26 02:13:51 | 000,000,000 | -HSD | C] -- C:\Boot
[2014/12/26 01:13:03 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\LolClient
[2014/12/26 00:29:46 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2014/12/26 00:27:35 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2014/12/26 00:14:09 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\foobar2000
[2014/12/26 00:14:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\foobar2000
[2014/12/26 00:04:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2014/12/25 23:46:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\osu!
[2014/12/25 23:43:21 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Macromedia
[2014/12/25 23:43:21 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Macromedia
[2014/12/25 23:26:27 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Adobe
[2014/12/25 23:11:13 | 000,000,000 | ---D | C] -- C:\Users\Tommy\Desktop\Desktop
[2014/12/25 22:24:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2014/12/25 22:24:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2014/12/25 22:24:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2014/12/25 22:15:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Riot Games
[2014/12/25 22:11:28 | 000,000,000 | ---D | C] -- C:\Riot Games
[2014/12/25 22:11:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
[2014/12/25 22:09:01 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Riot Games
[2014/12/25 21:56:45 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Mozilla
[2014/12/25 21:56:45 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Mozilla
[2014/12/25 21:56:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2014/12/25 21:56:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2014/12/25 21:56:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014/12/25 21:53:57 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\AppData\Local\EmieUserList
[2014/12/25 21:53:57 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\AppData\Local\EmieSiteList
[2014/12/25 21:52:29 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\VirtualStore
[2014/12/25 21:52:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2014/12/25 21:51:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WG111v3 Smart Wizard
[2014/12/25 21:51:21 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2014/12/25 21:51:20 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2014/12/25 21:43:33 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Adobe
[2014/12/25 21:43:31 | 000,000,000 | R--D | C] -- C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014/12/25 21:43:31 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Searches
[2014/12/25 21:43:31 | 000,000,000 | R--D | C] -- C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014/12/25 21:43:31 | 000,000,000 | -H-D | C] -- C:\Users\Tommy\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2014/12/25 21:43:23 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Identities
[2014/12/25 21:43:20 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Contacts
[2014/12/25 21:43:13 | 000,000,000 | --SD | C] -- C:\Users\Tommy\AppData\Roaming\Microsoft
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Videos
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Saved Games
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Pictures
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Music
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Links
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Favorites
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Downloads
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Documents
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\Desktop
[2014/12/25 21:43:13 | 000,000,000 | R--D | C] -- C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\AppData\Local\Temporary Internet Files
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Templates
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Start Menu
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\SendTo
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Recent
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\PrintHood
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\NetHood
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Documents\My Videos
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Documents\My Pictures
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Documents\My Music
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\My Documents
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Local Settings
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\AppData\Local\History
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Cookies
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\Application Data
[2014/12/25 21:43:13 | 000,000,000 | -HSD | C] -- C:\Users\Tommy\AppData\Local\Application Data
[2014/12/25 21:43:13 | 000,000,000 | -H-D | C] -- C:\Users\Tommy\AppData
[2014/12/25 21:43:13 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Temp
[2014/12/25 21:43:13 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Microsoft
[2014/12/25 21:43:13 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Roaming\Media Center Programs
[2014/12/25 21:43:09 | 000,000,000 | -HSD | C] -- C:\Recovery
[2014/12/25 19:30:52 | 000,000,000 | ---D | C] -- C:\52fdb680b1fc13026099fd
[2014/12/25 19:08:06 | 000,000,000 | ---D | C] -- C:\OEMSettings
[2014/12/25 19:07:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NETGEAR
[2014/12/25 13:25:59 | 000,000,000 | ---D | C] -- C:\Windows\Panther
========== Files - Modified Within 30 Days ==========
[2014/12/28 10:45:03 | 000,038,945 | ---- | M] () -- C:\Users\Tommy\Desktop\rkill.png
[2014/12/28 10:37:15 | 000,177,908 | ---- | M] () -- C:\Users\Tommy\Desktop\tttt.png
[2014/12/28 10:16:11 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/12/28 10:14:50 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/12/28 10:10:14 | 000,000,963 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2014/12/28 10:09:10 | 000,001,031 | ---- | M] () -- C:\Users\Public\Desktop\foobar2000.lnk
[2014/12/28 10:01:13 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/12/28 10:00:49 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/12/28 10:00:00 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/12/28 09:57:51 | 000,002,279 | ---- | M] () -- C:\Users\Tommy\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/12/28 09:57:21 | 000,002,255 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/12/28 09:54:04 | 000,002,073 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk
[2014/12/28 09:54:04 | 000,002,051 | ---- | M] () -- C:\Users\Public\Desktop\NETGEAR WG111v3 Smart Wizard.lnk
[2014/12/28 09:42:47 | 001,508,162 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/12/28 09:42:47 | 000,674,664 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat
[2014/12/28 09:42:47 | 000,615,122 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/12/28 09:42:47 | 000,128,820 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat
[2014/12/28 09:42:47 | 000,103,496 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/12/28 09:29:47 | 000,024,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/12/28 09:29:47 | 000,024,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/12/28 09:28:45 | 000,001,407 | ---- | M] () -- C:\Users\Tommy\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/12/28 09:27:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/12/28 09:27:11 | 3214,286,848 | -HS- | M] () -- C:\hiberfil.sys
[2014/12/28 07:58:22 | 000,086,900 | ---- | M] () -- C:\Users\Tommy\Desktop\newbalnce.jpg
[2014/12/28 07:19:15 | 000,059,799 | ---- | M] () -- C:\Users\Tommy\Desktop\myshoes.jpg
[2014/12/28 07:15:01 | 000,072,120 | ---- | M] () -- C:\Users\Tommy\Desktop\tower4.jpg
[2014/12/28 07:14:51 | 000,081,383 | ---- | M] () -- C:\Users\Tommy\Desktop\tower3.jpg
[2014/12/28 07:14:44 | 000,091,701 | ---- | M] () -- C:\Users\Tommy\Desktop\tower2.jpg
[2014/12/28 07:14:38 | 000,079,205 | ---- | M] () -- C:\Users\Tommy\Desktop\tower1.jpg
[2014/12/28 00:06:29 | 000,000,425 | ---- | M] () -- C:\Users\Tommy\AppData\Local\UserProducts.xml
[2014/12/27 12:07:35 | 000,328,970 | ---- | M] () -- C:\Users\Tommy\Desktop\Untitled2.png
[2014/12/27 12:07:18 | 000,383,959 | ---- | M] () -- C:\Users\Tommy\Desktop\Untitled.png
[2014/12/26 00:33:09 | 000,167,636 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2014/12/26 00:33:09 | 000,167,636 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2014/12/26 00:31:12 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2014/12/26 00:31:12 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\atiicdxx.dat
[2014/12/26 00:30:44 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/12/26 00:27:16 | 000,268,576 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014/12/25 13:25:47 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
========== Files Created - No Company Name ==========
[2014/12/28 10:45:03 | 000,038,945 | ---- | C] () -- C:\Users\Tommy\Desktop\rkill.png
[2014/12/28 10:26:01 | 000,177,908 | ---- | C] () -- C:\Users\Tommy\Desktop\tttt.png
[2014/12/28 10:14:50 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/12/28 10:10:14 | 000,000,963 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2014/12/28 10:09:10 | 000,001,113 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
[2014/12/28 10:09:10 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\foobar2000.lnk
[2014/12/28 10:01:13 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2014/12/28 10:01:13 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014/12/28 09:57:21 | 000,002,279 | ---- | C] () -- C:\Users\Tommy\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/12/28 09:57:21 | 000,002,255 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/12/28 09:55:42 | 000,000,896 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/12/28 09:55:41 | 000,000,892 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/12/28 09:54:04 | 000,002,073 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk
[2014/12/28 09:54:04 | 000,002,051 | ---- | C] () -- C:\Users\Public\Desktop\NETGEAR WG111v3 Smart Wizard.lnk
[2014/12/28 09:28:45 | 000,001,407 | ---- | C] () -- C:\Users\Tommy\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/12/28 07:19:15 | 000,059,799 | ---- | C] () -- C:\Users\Tommy\Desktop\myshoes.jpg
[2014/12/28 07:19:03 | 000,086,900 | ---- | C] () -- C:\Users\Tommy\Desktop\newbalnce.jpg
[2014/12/28 07:15:01 | 000,072,120 | ---- | C] () -- C:\Users\Tommy\Desktop\tower4.jpg
[2014/12/28 07:14:51 | 000,081,383 | ---- | C] () -- C:\Users\Tommy\Desktop\tower3.jpg
[2014/12/28 07:14:44 | 000,091,701 | ---- | C] () -- C:\Users\Tommy\Desktop\tower2.jpg
[2014/12/28 07:14:38 | 000,079,205 | ---- | C] () -- C:\Users\Tommy\Desktop\tower1.jpg
[2014/12/28 00:06:29 | 000,000,425 | ---- | C] () -- C:\Users\Tommy\AppData\Local\UserProducts.xml
[2014/12/27 12:06:47 | 000,328,970 | ---- | C] () -- C:\Users\Tommy\Desktop\Untitled2.png
[2014/12/27 12:06:36 | 000,383,959 | ---- | C] () -- C:\Users\Tommy\Desktop\Untitled.png
[2014/12/26 02:13:53 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2014/12/26 02:13:51 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2014/12/26 00:32:17 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2014/12/26 00:32:06 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2014/12/26 00:31:12 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2014/12/26 00:31:12 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\atiicdxx.dat
[2014/12/26 00:30:44 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014/12/26 00:26:54 | 3214,286,848 | -HS- | C] () -- C:\hiberfil.sys
[2014/12/25 21:43:33 | 000,001,413 | ---- | C] () -- C:\Users\Tommy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014/12/25 21:43:13 | 000,000,290 | ---- | C] () -- C:\Users\Tommy\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2014/12/25 21:43:13 | 000,000,272 | ---- | C] () -- C:\Users\Tommy\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
========== ZeroAccess Check ==========
[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/05/19 14:53:04 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/05/19 14:53:04 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2014/12/27 02:16:38 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\.purple
[2014/12/28 09:59:16 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\BitTorrent
[2014/12/28 10:09:33 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\foobar2000
[2014/12/26 01:13:03 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\LolClient
[2014/12/28 09:24:04 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\MultiBit
[2014/12/25 22:12:07 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\Riot Games
[2014/12/28 09:24:04 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\Spotify
[2014/12/28 09:24:04 | 000,000,000 | ---D | M] -- C:\Users\Tommy\AppData\Roaming\uTorrent
========== Purity Check ==========
< End of report >
OTL Extras logfile created on: 12/28/2014 10:52:05 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Tommy\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17041)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.99 Gb Total Physical Memory | 1.76 Gb Available Physical Memory | 44.11% Memory free
7.98 Gb Paging File | 5.76 Gb Available in Paging File | 72.14% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 927.52 Gb Total Space | 785.95 Gb Free Space | 84.74% Space Free | Partition Type: NTFS
Drive D: | 3.99 Gb Total Space | 3.94 Gb Free Space | 98.82% Space Free | Partition Type: NTFS
Drive E: | 4.20 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive F: | 967.73 Mb Total Space | 924.22 Mb Free Space | 95.50% Space Free | Partition Type: FAT
Computer Name: BONES2 | User Name: Tommy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2047FC98-AEEE-48A6-AEC0-BD80B073BF09}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1D4A8AA7-E20F-4F04-AEEE-9CE581A7B82F}" = protocol=6 | dir=in | app=c:\users\tommy\downloads\bittorrent.exe |
"{4639B7E9-7B95-4540-BCCD-6C77F7A4A6CA}" = protocol=17 | dir=in | app=c:\users\tommy\downloads\bittorrent.exe |
"{58C4E992-64D6-4793-96D3-4A5369232E86}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{A3F1F55A-2301-40F1-A146-B1E257E69C01}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{C6BDBE9E-A80E-4B39-A42F-86CEC336B8A6}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{FC04904E-E11A-4E60-9172-6BF61EC19A00}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}" = NETGEAR WG111v3 wireless USB 2.0 adapter
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"foobar2000" = foobar2000 v1.3.6
"Google Chrome" = Google Chrome
"InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}" = NETGEAR WG111v3 wireless USB 2.0 adapter
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.0.4.1028
"Mozilla Firefox 34.0.5 (x86 en-US)" = Mozilla Firefox 34.0.5 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Steam" = Steam
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 12/28/2014 11:45:23 AM | Computer Name = Bones2 | Source = ESENT | ID = 489
Description = taskhost (2268) WebCacheLocal: An attempt to open the file "C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log"
for read only access failed with system error 5 (0x00000005): "Access is denied.
". The open file operation will fail with error -1032 (0xfffffbf8).
Error - 12/28/2014 11:45:23 AM | Computer Name = Bones2 | Source = ESENT | ID = 455
Description = taskhost (2268) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while
opening logfile C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log.
Error - 12/28/2014 11:45:33 AM | Computer Name = Bones2 | Source = ESENT | ID = 489
Description = taskhost (2268) WebCacheLocal: An attempt to open the file "C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log"
for read only access failed with system error 5 (0x00000005): "Access is denied.
". The open file operation will fail with error -1032 (0xfffffbf8).
Error - 12/28/2014 11:45:33 AM | Computer Name = Bones2 | Source = ESENT | ID = 455
Description = taskhost (2268) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while
opening logfile C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log.
Error - 12/28/2014 11:45:43 AM | Computer Name = Bones2 | Source = ESENT | ID = 489
Description = taskhost (2268) WebCacheLocal: An attempt to open the file "C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log"
for read only access failed with system error 5 (0x00000005): "Access is denied.
". The open file operation will fail with error -1032 (0xfffffbf8).
Error - 12/28/2014 11:45:43 AM | Computer Name = Bones2 | Source = ESENT | ID = 455
Description = taskhost (2268) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while
opening logfile C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log.
Error - 12/28/2014 11:49:03 AM | Computer Name = Bones2 | Source = ESENT | ID = 489
Description = taskhost (2268) WebCacheLocal: An attempt to open the file "C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log"
for read only access failed with system error 5 (0x00000005): "Access is denied.
". The open file operation will fail with error -1032 (0xfffffbf8).
Error - 12/28/2014 11:49:03 AM | Computer Name = Bones2 | Source = ESENT | ID = 455
Description = taskhost (2268) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while
opening logfile C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log.
Error - 12/28/2014 11:49:13 AM | Computer Name = Bones2 | Source = ESENT | ID = 489
Description = taskhost (2268) WebCacheLocal: An attempt to open the file "C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log"
for read only access failed with system error 5 (0x00000005): "Access is denied.
". The open file operation will fail with error -1032 (0xfffffbf8).
Error - 12/28/2014 11:49:13 AM | Computer Name = Bones2 | Source = ESENT | ID = 455
Description = taskhost (2268) WebCacheLocal: Error -1032 (0xfffffbf8) occurred while
opening logfile C:\Users\Tommy\AppData\Local\Microsoft\Windows\WebCache\V01.log.
[ System Events ]
Error - 12/28/2014 11:36:08 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:36:09 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:36:09 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:36:09 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:38:01 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:38:01 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:38:01 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:38:03 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:38:03 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
Error - 12/28/2014 11:38:03 AM | Computer Name = Bones2 | Source = Disk | ID = 262151
Description = The device, \Device\Harddisk1\DR3, has a bad block.
< End of report >