Solved explorer.exe - CPU 100%

[Solved] explorer.exe - CPU 100%

Explorer.exe has been at 100% and when looking at processes, it seems to be the only one with the problem. (I have about 40 desktops, and 3 have the issue. One desktop is an HP 5240, the other 2 are HP all in ones.)

1.) Virus Proection: MS Security essentials, updated and ran a full system scan. (I did have avast on it previously.... just removed it to try a different option.)
__________________________________
2.) Malware Bytes Quick Scan Log: (done in safe mode with networking) (It locks up when it tries to run on a normal boot)
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.02.28.07

Windows 7 Service Pack 1 x86 NTFS (Safe Mode/Networking)
Internet Explorer 11.0.9600.16518
spltctrain08 :: TRAIN8-PC [administrator]

3/4/2014 10:35:15 AM
mbam-log-2014-03-04 (10-35-15).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 352536
Time elapsed: 7 minute(s), 1 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 7
C:\Users\spltctrain08\AppData\Local\Temp\nsa9087.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\spltctrain08\AppData\Local\Temp\nsf15D8.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\spltctrain08\AppData\Local\Temp\nsk8BE4.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\spltctrain08\AppData\Local\Temp\nsp11D1.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\spltctrain08\AppData\Local\Temp\nsuF377\SpSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\spltctrain08\Local Settings\Temporary Internet Files\Content.IE5\G9KLK9GQ\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\spltctrain08\Local Settings\Temporary Internet Files\Content.IE5\ZVFWTW1V\spstub[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

(end)



3.) DDS Logs
DDS.txt
DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 11.0.9600.16518
Run by spltctrain08 at 10:48:47 on 2014-03-04
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2942.1958 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.salinapubliclibrary.org/
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
uRun: [Google Update] "c:\users\spltctrain08\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe "
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
mRunOnce: [GrpConv] grpconv -o
mRunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "c:\programdata\malwarebytes\malwarebytes' anti-malware\cleanup.dll ",ProcessCleanupScript
dRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
dRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
dRunOnce: [ypagerps] cmd.exe /C del "c:\program files\yahoo!\messenger\ypagerps.dll "
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-Windows\System: ExcludeProfileDirs = Local Settings;Temporary Internet Files;History;Temp;Cookies
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
mPolicies-System: SoftwareSASGeneration = dword:1
mPolicies-Windows\System: UseOEMBackground = dword:1
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
TCP: NameServer = 192.168.5.9 192.168.5.220
TCP: Interfaces\{9438A4E0-C3F0-4E69-B46A-1E9D25427727} : DHCPNameServer = 192.168.5.9 192.168.5.220
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office15\MSOXMLMF.DLL
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - c:\program files\microsoft office\office15\MSOSB.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.117\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\spltctrain08\appdata\roaming\mozilla\firefox\profiles\ml9ybebh.default\
FF - prefs.js: browser.startup.homepage - www.salinapubliclibrary.org
FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\google\update\1.3.22.5\npGoogleUpdate3.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\spltctrain08\appdata\local\google\update\1.3.22.5\npGoogleUpdate3.dll
FF - plugin: c:\users\spltctrain08\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\spltctrain08\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\users\spltctrain08\appdata\roaming\mozilla\plugins\npo1d.dll
FF - plugin: c:\windows\system32\adobe\director\np32dsw_1207148.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_170.dll
.
============= SERVICES / DRIVERS ===============
.
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2013-10-10 120088]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-9-27 214696]
S1 MpKsl2b372065;MpKsl2b372065;c:\programdata\microsoft\microsoft antimalware\definition updates\{d9aa4c92-f4ee-442e-8edb-a30cb6cc48f0}\MpKsl2b372065.sys [2014-3-3 39464]
S1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
S1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\adobe\photoshop elements 7.0\PhotoshopElementsFileAgent.exe [2008-9-16 169312]
S2 AMP;Active Malware Protection Minifilter Driver;c:\windows\system32\drivers\amp.sys [2011-12-12 137536]
S2 AMPSE;Active Malware Protection Support Driver;c:\windows\system32\drivers\ampse.sys [2013-1-3 1189696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2012-7-9 104912]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2013-9-27 104768]
S2 TeamViewer9;TeamViewer 9;c:\program files\teamviewer\version9\TeamViewer_Service.exe [2014-2-25 4915040]
S2 uvnc_service;uvnc_service;c:\program files\ultravnc\winvnc.exe [2011-1-7 1737200]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-2-28 108032]
S3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-10-3 52224]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2011-1-20 1343400]
S4 Centurion Technologies V-Control;Centurion Technologies V-Control;c:\program files\centurion technologies\client\ctsrvnc.exe -service --> c:\program files\centurion technologies\client\ctsrvnc.exe -service [?]
S4 vseamps;vseamps;c:\program files\common files\authentium\antivirus5\vseamps.exe [2011-12-12 97088]
S4 vsedsps;vsedsps;c:\program files\common files\authentium\antivirus5\vsedsps.exe [2011-12-12 97088]
S4 vseqrts;vseqrts;c:\program files\common files\authentium\antivirus5\vseqrts.exe [2011-12-12 142144]
.
=============== Created Last 30 ================
.
2014-03-03 20:12:25 -------- d-----w- c:\windows\ERUNT
2014-03-03 17:57:14 -------- d-----w- c:\users\spltctrain08\appdata\roaming\SUPERAntiSpyware.com
2014-03-03 17:56:09 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2014-03-03 17:56:09 -------- d-----w- c:\program files\SUPERAntiSpyware
2014-03-03 15:16:47 7947048 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{d9aa4c92-f4ee-442e-8edb-a30cb6cc48f0}\mpengine.dll
2014-02-28 09:17:26 454656 ----a-w- c:\windows\system32\vbscript.dll
2014-02-27 23:04:06 765968 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{5592ad60-f619-4c4f-85ce-a085e508241e}\gapaengine.dll
2014-02-27 23:03:56 7947048 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2014-02-27 23:01:36 -------- d-----w- c:\program files\Microsoft Security Client
2014-02-27 21:35:17 -------- d-----w- c:\program files\NirSoft
2014-02-27 20:43:30 -------- d-----w- c:\users\spltctrain08\appdata\local\VS Revo Group
2014-02-27 20:43:16 -------- d-----w- c:\programdata\VS Revo Group
2014-02-27 17:58:22 -------- d-----w- c:\users\spltctrain08\appdata\local\Programs
2014-02-27 17:57:54 -------- d-----w- c:\users\spltctrain08\appdata\roaming\Malwarebytes
2014-02-27 17:06:13 -------- d-----w- c:\users\spltctrain08\appdata\local\ElevatedDiagnostics
2014-02-27 09:02:34 640512 ----a-w- c:\windows\system32\advapi32.dll
2014-02-27 09:02:34 619520 ----a-w- c:\windows\system32\tdh.dll
2014-02-27 09:02:34 3969472 ----a-w- c:\windows\system32\ntkrnlpa.exe
2014-02-27 09:02:34 3914176 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-02-27 09:02:34 1289096 ----a-w- c:\windows\system32\ntdll.dll
2014-02-27 09:02:17 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2014-02-27 09:02:17 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2014-02-27 09:02:16 231424 ----a-w- c:\windows\system32\mswsock.dll
2014-02-26 14:32:51 -------- d-----w- c:\windows\system32\MRT
2014-02-26 14:27:56 1987584 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-26 14:27:55 3419136 ----a-w- c:\windows\system32\d2d1.dll
2014-02-26 14:18:51 1505280 ----a-w- c:\windows\system32\d3d11.dll
2014-02-25 22:17:28 -------- d-----w- c:\program files\TeamViewer
2014-02-25 17:22:09 530432 ----a-w- c:\windows\system32\comctl32.dll
2014-02-25 17:21:54 175104 ----a-w- c:\windows\system32\wintrust.dll
2014-02-25 17:21:08 247808 ----a-w- c:\windows\system32\schannel.dll
2014-02-25 17:21:07 99840 ----a-w- c:\windows\system32\sspicli.dll
2014-02-25 17:21:07 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2014-02-25 17:21:07 369848 ----a-w- c:\windows\system32\drivers\cng.sys
2014-02-25 17:21:07 220160 ----a-w- c:\windows\system32\ncrypt.dll
2014-02-25 17:21:07 22016 ----a-w- c:\windows\system32\secur32.dll
2014-02-25 17:21:07 22016 ----a-w- c:\windows\system32\lsass.exe
2014-02-25 17:21:07 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-02-25 17:21:07 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2014-02-25 17:21:06 15872 ----a-w- c:\windows\system32\sspisrv.dll
2014-02-25 17:20:24 7947048 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{0c7f6ffc-5417-44f9-97a4-3cee1442ce42}\mpengine.dll
2014-02-25 17:20:23 2048 ----a-w- c:\windows\system32\tzres.dll
2014-02-25 17:19:33 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2014-02-25 17:19:33 656896 ----a-w- c:\windows\system32\nshwfp.dll
2014-02-25 17:19:33 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2014-02-25 17:19:31 31232 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2014-02-25 16:23:31 -------- d-----w- c:\program files\Citrix
2014-02-25 16:22:56 -------- d-----w- c:\users\spltctrain08\appdata\local\Citrix
2014-02-14 17:55:18 -------- d-----w- c:\users\spltctrain08\appdata\roaming\TeamViewer
2014-02-12 03:25:45 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-12 03:25:45 1237504 ----a-w- c:\windows\system32\msxml3.dll
.
==================== Find3M ====================
.
2014-02-26 14:23:10 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-06 10:20:26 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-02-06 10:19:55 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-02-06 10:01:36 61952 ----a-w- c:\windows\system32\iesetup.dll
2014-02-06 10:00:46 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-02-06 09:47:22 112128 ----a-w- c:\windows\system32\ieUnatt.exe
2014-02-06 09:47:18 108032 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-02-06 09:46:27 553472 ----a-w- c:\windows\system32\jscript9diag.dll
2014-02-06 09:25:36 4244480 ----a-w- c:\windows\system32\jscript9.dll
2014-02-06 09:09:30 1964032 ----a-w- c:\windows\system32\inetcpl.cpl
2014-02-06 08:41:35 1820160 ----a-w- c:\windows\system32\wininet.dll
2014-01-13 20:34:12 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-13 20:34:12 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-01-06 19:23:36 4558848 ----a-w- c:\windows\system32\GPhotos.scr
2013-12-18 12:13:56 231584 ------w- c:\windows\system32\MpSigStub.exe
.
============= FINISH: 10:50:14.66 ===============


Attach.txt

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 1/19/2011 1:17:45 PM
System Uptime: 3/4/2014 10:46:18 AM (0 hours ago)
.
Motherboard: Hewlett-Packard | | 0A64h
Processor: AMD Athlon(tm) Dual Core Processor 4450B | XU1 PROCESSOR | 2294/1000mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 233 GiB total, 172.854 GiB free.
D: is CDROM ()
Z: is NetworkDisk (NTFS) - 40 GiB total, 8.282 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: Security Processor Loader Driver
Device ID: ROOT\LEGACY_SPLDR\0000
Manufacturer:
Name: Security Processor Loader Driver
PNP Device ID: ROOT\LEGACY_SPLDR\0000
Service: spldr
.
Class GUID: {4d36e96f-e325-11ce-bfc1-08002be10318}
Description: PS/2 Compatible Mouse
Device ID: ACPI\PNP0F13\4&21340CD1&0
Manufacturer: Microsoft
Name: PS/2 Compatible Mouse
PNP Device ID: ACPI\PNP0F13\4&21340CD1&0
Service: i8042prt
.
Class GUID: {4d36e96b-e325-11ce-bfc1-08002be10318}
Description: Standard PS/2 Keyboard
Device ID: ACPI\PNP0303\4&21340CD1&0
Manufacturer: (Standard keyboards)
Name: Standard PS/2 Keyboard
PNP Device ID: ACPI\PNP0303\4&21340CD1&0
Service: i8042prt
.
==== System Restore Points ===================
.
RP150: 1/13/2014 3:29:13 PM - Scheduled Checkpoint
RP151: 1/14/2014 9:20:12 PM - Windows Update
RP152: 1/14/2014 9:21:04 PM - Windows Update
RP153: 1/24/2014 1:04:39 PM - Removed Google Earth.
RP154: 1/24/2014 1:07:38 PM - Removed OpenOffice.org 3.3
RP155: 1/24/2014 1:18:06 PM - Removed OverDrive Media Console
RP156: 1/24/2014 1:19:38 PM - Installed OverDrive Media Console
RP157: 2/11/2014 9:19:23 PM - Windows Update
RP158: 2/11/2014 9:24:53 PM - Windows Update
RP159: 2/11/2014 9:25:46 PM - Windows Update
RP160: 2/11/2014 9:26:58 PM - Windows Update
RP161: 2/11/2014 9:28:39 PM - Windows Update
RP162: 2/11/2014 9:29:27 PM - Windows Update
RP163: 2/11/2014 9:33:53 PM - Windows Update
RP164: 2/21/2014 9:10:52 AM - Scheduled Checkpoint
RP165: 2/25/2014 11:19:35 AM - Windows Update
RP166: 2/26/2014 8:16:23 AM - Windows Update
RP167: 2/27/2014 3:00:18 AM - Windows Update
RP168: 2/28/2014 3:01:14 AM - Windows Update
RP169: 3/3/2014 8:54:15 AM - Windows Update
RP170: 3/3/2014 10:50:54 AM - SpeedyPC Pro Backup
RP171: 3/3/2014 11:38:42 AM - Removed Java(TM) 6 Update 45
RP172: 3/3/2014 11:41:38 AM - Removed Java 7 Update 45
.
==== Installed Programs ======================
.
7-Zip 9.20
Adobe AIR
Adobe Digital Editions
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Photoshop Elements 7.0
Adobe Photoshop.com Inspiration Browser
Adobe Premiere Elements 7.0
Adobe Premiere Elements 7.0 Templates
Adobe Reader XI (11.0.05)
Adobe Shockwave Player 12.0
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Audacity 1.3.14 (Unicode)
Audacity 2.0.5
AVSDK5
Bonjour
CDBurnerXP
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition
GIMP 2.8.10
Google Chrome
Google SketchUp 8
Google Talk (remove only)
Google Talk Plugin
Google Update Helper
ImgBurn
iTunes
KompoZer 0.8b3
LibreOffice 3.5
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 4.5
Microsoft Access MUI (English) 2013
Microsoft Access Setup Metadata MUI (English) 2013
Microsoft Application Error Reporting
Microsoft DCF MUI (English) 2013
Microsoft Excel MUI (English) 2013
Microsoft Groove MUI (English) 2013
Microsoft InfoPath MUI (English) 2013
Microsoft Lync MUI (English) 2013
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (English) 2010
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office OSM MUI (English) 2013
Microsoft Office OSM UX MUI (English) 2013
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Professional Plus 2013
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Proofing (English) 2013
Microsoft Office Proofing Tools 2013 - English
Microsoft Office Proofing Tools 2013 - Español
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared MUI (English) 2013
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2013
Microsoft Office Word MUI (English) 2010
Microsoft OneNote MUI (English) 2013
Microsoft Outlook MUI (English) 2013
Microsoft PowerPoint MUI (English) 2013
Microsoft Publisher MUI (English) 2013
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Tool Web Package:diskpart.exe
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Word MUI (English) 2013
Movie Maker
Mozilla Firefox 26.0 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSVCRT110
Notepad++
OneClickdigital Media Manager
OpenOffice 4.0.1
Outils de vérification linguistique 2013 de Microsoft Office*- Français
OverDrive Media Console
Paint.NET v3.5.11
PDFCreator
Photo Common
Photo Gallery
PhotoshopdotcomInspirationBrowser
Picasa 3
QuickTime
Safari
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 4.5 (KB2729460)
Security Update for Microsoft .NET Framework 4.5 (KB2737083)
Security Update for Microsoft .NET Framework 4.5 (KB2742613)
Security Update for Microsoft .NET Framework 4.5 (KB2789648)
Security Update for Microsoft .NET Framework 4.5 (KB2804582)
Security Update for Microsoft .NET Framework 4.5 (KB2833957)
Security Update for Microsoft .NET Framework 4.5 (KB2840642)
Security Update for Microsoft .NET Framework 4.5 (KB2840642v2)
Security Update for Microsoft .NET Framework 4.5 (KB2861208)
Security Update for Microsoft .NET Framework 4.5 (KB2898864)
Security Update for Microsoft .NET Framework 4.5 (KB2901118)
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition
Security Update for Microsoft Excel 2013 (KB2827238) 32-Bit Edition
Security Update for Microsoft Lync 2013 (KB2850057) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
Security Update for Microsoft Office 2013 (KB2768005) 32-Bit Edition
Security Update for Microsoft Office 2013 (KB2810009) 32-Bit Edition
Security Update for Microsoft Office 2013 (KB2850064) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2863902) 32-Bit Edition
Security Update for Microsoft Word 2013 (KB2827224) 32-Bit Edition
Security Update for Microsoft Word 2013 (KB2863834) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skypeâ„¢ 6.11
SmartSound Quicktracks for Premiere Elements
SUPERAntiSpyware
swMSM
TeamViewer 9
UltraVnc
Update for Microsoft .NET Framework 4.5 (KB2750147)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition
Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition
Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition
Update for Microsoft Office 2010 (KB2837583) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition
Update for Microsoft Office 2013 (KB2826004) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837626) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837637) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837638) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837655) 32-Bit Edition
Update for Microsoft Office 2013 (KB2850066) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
Update for Microsoft Outlook 2013 (KB2850061) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2767850) 32-Bit Edition
Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition
Update for Microsoft SkyDrive Pro (KB2817495) 32-Bit Edition
Update for Microsoft SkyDrive Pro (KB2837652) 32-Bit Edition
Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition
VLC media player 2.1.2
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Messenger
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
XnView 2.13
Yahoo! Messenger
.
==== Event Viewer Messages From Past Week ========
.
3/4/2014 9:26:17 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.167.1049.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10302.0 Error code: 0x8007043c Error description: This service cannot be started in Safe Mode
3/4/2014 10:48:23 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments " " in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
3/4/2014 10:48:23 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments " " in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
3/4/2014 10:47:04 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
3/4/2014 10:47:04 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
3/4/2014 10:47:00 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
3/4/2014 10:46:53 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments " " in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
3/4/2014 10:46:44 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
3/4/2014 10:46:40 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: discache MpFilter SASDIFSV SASKUTIL spldr Wanarpv6
3/4/2014 10:46:36 AM, Error: Service Control Manager [7001] - The Microsoft Network Inspection System service depends on the Microsoft Malware Protection Driver service which failed to start because of the following error: A device attached to the system is not functioning.
3/4/2014 10:44:29 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.167.1049.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10302.0 Error code: 0x8007043c Error description: This service cannot be started in Safe Mode
3/4/2014 10:44:29 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments " " in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
.
==== End Of File ===========================

 

(Finally got this done... my son has been sick so I'm a bit delayed.)

1.) RogueKiller
RogueKiller V8.8.10 [Feb 28 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Safe mode with network support
User : spltctrain08 [Admin rights]
Mode : Remove -- Date : 03/06/2014 16:05:19
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 8 ¤¤¤
[RUN][SUSP PATH] HKLM\[...]\RunOnce : Malwarebytes Anti-Malware (cleanup) (rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll ",ProcessCleanupScript [x][7][x]) -> DELETED
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> DELETED
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> DELETED
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> REPLACED (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0xc000035f] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST3250318AS ATA Device +++++
--- User ---
[MBR] 93ba04af18ad3752f660c3b26ac28839
[BSP] 8f4f837cf063111c987661cb4b876d36 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_D_03062014_160519.txt >>
RKreport[0]_S_03062014_160350.txt

___________________________________________________________________________
2.) Malwarebytes Anti-Rootkit

System Log:
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x86

System is currently in a safe mode

Account is Administrative

Internet Explorer version: 11.0.9600.16518

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 2.294000 GHz
Memory total: 3085258752, free: 2296700928

=======================================
Initializing...
------------ Kernel report ------------
03/06/2014 16:55:51
------------ Loaded modules -----------
\SystemRoot\system32\ntkrnlpa.exe
\SystemRoot\system32\halmacpi.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_AuthenticAMD.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\BOOTVID.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\vmbus.sys
\SystemRoot\system32\drivers\winhv.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\PxHelp20.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\vmstorfl.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\b57nd60x.sys
\SystemRoot\system32\drivers\cdrom.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\fdc.sys
\SystemRoot\system32\drivers\wmiacpi.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\rdpbus.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\drivers\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_atapi.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\drivers\dxg.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\framebuf.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xffffffff8587ea38
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xffffffff8579a908
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xffffffff8587ea38, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff8587e718, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff8587ea38, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xffffffff853c9608, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffffffff8579a908, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: D42AD42A

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 63 Numsec = 488375937
Partition file system is NTFS
Partition is bootable

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 250059350016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-488377168-488397168)...
Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-63-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removal finished

mbar-log
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2013.10.02.12

Windows 7 Service Pack 1 x86 NTFS (Safe Mode/Networking)
Internet Explorer 11.0.9600.16518
spltctrain08 :: TRAIN8-PC [administrator]

3/6/2014 4:55:56 PM
mbar-log-2014-03-06 (16-55-56).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 328322
Time elapsed: 15 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

 

ComboFix File ---

ComboFix 14-03-05.01 - spltctrain08 03/07/2014 7:33.1.2 - x86 NETWORK
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2942.2502 [GMT -6:00]
Running from: c:\users\spltctrain08\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_uvnc_service
.
.
((((((((((((((((((((((((( Files Created from 2014-02-07 to 2014-03-07 )))))))))))))))))))))))))))))))
.
.
2014-03-07 13:40 . 2014-03-07 13:40 -------- d-----w- c:\users\spltctrain8\AppData\Local\temp
2014-03-07 13:40 . 2014-03-07 13:40 -------- d-----w- c:\users\spltctrain11\AppData\Local\temp
2014-03-07 13:40 . 2014-03-07 13:40 -------- d-----w- c:\users\mschreiber\AppData\Local\temp
2014-03-07 13:40 . 2014-03-07 13:40 -------- d-----w- c:\users\jcoyne\AppData\Local\temp
2014-03-06 22:55 . 2014-03-06 22:55 -------- d-----w- c:\users\spltctrain08\mbar
2014-03-06 22:07 . 2014-03-06 23:11 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-03-06 22:07 . 2014-03-06 22:55 107224 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-03-06 22:06 . 2014-03-06 22:55 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-03-03 20:12 . 2014-03-03 20:12 -------- d-----w- c:\windows\ERUNT
2014-03-03 17:57 . 2014-03-03 17:57 -------- d-----w- c:\users\spltctrain08\AppData\Roaming\SUPERAntiSpyware.com
2014-03-03 17:56 . 2014-03-03 17:57 -------- d-----w- c:\program files\SUPERAntiSpyware
2014-03-03 17:56 . 2014-03-03 17:56 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2014-02-28 09:17 . 2013-12-21 08:56 454656 ----a-w- c:\windows\system32\vbscript.dll
2014-02-28 09:15 . 2014-02-28 09:15 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2014-02-27 21:35 . 2014-03-04 15:24 -------- d-----w- c:\program files\NirSoft
2014-02-27 20:43 . 2014-02-27 20:43 -------- d-----w- c:\users\spltctrain08\AppData\Local\VS Revo Group
2014-02-27 20:43 . 2014-02-27 20:43 -------- d-----w- c:\programdata\VS Revo Group
2014-02-27 17:58 . 2014-02-27 17:58 -------- d-----w- c:\users\spltctrain08\AppData\Local\Programs
2014-02-27 17:57 . 2014-02-27 17:57 -------- d-----w- c:\users\spltctrain08\AppData\Roaming\Malwarebytes
2014-02-27 17:06 . 2014-02-27 17:06 -------- d-----w- c:\users\spltctrain08\AppData\Local\ElevatedDiagnostics
2014-02-27 16:59 . 2014-02-27 17:00 -------- d-----w- c:\users\testuser
2014-02-27 09:02 . 2014-02-27 09:02 640512 ----a-w- c:\windows\system32\advapi32.dll
2014-02-27 09:02 . 2014-02-27 09:02 619520 ----a-w- c:\windows\system32\tdh.dll
2014-02-27 09:02 . 2014-02-27 09:02 3969472 ----a-w- c:\windows\system32\ntkrnlpa.exe
2014-02-27 09:02 . 2014-02-27 09:02 3914176 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-02-27 09:02 . 2014-02-27 09:02 1289096 ----a-w- c:\windows\system32\ntdll.dll
2014-02-27 09:02 . 2014-02-27 09:02 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2014-02-27 09:02 . 2014-02-27 09:02 1294272 ----a-w- c:\windows\system32\drivers\tcpip.sys
2014-02-27 09:02 . 2014-02-27 09:02 231424 ----a-w- c:\windows\system32\mswsock.dll
2014-02-26 14:32 . 2014-02-26 14:36 -------- d-----w- c:\windows\system32\MRT
2014-02-26 14:27 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-26 14:27 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\system32\d2d1.dll
2014-02-26 14:18 . 2014-02-26 14:18 1505280 ----a-w- c:\windows\system32\d3d11.dll
2014-02-25 22:35 . 2014-03-03 16:56 -------- d-----w- c:\users\spltctrain8\AppData\Roaming\TeamViewer
2014-02-25 22:32 . 2014-02-25 22:32 -------- d--h--w- c:\users\spltctrain8\.lptTpc
2014-02-25 22:17 . 2014-02-25 22:17 -------- d-----w- c:\program files\TeamViewer
2014-02-25 17:22 . 2013-07-04 11:50 530432 ----a-w- c:\windows\system32\comctl32.dll
2014-02-25 17:21 . 2013-07-09 04:52 175104 ----a-w- c:\windows\system32\wintrust.dll
2014-02-25 17:21 . 2013-09-25 01:57 247808 ----a-w- c:\windows\system32\schannel.dll
2014-02-25 17:21 . 2013-09-25 02:01 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-02-25 17:21 . 2013-09-25 02:01 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2014-02-25 17:21 . 2013-09-25 01:57 99840 ----a-w- c:\windows\system32\sspicli.dll
2014-02-25 17:21 . 2013-09-25 01:57 22016 ----a-w- c:\windows\system32\secur32.dll
2014-02-25 17:21 . 2013-09-25 01:56 220160 ----a-w- c:\windows\system32\ncrypt.dll
2014-02-25 17:21 . 2013-09-25 01:56 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2014-02-25 17:21 . 2013-09-25 00:49 22016 ----a-w- c:\windows\system32\lsass.exe
2014-02-25 17:21 . 2013-07-04 12:16 369848 ----a-w- c:\windows\system32\drivers\cng.sys
2014-02-25 17:21 . 2013-09-25 00:49 15872 ----a-w- c:\windows\system32\sspisrv.dll
2014-02-25 17:20 . 2014-02-17 07:32 7947048 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0C7F6FFC-5417-44F9-97A4-3CEE1442CE42}\mpengine.dll
2014-02-25 17:20 . 2013-11-12 02:07 2048 ----a-w- c:\windows\system32\tzres.dll
2014-02-25 17:19 . 2013-10-12 02:03 656896 ----a-w- c:\windows\system32\nshwfp.dll
2014-02-25 17:19 . 2013-10-12 02:01 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2014-02-25 17:19 . 2013-10-12 02:01 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2014-02-25 17:19 . 2013-06-15 03:38 31232 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2014-02-25 16:23 . 2014-02-25 16:23 -------- d-----w- c:\program files\Citrix
2014-02-25 16:22 . 2014-02-25 16:22 -------- d-----w- c:\users\spltctrain08\AppData\Local\Citrix
2014-02-14 17:55 . 2014-03-03 16:56 -------- d-----w- c:\users\spltctrain08\AppData\Roaming\TeamViewer
2014-02-12 03:25 . 2013-12-06 02:02 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-12 03:25 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\system32\msxml3.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-13 20:34 . 2012-12-07 23:08 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-01-13 20:34 . 2011-07-16 21:11 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-06 19:23 . 2014-01-06 19:23 4558848 ----a-w- c:\windows\system32\GPhotos.scr
2013-12-18 12:13 . 2011-01-07 15:55 231584 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware "= "c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2014-01-06 5625624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888]
"BCSSync "= "c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"APSDaemon "= "c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!) "= "c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2012-05-25 6595928]
"Skype "= "c:\program files\Skype\Phone\Skype.exe" [2013-11-14 20586656]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ypagerps "= "del" [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser "= 3 (0x3)
"EnableUIADesktopToggle "= 0 (0x0)
"PromptOnSecureDesktop "= 0 (0x0)
"SoftwareSASGeneration "= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} "= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2013-05-07 115440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux "=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /k:C *
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=" "
.
R1 MpKsl2b372065;MpKsl2b372065;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D9AA4C92-F4EE-442E-8EDB-A30CB6CC48F0}\MpKsl2b372065.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-02-06 108032]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-21 1343400]
R4 Centurion Technologies V-Control;Centurion Technologies V-Control;c:\program files\Centurion Technologies\Client\ctsrvnc.exe [x]
R4 vseamps;vseamps;c:\program files\Common Files\Authentium\AntiVirus5\vseamps.exe [2011-12-12 97088]
R4 vsedsps;vsedsps;c:\program files\Common Files\Authentium\AntiVirus5\vsedsps.exe [2011-12-12 97088]
R4 vseqrts;vseqrts;c:\program files\Common Files\Authentium\AntiVirus5\vseqrts.exe [2011-12-12 142144]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2011-07-22 12880]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2011-07-12 67664]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [2013-10-10 120088]
S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]
S2 AMP;Active Malware Protection Minifilter Driver;c:\windows\system32\Drivers\amp.sys [2011-12-12 137536]
S2 AMPSE;Active Malware Protection Support Driver;c:\windows\system32\Drivers\ampse.sys [2011-12-12 1189696]
S2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [2014-02-17 4915040]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-21 15:34 1150280 ----a-w- c:\program files\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-03-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-07 20:34]
.
2014-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-08 14:48]
.
2014-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-08 14:48]
.
2014-02-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324Core.job
- c:\users\spltctrain08\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-15 14:03]
.
2014-03-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324UA.job
- c:\users\spltctrain08\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-15 14:03]
.
2014-03-03 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task 1e7a9617-ccc8-42cb-a82c-ea645e1df6be.job
- c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08]
.
2014-03-03 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task 4587b91f-045e-46f6-9575-33afe631e208.job
- c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.salinapubliclibrary.org/
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.5.9 192.168.5.220
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\spltctrain08\AppData\Roaming\Mozilla\Firefox\Profiles\ml9ybebh.default\
FF - prefs.js: browser.startup.homepage - www.salinapubliclibrary.org
.
- - - - ORPHANS REMOVED - - - -
.
c:\users\spltctrain11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled "=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= "c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\windows\system32\sppsvc.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Completion time: 2014-03-07 07:48:28 - machine was rebooted
ComboFix-quarantined-files.txt 2014-03-07 13:48
.
Pre-Run: 185,699,176,448 bytes free
Post-Run: 185,464,197,120 bytes free
.
- - End Of File - - 3D27D55A751E27AA534B26E8A87AE04A
A36C5E4F47E84449FF07ED3517B43A31

 

FRST.txt - part 1
(posting this in more than 1 post as it is too long to get it into one)

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-03-2014 01
Ran by spltctrain08 (administrator) on TRAIN8-PC on 08-03-2014 07:59:57
Running from C:\Users\spltctrain08\Downloads
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Safe Mode (with Networking)

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKU\.DEFAULT\...\Run: [Messenger (Yahoo!)] - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\.DEFAULT\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20586656 2013-11-14] (Skype Technologies S.A.)
HKU\.DEFAULT\...\RunOnce: [ypagerps] - cmd.exe /C del "C:\Program Files\Yahoo!\Messenger\ypagerps.dll "
HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5625624 2014-01-06] (SUPERAntiSpyware)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.salinapubliclibrary.org/
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.5.9 192.168.5.220

FireFox:
========
FF ProfilePath: C:\Users\spltctrain08\AppData\Roaming\Mozilla\Firefox\Profiles\ml9ybebh.default
FF Homepage: www.salinapubliclibrary.org
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\spltctrain08\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\spltctrain08\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\spltctrain08\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\spltctrain08\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\spltctrain08\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)

Chrome:
=======
CHR HomePage:
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.117\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Talk Plugin) - C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll No File
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Google Drive) - C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-08]
CHR Extension: (YouTube) - C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-08]
CHR Extension: (Google Search) - C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-08]
CHR Extension: (Google Wallet) - C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-15]
CHR Extension: (Gmail) - C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com)
S2 AdobeActiveFileMonitor7.0; C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [169312 2008-09-16] (Adobe Systems Incorporated)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
S4 vseamps; C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe [97088 2011-12-12] (Commtouch, Inc.)
S4 vsedsps; C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe [97088 2011-12-12] (Commtouch, Inc.)
S4 vseqrts; C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe [142144 2011-12-12] (Commtouch, Inc.)
S4 Centurion Technologies V-Control; C:\Program Files\Centurion Technologies\Client\ctsrvnc.exe -service [X]

==================== Drivers (Whitelisted) ====================

S2 AMP; C:\Windows\system32\Drivers\amp.sys [137536 2011-12-12] (Commtouch, Inc.)
S2 AMPSE; C:\Windows\system32\Drivers\ampse.sys [1189696 2011-12-12] (Commtouch, Inc.)
S3 LVUSBSta; C:\Windows\System32\drivers\lvusbsta.sys [22016 2005-01-31] (Logitech Inc.)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
S3 PID_0928; C:\Windows\System32\DRIVERS\LV561AV.SYS [211712 2005-01-31] (Logitech Inc.)
S1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 catchme; \??\C:\Users\SPLTCT~3\AppData\Local\Temp\catchme.sys [X]
S1 MpKsl2b372065; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D9AA4C92-F4EE-442E-8EDB-A30CB6CC48F0}\MpKsl2b372065.sys [X]
U3 TrueSight; \??\C:\Windows\system32\TrueSight.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-08 07:59 - 2014-03-08 08:00 - 00014234 _____ () C:\Users\spltctrain08\Downloads\FRST.txt
2014-03-08 07:59 - 2014-03-08 07:59 - 01145344 _____ (Farbar) C:\Users\spltctrain08\Downloads\FRST.exe
2014-03-08 07:59 - 2014-03-08 07:59 - 00000000 ____D () C:\FRST
2014-03-07 07:53 - 2014-03-07 07:53 - 11125072 _____ (Microsoft Corporation) C:\Users\spltctrain08\Downloads\mseinstall(1).exe
2014-03-07 07:53 - 2014-03-07 07:53 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-07 07:48 - 2014-03-07 07:48 - 00015003 _____ () C:\ComboFix.txt
2014-03-07 07:17 - 2011-06-26 00:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-07 07:17 - 2010-11-07 11:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-07 07:17 - 2009-04-19 22:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-07 07:17 - 2000-08-30 18:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-07 07:17 - 2000-08-30 18:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-07 07:17 - 2000-08-30 18:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-07 07:17 - 2000-08-30 18:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-07 07:17 - 2000-08-30 18:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-07 07:15 - 2014-03-07 07:48 - 00000000 ____D () C:\Qoobox
2014-03-07 07:15 - 2014-03-07 07:46 - 00000000 ____D () C:\Windows\erdnt
2014-03-07 07:12 - 2014-03-07 07:12 - 05187267 ____R (Swearware) C:\Users\spltctrain08\Downloads\ComboFix.exe
2014-03-06 16:55 - 2014-03-06 16:55 - 00000000 ____D () C:\Users\spltctrain08\mbar
2014-03-06 16:07 - 2014-03-06 17:11 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-06 16:07 - 2014-03-06 16:55 - 00107224 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-06 16:06 - 2014-03-06 16:55 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-06 16:06 - 2014-03-06 16:52 - 00000000 ____D () C:\Users\spltctrain08\Desktop\mbar
2014-03-06 16:06 - 2014-03-06 16:06 - 12589848 _____ (Malwarebytes Corp.) C:\Users\spltctrain08\Downloads\mbar-1.07.0.1009.exe
2014-03-06 16:05 - 2014-03-06 16:05 - 00002115 _____ () C:\Users\spltctrain08\Desktop\RKreport[0]_D_03062014_160519.txt
2014-03-06 16:03 - 2014-03-06 16:03 - 00002039 _____ () C:\Users\spltctrain08\Desktop\RKreport[0]_S_03062014_160350.txt
2014-03-06 15:59 - 2014-03-06 16:06 - 00000000 ____D () C:\Users\spltctrain08\Desktop\RK_Quarantine
2014-03-06 15:57 - 2014-03-06 15:59 - 03819008 _____ () C:\Users\spltctrain08\Downloads\RogueKiller.exe
2014-03-03 14:28 - 2014-03-03 14:28 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\spltctrain08\Downloads\rkill.exe
2014-03-03 14:12 - 2014-03-03 14:12 - 01037734 _____ (Thisisu) C:\Users\spltctrain08\Downloads\JRT.exe
2014-03-03 14:12 - 2014-03-03 14:12 - 00000000 ____D () C:\Windows\ERUNT
2014-03-03 13:53 - 2014-03-03 13:53 - 00930952 _____ (CNET Download.com) C:\Users\spltctrain08\Downloads\cbsidlm-cbsi183-AdwCleaner-SEO-75851221.exe
2014-03-03 11:57 - 2014-03-03 11:57 - 00000524 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 4587b91f-045e-46f6-9575-33afe631e208.job
2014-03-03 11:57 - 2014-03-03 11:57 - 00000524 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 1e7a9617-ccc8-42cb-a82c-ea645e1df6be.job
2014-03-03 11:57 - 2014-03-03 11:57 - 00000000 ____D () C:\Users\spltctrain08\AppData\Roaming\SUPERAntiSpyware.com
2014-03-03 11:56 - 2014-03-03 11:57 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-03 11:56 - 2014-03-03 11:56 - 00001965 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-03-03 11:56 - 2014-03-03 11:56 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-03 11:55 - 2014-03-03 11:55 - 18146232 _____ (SUPERAntiSpyware) C:\Users\spltctrain08\Downloads\SUPERAntiSpyware.exe
2014-03-03 11:07 - 2014-03-07 07:41 - 00027162 _____ () C:\Windows\PFRO.log
2014-03-03 11:07 - 2014-03-07 07:41 - 00000784 _____ () C:\Windows\setupact.log
2014-03-03 11:07 - 2014-03-03 11:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 09:22 - 2014-03-03 09:22 - 06682336 _____ (SpeedyPC Software) C:\Users\spltctrain08\Downloads\SpeedyPC Pro Installer.exe
2014-03-03 09:09 - 2014-03-03 09:09 - 01243588 _____ () C:\Users\spltctrain08\Downloads\ProcessExplorer.zip
2014-03-03 09:09 - 2014-02-04 00:43 - 02924736 _____ (Sysinternals - www.sysinternals.com) C:\Users\spltctrain08\Desktop\procexp.exe
2014-02-28 03:31 - 2014-02-06 04:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-28 03:31 - 2014-02-06 04:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-28 03:31 - 2014-02-06 04:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-28 03:31 - 2014-02-06 04:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-28 03:31 - 2014-02-06 04:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-28 03:31 - 2014-02-06 03:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-28 03:31 - 2014-02-06 03:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-28 03:31 - 2014-02-06 03:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-28 03:31 - 2014-02-06 03:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-28 03:31 - 2014-02-06 03:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-28 03:31 - 2014-02-06 03:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-28 03:31 - 2014-02-06 03:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-28 03:31 - 2014-02-06 03:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-28 03:31 - 2014-02-06 03:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-28 03:31 - 2014-02-06 03:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-28 03:31 - 2014-02-06 03:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-28 03:31 - 2014-02-06 03:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-28 03:31 - 2014-02-06 03:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-28 03:31 - 2014-02-06 02:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-28 03:31 - 2014-02-06 02:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-28 03:31 - 2014-02-06 02:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-28 03:17 - 2013-12-21 02:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-28 03:15 - 2014-02-28 03:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-28 03:15 - 2014-02-28 03:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-27 17:00 - 2014-02-27 17:01 - 11125072 _____ (Microsoft Corporation) C:\Users\spltctrain08\Downloads\mseinstall.exe
2014-02-27 15:35 - 2014-03-04 09:24 - 00000000 ____D () C:\Program Files\NirSoft
2014-02-27 15:34 - 2014-02-27 15:34 - 00140832 _____ () C:\Users\spltctrain08\Downloads\shexview_setup.exe
2014-02-27 14:43 - 2014-02-27 14:43 - 00000000 ____D () C:\Users\spltctrain08\AppData\Local\VS Revo Group
2014-02-27 14:43 - 2014-02-27 14:43 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-02-27 14:42 - 2014-02-27 14:42 - 10619688 _____ (VS Revo Group ) C:\Users\spltctrain08\Downloads\RevoUninProSetup.exe
2014-02-27 11:57 - 2014-02-27 11:57 - 00000000 ____D () C:\Users\spltctrain08\AppData\Roaming\Malwarebytes
2014-02-27 11:56 - 2014-02-27 11:56 - 04130656 _____ (Kaspersky Lab ZAO) C:\Users\spltctrain08\Downloads\tdsskiller.exe
2014-02-27 11:39 - 2014-02-27 11:40 - 00662432 _____ () C:\Users\spltctrain08\Downloads\ZipExtractorSetup.exe
2014-02-27 11:00 - 2014-02-27 11:00 - 00000000 ___HD () C:\Users\testuser\.lptTpc
2014-02-27 10:59 - 2014-02-27 11:00 - 00000000 ____D () C:\Users\testuser\AppData\Roaming\Apple Computer
2014-02-27 10:59 - 2014-02-27 11:00 - 00000000 ____D () C:\Users\testuser\AppData\Local\Google
2014-02-27 10:59 - 2014-02-27 10:59 - 00001413 _____ () C:\Users\testuser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 10:59 - 2014-02-27 10:59 - 00000020 ___SH () C:\Users\testuser\ntuser.ini
2014-02-27 10:59 - 2014-02-27 10:59 - 00000000 ____D () C:\Users\testuser\AppData\Roaming\Adobe
2014-02-27 10:59 - 2012-12-07 17:34 - 00000000 ____D () C:\Users\testuser\AppData\Local\Apple Computer
2014-02-27 10:59 - 2011-01-07 09:57 - 00000000 ____D () C:\Users\testuser\AppData\Roaming\Macromedia
2014-02-27 10:59 - 2009-07-13 22:42 - 00000000 ___RD () C:\Users\testuser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-27 10:59 - 2009-07-13 22:37 - 00000000 ___RD () C:\Users\testuser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-27 10:25 - 2014-02-27 10:25 - 00000017 _____ () C:\Users\spltctrain08\AppData\Local\resmon.resmoncfg
2014-02-27 03:03 - 2014-02-27 03:03 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-27 03:03 - 2014-02-27 03:03 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-27 03:03 - 2014-02-27 03:03 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-27 03:03 - 2014-02-27 03:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-27 03:02 - 2014-02-27 03:02 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-02-27 03:02 - 2014-02-27 03:02 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-27 03:02 - 2014-02-27 03:02 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-27 03:02 - 2014-02-27 03:02 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-27 03:02 - 2014-02-27 03:02 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-27 03:02 - 2014-02-27 03:02 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-27 03:02 - 2014-02-27 03:02 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-27 03:02 - 2014-02-27 03:02 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-26 11:10 - 2014-02-26 11:10 - 00000000 ____D () C:\Users\spltctrain8\Downloads\handle
2014-02-26 11:09 - 2014-02-26 11:09 - 00228012 _____ () C:\Users\spltctrain8\Downloads\Handle.zip
2014-02-26 10:42 - 2014-02-26 10:42 - 01243588 _____ () C:\Users\spltctrain8\Downloads\ProcessExplorer.zip
2014-02-26 10:42 - 2014-02-04 00:43 - 02924736 _____ (Sysinternals - www.sysinternals.com) C:\Users\spltctrain8\Downloads\procexp.exe
2014-02-26 10:42 - 2012-10-15 13:23 - 00072154 _____ () C:\Users\spltctrain8\Downloads\procexp.chm
2014-02-26 10:42 - 2006-07-28 08:32 - 00007005 _____ () C:\Users\spltctrain8\Downloads\Eula.txt
2014-02-26 08:34 - 2013-07-22 13:22 - 62209999 _____ () C:\Users\spltctrain08\Documents\InstallPCResClientV4x_4.2.0.19477.exe
2014-02-26 08:32 - 2014-02-26 08:36 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-26 08:27 - 2013-12-24 17:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-26 08:27 - 2013-11-26 02:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-26 08:18 - 2014-02-26 08:18 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-25 16:35 - 2014-03-03 10:56 - 00000000 ____D () C:\Users\spltctrain8\AppData\Roaming\TeamViewer
2014-02-25 16:35 - 2014-02-25 16:35 - 00000000 ____D () C:\Users\spltctrain8\AppData\Roaming\Adobe
2014-02-25 16:33 - 2014-02-25 16:34 - 05814000 _____ (TeamViewer GmbH) C:\Users\spltctrain8\Downloads\TeamViewer_Setup_en.exe
2014-02-25 16:32 - 2014-02-25 16:32 - 00000000 ___HD () C:\Users\spltctrain8\.lptTpc
2014-02-25 16:17 - 2014-02-25 16:35 - 00001120 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-02-25 16:17 - 2014-02-25 16:17 - 00000000 ____D () C:\Program Files\TeamViewer
2014-02-25 16:16 - 2014-02-25 16:16 - 05814000 _____ (TeamViewer GmbH) C:\Users\spltctrain08\Downloads\TeamViewer_Setup_en.exe
2014-02-25 15:31 - 2014-03-03 10:56 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-25 15:08 - 2014-02-25 15:08 - 04187928 _____ (TeamViewer) C:\Users\spltctrain08\Downloads\EW_CentralManagement_QS_en(1).exe
2014-02-25 11:22 - 2013-07-04 05:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-02-25 11:21 - 2013-09-24 20:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-25 11:21 - 2013-09-24 20:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-25 11:21 - 2013-09-24 19:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-25 11:21 - 2013-09-24 19:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-25 11:21 - 2013-09-24 19:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-25 11:21 - 2013-09-24 19:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-25 11:21 - 2013-09-24 19:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-02-25 11:21 - 2013-09-24 18:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-25 11:21 - 2013-09-24 18:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-25 11:21 - 2013-07-08 22:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-02-25 11:21 - 2013-07-04 06:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-25 11:20 - 2013-11-11 20:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-25 11:19 - 2013-10-11 20:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-25 11:19 - 2013-10-11 20:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-25 11:19 - 2013-10-11 20:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-25 11:19 - 2013-07-25 19:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-02-25 11:19 - 2013-07-25 19:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-02-25 11:19 - 2013-06-14 21:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-02-25 10:23 - 2014-02-25 10:23 - 00000000 ____D () C:\Program Files\Citrix
2014-02-25 10:22 - 2014-02-25 10:22 - 00000000 ____D () C:\Users\spltctrain08\AppData\Local\Citrix
2014-02-25 10:18 - 2014-02-25 10:18 - 00753704 _____ (Citrix Online, a division of Citrix Systems, Inc.) C:\Users\spltctrain08\Downloads\g2ax_customer_downloader_win32_x86.exe
2014-02-21 09:51 - 2014-02-21 09:52 - 00000132 _____ () C:\Users\spltctrain08\Desktop\KhanAcademy.url
2014-02-21 09:51 - 2014-02-21 09:51 - 00000117 _____ () C:\Users\spltctrain08\Desktop\Physics Games.url
2014-02-14 11:55 - 2014-03-03 10:56 - 00000000 ____D () C:\Users\spltctrain08\AppData\Roaming\TeamViewer
2014-02-14 11:54 - 2014-02-14 11:54 - 04187928 _____ (TeamViewer) C:\Users\spltctrain08\Downloads\EW_CentralManagement_QS_en.exe
2014-02-14 11:46 - 2014-02-14 11:48 - 62209999 _____ () C:\Users\spltctrain08\Downloads\InstallPCResClientV4x_4.2.0.19477.exe
2014-02-11 21:25 - 2013-12-05 20:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-11 21:25 - 2013-12-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

 

FRST - part 2

==================== One Month Modified Files and Folders =======

2014-03-08 08:00 - 2014-03-08 07:59 - 00014234 _____ () C:\Users\spltctrain08\Downloads\FRST.txt
2014-03-08 07:59 - 2014-03-08 07:59 - 01145344 _____ (Farbar) C:\Users\spltctrain08\Downloads\FRST.exe
2014-03-08 07:59 - 2014-03-08 07:59 - 00000000 ____D () C:\FRST
2014-03-08 07:57 - 2011-01-11 09:54 - 00000128 _____ () C:\Windows\system32\config\netlogon.ftl
2014-03-07 07:56 - 2011-01-19 13:17 - 01351153 _____ () C:\Windows\WindowsUpdate.log
2014-03-07 07:54 - 2012-12-18 15:02 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-03-07 07:53 - 2014-03-07 07:53 - 11125072 _____ (Microsoft Corporation) C:\Users\spltctrain08\Downloads\mseinstall(1).exe
2014-03-07 07:53 - 2014-03-07 07:53 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-03-07 07:49 - 2011-01-07 09:42 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-07 07:49 - 2009-07-13 22:34 - 00018128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-07 07:49 - 2009-07-13 22:34 - 00018128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-07 07:48 - 2014-03-07 07:48 - 00015003 _____ () C:\ComboFix.txt
2014-03-07 07:48 - 2014-03-07 07:15 - 00000000 ____D () C:\Qoobox
2014-03-07 07:48 - 2009-07-13 20:37 - 00000000 __RHD () C:\Users\Default
2014-03-07 07:48 - 2009-07-13 20:37 - 00000000 ___RD () C:\Users\Public
2014-03-07 07:46 - 2014-03-07 07:15 - 00000000 ____D () C:\Windows\erdnt
2014-03-07 07:42 - 2012-12-08 08:48 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-07 07:42 - 2009-07-13 20:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-07 07:41 - 2014-03-03 11:07 - 00027162 _____ () C:\Windows\PFRO.log
2014-03-07 07:41 - 2014-03-03 11:07 - 00000784 _____ () C:\Windows\setupact.log
2014-03-07 07:41 - 2009-07-13 22:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-07 07:41 - 2009-07-13 20:03 - 68157440 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-03-07 07:41 - 2009-07-13 20:03 - 19398656 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-03-07 07:41 - 2009-07-13 20:03 - 01048576 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-03-07 07:41 - 2009-07-13 20:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-03-07 07:19 - 2013-10-15 08:03 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324UA.job
2014-03-07 07:19 - 2012-12-08 08:48 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-07 07:19 - 2011-01-19 13:28 - 00001590 __RSH () C:\Users\spltctrain08\ntuser.pol
2014-03-07 07:19 - 2011-01-19 13:28 - 00000000 ____D () C:\Users\spltctrain08
2014-03-07 07:12 - 2014-03-07 07:12 - 05187267 ____R (Swearware) C:\Users\spltctrain08\Downloads\ComboFix.exe
2014-03-06 17:11 - 2014-03-06 16:07 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-06 16:55 - 2014-03-06 16:55 - 00000000 ____D () C:\Users\spltctrain08\mbar
2014-03-06 16:55 - 2014-03-06 16:07 - 00107224 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-06 16:55 - 2014-03-06 16:06 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-06 16:52 - 2014-03-06 16:06 - 00000000 ____D () C:\Users\spltctrain08\Desktop\mbar
2014-03-06 16:06 - 2014-03-06 16:06 - 12589848 _____ (Malwarebytes Corp.) C:\Users\spltctrain08\Downloads\mbar-1.07.0.1009.exe
2014-03-06 16:06 - 2014-03-06 15:59 - 00000000 ____D () C:\Users\spltctrain08\Desktop\RK_Quarantine
2014-03-06 16:05 - 2014-03-06 16:05 - 00002115 _____ () C:\Users\spltctrain08\Desktop\RKreport[0]_D_03062014_160519.txt
2014-03-06 16:03 - 2014-03-06 16:03 - 00002039 _____ () C:\Users\spltctrain08\Desktop\RKreport[0]_S_03062014_160350.txt
2014-03-06 15:59 - 2014-03-06 15:57 - 03819008 _____ () C:\Users\spltctrain08\Downloads\RogueKiller.exe
2014-03-04 10:46 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\Web
2014-03-04 09:24 - 2014-02-27 15:35 - 00000000 ____D () C:\Program Files\NirSoft
2014-03-04 09:24 - 2011-01-20 17:43 - 00000000 ____D () C:\Program Files\EnvisionWare
2014-03-04 09:17 - 2012-11-02 08:21 - 00000000 ____D () C:\ProgramData\EnvisionWare
2014-03-03 16:38 - 2009-07-13 20:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-03-03 14:28 - 2014-03-03 14:28 - 01933048 _____ (Bleeping Computer, LLC) C:\Users\spltctrain08\Downloads\rkill.exe
2014-03-03 14:12 - 2014-03-03 14:12 - 01037734 _____ (Thisisu) C:\Users\spltctrain08\Downloads\JRT.exe
2014-03-03 14:12 - 2014-03-03 14:12 - 00000000 ____D () C:\Windows\ERUNT
2014-03-03 14:01 - 2012-12-07 17:08 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-03 13:53 - 2014-03-03 13:53 - 00930952 _____ (CNET Download.com) C:\Users\spltctrain08\Downloads\cbsidlm-cbsi183-AdwCleaner-SEO-75851221.exe
2014-03-03 11:57 - 2014-03-03 11:57 - 00000524 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 4587b91f-045e-46f6-9575-33afe631e208.job
2014-03-03 11:57 - 2014-03-03 11:57 - 00000524 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 1e7a9617-ccc8-42cb-a82c-ea645e1df6be.job
2014-03-03 11:57 - 2014-03-03 11:57 - 00000000 ____D () C:\Users\spltctrain08\AppData\Roaming\SUPERAntiSpyware.com
2014-03-03 11:57 - 2014-03-03 11:56 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-03 11:56 - 2014-03-03 11:56 - 00001965 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-03-03 11:56 - 2014-03-03 11:56 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-03 11:55 - 2014-03-03 11:55 - 18146232 _____ (SUPERAntiSpyware) C:\Users\spltctrain08\Downloads\SUPERAntiSpyware.exe
2014-03-03 11:07 - 2014-03-03 11:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-03 10:56 - 2014-02-25 16:35 - 00000000 ____D () C:\Users\spltctrain8\AppData\Roaming\TeamViewer
2014-03-03 10:56 - 2014-02-25 15:31 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-03 10:56 - 2014-02-14 11:55 - 00000000 ____D () C:\Users\spltctrain08\AppData\Roaming\TeamViewer
2014-03-03 10:56 - 2012-04-28 08:09 - 00000000 ____D () C:\Users\spltctrain08\Tracing
2014-03-03 10:56 - 2011-06-04 10:36 - 00000000 ____D () C:\Program Files\KompoZer
2014-03-03 10:56 - 2011-01-07 12:03 - 00000000 ____D () C:\Program Files\UltraVNC
2014-03-03 10:56 - 2011-01-07 11:18 - 00000000 ____D () C:\Windows\Panther
2014-03-03 10:56 - 2011-01-07 09:58 - 00000000 ____D () C:\Program Files\Notepad++
2014-03-03 10:56 - 2010-03-09 13:20 - 00000000 ____D () C:\PCRes
2014-03-03 10:56 - 2010-03-08 13:30 - 00000000 ____D () C:\SYSTEM.SAV
2014-03-03 10:56 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-03-03 09:22 - 2014-03-03 09:22 - 06682336 _____ (SpeedyPC Software) C:\Users\spltctrain08\Downloads\SpeedyPC Pro Installer.exe
2014-03-03 09:09 - 2014-03-03 09:09 - 01243588 _____ () C:\Users\spltctrain08\Downloads\ProcessExplorer.zip
2014-02-28 07:33 - 2013-10-15 08:03 - 00000884 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324Core.job
2014-02-28 03:58 - 2011-01-07 15:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-28 03:47 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-28 03:42 - 2009-07-13 20:04 - 00000478 _____ () C:\Windows\win.ini
2014-02-28 03:15 - 2014-02-28 03:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-02-28 03:15 - 2014-02-28 03:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-02-28 03:08 - 2011-01-07 15:07 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-02-27 17:01 - 2014-02-27 17:00 - 11125072 _____ (Microsoft Corporation) C:\Users\spltctrain08\Downloads\mseinstall.exe
2014-02-27 16:14 - 2011-01-19 14:58 - 00124024 _____ () C:\Users\spltctrain08\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-27 15:34 - 2014-02-27 15:34 - 00140832 _____ () C:\Users\spltctrain08\Downloads\shexview_setup.exe
2014-02-27 14:51 - 2011-03-13 08:00 - 00000000 ____D () C:\Windows\Minidump
2014-02-27 14:43 - 2014-02-27 14:43 - 00000000 ____D () C:\Users\spltctrain08\AppData\Local\VS Revo Group
2014-02-27 14:43 - 2014-02-27 14:43 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-02-27 14:42 - 2014-02-27 14:42 - 10619688 _____ (VS Revo Group ) C:\Users\spltctrain08\Downloads\RevoUninProSetup.exe
2014-02-27 11:58 - 2012-02-10 16:17 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-27 11:57 - 2014-02-27 11:57 - 00000000 ____D () C:\Users\spltctrain08\AppData\Roaming\Malwarebytes
2014-02-27 11:56 - 2014-02-27 11:56 - 04130656 _____ (Kaspersky Lab ZAO) C:\Users\spltctrain08\Downloads\tdsskiller.exe
2014-02-27 11:40 - 2014-02-27 11:39 - 00662432 _____ () C:\Users\spltctrain08\Downloads\ZipExtractorSetup.exe
2014-02-27 11:00 - 2014-02-27 11:00 - 00000000 ___HD () C:\Users\testuser\.lptTpc
2014-02-27 11:00 - 2014-02-27 10:59 - 00000000 ____D () C:\Users\testuser\AppData\Roaming\Apple Computer
2014-02-27 11:00 - 2014-02-27 10:59 - 00000000 ____D () C:\Users\testuser\AppData\Local\Google
2014-02-27 10:59 - 2014-02-27 10:59 - 00001413 _____ () C:\Users\testuser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 10:59 - 2014-02-27 10:59 - 00000020 ___SH () C:\Users\testuser\ntuser.ini
2014-02-27 10:59 - 2014-02-27 10:59 - 00000000 ____D () C:\Users\testuser\AppData\Roaming\Adobe
2014-02-27 10:44 - 2012-06-25 11:05 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-27 10:25 - 2014-02-27 10:25 - 00000017 _____ () C:\Users\spltctrain08\AppData\Local\resmon.resmoncfg
2014-02-27 04:00 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\rescache
2014-02-27 03:25 - 2011-01-20 17:40 - 00000000 ____D () C:\Users\spltctrain08\AppData\Roaming\Mozilla
2014-02-27 03:03 - 2014-02-27 03:03 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-27 03:03 - 2014-02-27 03:03 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-27 03:03 - 2014-02-27 03:03 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-27 03:03 - 2014-02-27 03:03 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-27 03:03 - 2014-02-27 03:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-27 03:03 - 2014-02-27 03:03 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-27 03:02 - 2014-02-27 03:02 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-02-27 03:02 - 2014-02-27 03:02 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-27 03:02 - 2014-02-27 03:02 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-27 03:02 - 2014-02-27 03:02 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-27 03:02 - 2014-02-27 03:02 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-27 03:02 - 2014-02-27 03:02 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-27 03:02 - 2014-02-27 03:02 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-27 03:02 - 2014-02-27 03:02 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-26 11:10 - 2014-02-26 11:10 - 00000000 ____D () C:\Users\spltctrain8\Downloads\handle
2014-02-26 11:09 - 2014-02-26 11:09 - 00228012 _____ () C:\Users\spltctrain8\Downloads\Handle.zip
2014-02-26 10:42 - 2014-02-26 10:42 - 01243588 _____ () C:\Users\spltctrain8\Downloads\ProcessExplorer.zip
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\it-IT
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\el-GR
2014-02-26 08:43 - 2009-07-13 20:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-26 08:36 - 2014-02-26 08:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-26 08:23 - 2014-02-26 08:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-26 08:23 - 2014-02-26 08:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-26 08:18 - 2014-02-26 08:18 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-25 16:35 - 2014-02-25 16:35 - 00000000 ____D () C:\Users\spltctrain8\AppData\Roaming\Adobe
2014-02-25 16:35 - 2014-02-25 16:17 - 00001120 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-02-25 16:34 - 2014-02-25 16:33 - 05814000 _____ (TeamViewer GmbH) C:\Users\spltctrain8\Downloads\TeamViewer_Setup_en.exe
2014-02-25 16:32 - 2014-02-25 16:32 - 00000000 ___HD () C:\Users\spltctrain8\.lptTpc
2014-02-25 16:32 - 2011-01-19 13:18 - 00001413 _____ () C:\Users\spltctrain8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-25 16:32 - 2011-01-19 13:18 - 00000000 ____D () C:\Users\spltctrain8\AppData\Roaming\Apple Computer
2014-02-25 16:32 - 2011-01-19 13:18 - 00000000 ____D () C:\Users\spltctrain8\AppData\Local\Google
2014-02-25 16:32 - 2011-01-19 13:17 - 00000000 ____D () C:\Users\spltctrain8
2014-02-25 16:29 - 2009-07-13 22:33 - 00486024 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-25 16:17 - 2014-02-25 16:17 - 00000000 ____D () C:\Program Files\TeamViewer
2014-02-25 16:16 - 2014-02-25 16:16 - 05814000 _____ (TeamViewer GmbH) C:\Users\spltctrain08\Downloads\TeamViewer_Setup_en.exe
2014-02-25 15:08 - 2014-02-25 15:08 - 04187928 _____ (TeamViewer) C:\Users\spltctrain08\Downloads\EW_CentralManagement_QS_en(1).exe
2014-02-25 11:07 - 2011-01-19 15:06 - 00000000 __HDC () C:\ProgramData\{09863916-BF7A-4140-805E-913BED9CB1C8}
2014-02-25 10:23 - 2014-02-25 10:23 - 00000000 ____D () C:\Program Files\Citrix
2014-02-25 10:22 - 2014-02-25 10:22 - 00000000 ____D () C:\Users\spltctrain08\AppData\Local\Citrix
2014-02-25 10:18 - 2014-02-25 10:18 - 00753704 _____ (Citrix Online, a division of Citrix Systems, Inc.) C:\Users\spltctrain08\Downloads\g2ax_customer_downloader_win32_x86.exe
2014-02-21 09:52 - 2014-02-21 09:51 - 00000132 _____ () C:\Users\spltctrain08\Desktop\KhanAcademy.url
2014-02-21 09:51 - 2014-02-21 09:51 - 00000117 _____ () C:\Users\spltctrain08\Desktop\Physics Games.url
2014-02-21 09:34 - 2014-01-13 14:33 - 00002129 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-18 21:13 - 2009-07-13 22:53 - 00032594 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-14 11:54 - 2014-02-14 11:54 - 04187928 _____ (TeamViewer) C:\Users\spltctrain08\Downloads\EW_CentralManagement_QS_en.exe
2014-02-14 11:48 - 2014-02-14 11:46 - 62209999 _____ () C:\Users\spltctrain08\Downloads\InstallPCResClientV4x_4.2.0.19477.exe
2014-02-06 04:38 - 2014-02-28 03:31 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 04:20 - 2014-02-28 03:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 04:19 - 2014-02-28 03:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 04:01 - 2014-02-28 03:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 04:00 - 2014-02-28 03:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 03:57 - 2014-02-28 03:31 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 03:52 - 2014-02-28 03:31 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 03:52 - 2014-02-28 03:31 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 03:49 - 2014-02-28 03:31 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 03:47 - 2014-02-28 03:31 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 03:47 - 2014-02-28 03:31 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 03:46 - 2014-02-28 03:31 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 03:34 - 2014-02-28 03:31 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 03:25 - 2014-02-28 03:31 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 03:25 - 2014-02-28 03:31 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 03:13 - 2014-02-28 03:31 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 03:09 - 2014-02-28 03:31 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 03:03 - 2014-02-28 03:31 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 02:41 - 2014-02-28 03:31 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 02:36 - 2014-02-28 03:31 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 02:34 - 2014-02-28 03:31 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 00:05

==================== End Of Log ============================

 

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-03-2014 01
Ran by spltctrain08 at 2014-03-08 08:01:12
Running from C:\Users\spltctrain08\Downloads
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions (HKLM\...\Digital Editions) (Version: - )
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Photoshop Elements 7.0 (HKLM\...\Adobe Photoshop Elements 7) (Version: 7.0 - Adobe Systems Incorporated)
Adobe Photoshop Elements 7.0 (Version: 7.0.0.3 - Adobe Systems Incorporated) Hidden
Adobe Photoshop.com Inspiration Browser (HKLM\...\PhotoshopdotcomInspirationBrowser.4C35C4D325D350FE0114230CBADCA2DDD0AC8D25.1) (Version: 2.61 - Adobe Systems Incorporated)
Adobe Premiere Elements 7.0 (HKLM\...\PremElem70) (Version: 7.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 7.0 (Version: 7.0.0.3 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 7.0 Templates (HKLM\...\PremElem70Templates) (Version: 7.0.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 7.0 Templates (Version: 7.0.0 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.05) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 1.3.14 (Unicode) (HKLM\...\Audacity 1.3 Beta (Unicode)_is1) (Version: - Audacity Team)
Audacity 2.0.5 (HKLM\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
AVSDK5 (Version: 5.3.13 - Commtouch, Inc.) Hidden
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{81FB7C60-565A-4869-9D90-3BE1D270E8B7}) (Version: - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{CD3C2621-B611-4A30-BB37-81CA880AB895}) (Version: - Microsoft)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM\...\{1B729E3D-B16D-3A41-A9AE-6AEC20C6580D}) (Version: 65.156.32831 - Google, Inc.)
Google SketchUp 8 (HKLM\...\{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8}) (Version: 3.0.4811 - Google, Inc.)
Google Talk (remove only) (HKLM\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version: - )
Google Talk Plugin (HKLM\...\{CCE68200-4ED0-3E0A-A7F2-504897E356AB}) (Version: 5.1.5.17733 - Google)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.)
KompoZer 0.8b3 (HKLM\...\{20aa4150-b5f4-11de-8a39-0800200c9a66}_is1) (Version: - KompoZer)
LibreOffice 3.5 (HKLM\...\{09D72100-CAC9-42BF-AD52-47F784C92DB6}) (Version: 3.5.2.202 - The Document Foundation)
Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Access MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Tool Web Package:diskpart.exe (HKLM\...\{9782762F-639B-499B-A23D-5EBEAFC160E6}) (Version: 1.0.0.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Word MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 en-US) (HKLM\...\Mozilla Firefox 26.0 (x86 en-US)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
Notepad++ (HKLM\...\Notepad++) (Version: 6.5.3 - Notepad++ Team)
OneClickdigital Media Manager (HKLM\...\{73AC7621-F984-46CB-BC73-C0D15FB78FE7}) (Version: 34.0.0.0 - Recorded Books)
OpenOffice 4.0.1 (HKLM\...\{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}) (Version: 4.01.9714 - Apache Software Foundation)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
OverDrive Media Console (HKLM\...\{7326DA0C-C09B-491C-81FF-6DA12B2256BB}) (Version: 3.3.0 - OverDrive, Inc.)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41417}) (Version: 3.61.0 - dotPDN LLC)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.2 - pdfforge)
Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
PhotoshopdotcomInspirationBrowser (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version: - Microsoft) Hidden
Skype™ 6.11 (HKLM\...\{1845470B-EB14-4ABC-835B-E36C693DC07D}) (Version: 6.11.102 - Skype Technologies S.A.)
SmartSound Quicktracks for Premiere Elements (HKLM\...\InstallShield_{F6234880-85BE-4DCB-8A45-1FF85A1A8552}) (Version: 3.11.3090 - SmartSound Software Inc)
SmartSound Quicktracks for Premiere Elements (Version: 3.11.3090 - SmartSound Software Inc) Hidden
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.7.1018 - SUPERAntiSpyware.com)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.26297 - TeamViewer)
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.0.9.5 - uvnc bvba)
Update for Microsoft .NET Framework 4.5 (KB2750147) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2750147) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition (HKLM\...\{90150000-0015-0409-0000-0000000FF1CE}_Office15.PROPLUS_{104D0AEE-BC85-4FFB-8BD8-D95A850D7A4D}) (Version: - Microsoft)
Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FB31ABE4-BB41-4E9A-A252-1A4BC9DC8C43}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft)
Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{F15AA550-A0B9-44AD-9067-2294CCA51F1C}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition (HKLM\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{AC57CF13-C24E-4C00-969F-5394DAE589C5}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837583) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{E21274CE-CA0C-49FA-93F4-DC292A052264}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{B5C70C99-B109-42FD-B219-FF12CA543F19}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{5E8EB600-8B94-429E-873E-98369C6DC1BC}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F307363-49DA-4AE7-9D9D-DAA1FF59274F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6E6B2968-B9D7-40C9-9FC2-8E729DDBB39C}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AFDC9BDD-5608-4A21-8066-13E2ACE1EDB4}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F8AD68D-9F41-446E-AA81-C43BF88671BF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BCD0EA38-A8FB-4F3D-B04E-DFFB38BC7849}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9E03AB38-EF60-4DE6-92FB-656E23403BFA}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{E58009CD-D950-4CAE-89B4-E97C3B78319B}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{03FC8649-9511-4FB1-BE34-67A442505DCF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B299B17D-874D-43DD-84AA-414BD9C70021}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7E8D777B-BD75-480D-AC03-AF9C3D83CDBF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (HKLM\...\{90150000-006E-0409-0000-0000000FF1CE}_Office15.PROPLUS_{A07ABCD5-4CAF-4493-A591-A6233EF13C7F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817314) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B9A3A7A7-8B5B-4D07-9816-80EE2EA5B9B7}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{670559E6-5725-4B84-A16C-0859771F25DE}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM\...\{90150000-0016-0409-0000-0000000FF1CE}_Office15.PROPLUS_{5EFADE14-CE0B-43BF-ADD2-850FCB79485F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{188DFB16-BA3F-4AD3-9432-45C8FA64EC8B}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BC369230-B0E0-4BB0-82D6-E93196060BFA}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2826004) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FD782270-0456-4B87-AC5E-C6EE2D063C48}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{C5CF8938-646A-41A5-A4E6-6EEE4205CBA4}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.PROPLUS_{F75F8521-118D-4DE2-927F-073BE7B6DC7F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.PROPLUS_{E11A0DDD-9F6D-49C6-8F02-850D44DD7639}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM\...\{90150000-001F-0C0A-0000-0000000FF1CE}_Office15.PROPLUS_{E6D73E98-906E-4520-99B6-FA1647EC2DAE}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{954A0EA5-CCCB-4B4E-8664-40E2CC8BBCBB}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4B1A48FA-CAE2-49BB-A912-6F96AE7875D9}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837626) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{079FC22A-639F-4690-8512-F54DCD8493C7}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837637) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{13A97DC6-1E49-40B1-94E6-EB4CC3087607}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837638) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{C89EE024-ECC9-43EB-9D6A-52AB9B73ED63}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837655) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{2982593C-B10B-4757-A58A-7926ED063448}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837655) 32-Bit Edition (HKLM\...\{90150000-006E-0409-0000-0000000FF1CE}_Office15.PROPLUS_{90737997-99D8-46FB-BB7F-7153AEAD6C05}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2850066) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{0AA960ED-0F9A-42EC-B9F4-52A104EB954D}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FA115DB4-AD0A-4C2B-8713-DB15275B7426}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition (HKLM\...\{90150000-00A1-0409-0000-0000000FF1CE}_Office15.PROPLUS_{70686EE3-2A2C-4049-B42F-9E285FE28EFD}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{DCE104A1-1875-4469-A83D-A5BFA6C4640F}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2850061) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{3EF35AB5-21A1-4858-97BB-E4CF1ECF3736}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2850061) 32-Bit Edition (HKLM\...\{90150000-001A-0409-0000-0000000FF1CE}_Office15.PROPLUS_{C212BC6C-7778-4333-BE90-15C2512945EF}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{DA2F7ECE-6629-4A80-9CDE-EC95261B75E2}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2767850) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{94A5E2C5-5F2C-4238-8387-F16873B7927C}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2767850) 32-Bit Edition (HKLM\...\{90150000-0018-0409-0000-0000000FF1CE}_Office15.PROPLUS_{03FB2087-E3D5-4B28-A3A9-70CE02CA4E39}) (Version: - Microsoft)
Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{696ACAB0-DCE3-4050-849A-629CE94A9E3A}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817495) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{00ADF78E-D103-44D9-93FC-4E0B4255DF61}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2837652) 32-Bit Edition (HKLM\...\{90150000-00BA-0409-0000-0000000FF1CE}_Office15.PROPLUS_{A6D399B8-E269-4872-8B45-7E43C04D08AA}) (Version: - Microsoft)
Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{166909FC-6736-4EE5-9491-1BF9A4EE84E7}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9CEFDC22-A298-451A-905E-28E42B90A563}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition (HKLM\...\{90150000-001A-0409-0000-0000000FF1CE}_Office15.PROPLUS_{C550C85A-004E-494A-A6D2-700C998CA806}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition (HKLM\...\{90150000-001B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{C550C85A-004E-494A-A6D2-700C998CA806}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition (HKLM\...\{90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{C550C85A-004E-494A-A6D2-700C998CA806}) (Version: - Microsoft)
VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)
Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
XnView 2.13 (HKLM\...\XnView_is1) (Version: 2.13 - Gougelet Pierre-e)
Yahoo! Messenger (HKLM\...\Yahoo! Messenger) (Version: - Yahoo! Inc.)

==================== Restore Points =========================

24-01-2014 19:04:39 Removed Google Earth.
24-01-2014 19:07:38 Removed OpenOffice.org 3.3
24-01-2014 19:18:06 Removed OverDrive Media Console
24-01-2014 19:19:38 Installed OverDrive Media Console
12-02-2014 03:19:23 Windows Update
12-02-2014 03:24:53 Windows Update
12-02-2014 03:25:46 Windows Update
12-02-2014 03:26:58 Windows Update
12-02-2014 03:28:39 Windows Update
12-02-2014 03:29:27 Windows Update
12-02-2014 03:33:53 Windows Update
21-02-2014 15:10:52 Scheduled Checkpoint
25-02-2014 17:19:35 Windows Update
26-02-2014 14:16:23 Windows Update
27-02-2014 09:00:18 Windows Update
28-02-2014 09:01:14 Windows Update
03-03-2014 14:54:15 Windows Update
03-03-2014 16:50:54 SpeedyPC Pro Backup
03-03-2014 17:38:42 Removed Java(TM) 6 Update 45
03-03-2014 17:41:38 Removed Java 7 Update 45
07-03-2014 13:49:22 Windows Update

==================== Hosts content: ==========================

2009-07-13 20:04 - 2014-03-07 07:42 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {08E6760F-F902-4B1C-BA2C-20C340E352FB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-08] (Google Inc.)
Task: {142781CF-7C53-4864-8289-05258DD273F2} - System32\Tasks\SpeedyPC Update Version3 Startup Task => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe
Task: {18DED6E8-FB19-4385-B547-E9D1F81C868B} - System32\Tasks\SpeedyPC Update Version3 => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe
Task: {1AC8C232-1DAA-4893-861B-971133741200} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324UA => C:\Users\spltctrain08\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-15] (Google Inc.)
Task: {33DE8E40-1418-4B85-964F-3D0B4AD26E82} - \GoogleUpdateTaskUserS-1-5-21-2674256376-920750787-838833561-1000Core No Task File
Task: {4294F8DB-2E6D-402C-9CC6-B0273D9D0EA3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {65C9F1F8-F8A6-4828-9281-2260CB14EF50} - \WPD\SqmUpload_S-1-5-21-2674256376-920750787-838833561-1000 No Task File
Task: {71CF845D-1EAD-46DE-8C7A-D1CAD8CBDD4A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-08] (Google Inc.)
Task: {80F58A3E-CBD2-4689-8C67-F7757CD7E695} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-13] (Adobe Systems Incorporated)
Task: {92FC2975-B802-451B-BFCD-C11F20483D98} - \GoogleUpdateTaskUserS-1-5-21-2674256376-920750787-838833561-1000UA No Task File
Task: {DE6F6946-30D6-4A38-9E19-242E3756DF2E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324Core => C:\Users\spltctrain08\AppData\Local\Google\Update\GoogleUpdate.exe [2013-10-15] (Google Inc.)
Task: {E106215D-6E75-4EB0-852A-A1763FEA6F28} - System32\Tasks\SpeedyPC Registration3 => Rundll32.exe "C:\Program Files\Common Files\SpeedyPC Software\UUS3\UUS3.dll" RunUns
Task: {E2920A33-592D-4B4A-879C-8926679F6492} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {E31526B4-5372-40EF-959F-D0164B20C12F} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324Core.job => C:\Users\spltctrain08\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324UA.job => C:\Users\spltctrain08\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 1e7a9617-ccc8-42cb-a82c-ea645e1df6be.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 4587b91f-045e-46f6-9575-33afe631e208.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-20 15:45 - 2010-10-20 15:45 - 08801120 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2014-02-25 15:31 - 2014-02-25 15:31 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-01-13 14:34 - 2014-01-13 14:34 - 16242056 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue "= "2 "

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PS/2 Compatible Mouse
Description: PS/2 Compatible Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/07/2014 07:52:00 AM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073418231

Error: (03/07/2014 07:30:55 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\wbem\wmiprvse.exe; Description = ComboFix created restore point; Error = 0x8007043c).

Error: (03/07/2014 07:30:55 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007043c, This service cannot be started in Safe Mode
.


Operation:
Instantiating VSS server

Error: (03/07/2014 07:30:55 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name IVssCoordinatorEx2 cannot be started during Safe Mode.
The Volume Shadow Copy service cannot start while in safe mode. [0x8007043c, This service cannot be started in Safe Mode
]


Operation:
Instantiating VSS server

Error: (03/07/2014 07:18:09 AM) (Source: Microsoft Security Client Setup) (User: SALPUBLIB)
Description: HRESULT:0x8004FF11
Description:Can’t install Microsoft Security Essentials on a computer running in safe mode. Your computer is currently running in safe mode. To install Security Essentials, your computer must be running in normal mode. Please restart your computer in normal mode, and then try to run the Security Essentials Setup Wizard again. Error code:0x8004FF11.


System errors:
=============
Error: (03/08/2014 07:57:50 AM) (Source: DCOM) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (03/08/2014 07:57:50 AM) (Source: DCOM) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (03/08/2014 07:57:45 AM) (Source: DCOM) (User: )
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (03/08/2014 07:57:39 AM) (Source: DCOM) (User: )
Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (03/08/2014 07:57:27 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
discache
MpFilter
SASDIFSV
SASKUTIL
spldr
Wanarpv6

Error: (03/08/2014 07:57:21 AM) (Source: Service Control Manager) (User: )
Description: The Microsoft Network Inspection System service depends on the Microsoft Malware Protection Driver service which failed to start because of the following error:
%%31

Error: (03/07/2014 07:41:47 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 7:40:54 AM on ‎3/‎7/‎2014 was unexpected.

Error: (03/07/2014 07:37:46 AM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (03/07/2014 07:32:15 AM) (Source: Service Control Manager) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (03/07/2014 07:30:55 AM) (Source: DCOM) (User: )
Description: 1084VSS{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}


Microsoft Office Sessions:
=========================
Error: (03/07/2014 07:52:00 AM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073418231

Error: (03/07/2014 07:30:55 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x8007043c

Error: (03/07/2014 07:30:55 AM) (Source: VSS)(User: )
Description: CoCreateInstance0x8007043c, This service cannot be started in Safe Mode


Operation:
Instantiating VSS server

Error: (03/07/2014 07:30:55 AM) (Source: VSS)(User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x8007043c, This service cannot be started in Safe Mode


Operation:
Instantiating VSS server

Error: (03/07/2014 07:18:09 AM) (Source: Microsoft Security Client Setup)(User: SALPUBLIB)
Description: HRESULT:0x8004FF11
Description:Can’t install Microsoft Security Essentials on a computer running in safe mode. Your computer is currently running in safe mode. To install Security Essentials, your computer must be running in normal mode. Please restart your computer in normal mode, and then try to run the Security Essentials Setup Wizard again. Error code:0x8004FF11.


==================== Memory info ===========================

Percentage of memory in use: 40%
Total physical RAM: 2942.33 MB
Available physical RAM: 1748.31 MB
Total Pagefile: 5882.95 MB
Available Pagefile: 4674.36 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.26 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.88 GB) (Free:172.82 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive z: () (Network) (Total:40 GB) (Free:8.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: D42AD42A)

Partition: GPT Partition Type.

==================== End Of Log ============================

 

Explorer.exe is still running high in normal boot.
(I went in and tried a few things and it goes crazy.)

(I did load the FRST.txt files also in 2 separate posts, I'm assuming those will be approved and appear in a bit.)

 

dupe...

 

When you say "Run FRST(FRST64) "

Do you mean just run that FARBAR, again (I have a 32 bit client.)

then I apply the fix file.

Thanks!

 

fixlist.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-03-2014 01
Ran by spltctrain08 at 2014-03-08 15:20:23 Run:1
Running from C:\Users\spltctrain08\Downloads\FARBAR
Boot Mode: Safe Mode (with Networking)

==============================================

Content of fixlist:
*****************
S4 vseamps; C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe [97088 2011-12-12] (Commtouch, Inc.)
S4 vsedsps; C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe [97088 2011-12-12] (Commtouch, Inc.)
S4 vseqrts; C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe [142144 2011-12-12] (Commtouch, Inc.)
C:\Program Files\Common Files\Authentium
S2 AMP; C:\Windows\system32\Drivers\amp.sys [137536 2011-12-12] (Commtouch, Inc.)
S2 AMPSE; C:\Windows\system32\Drivers\ampse.sys [1189696 2011-12-12] (Commtouch, Inc.)
C:\Windows\system32\Drivers\amp.sys
C:\Windows\system32\Drivers\ampse.sys
Task: {142781CF-7C53-4864-8289-05258DD273F2} - System32\Tasks\SpeedyPC Update Version3 Startup Task => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe
C:\Program Files\Common Files\SpeedyPC Software
Task: {18DED6E8-FB19-4385-B547-E9D1F81C868B} - System32\Tasks\SpeedyPC Update Version3 => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe
Task: {33DE8E40-1418-4B85-964F-3D0B4AD26E82} - \GoogleUpdateTaskUserS-1-5-21-2674256376-920750787-838833561-1000Core No Task File
Task: {65C9F1F8-F8A6-4828-9281-2260CB14EF50} - \WPD\SqmUpload_S-1-5-21-2674256376-920750787-838833561-1000 No Task File
Task: {92FC2975-B802-451B-BFCD-C11F20483D98} - \GoogleUpdateTaskUserS-1-5-21-2674256376-920750787-838833561-1000UA No Task File
Task: {E106215D-6E75-4EB0-852A-A1763FEA6F28} - System32\Tasks\SpeedyPC Registration3 => Rundll32.exe "C:\Program Files\Common Files\SpeedyPC Software\UUS3\UUS3.dll" RunUns

*****************

vseamps => Service deleted successfully.
vsedsps => Service deleted successfully.
vseqrts => Service deleted successfully.
C:\Program Files\Common Files\Authentium => Moved successfully.
AMP => Service deleted successfully.
AMPSE => Service deleted successfully.
C:\Windows\system32\Drivers\amp.sys => Moved successfully.
C:\Windows\system32\Drivers\ampse.sys => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{142781CF-7C53-4864-8289-05258DD273F2} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{142781CF-7C53-4864-8289-05258DD273F2} => Key deleted successfully.
C:\Windows\System32\Tasks\SpeedyPC Update Version3 Startup Task => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpeedyPC Update Version3 Startup Task => Key deleted successfully.
"C:\Program Files\Common Files\SpeedyPC Software" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{18DED6E8-FB19-4385-B547-E9D1F81C868B} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18DED6E8-FB19-4385-B547-E9D1F81C868B} => Key deleted successfully.
C:\Windows\System32\Tasks\SpeedyPC Update Version3 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpeedyPC Update Version3 => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{33DE8E40-1418-4B85-964F-3D0B4AD26E82} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33DE8E40-1418-4B85-964F-3D0B4AD26E82} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-2674256376-920750787-838833561-1000Core => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{65C9F1F8-F8A6-4828-9281-2260CB14EF50} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65C9F1F8-F8A6-4828-9281-2260CB14EF50} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-2674256376-920750787-838833561-1000 => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{92FC2975-B802-451B-BFCD-C11F20483D98} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{92FC2975-B802-451B-BFCD-C11F20483D98} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-2674256376-920750787-838833561-1000UA => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E106215D-6E75-4EB0-852A-A1763FEA6F28} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E106215D-6E75-4EB0-852A-A1763FEA6F28} => Key deleted successfully.
C:\Windows\System32\Tasks\SpeedyPC Registration3 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpeedyPC Registration3 => Key deleted successfully.

==== End of Fixlog ====

 

Perfection! We are back in business!

Thank U!!!!!!!!!

 

ADW Cleaner:
# AdwCleaner v3.020 - Report created 03/03/2014 at 13:55:43
# Updated 27/02/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : spltctrain08 - TRAIN8-PC
# Running from : C:\Users\spltctrain08\AppData\Local\Temp\dlm8C2A.tmp\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : Z:\AI_RecycleBin
Folder Deleted : C:\ProgramData\SpeedyPC Software
Folder Deleted : C:\Program Files\SearchProtect
Folder Deleted : C:\Users\spltctrain08\AppData\Local\SearchProtect
Folder Deleted : C:\Users\spltctrain08\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\spltctrain08\AppData\Roaming\SpeedyPC Software

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Key Deleted : HKCU\Software\SpeedyPC Software
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\Software\SpeedyPC Software
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v26.0 (en-US)

[ File : C:\Users\spltctrain08\AppData\Roaming\Mozilla\Firefox\Profiles\ml9ybebh.default\prefs.js ]


[ File : C:\Users\spltctrain11\AppData\Roaming\Mozilla\Firefox\Profiles\q8bzo2hy.default\prefs.js ]


-\\ Google Chrome v33.0.1750.117

[ File : C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\spltctrain8\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2598 octets] - [03/03/2014 13:58:04]
AdwCleaner[S0].txt - [2569 octets] - [03/03/2014 13:59:37]

########## EOF - Z:\AdwCleaner\AdwCleaner[S0].txt - [2629 octets] ##########

 

Junkware Removal Tool:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Professional x86
Ran by spltctrain08 on Mon 03/10/2014 at 8:11:53.19
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\spltctrain08\AppData\Roaming\mozilla\firefox\profiles\ml9ybebh.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 03/10/2014 at 8:14:19.11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

OTL:

OTL logfile created on: 3/10/2014 8:21:52 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\spltctrain08\Downloads
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.87 Gb Total Physical Memory | 2.05 Gb Available Physical Memory | 71.51% Memory free
5.75 Gb Paging File | 4.84 Gb Available in Paging File | 84.21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 172.19 Gb Free Space | 73.94% Space Free | Partition Type: NTFS
Drive Z: | 40.00 Gb Total Space | 8.17 Gb Free Space | 20.43% Space Free | Partition Type: NTFS

Computer Name: TRAIN8-PC | User Name: spltctrain08 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/03/10 08:21:22 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\spltctrain08\Downloads\OTL.exe
PRC - [2014/02/17 08:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2014/01/06 16:37:38 | 005,625,624 | ---- | M] (SUPERAntiSpyware) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2013/10/23 16:01:10 | 000,022,208 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013/10/23 15:55:28 | 000,948,440 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2013/10/10 17:54:44 | 000,120,088 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe
PRC - [2012/11/22 21:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012/08/30 14:32:34 | 000,041,984 | ---- | M] (EnvisionWare, Inc.) -- C:\Program Files\EnvisionWare\PC Reservation\Client Module\PCReservationClientService.exe
PRC - [2012/06/25 13:58:20 | 000,324,096 | ---- | M] (EnvisionWare, Inc.) -- C:\Program Files\EnvisionWare\System Monitor\ewSystemMonitorSvc.exe
PRC - [2011/02/25 00:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/09/16 13:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2013/09/05 01:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/10/20 16:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll


========== Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- C:\Program Files\Centurion Technologies\Client\ctsrvnc.exe -- (Centurion Technologies V-Control)
SRV - [2014/02/25 16:31:44 | 000,118,896 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/02/17 08:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2014/02/06 04:47:18 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2014/01/13 15:34:12 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/12/19 01:41:02 | 030,814,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2013/10/23 16:01:10 | 000,280,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2013/10/23 16:01:10 | 000,022,208 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2013/10/10 17:54:44 | 000,120,088 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2013/05/26 23:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012/08/30 14:32:34 | 000,041,984 | ---- | M] (EnvisionWare, Inc.) [Auto | Running] -- C:\Program Files\EnvisionWare\PC Reservation\Client Module\PCReservationClientService.exe -- (PCReservationClientService)
SRV - [2012/06/25 13:58:20 | 000,324,096 | ---- | M] (EnvisionWare, Inc.) [Auto | Running] -- C:\Program Files\EnvisionWare\System Monitor\ewSystemMonitorSvc.exe -- (ewSystemMonitor)
SRV - [2011/01/20 19:55:00 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011/01/20 18:12:18 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/07/13 20:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009/07/13 20:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 20:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2008/09/16 13:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor7.0)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Windows\system32\TrueSight.sys -- (TrueSight)
DRV - File not found [Kernel | System | Stopped] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D9AA4C92-F4EE-442E-8EDB-A30CB6CC48F0}\MpKsl2b372065.sys -- (MpKsl2b372065)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\SPLTCT~3\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - [2013/09/27 10:53:06 | 000,104,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2011/07/22 11:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011/07/12 16:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/11/20 07:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 07:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 07:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 05:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 04:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 04:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2008/06/03 07:22:56 | 003,695,104 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2005/01/31 11:20:04 | 000,211,712 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LV561AV.SYS -- (PID_0928)
DRV - [2005/01/31 11:12:46 | 000,022,016 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LVUSBSta.sys -- (LVUSBSta)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.salinapubliclibrary.org/
IE - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "www.salinapubliclibrary.org "
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\spltctrain08\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\spltctrain08\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014/02/25 16:31:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014/02/28 04:20:27 | 000,000,000 | ---D | M]

[2011/05/27 13:14:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\spltctrain08\AppData\Roaming\Mozilla\Extensions
[2011/05/27 13:14:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\spltctrain08\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org
[2011/01/20 18:40:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\spltctrain08\AppData\Roaming\Mozilla\Firefox\Profiles\ml9ybebh.default\extensions
[2014/03/03 12:40:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2014/02/25 16:31:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/02/25 16:31:46 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/11/15 04:30:36 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{googleageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\33.0.1750.117\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\spltctrain08\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll
CHR - plugin: Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Google Drive = C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Wallet = C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Users\spltctrain08\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2014/03/07 08:42:45 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [PCReservation] C:\Program Files\EnvisionWare\PC Reservation\Client Module\PC Reservation Client Module.exe (EnvisionWare, Inc.)
O4 - HKU\.DEFAULT..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-18..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware)
O4 - HKU\.DEFAULT..\RunOnce: [ypagerps] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [ypagerps] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1645522239-1647877149-1801674531-1324\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.5.9 192.168.5.220
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = salpublib.org
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9438A4E0-C3F0-4E69-B46A-1E9D25427727}: DhcpNameServer = 192.168.5.9 192.168.5.220
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk /k:C *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/03/10 08:21:37 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Local\CrashDumps
[2014/03/08 16:26:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EnvisionWare
[2014/03/08 08:59:54 | 000,000,000 | ---D | C] -- C:\FRST
[2014/03/07 08:53:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2014/03/07 08:48:39 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2014/03/07 08:42:51 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2014/03/07 08:17:45 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/03/07 08:17:45 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/03/07 08:17:45 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/03/07 08:15:55 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/03/07 08:15:35 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2014/03/06 17:55:19 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\mbar
[2014/03/06 17:07:26 | 000,107,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2014/03/06 17:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2014/03/06 17:06:59 | 000,075,480 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/03/06 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\Desktop\mbar
[2014/03/06 16:59:47 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\Desktop\RK_Quarantine
[2014/03/03 15:12:25 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/03/03 12:57:14 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Roaming\SUPERAntiSpyware.com
[2014/03/03 12:56:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2014/03/03 12:56:09 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2014/03/03 12:56:09 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2014/03/03 10:09:48 | 002,924,736 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Users\spltctrain08\Desktop\procexp.exe
[2014/02/27 16:35:17 | 000,000,000 | ---D | C] -- C:\Program Files\NirSoft
[2014/02/27 15:43:30 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Local\VS Revo Group
[2014/02/27 15:43:16 | 000,000,000 | ---D | C] -- C:\ProgramData\VS Revo Group
[2014/02/27 12:58:22 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Local\Programs
[2014/02/27 12:57:54 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Roaming\Malwarebytes
[2014/02/27 12:06:13 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Local\ElevatedDiagnostics
[2014/02/26 09:32:51 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT
[2014/02/25 17:17:28 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2014/02/25 16:31:24 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014/02/25 11:23:31 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[2014/02/25 11:22:56 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Local\Citrix
[2014/02/14 12:55:18 | 000,000,000 | ---D | C] -- C:\Users\spltctrain08\AppData\Roaming\TeamViewer

========== Files - Modified Within 30 Days ==========

[2014/03/10 08:16:17 | 000,018,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/03/10 08:16:17 | 000,018,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/03/10 08:14:39 | 000,662,384 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/03/10 08:14:39 | 000,122,252 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/03/10 08:09:22 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/03/10 08:08:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/03/10 08:08:12 | 2313,940,992 | -HS- | M] () -- C:\hiberfil.sys
[2014/03/10 08:01:09 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/03/10 07:57:25 | 001,244,192 | ---- | M] () -- C:\Users\spltctrain08\Desktop\adwcleaner.exe
[2014/03/10 07:34:06 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/03/08 16:34:19 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324UA.job
[2014/03/07 08:54:01 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2014/03/07 08:42:45 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2014/03/07 08:19:42 | 000,001,590 | RHS- | M] () -- C:\Users\spltctrain08\ntuser.pol
[2014/03/06 17:55:50 | 000,107,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2014/03/06 17:55:42 | 000,075,480 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/03/03 12:57:19 | 000,000,524 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 4587b91f-045e-46f6-9575-33afe631e208.job
[2014/03/03 12:57:19 | 000,000,524 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 1e7a9617-ccc8-42cb-a82c-ea645e1df6be.job
[2014/03/03 12:56:11 | 000,001,965 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
[2014/02/28 08:33:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1647877149-1801674531-1324Core.job
[2014/02/27 11:25:06 | 000,000,017 | ---- | M] () -- C:\Users\spltctrain08\AppData\Local\resmon.resmoncfg
[2014/02/27 04:03:38 | 000,016,284 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2014/02/25 17:35:19 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2014/02/25 17:29:50 | 000,486,024 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014/02/21 10:52:05 | 000,000,132 | ---- | M] () -- C:\Users\spltctrain08\Desktop\KhanAcademy.url
[2014/02/21 10:51:44 | 000,000,117 | ---- | M] () -- C:\Users\spltctrain08\Desktop\Physics Games.url
[2014/02/21 10:34:56 | 000,002,129 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

========== Files Created - No Company Name ==========

[2014/03/10 08:05:02 | 001,244,192 | ---- | C] () -- C:\Users\spltctrain08\Desktop\adwcleaner.exe
[2014/03/08 09:15:41 | 062,209,999 | ---- | C] () -- C:\Users\spltctrain08\Desktop\InstallPCResClientV4x_4.2.0.19477.exe
[2014/03/07 08:53:49 | 000,002,117 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2014/03/07 08:17:45 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014/03/07 08:17:45 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014/03/07 08:17:45 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014/03/07 08:17:45 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014/03/07 08:17:45 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014/03/03 12:57:19 | 000,000,524 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 4587b91f-045e-46f6-9575-33afe631e208.job
[2014/03/03 12:57:19 | 000,000,524 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 1e7a9617-ccc8-42cb-a82c-ea645e1df6be.job
[2014/03/03 12:56:11 | 000,001,965 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
[2014/02/27 11:25:06 | 000,000,017 | ---- | C] () -- C:\Users\spltctrain08\AppData\Local\resmon.resmoncfg
[2014/02/27 04:03:38 | 000,016,284 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2014/02/26 09:34:55 | 062,209,999 | ---- | C] () -- C:\Users\spltctrain08\Documents\InstallPCResClientV4x_4.2.0.19477.exe
[2014/02/25 17:17:42 | 000,001,132 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
[2014/02/25 17:17:42 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2014/02/21 10:51:24 | 000,000,132 | ---- | C] () -- C:\Users\spltctrain08\Desktop\KhanAcademy.url
[2014/02/21 10:51:24 | 000,000,117 | ---- | C] () -- C:\Users\spltctrain08\Desktop\Physics Games.url
[2012/11/09 10:27:02 | 000,217,088 | ---- | C] () -- C:\Windows\pfapinet.dll
[2012/11/09 10:27:02 | 000,098,304 | ---- | C] () -- C:\Windows\nfapi.dll
[2012/11/09 10:27:02 | 000,054,784 | ---- | C] () -- C:\Windows\nfapinet.dll
[2012/11/09 10:27:02 | 000,049,152 | ---- | C] ( ) -- C:\Windows\Interop.vsecapi.dll
[2012/11/09 10:27:02 | 000,006,656 | ---- | C] ( ) -- C:\Windows\Interop.vsecqrt.dll
[2012/11/09 10:26:38 | 000,001,842 | ---- | C] () -- C:\Windows\ctsrsvc.exe.config
[2011/01/19 14:28:27 | 000,001,590 | RHS- | C] () -- C:\Users\spltctrain08\ntuser.pol
[2011/01/11 10:57:16 | 000,005,840 | RHS- | C] () -- C:\ProgramData\ntuser.pol

========== ZeroAccess Check ==========

[2009/07/13 23:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2013/07/25 20:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
" " = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 20:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012/02/10 17:05:33 | 000,000,000 | ---D | M] -- C:\Users\mschreiber\AppData\Roaming\Notepad++
[2012/04/09 11:14:09 | 000,000,000 | ---D | M] -- C:\Users\spltctrain08\AppData\Roaming\LibreOffice
[2014/01/04 10:10:31 | 000,000,000 | ---D | M] -- C:\Users\spltctrain08\AppData\Roaming\OpenOffice
[2012/04/09 11:14:53 | 000,000,000 | ---D | M] -- C:\Users\spltctrain08\AppData\Roaming\OpenOffice.org
[2011/01/20 18:41:05 | 000,000,000 | ---D | M] -- C:\Users\spltctrain08\AppData\Roaming\Opera
[2011/11/17 20:16:43 | 000,000,000 | ---D | M] -- C:\Users\spltctrain08\AppData\Roaming\OverDrive
[2014/03/03 11:56:39 | 000,000,000 | ---D | M] -- C:\Users\spltctrain08\AppData\Roaming\TeamViewer
[2011/01/12 19:05:07 | 000,000,000 | ---D | M] -- C:\Users\spltctrain11\AppData\Roaming\Canneverbe Limited
[2011/01/12 19:17:20 | 000,000,000 | ---D | M] -- C:\Users\spltctrain11\AppData\Roaming\Notepad++
[2011/01/12 19:08:53 | 000,000,000 | ---D | M] -- C:\Users\spltctrain11\AppData\Roaming\OpenOffice.org
[2011/01/12 19:08:07 | 000,000,000 | ---D | M] -- C:\Users\spltctrain11\AppData\Roaming\Opera
[2011/01/12 19:25:53 | 000,000,000 | ---D | M] -- C:\Users\spltctrain11\AppData\Roaming\OverDrive
[2014/03/03 11:56:39 | 000,000,000 | ---D | M] -- C:\Users\spltctrain8\AppData\Roaming\TeamViewer

========== Purity Check ==========



< End of report >