Solved Laptop Shutting Down-Running Slow- defender Wont turn on

[Solved] Laptop Shutting Down-Running Slow- defender Wont turn on

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17126 BrowserJavaVersion: 10.55.2
Run by Stan at 0:33:12 on 2014-06-22
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3836.2184 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\TODDSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files\TOSHIBA\TECO\TecoService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\windows\system32\wbem\wmiprvse.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\atieclxx.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\TOSHIBA\TECO\Teco.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
C:\windows\system32\SearchIndexer.exe
C:\Users\Stan\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\windows\system32\sppsvc.exe
C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\SearchFilterHost.exe
C:\windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com
uSearch Page = hxxp://www.google.com
mSearch Page = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
uProxyOverride = <-loopback>
uSearchAssistant = hxxp://www.google.com
mSearchAssistant = hxxp://www.google.com
mCustomizeSearch = hxxp://www.google.com
BHO: PlusIEEventHelper Class: {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll
TB: <No Name>: {ae07101b-46d4-4a98-af68-0333ea26e113} - LocalServer32 - <no file>
uRun: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
uRun: [SanDiskSecureAccess_Manager.exe] C:\Users\Stan\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe
uRun: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
mRun: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
mRun: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP
mRun: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
mRun: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
mRun: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe "
mRun: [IndexSearch] "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe "
mRun: [PaperPort PTD] "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe "
mRun: [PPort12reminder] "C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\12\Config\Ereg\Ereg.ini "
mRun: [PDFHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe
mRun: [PDF5 Registry Controller] C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe
mRun: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
mRun: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe "
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe "
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: EnableSecureUIAPath = dword:1
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: Open with PDF Viewer Plus - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
TCP: NameServer = 75.75.76.76 75.75.75.75 192.168.1.1
TCP: Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833} : DHCPNameServer = 75.75.76.76 75.75.75.75 192.168.1.1
TCP: Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833}\4586567456E6563796377427F65707D27657563747 : DHCPNameServer = 68.87.75.198 68.87.64.150 192.168.33.1
TCP: Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833}\84F4D454D243145414 : DHCPNameServer = 75.75.76.76 75.75.75.75
TCP: Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833}\84F4D454D253035323 : DHCPNameServer = 75.75.76.76 75.75.75.75
TCP: Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963} : DHCPNameServer = 75.75.76.76 75.75.75.75
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll
x64-TB: <No Name>: {ae07101b-46d4-4a98-af68-0333ea26e113} - LocalServer32 - <no file>
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [TPwrMain] C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
x64-Run: [HSON] C:\Program Files (x86)\TOSHIBA\TBS\HSON.exe
x64-Run: [SmoothView] C:\Program Files (x86)\Toshiba\SmoothView\SmoothView.exe
x64-Run: [00TCrdMain] C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
x64-Run: [Teco] "C:\Program Files (x86)\TOSHIBA\TECO\Teco.exe" /r
x64-Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe
x64-Run: [SmartFaceVWatcher] C:\Program Files (x86)\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
x64-Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
x64-Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe "
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\wdeh64d1.default-1399473730970\
FF - prefs.js: browser.startup.homepage - google.com
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\browser\plugins\npMozCouponPrinter.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\windows\System32\drivers\MpFilter.sys [2014-1-25 268512]
R0 PxHlpa64;PxHlpa64;C:\windows\System32\drivers\PxHlpa64.sys [2012-10-22 55856]
R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10;C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-9-1 169624]
R2 AMD External Events Utility;AMD External Events Utility;C:\windows\System32\atiesrxx.exe [2011-3-22 202752]
R2 NisDrv;Microsoft Network Inspection System;C:\windows\System32\drivers\NisDrvWFP.sys [2011-4-27 133928]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP;C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-3-9 144672]
R2 regi;regi;C:\windows\System32\drivers\regi.sys [2011-3-22 14112]
R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\TOSHIBA\TECO\TecoService.exe [2010-4-6 258928]
R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\System32\drivers\TVALZFL.sys [2009-6-19 14472]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-3-11 347872]
R3 NIWinCDEmu;ISO Mounter driver;C:\windows\System32\drivers\NIWinCDEmu.sys [2012-2-5 111696]
R3 PGEffect;Pangu effect driver;C:\windows\System32\drivers\PGEffect.sys [2011-3-22 35008]
R3 RTL8167;Realtek 8167 NT Driver;C:\windows\System32\drivers\Rt64win7.sys [2011-3-22 325152]
R3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;C:\windows\System32\drivers\rtwlane.sys [2013-5-2 1514568]
R3 TMachInfo;TMachInfo;C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2011-3-22 51512]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-2-5 137560]
R3 TPCHSrv;TPCH Service;C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2010-2-23 835952]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S3 BrYNSvc;BrYNSvc;C:\Program Files (x86)\Browny02\BrYNSvc.exe [2013-10-21 245760]
S3 CCUSBMIDI;CASIO USB MIDI;C:\windows\System32\drivers\ccusbmid.sys [2012-2-24 26624]
S3 cpudrv64;cpudrv64;C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [2011-6-2 17864]
S3 ffusb2audio;Focusrite USB 2.0 Audio Driver;C:\windows\System32\drivers\ffusb2audio.sys [2013-2-5 125304]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\windows\System32\ieetwcollector.exe [2014-6-12 111616]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\windows\System32\drivers\rdpvideominiport.sys [2012-11-1 19456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\windows\System32\drivers\RtsUStor.sys [2011-3-22 232992]
S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\windows\System32\drivers\rtl8192ce.sys [2011-3-22 1143912]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;C:\windows\System32\drivers\RTL8192su.sys [2010-9-29 695400]
S3 TridVid;USB2.0 VIDBOX NM;C:\windows\System32\drivers\tridvid.sys [2012-1-5 292056]
S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2014-5-6 56832]
S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe [2011-5-15 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== File Associations ===============
.
ShellExec: dreamweaver.exe: Open= "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS3\dreamweaver.exe ", "%1 "
.
=============== Created Last 30 ================
.
2014-06-22 03:55:43 75888 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{89A1ADF3-B424-4CED-B68E-80A62D4374AE}\offreg.dll
2014-06-22 02:48:39 -------- d-----w- C:\Users\Stan\AppData\Local\{419AF7EB-5486-4418-8245-8D0A6CD483AA}
2014-06-22 01:42:21 -------- d-----w- C:\Users\Stan\AppData\Local\{99385F5B-9C61-4D79-9FEB-DD795DDFC5EC}
2014-06-21 23:20:24 10779000 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{89A1ADF3-B424-4CED-B68E-80A62D4374AE}\mpengine.dll
2014-06-21 23:10:03 -------- d-----w- C:\Users\Stan\AppData\Local\{F88C05F4-C687-4DC4-BA5A-351E4D25AED4}
2014-06-21 22:28:25 687 ----a-w- C:\awh1EA6.tmp
2014-06-21 19:22:50 687 ----a-w- C:\awh23A6.tmp
2014-06-21 07:18:15 687 ----a-w- C:\awh2174.tmp
2014-06-21 04:30:24 687 ----a-w- C:\awh19E6.tmp
2014-06-21 02:05:53 -------- d-----w- C:\Users\Stan\AppData\Local\{E6BA404D-BC90-46EB-BD3E-34F877FD3F37}
2014-06-21 00:52:45 687 ----a-w- C:\awh5B49.tmp
2014-06-21 00:18:14 687 ----a-w- C:\awh4C0D.tmp
2014-06-20 07:39:16 -------- d-----w- C:\Users\Stan\AppData\Roaming\IK Multimedia
2014-06-20 07:23:51 -------- d-----w- C:\Users\Stan\AppData\Local\{FDCE6DA0-D3D2-416C-92B3-4F54ADE2425F}
2014-06-20 05:35:58 -------- d-----w- C:\Program Files\iPod
2014-06-20 05:35:57 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-20 05:35:57 -------- d-----w- C:\Program Files\iTunes
2014-06-20 05:35:57 -------- d-----w- C:\Program Files (x86)\iTunes
2014-06-20 05:25:30 687 ----a-w- C:\awh2EEC.tmp
2014-06-20 03:02:17 687 ----a-w- C:\awhDB41.tmp
2014-06-20 01:59:18 10779000 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-06-20 01:58:43 687 ----a-w- C:\awhF9AF.tmp
2014-06-20 01:57:06 -------- d-----w- C:\Program Files (x86)\predm
2014-06-20 01:53:37 -------- d-----w- C:\Program Files (x86)\Common Files\Config
2014-06-20 01:53:34 -------- d-----w- C:\Users\Stan\AppData\Local\13549
2014-06-19 20:48:54 -------- d-----w- C:\Program Files (x86)\Waves
2014-06-19 19:04:43 -------- d-----w- C:\Users\Stan\AppData\Local\{DC198836-37F0-4343-8049-214A4BBB0A65}
2014-06-19 05:10:12 -------- d-----w- C:\Users\Stan\AppData\Local\{002150AD-F826-43A6-AFFB-CD8D4002BEB2}
2014-06-18 16:49:39 -------- d-----w- C:\Users\Stan\AppData\Local\{A359952E-4ECB-4DC8-B810-1B6F47341598}
2014-06-18 03:50:56 -------- d-----w- C:\Users\Stan\AppData\Local\{EC4A83F1-F7AB-47A3-9F67-7CEEF4CBF3DB}
2014-06-17 15:30:51 -------- d-----w- C:\Users\Stan\AppData\Local\{A404CD31-D27D-4B56-9593-90C09E9C8FB6}
2014-06-16 16:01:40 -------- d-----w- C:\Users\Stan\AppData\Local\{83DD9C60-52D7-49C7-854C-B97CC8ACE676}
2014-06-16 15:41:12 -------- d-----w- C:\Users\Stan\AppData\Local\{404C7DE3-A24B-45A6-BA29-44115996A819}
2014-06-16 06:16:31 -------- d-----w- C:\Users\Stan\AppData\Local\Adobe
2014-06-16 02:49:03 -------- d-----w- C:\Users\Stan\AppData\Local\{8D2288F6-6333-47F2-B6F4-6F04EA5F6938}
2014-06-16 02:40:28 -------- d-----w- C:\Users\Stan\AppData\Local\{E22FC528-23DE-4C92-A8AB-918DCE1B8F02}
2014-06-15 06:46:10 108544 ----a-w- C:\windows\SysWow64\installd.exe
2014-06-15 06:45:42 108544 ----a-w- C:\windows\SysWow64\hfnapi.dll
2014-06-15 06:45:30 246784 ----a-w- C:\windows\SysWow64\hfpapi.dll
2014-06-15 06:06:12 -------- d-----w- C:\Users\Stan\AppData\Local\{A15F62E5-B60B-4461-8E37-B518E205A80F}
2014-06-14 07:04:53 -------- d-----w- C:\Users\Stan\AppData\Local\{D38BC095-C828-4BD5-945A-BB570DED20FD}
2014-06-14 05:52:07 1031560 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{ECAC4684-D06C-4C51-970A-BE5E8F02A2CF}\gapaengine.dll
2014-06-13 04:35:15 -------- d-----w- C:\Users\Stan\AppData\Local\{7EAECE8C-4E27-451A-9912-0C59336F25C1}
2014-06-13 03:54:37 -------- d-----r- C:\Users\Stan\Google Drive
2014-06-12 16:09:36 -------- d-----w- C:\Users\Stan\AppData\Local\{31F52A2B-3516-408D-9833-80CAD087CAF6}
2014-06-12 04:07:59 752640 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2014-06-12 04:05:37 -------- d-----w- C:\Users\Stan\AppData\Local\{1D700E13-EB1D-4FB9-8D1E-7C35E6557B5C}
2014-06-10 01:45:18 -------- d-----w- C:\Users\Stan\AppData\Local\{D2175681-C537-4659-9F3A-9E789FD57334}
2014-06-09 10:45:53 -------- d-----w- C:\Users\Stan\AppData\Local\{12887BF5-55CF-4DA3-BE5A-C57904959D67}
2014-06-08 22:45:31 -------- d-----w- C:\Users\Stan\AppData\Local\{C46CF9B7-DAD4-47E3-9E40-899A89082EB9}
2014-06-08 00:05:16 -------- d-----w- C:\Users\Stan\AppData\Local\{DDACB1C0-44E3-46E2-9A13-C018C83C4340}
2014-06-06 14:40:02 -------- d-----w- C:\Users\Stan\AppData\Local\{F5DC97F7-0E6C-49F8-A1E5-64902DEBD4C2}
2014-06-06 14:27:20 -------- d-----w- C:\Users\Stan\AppData\Local\{33854503-6210-40BD-B4DD-EEF7EC568BD3}
2014-06-05 01:21:59 -------- d-----w- C:\Users\Stan\AppData\Local\{8EF772FC-AC08-488C-9495-780CBEEA21AC}
2014-06-04 06:14:28 -------- d-----w- C:\Users\Stan\AppData\Local\{6D11AEE9-C582-4DF0-A98D-B7956CD38F7F}
2014-06-03 18:00:58 -------- d-----w- C:\Users\Stan\AppData\Local\{C1FA4721-8B52-4D00-AA7E-5421448763C1}
2014-06-02 18:11:06 -------- d-----w- C:\Users\Stan\AppData\Local\{7F1570EA-A93B-4D4D-BEBA-2DC73080862A}
2014-06-02 16:25:54 -------- d-----w- C:\Users\Stan\AppData\Local\{5683AFDC-F625-4EBB-995F-3A7F4BD2A2CC}
2014-06-02 16:20:22 -------- d-----w- C:\Users\Stan\AppData\Local\{794CF15C-D1EF-41DB-92EA-384695104F27}
2014-06-02 16:16:58 -------- d-----w- C:\Users\Stan\AppData\Local\{5941FA94-1F8D-4F3F-97EC-965DAD64C466}
2014-06-02 16:10:11 -------- d-----w- C:\Users\Stan\AppData\Local\{BFD3006F-D30A-4AAA-B1C2-D2E8F9C4860E}
2014-06-01 20:18:42 -------- d-----w- C:\Users\Stan\AppData\Local\{1EFC581B-F727-41BC-887E-86885744D42B}
2014-06-01 08:18:29 -------- d-----w- C:\Users\Stan\AppData\Local\{595D7B1B-8A8C-42B6-B19B-9C7C1E9F07ED}
2014-05-31 20:17:22 -------- d-----w- C:\Users\Stan\AppData\Local\{0A308844-209F-4A1D-B90D-9BDB25C01061}
2014-05-30 14:50:43 -------- d-----w- C:\Users\Stan\AppData\Local\{DC84BB02-28F5-4C72-8D1F-8C0DD70E18BE}
2014-05-27 19:30:31 -------- d-----w- C:\Users\Stan\AppData\Local\{EAD19A5F-A87A-4311-B336-C546B1449BA1}
2014-05-27 19:18:07 -------- d-----w- C:\Users\Stan\AppData\Local\{A3C16ABF-CE20-4A70-A79E-D29B7C610009}
2014-05-26 16:01:09 -------- d-----w- C:\Users\Stan\AppData\Local\{98599827-4F8B-4698-9B4A-F75C8D56FE05}
2014-05-26 03:23:27 -------- d-----w- C:\Users\Stan\AppData\Local\{D21BAE46-E515-4367-B27E-C3A4E40EBEBB}
2014-05-26 00:01:41 -------- d-----w- C:\Users\Stan\AppData\Local\{84667A0C-95CC-4E1A-9F4C-5E720DB981FD}
2014-05-25 22:52:10 -------- d-----w- C:\Users\Stan\AppData\Local\{9031A6E4-367D-4267-963E-63EFAA07E503}
2014-05-24 00:19:35 -------- d-----w- C:\Users\Stan\AppData\Local\{9FAFD385-550D-42E7-A30C-B2F4BD672CEA}
.
==================== Find3M ====================
.
2014-06-21 23:19:40 122584 ----a-w- C:\windows\System32\drivers\MBAMSwissArmy.sys
2014-06-21 19:38:52 118784 ----a-w- C:\windows\dsdxirmv.exe
2014-06-16 02:35:56 71344 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-06-16 02:35:56 699056 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe
2014-06-08 09:13:05 506368 ----a-w- C:\windows\System32\aepdu.dll
2014-06-08 09:08:04 424448 ----a-w- C:\windows\System32\aeinv.dll
2014-05-30 10:02:37 2724864 ----a-w- C:\windows\System32\mshtml.tlb
2014-05-30 10:02:09 4096 ----a-w- C:\windows\System32\ieetwcollectorres.dll
2014-05-30 09:39:43 548352 ----a-w- C:\windows\System32\vbscript.dll
2014-05-30 09:39:23 66048 ----a-w- C:\windows\System32\iesetup.dll
2014-05-30 09:38:29 48640 ----a-w- C:\windows\System32\ieetwproxystub.dll
2014-05-30 09:21:23 139264 ----a-w- C:\windows\System32\ieUnatt.exe
2014-05-30 09:21:05 111616 ----a-w- C:\windows\System32\ieetwcollector.exe
2014-05-30 09:20:36 752640 ----a-w- C:\windows\System32\jscript9diag.dll
2014-05-30 09:11:24 940032 ----a-w- C:\windows\System32\MsSpellCheckingFacility.exe
2014-05-30 09:08:22 5782528 ----a-w- C:\windows\System32\jscript9.dll
2014-05-30 09:02:39 2724864 ----a-w- C:\windows\SysWow64\mshtml.tlb
2014-05-30 08:55:36 38400 ----a-w- C:\windows\System32\JavaScriptCollectionAgent.dll
2014-05-30 08:44:28 455168 ----a-w- C:\windows\SysWow64\vbscript.dll
2014-05-30 08:43:06 61952 ----a-w- C:\windows\SysWow64\iesetup.dll
2014-05-30 08:42:16 51200 ----a-w- C:\windows\SysWow64\ieetwproxystub.dll
2014-05-30 08:28:33 112128 ----a-w- C:\windows\SysWow64\ieUnatt.exe
2014-05-30 08:27:56 592896 ----a-w- C:\windows\SysWow64\jscript9diag.dll
2014-05-30 08:24:19 1249280 ----a-w- C:\windows\System32\mshtmlmedia.dll
2014-05-30 08:23:22 2040832 ----a-w- C:\windows\System32\inetcpl.cpl
2014-05-30 08:10:46 32256 ----a-w- C:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-05-30 07:56:56 2266112 ----a-w- C:\windows\System32\wininet.dll
2014-05-30 07:56:50 4244992 ----a-w- C:\windows\SysWow64\jscript9.dll
2014-05-30 07:50:09 1068032 ----a-w- C:\windows\SysWow64\mshtmlmedia.dll
2014-05-30 07:49:38 1964544 ----a-w- C:\windows\SysWow64\inetcpl.cpl
2014-05-30 07:21:10 1790976 ----a-w- C:\windows\SysWow64\wininet.dll
2014-05-12 11:26:10 63704 ----a-w- C:\windows\System32\drivers\mwac.sys
2014-05-12 11:26:00 91352 ----a-w- C:\windows\System32\drivers\mbamchameleon.sys
2014-05-12 11:25:56 25816 ----a-w- C:\windows\System32\drivers\mbam.sys
2014-05-08 09:32:11 3178496 ----a-w- C:\windows\System32\rdpcorets.dll
2014-05-08 09:32:11 16384 ----a-w- C:\windows\System32\RdpGroupPolicyExtension.dll
2014-05-07 16:56:47 108968 ----a-w- C:\windows\System32\WindowsAccessBridge-64.dll
2014-04-25 02:34:59 801280 ----a-w- C:\windows\System32\usp10.dll
2014-04-25 02:06:17 626688 ----a-w- C:\windows\SysWow64\usp10.dll
2014-04-15 00:13:43 96168 ----a-w- C:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-04-12 02:22:05 95680 ----a-w- C:\windows\System32\drivers\ksecdd.sys
2014-04-12 02:22:05 155072 ----a-w- C:\windows\System32\drivers\ksecpkg.sys
2014-04-12 02:19:38 29184 ----a-w- C:\windows\System32\sspisrv.dll
2014-04-12 02:19:38 136192 ----a-w- C:\windows\System32\sspicli.dll
2014-04-12 02:19:37 28160 ----a-w- C:\windows\System32\secur32.dll
2014-04-12 02:19:32 1460736 ----a-w- C:\windows\System32\lsasrv.dll
2014-04-12 02:19:05 31232 ----a-w- C:\windows\System32\lsass.exe
2014-04-12 02:12:06 22016 ----a-w- C:\windows\SysWow64\secur32.dll
2014-04-12 02:10:56 96768 ----a-w- C:\windows\SysWow64\sspicli.dll
2014-04-05 02:47:20 1903552 ----a-w- C:\windows\System32\drivers\tcpip.sys
2014-04-05 02:47:09 288192 ----a-w- C:\windows\System32\drivers\FWPKCLNT.SYS
2014-04-01 02:46:48 130712 ----a-w- C:\windows\SysWow64\MSSTDFMT.DLL
2014-04-01 02:46:48 1070232 ----a-w- C:\windows\SysWow64\MSCOMCTL.OCX
2014-03-26 14:44:48 2002432 ----a-w- C:\windows\System32\msxml6.dll
2014-03-26 14:44:48 1882112 ----a-w- C:\windows\System32\msxml3.dll
2014-03-26 14:41:39 2048 ----a-w- C:\windows\System32\msxml6r.dll
2014-03-26 14:41:39 2048 ----a-w- C:\windows\System32\msxml3r.dll
2014-03-26 14:27:50 1389056 ----a-w- C:\windows\SysWow64\msxml6.dll
2014-03-26 14:27:50 1237504 ----a-w- C:\windows\SysWow64\msxml3.dll
2014-03-26 14:25:14 2048 ----a-w- C:\windows\SysWow64\msxml6r.dll
2014-03-26 14:25:14 2048 ----a-w- C:\windows\SysWow64\msxml3r.dll
.
============= FINISH: 0:36:04.25 ===============

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 5/14/2011 3:41:40 AM
System Uptime: 6/22/2014 12:27:10 AM (0 hours ago)
.
Motherboard: TOSHIBA | | NALAE
Processor: AMD Phenom(tm) II N660 Dual-Core Processor | Socket M2/S1G1 | 3000/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 453 GiB total, 290.142 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft Teredo Tunneling Adapter
Device ID: ROOT\*TEREDO\0000
Manufacturer: Microsoft
Name: Teredo Tunneling Pseudo-Interface
PNP Device ID: ROOT\*TEREDO\0000
Service: tunnel
.
Class GUID: {1378e71b-ab4d-4348-af26-cba56b12969e}
Description: StorLib bus (virtual storages support)
Device ID: ROOT\STORLIB\0000
Manufacturer: SugarSync
Name: StorLib bus (virtual storages support)
PNP Device ID: ROOT\STORLIB\0000
Service: SSCBFS3
.
==== System Restore Points ===================
.
RP490: 6/21/2014 12:03:53 AM - Installed AmpliTube X-GEAR
RP491: 6/21/2014 2:24:38 AM - Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
RP492: 6/21/2014 2:25:35 AM - Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
RP493: 6/21/2014 2:34:22 AM - Installed Melodyne Runtime 4.1 (x64)
RP494: 6/21/2014 2:34:58 AM - Installed Melodyne singletrack
RP495: 6/21/2014 2:41:31 AM - Installed Melodyne singletrack
RP496: 6/21/2014 2:52:06 AM - Configured Melodyne singletrack
RP497: 6/21/2014 3:30:03 AM - Removed Melodyne singletrack
RP498: 6/21/2014 3:30:48 AM - Removed Melodyne Runtime 4.1 (x64)
RP499: 6/21/2014 3:14:22 PM - Removed AmpliTube X-GEAR
RP500: 6/21/2014 3:36:10 PM - Installed AmpliTube X-GEAR
RP501: 6/21/2014 11:22:43 PM - Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
RP502: 6/22/2014 12:03:05 AM - Configured AmpliTube X-GEAR
RP503: 6/22/2014 12:04:16 AM - Removed AmpliTube X-GEAR
RP504: 6/22/2014 12:06:56 AM - Removed Licensing Service Install
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
Add or Remove Adobe Creative Suite 3 Master Collection
Adobe After Effects CS3 Presets
Adobe AIR
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe BridgeTalk Plugin CS3
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Community Help
Adobe Creative Suite 3 Master Collection
Adobe Default Language CS3
Adobe Device Central CS3
Adobe Dreamweaver CS3
Adobe ExtendScript Toolkit 2
Adobe Extension Manager CS3
Adobe Flash CS3
Adobe Flash Player 13 ActiveX
Adobe Flash Player 14 Plugin
Adobe Flash Video Encoder
Adobe Fonts All
Adobe Help Viewer CS3
Adobe InDesign CS3 Icon Handler
Adobe Linguistics CS3
Adobe MotionPicture Color Files
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Photoshop Elements 10
Adobe Photoshop.com Inspiration Browser
Adobe Premiere Pro CS3 Functional Content
Adobe Reader XI (11.0.07)
Adobe Setup
Adobe SING CS3
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe Video Profiles
Adobe WAS CS3
Adobe WinSoft Linguistics Plugin
Adobe XMP DVA Panels CS3
Adobe XMP Panels CS3
AHV content for Acrobat and Flash
AIM 7
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ATI Catalyst Install Manager
Bonjour
Box Sync
Brother MFL-Pro Suite MFC-7360N
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center Localization All
ccc-core-static
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Corel WinDVD
Coupon Printer for Windows
D3DX10
DHTML Editing Component
Dropbox
Elements 10 Organizer
FileZilla Client 3.7.4.1
Focusrite Scarlett Plug-in Suite 1.1
Focusrite USB 2.0 Audio Driver 2.4
Google Chrome
Google Drive
Google Update Helper
honestech VHS to DVD 4.0 HD
iTunes
Java 7 Update 55
Java 7 Update 55 (64-bit)
Java Auto Updater
Java(TM) 6 Update 25
Java(TM) 6 Update 29
JavaFX 2.1.1
Junk Mail filter update
KODAK AiO Home Center
Label@Once 1.0
Lagarith lossless video codec (Remove Only)
Licensing Service Install
Line 6 Uninstaller
Malwarebytes Anti-Malware version 2.0.2.1012
Mesh Runtime
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Office 64-bit Components 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Plus 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared 64-bit MUI (English) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
Mozilla Firefox 30.0 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB2721691)
MSXML 4.0 SP3 Parser (KB2758694)
MSXML 4.0 SP3 Parser (KB973685)
Network System Driver
Nuance PaperPort 12
Nuance PDF Viewer Plus
PaperPort Image Printer 64-bit
PDF Settings
PlayReady PC Runtime amd64
PlayReady PC Runtime x86
PSE10 STI Installer
QuickTime 7
Realtek Ethernet Controller Driver For Windows 7
Realtek HDMI Audio Driver for ATI
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
REALTEK Wireless LAN Driver
Realtek WLAN Driver
SanDiskSecureAccess_Manager.exe
Scansoft PDF Professional
SeaMonkey 2.26 (x86 en-US)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2817330) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2878233) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880507) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880508) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880513) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2881069) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2817565) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2880515) 32-Bit Edition
Summitsoft Website Creator - Evolution
Synaptics Pointing Device Driver
System Requirements Lab for Intel
System Update kb70007
TOSHIBA Application Installer
TOSHIBA Assist
TOSHIBA Disc Creator
TOSHIBA eco Utility
TOSHIBA Face Recognition
TOSHIBA Flash Cards Support Utility
TOSHIBA Hardware Setup
TOSHIBA HDD/SSD Alert
TOSHIBA Media Controller
TOSHIBA Media Controller Plug-in
TOSHIBA PC Health Monitor
TOSHIBA Quality Application
TOSHIBA Recovery Media Creator
TOSHIBA Service Station
TOSHIBA Supervisor Password
TOSHIBA Value Added Package
TOSHIBA Web Camera Application
ToshibaRegistration
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Utility Common Driver
Visual Studio 2008 x64 Redistributables
Waves Diamond Bundle v5.2
Winamp
Winamp Detector Plug-in
Windows Driver Package - Focusrite USB 2.0 Audio Driver (01/05/2012 2.3.128.0)
Windows Driver Package - Focusrite USB 2.0 Audio Driver (09/10/2012 2.4.128.0)
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
.
==== Event Viewer Messages From Past Week ========
.
6/22/2014 12:27:47 AM, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\windows\system32\Rtlihvs.dll Error Code: 126
.
==== End Of File ===========================

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6/22/2014
Scan Time: 12:41:00 AM
Logfile:
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.21.10
Rootkit Database: v2014.06.20.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Stan

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 310543
Time Elapsed: 17 min, 39 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

 

RogueKiller V9.0.3.0 [Jun 17 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Stan [Admin rights]
Mode : Remove -- Date : 06/22/2014 16:52:52

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 25 ¤¤¤
[PUM.Proxy] (X64) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833} | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963} | DhcpNameServer : 75.75.76.76 75.75.75.75 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833} | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963} | DhcpNameServer : 75.75.76.76 75.75.75.75 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833} | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963} | DhcpNameServer : 75.75.76.76 75.75.75.75 -> NOT SELECTED
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NOT SELECTED
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED

¤¤¤ Scheduled tasks : 3 ¤¤¤
[Suspicious.Path] \\{31D334E3-6A59-4293-8800-6F002A6860B1} -- C:\windows\system32\pcalua.exe (-a C:\Users\Stan\AppData\Local\Temp\Temp2_Waves.Diamond.Bundle.v5.2.zip\setup.exe) -> DELETED
[Suspicious.Path] \\{68DD21CA-255C-4762-9205-91C6EE43366A} -- C:\windows\system32\pcalua.exe (-a C:\Users\Stan\Downloads\CDG_Plug-In_.exe -d C:\Users\Stan\Downloads) -> DELETED
[Suspicious.Path] \\{A2B87F91-C302-407F-BE35-4CD65F19D926} -- C:\windows\system32\pcalua.exe (-a C:\Users\Stan\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Docs\WebsiteCreator_v8.exe -d C:\Users\Stan\AppData\Local\Temp\ir_ext_temp_0) -> DELETED

¤¤¤ Files : 0 ¤¤¤

¤¤¤ HOSTS File : 1 ¤¤¤
[C:\windows\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA MK5065GSXN ATA Device +++++
--- User ---
[MBR] 520f39b4e9508d70f64f6b8780084e66
[BSP] d4e156cccf802d1e4b2438b6430456fb : HP MBR Code
Partition table:
0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3074048 | Size: 463519 MB
2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 952360960 | Size: 11920 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_06222014_164833.log

 

RogueKiller V9.0.3.0 [Jun 17 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Stan [Admin rights]
Mode : Remove -- Date : 06/22/2014 16:52:52

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 25 ¤¤¤
[PUM.Proxy] (X64) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> NOT SELECTED
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833} | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963} | DhcpNameServer : 75.75.76.76 75.75.75.75 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833} | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963} | DhcpNameServer : 75.75.76.76 75.75.75.75 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833} | DhcpNameServer : 75.75.76.76 75.75.75.75 192.168.1.1 -> NOT SELECTED
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963} | DhcpNameServer : 75.75.76.76 75.75.75.75 -> NOT SELECTED
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-3954531214-905133765-490049910-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NOT SELECTED
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED

¤¤¤ Scheduled tasks : 3 ¤¤¤
[Suspicious.Path] \\{31D334E3-6A59-4293-8800-6F002A6860B1} -- C:\windows\system32\pcalua.exe (-a C:\Users\Stan\AppData\Local\Temp\Temp2_Waves.Diamond.Bundle.v5.2.zip\setup.exe) -> DELETED
[Suspicious.Path] \\{68DD21CA-255C-4762-9205-91C6EE43366A} -- C:\windows\system32\pcalua.exe (-a C:\Users\Stan\Downloads\CDG_Plug-In_.exe -d C:\Users\Stan\Downloads) -> DELETED
[Suspicious.Path] \\{A2B87F91-C302-407F-BE35-4CD65F19D926} -- C:\windows\system32\pcalua.exe (-a C:\Users\Stan\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Docs\WebsiteCreator_v8.exe -d C:\Users\Stan\AppData\Local\Temp\ir_ext_temp_0) -> DELETED

¤¤¤ Files : 0 ¤¤¤

¤¤¤ HOSTS File : 1 ¤¤¤
[C:\windows\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA MK5065GSXN ATA Device +++++
--- User ---
[MBR] 520f39b4e9508d70f64f6b8780084e66
[BSP] d4e156cccf802d1e4b2438b6430456fb : HP MBR Code
Partition table:
0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3074048 | Size: 463519 MB
2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 952360960 | Size: 11920 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_06222014_164833.log

 

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1012

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.17126

Java version: 1.6.0_29

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 2.992000 GHz
Memory total: 4022005760, free: 1010470912

Downloaded database version: v2014.06.22.05
Downloaded database version: v2014.06.20.01
=======================================
Initializing...
------------ Kernel report ------------
06/22/2014 17:01:09
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_AuthenticAMD.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\system32\DRIVERS\LPCFilter.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\msahci.sys
\SystemRoot\system32\DRIVERS\amdsata.sys
\SystemRoot\system32\DRIVERS\storport.sys
\SystemRoot\system32\DRIVERS\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\DRIVERS\MpFilter.sys
\SystemRoot\System32\Drivers\PxHlpa64.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\system32\DRIVERS\TVALZ_O.SYS
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\AtiPcie.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\atikmpag.sys
\SystemRoot\system32\DRIVERS\atipmdag.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\rtwlane.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\tdcmdpst.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\drivers\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\DRIVERS\SynTP.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\amdppm.sys
\SystemRoot\system32\DRIVERS\TVALZFL.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\serscan.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\NIWinCDEmu.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\HdAudio.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_msahci.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\System32\Drivers\usbvideo.sys
\SystemRoot\system32\DRIVERS\pgeffect.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\DRIVERS\NisDrvWFP.sys
\SystemRoot\system32\drivers\peauth.sys
\??\C:\windows\system32\drivers\regi.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\DRIVERS\umpass.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\system32\drivers\spsys.sys
\??\C:\windows\system32\drivers\mbamchameleon.sys
\??\C:\windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8004cdb680
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xfffffa8004c34680
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8004cdb680, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8004cdc040, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8004cdb680, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8004c34680, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 1A4E7E1

Partition information:

Partition 0 type is Other (0x27)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 3072000
Partition file system is NTFS
Partition is bootable

Partition 1 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 3074048 Numsec = 949286912

Partition 2 type is HIDDEN (0x17)
Partition is NOT ACTIVE.
Partition starts at LBA: 952360960 Numsec = 24412160
Partition is not bootable
Hidden partition VBR is not infected.

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 500107862016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-976753168-976773168)...
Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-2-952360960-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removal finished

 

ComboFix 14-06-24.01 - Stan 06/26/2014 15:50:20.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3836.2261 [GMT -4:00]
Running from: c:\users\Stan\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Stan\AppData\Local\Temp\_MEI29842\_ctypes.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\_elementtree.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\_hashlib.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\_multiprocessing.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\_socket.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\_ssl.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\hashobjs_ext.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\pyexpat.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\pysqlite2._sqlite.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\python27.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\pythoncom27.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\PyWinTypes27.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\select.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\unicodedata.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32api.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32com.shell.shell.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32crypt.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32event.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32file.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32gui.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32inet.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32pdh.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32pipe.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32process.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32profile.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32security.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\win32ts.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\windows._lib_cacheinvalidation.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._animate.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._controls_.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._core_.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._gdi_.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._html2.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._misc_.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._windows_.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wx._wizard.pyd
c:\users\Stan\AppData\Local\Temp\_MEI29842\wxbase294u_net_vc90.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\wxbase294u_vc90.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\wxmsw294u_adv_vc90.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\wxmsw294u_core_vc90.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\wxmsw294u_html_vc90.dll
c:\users\Stan\AppData\Local\Temp\_MEI29842\wxmsw294u_webview_vc90.dll
.
.
((((((((((((((((((((((((( Files Created from 2014-05-26 to 2014-06-26 )))))))))))))))))))))))))))))))
.
.
2014-06-26 20:07 . 2014-06-26 20:07 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-06-26 20:07 . 2014-06-26 20:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-06-22 20:40 . 2014-06-22 20:40 -------- d-----w- c:\programdata\RogueKiller
2014-06-22 18:18 . 2014-06-22 18:18 -------- d-----w- c:\program files\Common Files\VST2
2014-06-22 18:18 . 2014-06-22 18:18 -------- d-----w- c:\program files (x86)\Common Files\VST3
2014-06-22 18:17 . 2014-06-22 18:17 -------- d-----w- c:\program files\Common Files\Avid
2014-06-22 18:17 . 2014-06-22 18:17 -------- d-----w- c:\program files\Celemony
2014-06-22 18:17 . 2014-06-22 18:17 -------- d-----w- c:\program files (x86)\Celemony
2014-06-22 18:16 . 2014-06-22 18:17 -------- d-----w- c:\program files\Common Files\Celemony
2014-06-22 18:16 . 2014-06-22 18:17 -------- d-----w- c:\program files (x86)\Common Files\Celemony
2014-06-22 17:36 . 2014-06-22 17:36 -------- d-----w- c:\program files\Common Files\Propellerhead Software
2014-06-21 22:28 . 2014-06-21 22:28 687 ----a-w- C:\awh1EA6.tmp
2014-06-21 19:22 . 2014-06-21 19:22 687 ----a-w- C:\awh23A6.tmp
2014-06-21 07:18 . 2014-06-21 07:18 687 ----a-w- C:\awh2174.tmp
2014-06-21 04:30 . 2014-06-21 04:30 687 ----a-w- C:\awh19E6.tmp
2014-06-21 00:52 . 2014-06-21 00:52 687 ----a-w- C:\awh5B49.tmp
2014-06-21 00:18 . 2014-06-21 00:18 687 ----a-w- C:\awh4C0D.tmp
2014-06-20 07:39 . 2014-06-21 00:24 -------- d-----w- c:\users\Stan\AppData\Roaming\IK Multimedia
2014-06-20 05:35 . 2014-06-20 05:35 -------- d-----w- c:\program files\iPod
2014-06-20 05:35 . 2014-06-20 05:36 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-20 05:35 . 2014-06-20 05:36 -------- d-----w- c:\program files\iTunes
2014-06-20 05:35 . 2014-06-20 05:36 -------- d-----w- c:\program files (x86)\iTunes
2014-06-20 05:25 . 2014-06-20 05:25 687 ----a-w- C:\awh2EEC.tmp
2014-06-20 03:02 . 2014-06-20 03:02 687 ----a-w- C:\awhDB41.tmp
2014-06-20 01:58 . 2014-06-20 01:58 687 ----a-w- C:\awhF9AF.tmp
2014-06-20 01:57 . 2014-06-20 01:57 -------- d-----w- c:\program files (x86)\predm
2014-06-20 01:53 . 2014-06-20 01:53 -------- d-----w- c:\program files (x86)\Common Files\Config
2014-06-20 01:53 . 2014-06-20 01:53 -------- d-----w- c:\users\Stan\AppData\Local\13549
2014-06-19 20:48 . 2014-06-21 19:40 -------- d-----w- c:\program files (x86)\Waves
2014-06-16 06:16 . 2014-06-25 06:00 -------- d-----w- c:\users\Stan\AppData\Local\Adobe
2014-06-15 06:46 . 2014-06-15 06:46 108544 ----a-w- c:\windows\SysWow64\installd.exe
2014-06-15 06:45 . 2014-06-15 06:45 108544 ----a-w- c:\windows\SysWow64\hfnapi.dll
2014-06-15 06:45 . 2014-06-15 06:45 246784 ----a-w- c:\windows\SysWow64\hfpapi.dll
2014-06-13 03:54 . 2014-06-26 19:47 -------- d-----r- c:\users\Stan\Google Drive
2014-06-12 04:07 . 2014-06-02 04:43 235224 ----a-w- c:\program files (x86)\Internet Explorer\sqmapi.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-06-22 21:01 . 2014-05-03 22:57 128728 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-06-22 20:59 . 2014-05-03 22:56 92888 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-06-21 19:38 . 2011-07-09 23:21 118784 ----a-w- c:\windows\dsdxirmv.exe
2014-06-16 02:35 . 2012-04-06 05:42 699056 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-06-16 02:35 . 2011-05-16 21:53 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-06-12 04:35 . 2011-05-15 05:59 95414520 ----a-w- c:\windows\system32\MRT.exe
2014-06-05 10:54 . 2014-06-25 19:24 10779000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1DF1800E-3F30-4479-9ADC-7BE695E8874F}\mpengine.dll
2014-06-05 10:54 . 2014-06-24 19:18 10779000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-05-12 11:26 . 2014-05-03 22:56 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-05-12 11:25 . 2014-05-03 22:56 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-05-07 16:56 . 2014-05-07 16:56 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-05-07 16:56 . 2014-05-07 16:56 313256 ----a-w- c:\windows\system32\javaws.exe
2014-05-07 16:56 . 2014-05-07 16:56 189352 ----a-w- c:\windows\system32\javaw.exe
2014-05-07 16:56 . 2014-05-07 16:56 189352 ----a-w- c:\windows\system32\java.exe
2014-05-07 16:48 . 2014-05-07 16:48 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2014-05-07 16:48 . 2014-05-07 16:48 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2014-05-07 16:48 . 2014-05-07 16:48 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2014-05-07 16:48 . 2014-05-07 16:48 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2014-05-07 16:48 . 2014-05-07 16:48 337408 ----a-w- c:\windows\SysWow64\html.iec
2014-05-07 16:48 . 2014-05-07 16:48 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2014-05-07 16:48 . 2014-05-07 16:48 235008 ----a-w- c:\windows\system32\elshyph.dll
2014-05-07 16:48 . 2014-05-07 16:48 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2014-05-07 16:48 . 2014-05-07 16:48 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2014-05-07 16:48 . 2014-05-07 16:48 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2014-05-07 16:48 . 2014-05-07 16:48 942592 ----a-w- c:\windows\system32\jsIntl.dll
2014-05-07 16:48 . 2014-05-07 16:48 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2014-05-07 16:48 . 2014-05-07 16:48 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2014-05-07 16:48 . 2014-05-07 16:48 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-05-07 16:48 . 2014-05-07 16:48 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2014-05-07 16:48 . 2014-05-07 16:48 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2014-05-07 16:48 . 2014-05-07 16:48 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2014-05-07 16:48 . 2014-05-07 16:48 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2014-05-07 16:48 . 2014-05-07 16:48 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2014-05-07 16:48 . 2014-05-07 16:48 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2014-05-07 16:48 . 2014-05-07 16:48 81408 ----a-w- c:\windows\system32\icardie.dll
2014-05-07 16:48 . 2014-05-07 16:48 77312 ----a-w- c:\windows\system32\tdc.ocx
2014-05-07 16:48 . 2014-05-07 16:48 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2014-05-07 16:48 . 2014-05-07 16:48 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2014-05-07 16:48 . 2014-05-07 16:48 48640 ----a-w- c:\windows\system32\mshtmler.dll
2014-05-07 16:48 . 2014-05-07 16:48 413696 ----a-w- c:\windows\system32\html.iec
2014-05-07 16:48 . 2014-05-07 16:48 247808 ----a-w- c:\windows\system32\msls31.dll
2014-05-07 16:48 . 2014-05-07 16:48 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2014-05-07 16:48 . 2014-05-07 16:48 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2014-05-07 16:48 . 2014-05-07 16:48 105984 ----a-w- c:\windows\system32\iesysprep.dll
2014-05-07 16:48 . 2014-05-07 16:48 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-05-07 16:48 . 2014-05-07 16:48 774144 ----a-w- c:\windows\system32\jscript.dll
2014-05-07 16:48 . 2014-05-07 16:48 62464 ----a-w- c:\windows\system32\pngfilt.dll
2014-05-07 16:48 . 2014-05-07 16:48 30208 ----a-w- c:\windows\system32\licmgr10.dll
2014-05-07 16:48 . 2014-05-07 16:48 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2014-05-07 16:48 . 2014-05-07 16:48 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-05-07 16:48 . 2014-05-07 16:48 235520 ----a-w- c:\windows\system32\url.dll
2014-05-07 16:48 . 2014-05-07 16:48 167424 ----a-w- c:\windows\system32\iexpress.exe
2014-05-07 16:48 . 2014-05-07 16:48 147968 ----a-w- c:\windows\system32\occache.dll
2014-05-07 16:48 . 2014-05-07 16:48 143872 ----a-w- c:\windows\system32\wextract.exe
2014-05-07 16:48 . 2014-05-07 16:48 13824 ----a-w- c:\windows\system32\mshta.exe
2014-05-07 16:48 . 2014-05-07 16:48 101376 ----a-w- c:\windows\system32\inseng.dll
2014-05-07 16:48 . 2014-05-07 16:48 48128 ----a-w- c:\windows\system32\imgutil.dll
2014-05-07 16:48 . 2014-05-07 16:48 135680 ----a-w- c:\windows\system32\iepeers.dll
2014-05-02 00:04 . 2014-06-14 05:52 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ECAC4684-D06C-4C51-970A-BE5E8F02A2CF}\gapaengine.dll
2014-05-02 00:04 . 2012-02-11 00:02 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-04-15 00:13 . 2014-04-16 20:44 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-04-12 02:22 . 2014-05-16 17:08 155072 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-04-12 02:22 . 2014-05-16 17:08 95680 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2014-04-12 02:19 . 2014-05-16 17:08 136192 ----a-w- c:\windows\system32\sspicli.dll
2014-04-12 02:19 . 2014-05-16 17:08 29184 ----a-w- c:\windows\system32\sspisrv.dll
2014-04-12 02:19 . 2014-05-16 17:08 28160 ----a-w- c:\windows\system32\secur32.dll
2014-04-12 02:19 . 2014-05-16 17:08 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-04-12 02:19 . 2014-05-16 17:08 31232 ----a-w- c:\windows\system32\lsass.exe
2014-04-12 02:12 . 2014-05-16 17:08 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-04-12 02:10 . 2014-05-16 17:08 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-04-01 02:46 . 2014-04-01 02:46 130712 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL
2014-04-01 02:46 . 2014-04-01 02:46 1070232 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@= "{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@= "{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@= "{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@= "{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM "= "c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]
"SanDiskSecureAccess_Manager.exe "= "c:\users\Stan\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe" [2011-06-29 27311232]
"GoogleDriveSync "= "c:\program files (x86)\Google\Drive\googledrivesync.exe" [2014-06-05 24474752]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SVPWUTIL "= "c:\program files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe" [2010-02-23 352256]
"HWSetup "= "c:\program files\TOSHIBA\Utilities\HWSetup.exe" [2010-03-04 423936]
"KeNotify "= "c:\program files (x86)\TOSHIBA\Utilities\KeNotify.exe" [2009-12-25 34160]
"ToshibaServiceStation "= "c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2009-10-06 1294136]
"TWebCamera "= "c:\program files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" [2010-02-24 2454840]
"APSDaemon "= "c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-13 43848]
"IndexSearch "= "c:\program files (x86)\Nuance\PaperPort\IndexSearch.exe" [2010-03-09 46368]
"PaperPort PTD "= "c:\program files (x86)\Nuance\PaperPort\pptd40nt.exe" [2010-03-09 29984]
"PPort12reminder "= "c:\program files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]
"PDFHook "= "c:\program files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe" [2010-03-06 636192]
"PDF5 Registry Controller "= "c:\program files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe" [2010-03-05 62752]
"ControlCenter4 "= "c:\program files (x86)\ControlCenter4\BrCcBoot.exe" [2010-10-26 139264]
"BrStsMon00 "= "c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2010-06-10 2621440]
"QuickTime Task "= "c:\program files (x86)\QuickTime\QTTask.exe" [2014-01-17 421888]
"Adobe ARM "= "c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
"iTunesHelper "= "c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-05-26 152392]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin "= 5 (0x5)
"ConsentPromptBehaviorUser "= 3 (0x3)
"EnableUIADesktopToggle "= 0 (0x0)
"EnableSecureUIAPath "= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_Dlls "=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@= "Service "
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
R3 CCUSBMIDI;CASIO USB MIDI;c:\windows\system32\Drivers\ccusbmid.sys;c:\windows\SYSNATIVE\Drivers\ccusbmid.sys [x]
R3 cpudrv64;cpudrv64;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys [x]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 ffusb2audio;Focusrite USB 2.0 Audio Driver;c:\windows\system32\DRIVERS\ffusb2audio.sys;c:\windows\SYSNATIVE\DRIVERS\ffusb2audio.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192Ce.sys [x]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
R3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]
R3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [x]
R3 TridVid;USB2.0 VIDBOX NM;c:\windows\system32\DRIVERS\TridVid.sys;c:\windows\SYSNATIVE\DRIVERS\TridVid.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10;c:\program files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [x]
S2 regi;regi;c:\windows\system32\drivers\regi.sys;c:\windows\SYSNATIVE\drivers\regi.sys [x]
S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe;c:\program files\TOSHIBA\TECO\TecoService.exe [x]
S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys;c:\windows\SYSNATIVE\DRIVERS\TVALZFL.sys [x]
S3 NIWinCDEmu;ISO Mounter driver;c:\windows\system32\DRIVERS\NIWinCDEmu.sys;c:\windows\SYSNATIVE\DRIVERS\NIWinCDEmu.sys [x]
S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys;c:\windows\SYSNATIVE\DRIVERS\pgeffect.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;c:\windows\system32\DRIVERS\rtwlane.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlane.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-12 15:44 1091912 ----a-w- c:\program files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-06-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 02:35]
.
2014-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-08 04:10]
.
2014-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-08 04:10]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1aCopyShExtError]
@= "{83BEA36E-7680-4598-A4DF-994426F6E78D} "
[HKEY_CLASSES_ROOT\CLSID\{83BEA36E-7680-4598-A4DF-994426F6E78D}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2aCopyShExtSynced]
@= "{845B7388-6F85-4F32-9FD5-F02DC7882B89} "
[HKEY_CLASSES_ROOT\CLSID\{845B7388-6F85-4F32-9FD5-F02DC7882B89}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3aCopyShExtSyncing]
@= "{F6378A7A-F753-449B-AE1B-997A96132E61} "
[HKEY_CLASSES_ROOT\CLSID\{F6378A7A-F753-449B-AE1B-997A96132E61}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4aCopyShExtSyncingProg1]
@= "{3A511828-777D-46F8-82F4-5B530C1B3D9E} "
[HKEY_CLASSES_ROOT\CLSID\{3A511828-777D-46F8-82F4-5B530C1B3D9E}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5aCopyShExtSyncingProg2]
@= "{C8C88204-5B14-40EC-BA72-8AEBC762047E} "
[HKEY_CLASSES_ROOT\CLSID\{C8C88204-5B14-40EC-BA72-8AEBC762047E}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6aCopyShExtSyncingProg3]
@= "{ACFF45C3-3EEB-4351-86C2-6696BA264239} "
[HKEY_CLASSES_ROOT\CLSID\{ACFF45C3-3EEB-4351-86C2-6696BA264239}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7aCopyShExtSyncingProg4]
@= "{29AF997F-488B-46F0-AE78-7146F1B89CC3} "
[HKEY_CLASSES_ROOT\CLSID\{29AF997F-488B-46F0-AE78-7146F1B89CC3}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8aCopyShExtSyncingProg5]
@= "{03F9AD29-1C78-4B66-8890-B177B5430C53} "
[HKEY_CLASSES_ROOT\CLSID\{03F9AD29-1C78-4B66-8890-B177B5430C53}]
c:\users\Stan\AppData\Roaming\Copy\overlay\CopyShExt.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@= "{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@= "{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@= "{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@= "{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Stan\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2014-06-05 21:46 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2014-06-05 21:46 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2014-06-05 21:46 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2014-06-05 21:46 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2014-06-05 21:46 777032 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl "= "c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-03-22 10134560]
"RtHDVBg "= "c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-03-22 896032]
"SynTPEnh "= "c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"TPwrMain "= "c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE" [BU]
"HSON "= "c:\program files (x86)\TOSHIBA\TBS\HSON.exe" [BU]
"SmoothView "= "c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe" [BU]
"00TCrdMain "= "c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe" [BU]
"Teco "= "c:\program files (x86)\TOSHIBA\TECO\Teco.exe" [BU]
"TosWaitSrv "= "c:\program files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe" [BU]
"SmartFaceVWatcher "= "c:\program files (x86)\Toshiba\SmartFaceV\SmartFaceVWatcher.exe" [BU]
"TosVolRegulator "= "c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"TosSENotify "= "c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-02-06 709976]
"MSC "= "c:\program files\Microsoft Security Client\msseces.exe" [2014-03-11 1271072]
"AdobeAAMUpdater-1.0 "= "c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = <-loopback>
uSearchAssistant = hxxp://www.google.com
mCustomizeSearch = hxxp://www.google.com
mSearchAssistant = hxxp://www.google.com
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: Open with PDF Viewer Plus - c:\program files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
TCP: DhcpNameServer = 75.75.76.76 75.75.75.75 192.168.1.1
FF - ProfilePath - c:\users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\wdeh64d1.default-1399473730970\
FF - prefs.js: browser.startup.homepage - google.com
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-Coupon Printer for Windows5.0.0.4 - c:\program files (x86)\Coupons\uninstall.exe
AddRemove-Summitsoft Website Creator - Evolution - c:\windows\system32\iwpsetup.exe
AddRemove-{01D57CF6-B5BC-4D03-AFF5-7960CFBD05A9} - c:\programdata\{4C2C834F-B555-47C0-AFCB-FDF50ADB5ED7}\Guitar Rig 5 Setup PC.exe
AddRemove-{0886900B-B2F3-452C-B580-60F1253F7F80} - c:\programdata\{B9F6456A-E0C8-4BD3-A6E8-AFA8859EC4C4}\Controller Editor Setup PC.exe
AddRemove-{0B8565BA-BAD5-4732-B122-5FD78EFC50A9} - c:\programdata\{95B4F0ED-951F-4D36-B068-5EC1C4C19C14}\Service Center Setup PC.exe
AddRemove-{2930FB47-6452-4476-BF16-D77F748646DB} - c:\programdata\{B0CAD5CC-867E-473E-B55F-339F9635A45D}\Guitar Rig Mobile IO Setup PC.exe
AddRemove-{5552453B-BB76-45E3-973D-F95E458ED780} - c:\programdata\{78F6A1FC-ADDE-4028-A231-7B924CE455BD}\Kontakt 5 Setup PC.exe
AddRemove-{7930FB47-6452-4476-BF16-D77F748646DB} - c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.exe
AddRemove-{B0FC9E28-1CE6-4A40-BEF1-C6E6EDFCA070} - c:\programdata\{00E0164B-B182-4800-96DA-F8D39B3A7189}\Kontakt Factory Selection Setup PC.exe
AddRemove-{B962AD08-335F-46f7-A182-257D37672E5C} - c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled "=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= "c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled "=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= "c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= "Shockwave Flash Object "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= "c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx "
"ThreadingModel "= "Apartment "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@= "0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@= "ShockwaveFlash.ShockwaveFlash.13 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= "c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@= "{D27CDB6B-AE6D-11cf-96B8-444553540000} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@= "1.0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= "ShockwaveFlash.ShockwaveFlash "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= "Macromedia Flash Factory Object "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= "c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx "
"ThreadingModel "= "Apartment "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@= "FlashFactory.FlashFactory.1 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= "c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@= "{D27CDB6B-AE6D-11cf-96B8-444553540000} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@= "1.0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= "FlashFactory.FlashFactory "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
.
**************************************************************************
.
Completion time: 2014-06-26 16:23:38 - machine was rebooted
ComboFix-quarantined-files.txt 2014-06-26 20:23
ComboFix2.txt 2014-06-22 22:37
.
Pre-Run: 314,007,691,264 bytes free
Post-Run: 313,976,631,296 bytes free
.
- - End Of File - - AFB4D2CD6E259ECD838E418F7C6D2485
5B5E648D12FCADC244C1EC30318E1EB9

 

# AdwCleaner v3.213 - Report created 26/06/2014 at 17:14:54
# Updated 23/06/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Stan - STAN-LAPTOP
# Running from : C:\Users\Stan\Downloads\adwcleaner_3.213.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\MSR
Folder Deleted : C:\Program Files (x86)\predm

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Stan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aacbndibbcpajfgnkdkaakeiojmmgmnk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jpihmmhdcobmllpcnpfbhnipmhamldje
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKLM\Software\Free_soft_today

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v30.0 (en-US)

[ File : C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\wdeh64d1.default-1399473730970\prefs.js ]


-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2627 octets] - [26/06/2014 17:08:47]
AdwCleaner[S0].txt - [2241 octets] - [26/06/2014 17:14:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2301 octets] ##########

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Stan on Thu 06/26/2014 at 17:31:25.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{002150AD-F826-43A6-AFFB-CD8D4002BEB2}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{0A308844-209F-4A1D-B90D-9BDB25C01061}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{100EB782-C000-4898-A94F-2ED8F735E83D}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{12887BF5-55CF-4DA3-BE5A-C57904959D67}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{199200B6-4364-478C-9EF6-0709FC4386C8}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{1CDFA286-5411-4635-B3D6-93B01C46ED7E}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{1D700E13-EB1D-4FB9-8D1E-7C35E6557B5C}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{1EFC581B-F727-41BC-887E-86885744D42B}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{2342F778-1A50-40CE-AC54-057C4A51202D}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{31F52A2B-3516-408D-9833-80CAD087CAF6}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{33854503-6210-40BD-B4DD-EEF7EC568BD3}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{404C7DE3-A24B-45A6-BA29-44115996A819}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{419AF7EB-5486-4418-8245-8D0A6CD483AA}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{4768D5E6-A730-4471-BBE2-074A8DDDC605}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{4BD48B9E-997B-45B2-B44B-9BD90822DD46}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{5033E760-A311-4D30-A6DD-3F85CB3325E9}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{5683AFDC-F625-4EBB-995F-3A7F4BD2A2CC}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{5941FA94-1F8D-4F3F-97EC-965DAD64C466}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{595D7B1B-8A8C-42B6-B19B-9C7C1E9F07ED}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{5C0E2A5E-5734-4C74-A2D6-E6B15CE3604E}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{6D11AEE9-C582-4DF0-A98D-B7956CD38F7F}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{779E3868-10E0-47C2-A7ED-90C9725157C1}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{794CF15C-D1EF-41DB-92EA-384695104F27}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{7DDD6222-904B-4CB6-87FB-139AC1BBD5D4}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{7EAECE8C-4E27-451A-9912-0C59336F25C1}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{7F1570EA-A93B-4D4D-BEBA-2DC73080862A}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{7F5222E6-B04A-482D-ADDC-71CFC64A8D37}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{7FD02BD4-78DB-4DDF-8F7A-BEFC050B3108}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{83DD9C60-52D7-49C7-854C-B97CC8ACE676}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{84667A0C-95CC-4E1A-9F4C-5E720DB981FD}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{87D7DB8C-CEFA-4D80-BB7F-8CD2D4B29CCB}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{87F3B604-4124-4D6E-8BE9-16CAA871DD78}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{8D2288F6-6333-47F2-B6F4-6F04EA5F6938}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{8D93E688-6546-4C1E-9FCC-B0D66FC1AD51}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{8EF772FC-AC08-488C-9495-780CBEEA21AC}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{9031A6E4-367D-4267-963E-63EFAA07E503}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{9794E5C9-3406-4AB0-8C8A-24F72E114266}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{98599827-4F8B-4698-9B4A-F75C8D56FE05}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{98E0DF77-C6C2-48A6-B209-E81A9FEC2FD3}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{99385F5B-9C61-4D79-9FEB-DD795DDFC5EC}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{9FAFD385-550D-42E7-A30C-B2F4BD672CEA}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{A15F62E5-B60B-4461-8E37-B518E205A80F}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{A359952E-4ECB-4DC8-B810-1B6F47341598}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{A3C16ABF-CE20-4A70-A79E-D29B7C610009}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{A404CD31-D27D-4B56-9593-90C09E9C8FB6}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{BFD3006F-D30A-4AAA-B1C2-D2E8F9C4860E}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{C1FA4721-8B52-4D00-AA7E-5421448763C1}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{C2F9E7F8-7F14-4596-BCB0-195E21922588}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{C46CF9B7-DAD4-47E3-9E40-899A89082EB9}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{C67EBA32-9F4E-471C-BAC3-76DDC839AC2D}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{C8655A89-DE02-4B12-B291-056256E906A1}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{D2175681-C537-4659-9F3A-9E789FD57334}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{D21BAE46-E515-4367-B27E-C3A4E40EBEBB}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{D38BC095-C828-4BD5-945A-BB570DED20FD}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{D83B1F1D-425F-44A3-9B18-30FDF3CDF942}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{DC198836-37F0-4343-8049-214A4BBB0A65}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{DC84BB02-28F5-4C72-8D1F-8C0DD70E18BE}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{DDACB1C0-44E3-46E2-9A13-C018C83C4340}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{E22FC528-23DE-4C92-A8AB-918DCE1B8F02}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{E6BA404D-BC90-46EB-BD3E-34F877FD3F37}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{E6DD067D-B897-4344-A05F-D906A9E96B7D}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{EAD19A5F-A87A-4311-B336-C546B1449BA1}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{EC4A83F1-F7AB-47A3-9F67-7CEEF4CBF3DB}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{F1D3EE22-EE4D-4863-A050-DD82EBE9BC74}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{F5DC97F7-0E6C-49F8-A1E5-64902DEBD4C2}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{F68399D7-BE9E-4C1F-AE6F-3475D36C79C7}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{F88C05F4-C687-4DC4-BA5A-351E4D25AED4}
Successfully deleted: [Empty Folder] C:\Users\Stan\appdata\local\{FDCE6DA0-D3D2-416C-92B3-4F54ADE2425F}



~~~ FireFox

Emptied folder: C:\Users\Stan\AppData\Roaming\mozilla\firefox\profiles\wdeh64d1.default-1399473730970\minidumps [5 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 06/26/2014 at 17:40:13.65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

OTL logfile created on: 6/26/2014 6:30:30 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Stan\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17126)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 2.27 Gb Available Physical Memory | 60.61% Memory free
7.49 Gb Paging File | 5.87 Gb Available in Paging File | 78.44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452.66 Gb Total Space | 292.61 Gb Free Space | 64.64% Space Free | Partition Type: NTFS

Computer Name: STAN-LAPTOP | User Name: Stan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/06/26 18:30:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Stan\Downloads\OTL.exe
PRC - [2014/06/18 13:08:51 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014/06/05 17:46:42 | 024,474,752 | ---- | M] (Google) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
PRC - [2013/12/21 02:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/09/01 02:22:18 | 000,169,624 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2011/06/29 11:56:42 | 027,311,232 | ---- | M] (Gemalto N.V.) -- C:\Users\Stan\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe
PRC - [2010/03/09 00:42:02 | 000,029,984 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
PRC - [2010/03/09 00:40:36 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
PRC - [2010/03/05 20:11:30 | 000,636,192 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
PRC - [2009/12/25 18:21:16 | 000,034,160 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
PRC - [2009/09/10 15:12:10 | 000,185,632 | ---- | M] (Protexis Inc.) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2009/05/05 16:06:06 | 000,222,496 | ---- | M] (Acresso Corporation) -- C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
PRC - [2007/01/04 22:48:50 | 000,112,152 | ---- | M] (InterVideo) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe


========== Modules (No Company Name) ==========

MOD - [2014/06/26 18:16:11 | 001,160,704 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\_ssl.pyd
MOD - [2014/06/26 18:16:11 | 000,805,888 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._gdi_.pyd
MOD - [2014/06/26 18:16:11 | 000,110,080 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\PyWinTypes27.dll
MOD - [2014/06/26 18:16:11 | 000,027,136 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\_multiprocessing.pyd
MOD - [2014/06/26 18:16:11 | 000,007,168 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\hashobjs_ext.pyd
MOD - [2014/06/26 18:16:10 | 000,713,216 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\_hashlib.pyd
MOD - [2014/06/26 18:16:09 | 000,811,008 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._windows_.pyd
MOD - [2014/06/26 18:16:09 | 000,070,656 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._html2.pyd
MOD - [2014/06/26 18:16:09 | 000,025,600 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32pdh.pyd
MOD - [2014/06/26 18:16:09 | 000,024,064 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32pipe.pyd
MOD - [2014/06/26 18:16:08 | 001,062,400 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._controls_.pyd
MOD - [2014/06/26 18:16:08 | 000,686,080 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\unicodedata.pyd
MOD - [2014/06/26 18:16:08 | 000,557,056 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\pysqlite2._sqlite.pyd
MOD - [2014/06/26 18:16:08 | 000,525,640 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\windows._lib_cacheinvalidation.pyd
MOD - [2014/06/26 18:16:08 | 000,167,936 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32gui.pyd
MOD - [2014/06/26 18:16:08 | 000,128,512 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\_elementtree.pyd
MOD - [2014/06/26 18:16:08 | 000,127,488 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\pyexpat.pyd
MOD - [2014/06/26 18:16:08 | 000,119,808 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32file.pyd
MOD - [2014/06/26 18:16:08 | 000,108,544 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32security.pyd
MOD - [2014/06/26 18:16:08 | 000,098,816 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32api.pyd
MOD - [2014/06/26 18:16:08 | 000,087,552 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\_ctypes.pyd
MOD - [2014/06/26 18:16:08 | 000,045,568 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\_socket.pyd
MOD - [2014/06/26 18:16:08 | 000,038,912 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32inet.pyd
MOD - [2014/06/26 18:16:08 | 000,018,432 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32event.pyd
MOD - [2014/06/26 18:16:08 | 000,017,408 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32profile.pyd
MOD - [2014/06/26 18:16:08 | 000,010,240 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\select.pyd
MOD - [2014/06/26 18:16:06 | 000,320,512 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32com.shell.shell.pyd
MOD - [2014/06/26 18:16:06 | 000,022,528 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32ts.pyd
MOD - [2014/06/26 18:16:05 | 001,175,040 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._core_.pyd
MOD - [2014/06/26 18:16:03 | 000,735,232 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._misc_.pyd
MOD - [2014/06/26 18:16:03 | 000,364,544 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\pythoncom27.dll
MOD - [2014/06/26 18:16:03 | 000,078,336 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._animate.pyd
MOD - [2014/06/26 18:16:02 | 000,122,368 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\wx._wizard.pyd
MOD - [2014/06/26 18:16:02 | 000,011,264 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32crypt.pyd
MOD - [2014/06/26 18:16:01 | 000,035,840 | ---- | M] () -- C:\Users\Stan\AppData\Local\Temp\_MEI32522\win32process.pyd
MOD - [2014/06/18 13:08:33 | 003,852,912 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2014/01/20 14:17:04 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2014/01/20 14:16:38 | 001,044,808 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/06/29 04:56:06 | 011,483,264 | ---- | M] () -- C:\Users\Stan\AppData\Roaming\SanDisk\My Vaults\dmBackup.dll


========== Services (SafeList) ==========

SRV:64bit: - [2014/05/30 05:21:05 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014/03/11 12:34:10 | 000,347,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2014/03/11 12:34:10 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2013/05/27 01:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010/09/28 15:30:28 | 000,489,384 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV:64bit: - [2010/09/22 21:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/04/06 17:53:14 | 000,258,928 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
SRV:64bit: - [2010/03/15 12:56:20 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010/02/23 20:57:42 | 000,835,952 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe -- (TPCHSrv)
SRV:64bit: - [2010/02/05 20:44:48 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
SRV:64bit: - [2009/07/28 18:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
SRV - [2014/06/18 13:08:50 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/06/15 22:35:56 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/12/21 02:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2011/09/01 02:22:18 | 000,169,624 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor10.0)
SRV - [2011/05/15 18:30:26 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/09 00:40:36 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) [Auto | Running] -- C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe -- (PDFProFiltSrvPP)
SRV - [2010/01/25 08:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc)
SRV - [2009/10/06 12:21:50 | 000,051,512 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
SRV - [2009/09/10 15:12:10 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007/01/04 22:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/03/11 09:52:30 | 000,133,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2013/10/01 22:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013/05/02 05:52:40 | 001,514,568 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtwlane.sys -- (RTWlanE)
DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/10/21 23:59:15 | 000,026,624 | ---- | M] (CASIO COMPUTER CO., LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccusbmid.sys -- (CCUSBMIDI)
DRV:64bit: - [2012/09/10 12:16:48 | 000,125,304 | ---- | M] (Focusrite Audio Engineering Limited.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ffusb2audio.sys -- (ffusb2audio)
DRV:64bit: - [2012/08/23 10:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/05 23:16:44 | 000,111,696 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NIWinCDEmu.sys -- (NIWinCDEmu)
DRV:64bit: - [2011/10/07 12:28:30 | 000,292,056 | ---- | M] (Trident Multimedia Technologies Co.,Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tridvid.sys -- (TridVid)
DRV:64bit: - [2011/08/01 15:59:06 | 000,045,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:64bit: - [2011/08/01 15:59:06 | 000,023,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr)
DRV:64bit: - [2011/07/28 18:37:10 | 000,052,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d)
DRV:64bit: - [2011/04/13 09:21:56 | 001,143,912 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtl8192ce.sys -- (RTL8192Ce)
DRV:64bit: - [2010/11/20 09:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/09/29 06:01:46 | 000,695,400 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RTL8192su.sys -- (RTL8192su)
DRV:64bit: - [2010/03/19 03:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/03/15 13:06:28 | 006,403,072 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:64bit: - [2010/03/15 12:00:58 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010/03/10 21:51:32 | 000,316,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010/01/12 17:37:34 | 000,325,152 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/01/07 12:05:46 | 000,232,992 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2009/12/02 18:01:24 | 000,213,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2009/10/07 21:13:34 | 000,070,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009/10/07 21:13:34 | 000,028,728 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009/07/31 00:02:36 | 000,044,912 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LPCFilter.sys -- (LPCFilter)
DRV:64bit: - [2009/07/30 23:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV:64bit: - [2009/07/14 18:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 20:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/06/22 20:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
DRV:64bit: - [2009/06/19 22:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/05 12:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV:64bit: - [2007/04/17 14:51:50 | 000,014,112 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
DRV - [2011/06/02 11:08:34 | 000,017,864 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys -- (cpudrv64)
DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007/04/17 23:09:28 | 000,011,032 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\regi.sys -- (regi)


========== Standard Registry (SafeList) ==========

 

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{445DEB7C-6B58-482B-9231-05991D8CE428}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "google.com "
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:30.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 30.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2014/06/18 13:08:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 30.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014/06/18 13:08:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.26\extensions\\Components: C:\Program Files (x86)\SeaMonkey\components [2014/05/05 20:35:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.26\extensions\\Plugins: C:\Program Files (x86)\SeaMonkey\plugins

[2011/09/10 03:09:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Stan\AppData\Roaming\Mozilla\Extensions
[2014/06/19 21:57:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\wdeh64d1.default-1399473730970\extensions
[2014/01/26 00:43:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Stan\AppData\Roaming\Mozilla\SeaMonkey\Profiles\l57c88q8.default\extensions
[2013/07/31 17:48:32 | 000,000,000 | ---D | M] (ChatZilla) -- C:\Users\Stan\AppData\Roaming\Mozilla\SeaMonkey\Profiles\l57c88q8.default\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}
[2014/06/18 13:08:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014/06/18 13:08:51 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/06/28 11:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{googleageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage:
CHR - plugin: Error reading preferences file
CHR - Extension: Google Drive = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5019_0\
CHR - Extension: YouTube = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Nimbus Screenshot = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj\5.2_0\
CHR - Extension: Nimbus Screenshot = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj\5.2_0\~
CHR - Extension: Google Search = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Qualys BrowserCheck for Windows = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejhnkognlohdkpjkjongioociddgoibk\1.9.20.1_0\
CHR - Extension: Nimbus Screen Capture Web = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbabfnlcahbflejehfjibacnldlnnicl\2.0.1_0\
CHR - Extension: Google Wallet = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2014/06/26 16:09:23 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (TOSHIBA Corporation)
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll File not found
O2 - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [TosWaitSrv] C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDF5 Registry Controller] C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PPort12reminder] C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TWebCamera] C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
O4 - HKCU..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)
O4 - HKCU..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation)
O4 - HKCU..\Run: [SanDiskSecureAccess_Manager.exe] C:\Users\Stan\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe (Gemalto N.V.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPath = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O8:64bit: - Extra context menu item: Open with PDF Viewer Plus - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O8 - Extra context menu item: Open with PDF Viewer Plus - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.55.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.75.76.76 75.75.75.75 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4BCFD5F1-5076-4A1B-892A-EAD491BB5833}: DhcpNameServer = 75.75.76.76 75.75.75.75 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FB0D3A3B-7545-4F2E-BC29-A8EBF9A67963}: DhcpNameServer = 75.75.76.76 75.75.75.75
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/06/26 18:26:57 | 000,000,000 | ---D | C] -- C:\Users\Stan\AppData\Local\{60456194-1181-4B36-B4B1-4F34072D4A20}
[2014/06/26 17:09:08 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\windows\SysWow64\sqlite3.dll
[2014/06/26 17:08:44 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/06/26 16:23:59 | 000,000,000 | ---D | C] -- C:\windows\temp
[2014/06/26 16:09:26 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2014/06/25 22:36:46 | 000,000,000 | ---D | C] -- C:\Users\Stan\Desktop\ring
[2014/06/22 16:59:35 | 000,000,000 | ---D | C] -- C:\Users\Stan\Desktop\mbar
[2014/06/22 16:40:30 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2014/06/22 14:18:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\VST2
[2014/06/22 14:18:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\VST3
[2014/06/22 14:17:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Avid
[2014/06/22 14:17:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Celemony
[2014/06/22 14:17:43 | 000,000,000 | ---D | C] -- C:\Program Files\Celemony
[2014/06/22 14:17:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Celemony
[2014/06/22 14:16:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Celemony
[2014/06/22 14:16:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Celemony
[2014/06/22 13:43:00 | 000,000,000 | ---D | C] -- C:\Users\Stan\Documents\Cakewalk
[2014/06/22 13:36:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Propellerhead Software
[2014/06/20 03:39:16 | 000,000,000 | ---D | C] -- C:\Users\Stan\AppData\Roaming\IK Multimedia
[2014/06/20 03:28:30 | 000,000,000 | ---D | C] -- C:\Users\Stan\Documents\IK Multimedia
[2014/06/20 01:36:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2014/06/20 01:35:58 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2014/06/20 01:35:57 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2014/06/20 01:35:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2014/06/20 01:35:57 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2014/06/19 21:53:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Config
[2014/06/19 21:53:34 | 000,000,000 | ---D | C] -- C:\Users\Stan\AppData\Local\13549
[2014/06/19 16:48:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Waves
[2014/06/18 13:08:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014/06/16 02:16:31 | 000,000,000 | ---D | C] -- C:\Users\Stan\AppData\Local\Adobe
[2014/06/12 23:54:37 | 000,000,000 | R--D | C] -- C:\Users\Stan\Google Drive
[2014/06/12 11:44:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/06/12 01:29:52 | 000,000,000 | ---D | C] -- C:\Users\Stan\Desktop\presta
[2014/06/12 01:29:03 | 000,000,000 | ---D | C] -- C:\Users\Stan\Desktop\red-shades
[2014/06/12 00:08:36 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\usp10.dll
[2014/06/12 00:08:13 | 000,288,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\FWPKCLNT.SYS
[2014/06/12 00:08:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msxml6r.dll
[2014/06/12 00:08:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msxml6r.dll
[2014/06/12 00:08:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msxml3r.dll
[2014/06/12 00:08:11 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msxml3r.dll
[2014/06/12 00:08:10 | 003,178,496 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdpcorets.dll
[2014/06/12 00:08:10 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\RdpGroupPolicyExtension.dll
[2014/06/12 00:08:08 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll
[2014/06/12 00:08:08 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
[2014/06/12 00:08:08 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll
[2014/06/12 00:08:07 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll
[2014/06/12 00:08:07 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll
[2014/06/12 00:08:07 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll
[2014/06/12 00:08:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll
[2014/06/12 00:08:04 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
[2014/06/12 00:08:04 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll
[2014/06/12 00:08:04 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll
[2014/06/12 00:08:03 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll
[2014/06/12 00:08:03 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll
[2014/06/12 00:08:03 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2014/06/12 00:08:03 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe
[2014/06/12 00:08:02 | 002,040,832 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
[2014/06/12 00:08:02 | 000,608,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe
[2014/06/12 00:08:02 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll
[2014/06/12 00:08:01 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll
[2014/06/12 00:08:00 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll
[2014/06/12 00:08:00 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe
[2014/06/12 00:08:00 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll
[2014/06/12 00:07:59 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll
[2014/06/12 00:07:59 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll
[2014/06/12 00:07:58 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll
[2014/06/12 00:07:58 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2014/06/12 00:07:58 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
[2014/06/12 00:07:57 | 005,782,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2014/06/12 00:07:57 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll
[2014/06/12 00:07:57 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll
[2014/06/12 00:07:57 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll
[2014/06/12 00:07:57 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe
[2014/06/12 00:07:56 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe
[2014/06/12 00:07:56 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll
[2014/06/12 00:07:19 | 000,506,368 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\aepdu.dll
[2014/06/12 00:07:19 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\aeinv.dll
[2014/06/08 00:11:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[9 C:\*.tmp files -> C:\*.tmp -> ]
[2 C:\Users\Stan\Desktop\*.tmp files -> C:\Users\Stan\Desktop\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/06/26 18:23:10 | 000,016,304 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/06/26 18:23:10 | 000,016,304 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/06/26 18:22:00 | 000,000,894 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/06/26 18:18:05 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2014/06/26 18:15:57 | 000,000,890 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/06/26 18:15:36 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2014/06/26 18:15:31 | 3016,503,296 | -HS- | M] () -- C:\hiberfil.sys
[2014/06/26 16:09:23 | 000,000,027 | ---- | M] () -- C:\windows\SysNative\drivers\etc\hosts
[2014/06/25 22:35:30 | 014,674,036 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2014/06/25 22:35:30 | 005,080,872 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2014/06/25 22:35:30 | 000,006,266 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2014/06/25 02:03:16 | 000,026,357 | ---- | M] () -- C:\Users\Stan\Desktop\intsa grey.jpg
[2014/06/22 17:01:08 | 000,128,728 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/06/22 16:59:43 | 000,092,888 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbamchameleon.sys
[2014/06/22 13:43:02 | 000,001,829 | ---- | M] () -- C:\Users\Public\Desktop\SONAR X3 (x64).lnk
[2014/06/21 23:54:32 | 002,374,704 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2014/06/21 15:38:52 | 000,118,784 | ---- | M] () -- C:\windows\dsdxirmv.exe
[2014/06/20 01:36:53 | 000,001,754 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2014/06/20 00:55:51 | 000,001,073 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/06/15 22:35:56 | 000,699,056 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
[2014/06/15 22:35:56 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
[2014/06/15 02:46:10 | 000,108,544 | ---- | M] () -- C:\windows\SysWow64\installd.exe
[2014/06/15 02:45:42 | 000,108,544 | ---- | M] () -- C:\windows\SysWow64\hfnapi.dll
[2014/06/15 02:45:30 | 000,246,784 | ---- | M] () -- C:\windows\SysWow64\hfpapi.dll
[2014/06/12 23:54:39 | 000,001,709 | ---- | M] () -- C:\Users\Stan\Desktop\Google Drive.lnk
[2014/06/12 22:47:38 | 000,002,250 | ---- | M] () -- C:\Users\Stan\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/06/08 05:13:05 | 000,506,368 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\aepdu.dll
[2014/06/08 05:08:04 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\aeinv.dll
[2014/05/30 06:02:09 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll
[2014/05/30 05:39:43 | 000,548,352 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll
[2014/05/30 05:39:23 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll
[2014/05/30 05:38:29 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll
[2014/05/30 05:27:57 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll
[2014/05/30 05:24:28 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2014/05/30 05:21:23 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe
[2014/05/30 05:21:05 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe
[2014/05/30 05:20:36 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll
[2014/05/30 05:11:24 | 000,940,032 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe
[2014/05/30 05:08:22 | 005,782,528 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2014/05/30 05:06:42 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll
[2014/05/30 04:55:36 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll
[2014/05/30 04:49:21 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll
[2014/05/30 04:46:48 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
[2014/05/30 04:44:23 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll
[2014/05/30 04:43:06 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll
[2014/05/30 04:42:16 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll
[2014/05/30 04:35:44 | 000,608,768 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe
[2014/05/30 04:33:48 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll
[2014/05/30 04:30:43 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2014/05/30 04:29:31 | 000,631,808 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll
[2014/05/30 04:28:33 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe
[2014/05/30 04:27:56 | 000,592,896 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll
[2014/05/30 04:24:19 | 001,249,280 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll
[2014/05/30 04:23:22 | 002,040,832 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
[2014/05/30 04:10:46 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll
[2014/05/30 04:06:06 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll
[2014/05/30 04:04:20 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
[2014/05/30 03:50:09 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll
[2014/05/30 03:49:38 | 001,964,544 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
[2014/05/30 03:13:47 | 000,704,512 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll
[2014/05/30 03:13:09 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll
[9 C:\*.tmp files -> C:\*.tmp -> ]
[2 C:\Users\Stan\Desktop\*.tmp files -> C:\Users\Stan\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/06/25 02:03:15 | 000,026,357 | ---- | C] () -- C:\Users\Stan\Desktop\intsa grey.jpg
[2014/06/22 13:43:02 | 000,001,829 | ---- | C] () -- C:\Users\Public\Desktop\SONAR X3 (x64).lnk
[2014/06/20 01:36:53 | 000,001,754 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2014/06/19 21:58:01 | 000,001,171 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2014/06/19 21:54:49 | 000,001,050 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
[2014/06/15 02:46:10 | 000,108,544 | ---- | C] () -- C:\windows\SysWow64\installd.exe
[2014/06/15 02:45:42 | 000,108,544 | ---- | C] () -- C:\windows\SysWow64\hfnapi.dll
[2014/06/15 02:45:30 | 000,246,784 | ---- | C] () -- C:\windows\SysWow64\hfpapi.dll
[2014/06/12 23:54:39 | 000,001,709 | ---- | C] () -- C:\Users\Stan\Desktop\Google Drive.lnk
[2014/06/12 11:44:32 | 000,002,250 | ---- | C] () -- C:\Users\Stan\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/06/08 00:10:47 | 000,000,894 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/06/08 00:10:46 | 000,000,890 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/03/24 02:35:41 | 000,139,044 | ---- | C] () -- C:\Users\Stan\deco chandelier.jpg
[2014/01/20 03:17:23 | 000,000,288 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\.backup.dm
[2014/01/18 02:04:38 | 062,656,511 | ---- | C] () -- C:\Users\Stan\wedding.mpg
[2013/12/20 16:00:15 | 003,075,392 | ---- | C] () -- C:\Users\Stan\CCF12202013_0000.pdf
[2013/10/21 12:58:43 | 000,000,066 | ---- | C] () -- C:\windows\Brfaxrx.ini
[2012/03/24 16:51:56 | 000,197,014 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MAnalyzerpresets.xml
[2012/03/24 16:51:56 | 000,013,964 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MFlangerpresets.xml
[2012/03/24 16:51:56 | 000,013,158 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MOscillatorpresets.xml
[2012/03/24 16:51:56 | 000,009,119 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MFreqShifterpresets.xml
[2012/03/24 16:51:56 | 000,007,130 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MEqualizerpresets.xml
[2012/03/24 16:51:56 | 000,006,687 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\menvelopepresets.xml
[2012/03/24 16:51:56 | 000,006,444 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MCompressorpresets.xml
[2012/03/24 16:51:56 | 000,005,622 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MNoiseGeneratorpresets.xml
[2012/03/24 16:51:56 | 000,005,138 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MWaveShaperpresets.xml
[2012/03/24 16:51:56 | 000,004,362 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MPhaserpresets.xml
[2012/03/24 16:51:56 | 000,003,771 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MRingModulatorpresets.xml
[2012/03/24 16:51:56 | 000,002,820 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MEqualizerAreasEditorpresets.xml
[2012/03/24 16:51:56 | 000,002,775 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MStereoExpanderpresets.xml
[2012/03/24 16:51:56 | 000,002,666 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MVibratopresets.xml
[2012/03/24 16:51:56 | 000,002,492 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MSpectralAnalyzerPrefilterpresets.xml
[2012/03/24 16:51:56 | 000,002,366 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MTremolopresets.xml
[2012/03/24 16:51:56 | 000,001,907 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MAutopanpresets.xml
[2012/03/24 16:51:56 | 000,001,381 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MLimiterpresets.xml
[2012/03/24 16:51:56 | 000,001,235 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\mbasestyleconfigurationpresets.xml
[2012/03/24 16:51:56 | 000,001,011 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\MValueToColor5presets.xml
[2012/02/08 18:11:33 | 000,000,218 | ---- | C] () -- C:\Users\Stan\AppData\Local\recently-used.xbel
[2012/01/17 00:43:13 | 000,012,288 | ---- | C] () -- C:\Users\Stan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/01/11 20:43:14 | 000,002,036 | ---- | C] () -- C:\Users\Stan\honestech VHS to DVD 4.0 HD User Guide.lnk
[2011/05/27 02:51:27 | 001,956,892 | ---- | C] () -- C:\Users\Stan\AppData\Roaming\UserTile.png
[2011/05/15 02:30:00 | 000,000,952 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys

========== ZeroAccess Check ==========

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
" " = C:\Windows\SysNative\shell32.dll -- [2014/03/24 22:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2014/03/24 22:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 21:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 08:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 21:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >

 

All processes killed
========== OTL ==========
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ not found.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File\Folder C:\FRST not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Stan
->Temp folder emptied: 46252824 bytes
->Temporary Internet Files folder emptied: 51792 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 9313967 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 824 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 53.00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Public

User: Stan
->Java cache emptied: 0 bytes

Total Java Files Cleaned = 0.00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

User: Stan
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 06272014_160355

Files\Folders moved on Reboot...
C:\Users\Stan\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Stan\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

Results of screen317's Security Check version 0.99.85
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
JavaFX 2.1.1
Java(TM) 6 Update 29
Java(TM) 6 Update 25
Java 7 Update 55
Java version out of Date!
Adobe Flash Player 14.0.0.125
Adobe Reader XI
Mozilla Firefox (30.0)
Google Chrome 35.0.1916.153
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 2%
````````````````````End of Log``````````````````````

 

Farbar Service Scanner Version: 10-06-2014
Ran by Stan (administrator) on 27-06-2014 at 16:18:09
Running from "C:\Users\Stan\Downloads "
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware "=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****

 

eset no threats found