Solved Possible infection

[Solved] Possible infection

malwarbytes keeps finding pup objects, also have at computer unable to start on several occassions.

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/15/2014
Scan Time: 5:17:55 AM
Logfile: mlb.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.15.03
Rootkit Database: v2014.03.27.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: Gary

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 339677
Time Elapsed: 2 hr, 15 min, 19 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/15/2014
Scan Time: 5:17:55 AM
Logfile:
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.15.03
Rootkit Database: v2014.03.27.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: Gary

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 339677
Time Elapsed: 2 hr, 15 min, 19 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16545 BrowserJavaVersion: 10.55.2
Run by Gary at 5:20:19 on 2014-05-15
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6002.2.1252.1.1033.18.2942.1336 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\SLsvc.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\system32\IoctlSvc.exe
C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\Windows\system32\UTSCSI.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
C:\Program Files\Belkin\Belkin USB Print and Storage Center\connect.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe
C:\Program Files\Belkin\Router Setup and Monitor\dlnaPlugin.exe
C:\Windows\ehome\ehmsas.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uSearch Bar = Preserve
mStart Page = hxxp://www.yahoo.com/
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn4\yt.dll
BHO: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - c:\program files\windows live\companion\companioncore.dll
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: Yontoo: {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - c:\program files\yontoo\YontooIEClient.dll
BHO: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - c:\program files\yahoo!\companion\installs\cpn4\YTSingleInstance.dll
TB: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn4\yt.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Uploader] c:\program files\seagate\seagate dashboard 2.0\Seagate.Dashboard.Uploader.exe
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [InstaLAN] "c:\program files\belkin\router setup and monitor\BelkinRouterMonitor.exe" startup
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe "
mRun: [AvastUI.exe] "c:\program files\avast software\avast\AvastUI.exe" /nogui
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe "
StartupFolder: c:\users\gary\appdata\roaming\micros~1\windows\startm~1\programs\startup\dropbox.lnk - c:\users\gary\appdata\roaming\dropbox\bin\Dropbox.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: DisableStartupSound = dword:1
mPolicies-System: DisableStatusMessages = dword:1
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\windows live\companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
TCP: NameServer = 192.168.2.1
TCP: Interfaces\{DEFE736B-C868-43F1-8A26-556BABDE9FA1} : DHCPNameServer = 192.168.2.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\34.0.1847.137\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\gary\appdata\roaming\mozilla\firefox\profiles\mhqvnyoa.default-1398863969359\
FF - plugin: c:\progra~1\common~1\nero\browse~1\npBrowserPlugin.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.24.7\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_13_0_0_214.dll
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-3-6 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-3-6 180632]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-1-30 776976]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-1-30 411552]
R2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files\adobe\elements 12 organizer\PhotoshopElementsFileAgent.exe [2013-9-25 181152]
R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-4-26 24184]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-1-30 67824]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-1-30 50344]
R2 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\belkin\belkin usb print and storage center\BkBackupScheduler.exe [2012-5-20 152064]
R2 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\belkin\belkin usb print and storage center\Bkapcs.exe [2012-5-20 49152]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2012-5-20 247320]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-1-28 23256]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2014-5-9 107736]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-5-9 51416]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2012-1-1 197224]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2013-9-21 32064]
S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2012-8-1 39272]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2012-3-8 1492840]
S3 PCD5SRVC{BD6912E3-AC9D80E8-05040000};PCD5SRVC{BD6912E3-AC9D80E8-05040000} - PCDR Kernel Mode Service Helper Driver;c:\progra~1\pc-doc~1\PCD5SRVC.pkms [2008-9-9 20640]
S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2012-1-30 27192]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2013-9-21 136904]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2013-9-21 17864]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2013-9-21 153672]
.
=============== File Associations ===============
.
ShellExec: switch.exe: open= "c:\program files\nch software\switch\switch" "%L "
.
=============== Created Last 30 ================
.
2014-05-15 09:32:47 62576 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a0cd63a0-71bc-4c40-b76e-61abec49a11b}\offreg.dll
2014-05-14 10:01:34 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-13 10:31:27 8050496 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a0cd63a0-71bc-4c40-b76e-61abec49a11b}\mpengine.dll
2014-05-10 06:15:10 1266800 ----a-w- c:\program files\mozilla firefox\icuin52.dll
2014-05-10 06:15:10 10594416 ----a-w- c:\program files\mozilla firefox\icudt52.dll
2014-05-10 06:15:09 965232 ----a-w- c:\program files\mozilla firefox\icuuc52.dll
2014-05-10 02:18:15 73432 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-05-10 02:18:15 51416 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-05-10 02:18:15 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-05-09 23:46:53 107736 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-05-02 11:34:30 -------- d-----w- c:\users\gary\appdata\roaming\dBpoweramp
2014-04-30 13:07:08 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-04-26 14:13:00 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-04-26 14:12:57 43152 ----a-w- c:\windows\avastSS.scr
2014-04-26 14:08:12 -------- d-----w- c:\programdata\VS Revo Group
2014-04-25 13:40:34 -------- d-----w- c:\users\gary\appdata\roaming\AnvSoft
2014-04-25 00:48:30 -------- d-----w- c:\programdata\LockHunter
2014-04-23 23:49:01 -------- d-----w- c:\users\gary\appdata\local\{CEFE97BF-E212-44B4-A5CC-304B7B286DDA}
2014-04-18 13:12:08 -------- d-----w- c:\users\gary\New Folder (1)
2014-04-17 00:43:35 144664 ----a-w- c:\windows\system32\secman.dll
.
==================== Find3M ====================
.
2014-05-14 12:02:15 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-05-14 12:02:14 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-04-26 16:28:39 653176 ----a-w- c:\windows\system32\SpoonUninstall.exe
2014-04-26 14:12:58 776976 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-04-26 14:12:58 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-04-26 14:12:58 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-04-26 14:12:58 180632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-04-03 16:50:56 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-03-31 16:35:10 231584 ------w- c:\windows\system32\MpSigStub.exe
2014-03-07 23:12:00 1806848 ----a-w- c:\windows\system32\jscript9.dll
2014-03-07 23:02:19 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2014-03-07 23:02:07 1129472 ----a-w- c:\windows\system32\wininet.dll
2014-03-07 22:57:17 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2014-03-07 22:56:03 421376 ----a-w- c:\windows\system32\vbscript.dll
.
============= FINISH: 5:25:33.61 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vistaâ„¢ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 3/24/2009 3:31:59 PM
System Uptime: 5/14/2014 3:34:16 AM (26 hours ago)
.
Motherboard: PEGATRON CORPORATION | | Acacia
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ | Socket AM2 | 2400/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 286 GiB total, 26.229 GiB free.
D: is FIXED (NTFS) - 12 GiB total, 1.587 GiB free.
E: is CDROM ()
F: is FIXED (NTFS) - 932 GiB total, 354.624 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft 6to4 Adapter
Device ID: ROOT\*6TO4MP\0075
Manufacturer: Microsoft
Name: 6TO4 Adapter
PNP Device ID: ROOT\*6TO4MP\0075
Service: tunnel
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0000
Manufacturer: Microsoft
Name: isatap.lv.cox.net
PNP Device ID: ROOT\*ISATAP\0000
Service: tunnel
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
µTorrent
4Media iPod to PC Transfer
Acrobat.com
ActiveCheck component for HP Active Support Library
Adobe AIR
Adobe Download Assistant
Adobe Flash Player 13 ActiveX
Adobe Flash Player 13 Plugin
Adobe Photoshop Elements 12
Adobe Reader X (10.1.9)
AIM 7
AnswerWorks 5.0 English Runtime
Any Video Converter 5.5.9
AOL Uninstaller (Choose which Products to Remove)
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AusLogics BoostSpeed 6.3.0.0
avast! Free Antivirus
Belkin Setup and Router Monitor
Belkin USB Print and Storage Center
BitTorrent
Bonjour
CCleaner
Clone Tools version 2.0.2.0
Compatibility Pack for the 2007 Office system
D3DX10
dBpoweramp AAC Encoder
dBpoweramp DSP Effects
dBpoweramp FLAC Codec
dBpoweramp m4a Codec
dBpoweramp m4a FDK (AAC) Encoder
dBpoweramp m4a Utilities
dBpoweramp m4b Audio book Encoder
dBpoweramp Monkeys Audio Codec
dBpoweramp Music Converter
dBpoweramp Shorten Codec
Dell Touchpad
DING!
Download Updater (AOL LLC)
Driver Performer
Dropbox
DVDFab 8.2.2.0 (16/11/2012) Qt
DVDFab 9.1.1.9 (18/12/2013)
EasyDuplicateFinder v4.3
Elements 12 Organizer
Enhanced Multimedia Keyboard Solution
ESET Online Scanner v3
Exact Audio Copy 0.99pb5
Express Zip
FLAC Frontend
Google Chrome
Google Update Helper
Hardware Diagnostic Tools
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Active Support Library
HP Customer Experience Enhancements
HP Demo
HP MediaSmart DVD
HP MediaSmart Music/Photo/Video
HP MediaSmart SmartMenu
HP Picasso Media Center Add-In
HP Recovery Manager RSS
HP Total Care Setup
HP Update
HPAsset component for HP Active Support Library
iLivid
ImagXpress
ImgBurn
iPod PC Transfer Suit 4.2
iSEEK AnswerWorks English Runtime
iTunes
iTunes Library Toolkit
iTunesFolderWatch
Java 7 Update 55
Java Auto Updater
Junk Mail filter update
Juno Preloader
K-Lite Codec Pack 8.1.0 (Basic)
LockHunter 3.0, 32/64 bit
M3U2iTunes
magicJack
magicJack Recovery Tool 1.0
Malwarebytes Anti-Malware version 2.0.1.1004
Mesh Runtime
Messenger Companion
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft Live Search Toolbar
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 60 day trial
Microsoft Office Live Add-in 1.5
Microsoft Office Outlook Connector
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Professional Edition 2003
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SkyDrive
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft VC9 runtime libraries
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Works
mkw Audio Compression Toolkit
mkw Runtime Libraries
Mozilla Firefox 29.0.1 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee Reveal
My HP Games
MyFreeCodec
Nero 12
Nero 8 Essentials
Nero Audio Pack 1
Nero BackItUp
Nero BackItUp Help (CHM)
Nero Blu-ray Player
Nero Blu-ray Player Help (CHM)
Nero Burning ROM
Nero Burning ROM Help (CHM)
Nero ControlCenter
Nero ControlCenter Help (CHM)
Nero Core Components
Nero Disc Menus Basic
Nero Effects Basic
Nero Express
Nero Express Help (CHM)
Nero Kwik Media
Nero Kwik Media Help (CHM)
Nero Kwik Themes Basic
Nero Online Upgrade
Nero PiP Effects Basic
Nero Recode
Nero Recode Help (CHM)
Nero RescueAgent
Nero RescueAgent Help (CHM)
Nero SharedVideoCodecs
Nero StartSmart OEM
Nero Update
Nero Video
Nero Video Help (CHM)
neroxml
NVIDIA Control Panel 307.83
NVIDIA Drivers
NVIDIA Graphics Driver 307.83
NVIDIA Install Application
NVIDIA Update 1.10.8
NVIDIA Update Components
OGA Notifier 2.0.0048.0
PictureMover
PowerDirector
PowerISO
Prerequisite installer
Prism Video File Converter
PSE12 STI Installer
Python 2.5.2
Quicken 2011
QuickTime
R-Studio 4.2
Realtek High Definition Audio Driver
Revo Uninstaller Pro 3.0.8
Samsung Kies
SAMSUNG USB Driver for Mobile Phones
Seagate Dashboard 2.0
Secunia PSI (2.0.0.4003)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Segoe UI
Serial Key Generator version 5.0
Skype web features
Skypeâ„¢ 6.3
Soft Data Fax Modem with SmartCP
Switch Sound File Converter
The Rosetta Stone
Trader's Little Helper 2.7.0
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Video Mover
Viewpoint Media Player
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VLC media player 2.0.5
Welcome App (Start-up experience)
Winamp
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinRAR archiver
Xilisoft AVI to DVD Converter
Xilisoft FLAC Converter
Xilisoft ISO Pro
Xilisoft Video Converter Ultimate
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
Yontoo 1.10.02
.
==== End Of File ===========================

 

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User : Gary [Admin rights]
Mode : Scan -- Date : 05/15/2014 16:48:32
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 10 ¤¤¤
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowUser (0) -> FOUND
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> FOUND
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> FOUND
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> FOUND
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[WALLPAPER][PUM] HKCU\[...]\Desktop : WallPaper (C:\Windows\Web\Wallpaper\aWave_1440x900.jpg) -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD32 00AAJS-65M0A SCSI Disk Device +++++
--- User ---
[MBR] 015dad17540dd8e88d802c3ff600815b
[BSP] cbe1a3892920c024e3e7b9efc684338e : HP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 293303 MB
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 600686415 | Size: 11938 MB
User = LL1 ... OK!
Error reading LL2 MBR! ([0x1] Incorrect function. )

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Seagate Backup+ BK USB Device +++++
--- User ---
[MBR] fdfdae42b2b88a5f195ba8fa967c96ae
[BSP] 872d49b3cd04d36de14da8caf4b829b2 : Empty MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953867 MB
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] The request is not supported. )

Finished : << RKreport[0]_S_05152014_164832.txt >>




Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.05.15.17

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Gary :: GARY-PC [administrator]

5/15/2014 4:55:32 PM
mbar-log-2014-05-15 (16-55-32).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 336291
Time elapsed: 22 minute(s), 14 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009

(c) Malwarebytes Corporation 2011-2012

OS version: 6.0.6002 Windows Vista Service Pack 2 x86

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 2.600000 GHz
Memory total: 3084730368, free: 1349103616

Downloaded database version: v2014.05.15.17
Downloaded database version: v2014.03.27.01
=======================================
Initializing...
Done!
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 1549F232

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 63 Numsec = 600686352
Partition file system is NTFS
Partition is bootable

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 600686415 Numsec = 24450930

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 320072933376 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-625122448-625142448)...
Done!
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: EB3631AB

Partition information:

Partition 0 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 2048 Numsec = 1953519616

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 1000204885504 bytes
Sector size: 512 bytes

Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-63-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
Removal finished

 

Sorry I posted the log on Rogue Killer without clicking on Delete, I'll run the process again and then the malwarbyte anit-root

 

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User : Gary [Admin rights]
Mode : Remove -- Date : 05/15/2014 17:42:52
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 10 ¤¤¤
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowUser (0) -> REPLACED (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> REPLACED (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> REPLACED (1)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[WALLPAPER][PUM] HKCU\[...]\Desktop : WallPaper (C:\Windows\Web\Wallpaper\aWave_1440x900.jpg) -> REPLACED (c:\windows\web\wallpaper\awave.jpg)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD32 00AAJS-65M0A SCSI Disk Device +++++
--- User ---
[MBR] 015dad17540dd8e88d802c3ff600815b
[BSP] cbe1a3892920c024e3e7b9efc684338e : HP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 293303 MB
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 600686415 | Size: 11938 MB
User = LL1 ... OK!
Error reading LL2 MBR! ([0x1] Incorrect function. )

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Seagate Backup+ BK USB Device +++++
--- User ---
[MBR] fdfdae42b2b88a5f195ba8fa967c96ae
[BSP] 872d49b3cd04d36de14da8caf4b829b2 : Empty MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953867 MB
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] The request is not supported. )

Finished : << RKreport[0]_D_05152014_174252.txt >>
RKreport[0]_S_05152014_164832.txt



Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.05.15.17

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Gary :: GARY-PC [administrator]

5/15/2014 5:44:28 PM
mbar-log-2014-05-15 (17-44-28).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 336162
Time elapsed: 17 minute(s), 10 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009

(c) Malwarebytes Corporation 2011-2012

OS version: 6.0.6002 Windows Vista Service Pack 2 x86

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 2.600000 GHz
Memory total: 3084730368, free: 1349103616

Downloaded database version: v2014.05.15.17
Downloaded database version: v2014.03.27.01
=======================================
Initializing...
Done!
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 1549F232

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 63 Numsec = 600686352
Partition file system is NTFS
Partition is bootable

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 600686415 Numsec = 24450930

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 320072933376 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-625122448-625142448)...
Done!
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: EB3631AB

Partition information:

Partition 0 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 2048 Numsec = 1953519616

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 1000204885504 bytes
Sector size: 512 bytes

Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-63-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
Removal finished
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009

(c) Malwarebytes Corporation 2011-2012

OS version: 6.0.6002 Windows Vista Service Pack 2 x86

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, F:\ DRIVE_FIXED
CPU speed: 2.600000 GHz
Memory total: 3084730368, free: 1447116800

=======================================
Initializing...
Done!
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 1549F232

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 63 Numsec = 600686352
Partition file system is NTFS
Partition is bootable

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 600686415 Numsec = 24450930

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 320072933376 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-625122448-625142448)...
Done!
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: EB3631AB

Partition information:

Partition 0 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 2048 Numsec = 1953519616

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 1000204885504 bytes
Sector size: 512 bytes

Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-63-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
Removal finished

 

ComboFix 14-05-13.01 - Gary 05/15/2014 22:37:54.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.2942.1445 [GMT -7:00]
Running from: c:\users\Gary\Desktop\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\users\Gary\AppData\Local\temp\1.tmp\F_IN_BOX.dll
c:\windows\system32\drivers\etc\lmhosts
F:\Autorun.inf
.
.
((((((((((((((((((((((((( Files Created from 2014-04-16 to 2014-05-16 )))))))))))))))))))))))))))))))
.
.
2014-05-16 05:50 . 2014-05-16 05:50 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2014-05-16 05:50 . 2014-05-16 05:50 -------- d-----w- c:\users\yfl\AppData\Local\temp
2014-05-16 05:50 . 2014-05-16 05:50 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-05-15 23:55 . 2014-05-16 01:01 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-05-15 23:45 . 2014-05-15 23:45 26624 ----a-w- c:\windows\system32\TrueSight.sys
2014-05-15 09:32 . 2014-05-15 09:32 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A0CD63A0-71BC-4C40-B76E-61ABEC49A11B}\offreg.dll
2014-05-14 10:01 . 2014-05-05 23:14 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2014-05-13 10:31 . 2014-04-17 12:32 8050496 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A0CD63A0-71BC-4C40-B76E-61ABEC49A11B}\mpengine.dll
2014-05-10 02:18 . 2014-05-16 00:44 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-05-10 02:18 . 2014-05-10 02:18 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-05-10 02:18 . 2014-04-03 16:51 51416 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-05-09 23:46 . 2014-05-16 05:04 107736 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2014-05-02 11:34 . 2014-05-02 11:34 -------- d-----w- c:\users\Gary\AppData\Roaming\dBpoweramp
2014-04-30 13:07 . 2014-04-30 13:06 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-04-26 14:13 . 2014-04-26 14:12 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-04-26 14:12 . 2014-04-26 14:12 43152 ----a-w- c:\windows\avastSS.scr
2014-04-26 14:08 . 2014-04-26 14:08 -------- d-----w- c:\programdata\VS Revo Group
2014-04-25 13:40 . 2014-04-25 13:40 -------- d-----w- c:\users\Gary\AppData\Roaming\AnvSoft
2014-04-25 00:48 . 2014-04-25 00:48 -------- d-----w- c:\programdata\LockHunter
2014-04-22 11:42 . 2014-04-22 11:42 -------- d-----w- c:\users\Gary\AppData\Roaming\Oracle
2014-04-18 13:12 . 2014-04-18 13:12 -------- d-----w- c:\users\Gary\New Folder (1)
2014-04-17 00:43 . 2014-01-24 01:23 144664 ----a-w- c:\windows\system32\secman.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-15 14:05 . 2012-01-31 04:56 411680 ----a-w- c:\windows\system32\drivers\aswsp.sys
2014-05-15 14:05 . 2012-01-31 04:56 777488 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-05-15 14:05 . 2012-01-31 04:56 54832 ----a-w- c:\windows\system32\drivers\aswrdr.sys
2014-05-14 12:02 . 2012-05-06 20:06 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-05-14 12:02 . 2011-07-25 12:23 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-04-26 16:28 . 2009-06-06 23:56 653176 ----a-w- c:\windows\system32\SpoonUninstall.exe
2014-04-26 14:12 . 2013-03-06 14:20 180632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-04-26 14:12 . 2013-03-06 14:20 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-04-26 14:12 . 2012-01-31 04:56 776976 ----a-w- c:\windows\system32\drivers\aswsnx.sys.1400162753161
2014-04-26 14:12 . 2012-01-31 04:56 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2014-04-26 14:12 . 2012-01-31 04:56 54832 ----a-w- c:\windows\system32\drivers\aswrdr.sys.1400162753161
2014-04-26 14:12 . 2012-01-31 04:56 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-04-26 14:12 . 2012-01-31 04:55 271264 ----a-w- c:\windows\system32\aswBoot.exe
2014-04-03 16:50 . 2012-01-29 02:15 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-03-31 16:35 . 2009-10-02 20:58 231584 ------w- c:\windows\system32\MpSigStub.exe
2014-03-07 23:12 . 2014-04-10 10:09 1806848 ----a-w- c:\windows\system32\jscript9.dll
2014-03-07 23:02 . 2014-04-10 10:09 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2014-03-07 23:02 . 2014-04-10 10:09 1129472 ----a-w- c:\windows\system32\wininet.dll
2014-03-07 22:57 . 2014-04-10 10:09 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2014-03-07 22:56 . 2014-04-10 10:09 421376 ----a-w- c:\windows\system32\vbscript.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@= "{F241C880-6982-4CE5-8CF7-7085BA96DA5A} "
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-12-15 19:32 222832 ----a-w- c:\users\Gary\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@= "{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} "
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-12-15 19:32 222832 ----a-w- c:\users\Gary\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@= "{BBACC218-34EA-4666-9D7A-C78F2274A524} "
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-12-15 19:32 222832 ----a-w- c:\users\Gary\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@= "{472083B0-C522-11CF-8763-00608CC02F24} "
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-04-26 14:12 260976 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@= "{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Gary\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@= "{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Gary\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@= "{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Gary\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@= "{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Gary\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe "= "c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Uploader "= "c:\program files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe" [2013-05-30 122984]
"WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"AOL Fast Start "= "c:\program files\AOL Desktop 9.7a\AOL.EXE" [2013-09-07 72760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"InstaLAN "= "c:\program files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" [2011-02-25 1770400]
"APSDaemon "= "c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-13 43848]
"AvastUI.exe "= "c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-04-26 3873704]
"SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
c:\users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-5-7 32668056]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle "= 0 (0x0)
"DisableStartupSound "= 1 (0x1)
"DisableStatusMessages "= 1 (0x1)
"EnableLinkedConnections "= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@= "Driver "
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@= "Service "
.
[HKLM\~\startupfolder\C:^Users^Gary^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox (1).lnk]
path=c:\users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox (1).lnk
backup=c:\windows\pss\Dropbox (1).lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Gary^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Gary^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk]
path=c:\users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
backup=c:\windows\pss\MyPC Backup.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-11-21 16:57 959904 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2013-06-03 13:06 472984 ----a-w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start]
2013-09-07 17:19 72760 ----a-w- c:\program files\AOL Desktop 9.7a\aol.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
2011-10-02 13:04 292208 ----a-w- c:\program files\DellTPad\Apoint.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2014-02-13 04:57 43848 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cdloader]
2012-02-01 17:36 50592 ----a-w- c:\users\Gary\AppData\Roaming\mjusbsp\cdloader2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DBAgent]
2013-05-30 18:19 1517640 ----a-w- c:\program files\Seagate\Seagate Dashboard 2.0\DBAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDAgent]
2009-09-09 21:26 1148200 ------w- c:\program files\Hewlett-Packard\Media\DVD\DVDAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]
2010-03-08 07:27 41800 ----a-w- c:\program files\Common Files\AOL\1325011021\ee\aolsoftware.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
2008-10-09 15:58 75008 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2014-02-21 11:54 152392 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]
2008-07-21 13:30 12288 ----a-w- c:\program files\Hewlett-Packard\KBD\KbdStub.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
2014-02-15 04:55 1564992 ----a-w- c:\program files\Samsung\Kies\Kies.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2014-02-15 04:55 311616 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]
2012-01-04 10:47 6497592 ----a-w- c:\progra~1\Yahoo!\MESSEN~1\YahooMessenger.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2013-05-01 10:59 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive]
2013-12-15 19:32 257136 ----a-w- c:\users\Gary\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 16:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uploader]
2013-05-30 18:23 122984 ----a-w- c:\program files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
.
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [2013-09-25 181152]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-05-15 06:44 1077576 ----a-w- c:\program files\Google\Chrome\Application\34.0.1847.137\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-05-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-06 12:02]
.
2014-05-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-09-28 12:34]
.
2014-05-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-09-28 12:34]
.
2014-05-10 c:\windows\Tasks\HPCeeScheduleForGary.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2008-11-10 19:12]
.
2014-04-27 c:\windows\Tasks\PCDRScheduledMaintenance.job
- c:\program files\PC-Doctor for Windows\pcdr5cuiw32.exe [2008-09-10 14:43]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
mStart Page = hxxp://www.yahoo.com/
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\mhqvnyoa.default-1398863969359\
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-BrowserSafeguard - c:\program files\Browsersafeguard\BrowserSafeguard.exe
MSConfigStartUp-DriverFinder - c:\program files\DriverFinder\DriverFinder.exe
MSConfigStartUp-KiesAirMessage - c:\program files\Samsung\Kies\KiesAirMessage.exe
MSConfigStartUp-UnlockerAssistant - c:\program files\Unlocker\UnlockerAssistant.exe
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files:
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\PCD5SRVC{BD6912E3-AC9D80E8-05040000}]
"ImagePath "= "\??\c:\progra~1\PC-DOC~1\PCD5SRVC.pkms "
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
------------------------ Other Running Processes ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Belkin\Router Setup and Monitor\BelkinService.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
c:\program files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Nero\Update\NASvc.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\IoctlSvc.exe
c:\program files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
c:\program files\Secunia\PSI\sua.exe
c:\windows\system32\UTSCSI.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe
c:\program files\AOL Desktop 9.7a\waol.exe
c:\windows\ehome\ehmsas.exe
c:\program files\Belkin\Belkin USB Print and Storage Center\connect.exe
c:\program files\Belkin\Router Setup and Monitor\BelkinSetup.exe
c:\program files\Belkin\Router Setup and Monitor\dlnaPlugin.exe
c:\program files\Common Files\AOL\ACS\AOLAcsd.exe
c:\program files\AOL Desktop 9.7a\shellmon.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
.
**************************************************************************
.
Completion time: 2014-05-15 23:02:34 - machine was rebooted
ComboFix-quarantined-files.txt 2014-05-16 06:02
.
Pre-Run: 45,841,874,944 bytes free
Post-Run: 46,412,660,736 bytes free
.
- - End Of File - - E63EAC71DF7A2D017826C79FA32129B6
81CD5EC01DB0CE57EDD853F82462EF27

 

FYI , in the AM , malwarebytes did an automatic scan and found these "PUP "s again

 

# AdwCleaner v3.208 - Report created 17/05/2014 at 03:56:18
# Updated 11/05/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : Gary - GARY-PC
# Running from : C:\Users\Gary\Desktop\adwcleaner_3.208.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Uniblue
Folder Deleted : C:\ProgramData\Viewpoint
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLivid
Folder Deleted : C:\Program Files\1ClickDownload
Folder Deleted : C:\Program Files\driver-soft
Folder Deleted : C:\Program Files\iLivid
Folder Deleted : C:\Program Files\OApps
Folder Deleted : C:\Program Files\Uniblue
Folder Deleted : C:\Program Files\Viewpoint
Folder Deleted : C:\Program Files\WinZip Registry Optimizer
Folder Deleted : C:\Program Files\Yontoo
Folder Deleted : C:\Program Files\Common Files\Software Update Utility
Folder Deleted : C:\Users\Gary\AppData\Local\AVG Security Toolbar
Folder Deleted : C:\Users\Gary\AppData\Local\BrowserSafeguard
Folder Deleted : C:\Users\Gary\AppData\Local\Conduit
Folder Deleted : C:\Users\Gary\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\Gary\AppData\Local\OpenCandy
Folder Deleted : C:\Users\Gary\AppData\Local\PackageAware
Folder Deleted : C:\Users\Gary\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\Gary\AppData\LocalLow\AVG Security Toolbar
Folder Deleted : C:\Users\Gary\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\Gary\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Gary\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Gary\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Gary\AppData\Roaming\Conduit
Folder Deleted : C:\Users\Gary\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Gary\AppData\Roaming\YourFileDownloader
Folder Deleted : C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\Conduit
Folder Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\ConduitCommon
Folder Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\ConduitEngine
Folder Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\Extensions\engine@conduit.com
File Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\Extensions\OneClickDownloader@OneClickDownloader.com.xpi
File Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\Extensions\torntv2@torntv.com.xpi
File Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\Extensions\wtxpcom@mybrowserbar.com
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
File Deleted : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\user.js
File Deleted : C:\Windows\System32\Tasks\LaunchApp
File Deleted : C:\Windows\System32\Tasks\YourFile Update

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Deleted : HKCU\Software\Google\Chrome\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2E1C16D2-E6D6-43E7-B844-DE321EB36CB5}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E1C16D2-E6D6-43E7-B844-DE321EB36CB5}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{38FF30C4-2098-458A-83D7-84DD8C4747B7}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38FF30C4-2098-458A-83D7-84DD8C4747B7}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Toolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ToolbarBroker.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\ilivid
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.BandObject
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.BandObject.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Deleted : HKLM\SOFTWARE\Classes\ZGClnt.Mngr
Key Deleted : HKLM\SOFTWARE\Classes\ZGClnt.Mngr.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3287822
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7E8A36EA-2501-4ED3-A3C8-CFA9143FB169}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{FAA8C612-F1B6-461B-8B60-B54D74D9642E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1C888195-0160-4883-91B7-294C0CE2F277}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{99ACA0F7-D864-45CB-8C40-FD42A077E7CA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E65F40C8-3CEB-47C2-9E01-BF73323DF4E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{38BF9661-BDA0-4A74-BB3B-576EC7AE16DC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6857AC4A-95B4-4E2C-B2D2-8A235FCCEF4A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2CBD2A57-2FD5-4F1A-9FC8-90ED48FA4187}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\WEDLMNGR
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\YourFileDownloader
Key Deleted : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Driver-Soft
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\Software\ilivid
Key Deleted : HKLM\Software\InfoAtoms
Key Deleted : HKLM\Software\MetaStream
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\Viewpoint
Key Deleted : HKLM\Software\YourFileDownloader
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\StartNow Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160
Key Deleted : HKLM\Software\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160
Key Deleted : HKLM\Software\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16545


-\\ Mozilla Firefox v29.0.1 (en-US)

[ File : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\5sd3l8cc.default\prefs.js ]


[ File : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\prefs.js ]

Line Deleted : user_pref( "CT2786678..clientLogIsEnabled ", true);
Line Deleted : user_pref( "CT2786678..clientLogServiceUrl ", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent ");
Line Deleted : user_pref( "CT2786678..uninstallLogServiceUrl ", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation ");
Line Deleted : user_pref( "CT2786678.AboutPrivacyUrl ", "hxxp://www.conduit.com/privacy/Default.aspx ");
Line Deleted : user_pref( "CT2786678.AppTrackingLastCheckTime ", "Thu Oct 27 2011 03:49:07 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.BrowserCompStateIsOpen_129579220236217502 ", true);
Line Deleted : user_pref( "CT2786678.CTID ", "CT2786678 ");
Line Deleted : user_pref( "CT2786678.CurrentServerDate ", "27-10-2011 ");
Line Deleted : user_pref( "CT2786678.DSInstall ", true);
Line Deleted : user_pref( "CT2786678.DialogsAlignMode ", "LTR ");
Line Deleted : user_pref( "CT2786678.DialogsGetterLastCheckTime ", "Thu Oct 27 2011 03:48:45 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.DownloadReferralCookieData ", " ");
Line Deleted : user_pref( "CT2786678.EMailNotifierPollDate ", "Thu Oct 27 2011 05:39:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedLastCount5690698542593514850 ", 201);
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156812186649977 ", "Thu Oct 27 2011 05:34:22 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156813040823546 ", "Thu Oct 27 2011 05:34:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156813130095866 ", "Thu Oct 27 2011 05:34:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156813224203613 ", "Thu Oct 27 2011 05:34:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156813230837251 ", "Thu Oct 27 2011 05:34:22 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156813454291735 ", "Thu Oct 27 2011 05:34:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156813729834876 ", "Thu Oct 27 2011 05:34:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156813860870021 ", "Thu Oct 27 2011 05:34:22 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156814264681793 ", "Thu Oct 27 2011 05:34:22 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156814863075366 ", "Thu Oct 27 2011 05:34:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedPollDate2429156815257761081 ", "Thu Oct 27 2011 05:34:21 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.FeedTTL2429156813040823546 ", 15);
Line Deleted : user_pref( "CT2786678.FeedTTL2429156813130095866 ", 10);
Line Deleted : user_pref( "CT2786678.FeedTTL2429156813454291735 ", 5);
Line Deleted : user_pref( "CT2786678.FeedTTL2429156814264681793 ", 5);
Line Deleted : user_pref( "CT2786678.FirstServerDate ", "27-10-2011 ");
Line Deleted : user_pref( "CT2786678.FirstTime ", true);
Line Deleted : user_pref( "CT2786678.FirstTimeFF3 ", true);
Line Deleted : user_pref( "CT2786678.FixPageNotFoundErrors ", false);
Line Deleted : user_pref( "CT2786678.GroupingServerCheckInterval ", 1440);
Line Deleted : user_pref( "CT2786678.GroupingServiceUrl ", "hxxp://grouping.services.conduit.com/ ");
Line Deleted : user_pref( "CT2786678.HPInstall ", false);
Line Deleted : user_pref( "CT2786678.HasUserGlobalKeys ", true);
Line Deleted : user_pref( "CT2786678.HomePageProtectorEnabled ", false);
Line Deleted : user_pref( "CT2786678.HomepageBeforeUnload ", "hxxp://search.conduit.com/?ctid=CT2475029&SearchSource=13 ");
Line Deleted : user_pref( "CT2786678.Initialize ", true);
Line Deleted : user_pref( "CT2786678.InitializeCommonPrefs ", true);
Line Deleted : user_pref( "CT2786678.InstallationAndCookieDataSentCount ", 1);
Line Deleted : user_pref( "CT2786678.InstallationType ", "UnknownIntegration ");
Line Deleted : user_pref( "CT2786678.InstalledDate ", "Thu Oct 27 2011 03:48:53 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.IsAlertDBUpdated ", true);
Line Deleted : user_pref( "CT2786678.IsGrouping ", false);
Line Deleted : user_pref( "CT2786678.IsInitSetupIni ", true);
Line Deleted : user_pref( "CT2786678.IsMulticommunity ", false);
Line Deleted : user_pref( "CT2786678.IsOpenThankYouPage ", true);
Line Deleted : user_pref( "CT2786678.IsOpenUninstallPage ", false);
Line Deleted : user_pref( "CT2786678.LanguagePackLastCheckTime ", "Thu Oct 27 2011 03:48:59 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.LanguagePackReloadIntervalMM ", 1440);
Line Deleted : user_pref( "CT2786678.LanguagePackServiceUrl ", "hxxp://translation.users.conduit.com/Translation.ashx ");
Line Deleted : user_pref( "CT2786678.LastLogin_3.7.0.6 ", "Thu Oct 27 2011 03:48:59 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.LatestVersion ", "3.7.0.6 ");
Line Deleted : user_pref( "CT2786678.Locale ", "en ");
Line Deleted : user_pref( "CT2786678.MCDetectTooltipHeight ", "83 ");
Line Deleted : user_pref( "CT2786678.MCDetectTooltipUrl ", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1 ");
Line Deleted : user_pref( "CT2786678.MCDetectTooltipWidth ", "295 ");
Line Deleted : user_pref( "CT2786678.MyStuffEnabledAtInstallation ", true);
Line Deleted : user_pref( "CT2786678.OriginalFirstVersion ", "3.7.0.6 ");
Line Deleted : user_pref( "CT2786678.SHRINK_TOOLBAR ", 1);
Line Deleted : user_pref( "CT2786678.SearchCaption ", " ");
Line Deleted : user_pref( "CT2786678.SearchEngineBeforeUnload ", "MyAshampoo Customized Web Search ");
Line Deleted : user_pref( "CT2786678.SearchFromAddressBarIsInit ", true);
Line Deleted : user_pref( "CT2786678.SearchInNewTabEnabled ", true);
Line Deleted : user_pref( "CT2786678.SearchInNewTabIntervalMM ", 1440);
Line Deleted : user_pref( "CT2786678.SearchInNewTabLastCheckTime ", "Thu Oct 27 2011 03:49:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.SearchInNewTabServiceUrl ", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID ");
Line Deleted : user_pref( "CT2786678.SearchInNewTabUsageUrl ", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID ");
Line Deleted : user_pref( "CT2786678.SearchProtectorEnabled ", true);
Line Deleted : user_pref( "CT2786678.SearchProtectorToolbarDisabled ", false);
Line Deleted : user_pref( "CT2786678.SendProtectorDataViaLogin ", true);
Line Deleted : user_pref( "CT2786678.ServiceMapLastCheckTime ", "Thu Oct 27 2011 03:48:33 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.SettingsLastCheckTime ", "Thu Oct 27 2011 03:48:40 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.SettingsLastUpdate ", "1314985690 ");
Line Deleted : user_pref( "CT2786678.TBHomePageUrl ", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13 ");
Line Deleted : user_pref( "CT2786678.ThirdPartyComponentsInterval ", 504);
Line Deleted : user_pref( "CT2786678.ThirdPartyComponentsLastCheck ", "Thu Oct 27 2011 03:48:33 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.ThirdPartyComponentsLastUpdate ", "1312887586 ");
Line Deleted : user_pref( "CT2786678.ToolbarShrinkedFromSetup ", false);
Line Deleted : user_pref( "CT2786678.TrusteLinkUrl ", "hxxp://trust.conduit.com/CT2786678 ");
Line Deleted : user_pref( "CT2786678.TrustedApiDomains ", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref( "CT2786678.UserID ", "UN83279296988867314 ");
Line Deleted : user_pref( "CT2786678.ValidationData_Toolbar ", 0);
Line Deleted : user_pref( "CT2786678.WeatherNetwork ", " ");
Line Deleted : user_pref( "CT2786678.WeatherPollDate ", "Thu Oct 27 2011 05:34:22 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.WeatherUnit ", "C ");
Line Deleted : user_pref( "CT2786678.alertChannelId ", "1178763 ");
Line Deleted : user_pref( "CT2786678.backendstorage.cbfirsttime ", "546875204F637420323720323031312030333A34393A303720474D542D30373030202850616369666963204461796C696768742054696D6529 ");
Line Deleted : user_pref( "CT2786678.generalConfigFromLogin ", "{\ "ApiMaxAlerts\ ":\ "12\ ",\ "SocialDomains\ ":\ "social.conduit.com;apps.conduit.com;services.apps.conduit.com\ ",\ "AppsDetectionUrlPattern\ ":\ "hxxp://appdown[...]
Line Deleted : user_pref( "CT2786678.globalFirstTimeInfoLastCheckTime ", "Thu Oct 27 2011 03:48:44 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.homepageProtectorEnableByLogin ", true);
Line Deleted : user_pref( "CT2786678.initDone ", true);
Line Deleted : user_pref( "CT2786678.isAppTrackingManagerOn ", true);
Line Deleted : user_pref( "CT2786678.myStuffEnabled ", true);
Line Deleted : user_pref( "CT2786678.myStuffPublihserMinWidth ", 400);
Line Deleted : user_pref( "CT2786678.myStuffSearchUrl ", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID ");
Line Deleted : user_pref( "CT2786678.myStuffServiceIntervalMM ", 1440);
Line Deleted : user_pref( "CT2786678.myStuffServiceUrl ", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT ");
Line Deleted : user_pref( "CT2786678.revertSettingsEnabled ", false);
Line Deleted : user_pref( "CT2786678.searchProtectorDialogDelayInSec ", 10);
Line Deleted : user_pref( "CT2786678.searchProtectorEnableByLogin ", true);
Line Deleted : user_pref( "CT2786678.testingCtid ", " ");
Line Deleted : user_pref( "CT2786678.toolbarAppMetaDataLastCheckTime ", "Thu Oct 27 2011 03:48:42 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.toolbarContextMenuLastCheckTime ", "Thu Oct 27 2011 03:48:59 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CT2786678.usagesFlag ", 2);
Line Deleted : user_pref( "CommunityToolbar.CantToolbarBeEngineOwner ", " ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/US ", "\ "1-205113-59176800\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/US ", "\ "0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029 ", "\ "1314016960\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678 ", "\ "1313448428\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2481032 ", "\ "1318848589\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en ", "wVmmvqqOMqrv5xct1cJIHg== ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en ", "0uSPYx+Kl2jpu8sJZMeHjw== ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en ", "Dclc8oo4TTv7+mAkSlUSWg== ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en ", "K4Vqu91uAzWURlxJRdXJOg== ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg ", "\ "07879643d3acc1:0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6 ", "\ "6a637346d78ccc1:1254\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678 ", "\ "634552464880730000\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/ ", "\ "634553316085800000\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0 ", "634356118310000000 ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2475029&octid=CT2475029 ", "\ "1317625297\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2786678&octid=CT2786678 ", "\ "1314985690\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=ct2481032&octid=CT2475029 ", "\ "1318848595\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equalizer_dead.gif ", "\ "0678fe477ac91:0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimize.gif ", "\ "046c7ab477ac91:0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gif ", "\ "0484de117c4c91:0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gif ", "\ "0e7a152347ac91:0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif ", "\ "087c778347ac91:0\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en ", "\ "634515953213470000\" ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml ", "\ "1200455bd52e2003257115ff627b689a\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml ", "\ "4f3ab44fa5d401aadb119694d2102ce5\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml ", "\ "4c4f4b90969892371a2277f4260d1f68\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml ", "\ "df85e6640b5a829b1eb246f4c1d1ecfa\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml ", "\ "012ff2eb7ab9399449611e19af2291a8\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml ", "\ "78de36d035d1d6aca1b905f3b8e53c4a\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml ", "\ "bf160f83564cac498312593c8e538e2b\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml ", "\ "63adb24651dfe0e9fd080e3c39e75c46\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml ", "\ "fc5be7aab7df56e7ac3719ff57eadd15\ "-gzip ");
Line Deleted : user_pref( "CommunityToolbar.EngineOwner ", "ConduitEngine ");
Line Deleted : user_pref( "CommunityToolbar.EngineOwnerGuid ", "engine@conduit.com ");
Line Deleted : user_pref( "CommunityToolbar.EngineOwnerToolbarId ", "conduitengine ");
Line Deleted : user_pref( "CommunityToolbar.IsMyStuffImportedToEngine ", true);
Line Deleted : user_pref( "CommunityToolbar.LatestLibsPath ", "file:///C:\\Users\\Gary\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\05lzepug.default\\conduitCommon\\modules\\3.7.0.6 ");
Line Deleted : user_pref( "CommunityToolbar.LatestToolbarVersionInstalled ", "3.7.0.6 ");
Line Deleted : user_pref( "CommunityToolbar.OriginalEngineOwner ", "CT2475029 ");
Line Deleted : user_pref( "CommunityToolbar.OriginalEngineOwnerGuid ", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} ");
Line Deleted : user_pref( "CommunityToolbar.OriginalEngineOwnerToolbarId ", "myashampoo ");
Line Deleted : user_pref( "CommunityToolbar.SearchFromAddressBarSavedUrl ", "hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-msgr&p= ");
Line Deleted : user_pref( "CommunityToolbar.ToolbarsList ", "ConduitEngine,CT2786678 ");
Line Deleted : user_pref( "CommunityToolbar.ToolbarsList2 ", "CT2786678 ");
Line Deleted : user_pref( "CommunityToolbar.ToolbarsList4 ", "CT2786678 ");
Line Deleted : user_pref( "CommunityToolbar.alert.alertInfoInterval ", 1440);
Line Deleted : user_pref( "CommunityToolbar.alert.alertInfoLastCheckTime ", "Sun Nov 20 2011 00:36:17 GMT-0800 (Pacific Standard Time) ");
Line Deleted : user_pref( "CommunityToolbar.alert.clientsServerUrl ", "hxxp://alert.client.conduit.com ");
Line Deleted : user_pref( "CommunityToolbar.alert.firstTimeAlertShown ", true);
Line Deleted : user_pref( "CommunityToolbar.alert.locale ", "en ");
Line Deleted : user_pref( "CommunityToolbar.alert.loginIntervalMin ", 1440);
Line Deleted : user_pref( "CommunityToolbar.alert.loginLastCheckTime ", "Sun Nov 20 2011 00:36:17 GMT-0800 (Pacific Standard Time) ");
Line Deleted : user_pref( "CommunityToolbar.alert.loginLastUpdateTime ", "1313487611 ");
Line Deleted : user_pref( "CommunityToolbar.alert.messageShowTimeSec ", 20);
Line Deleted : user_pref( "CommunityToolbar.alert.servicesServerUrl ", "hxxp://alert.services.conduit.com ");
Line Deleted : user_pref( "CommunityToolbar.alert.showTrayIcon ", false);
Line Deleted : user_pref( "CommunityToolbar.alert.userCloseIntervalMin ", 300);
Line Deleted : user_pref( "CommunityToolbar.alert.userId ", "e7b58193-1fcd-4ac0-9c87-4de6da9c2ee2 ");
Line Deleted : user_pref( "CommunityToolbar.facebook.settingsLastCheckTime ", "Thu Oct 27 2011 03:49:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.globalUserId ", "a1317e9b-b03c-4b28-8de0-b05f89ba3eab ");
Line Deleted : user_pref( "CommunityToolbar.isAlertUrlAddedToFeedItemTable ", true);
Line Deleted : user_pref( "CommunityToolbar.isClickActionAddedToFeedItemTable ", true);
Line Deleted : user_pref( "CommunityToolbar.keywordURLSelectedCTID ", "CT2475029 ");
Line Deleted : user_pref( "CommunityToolbar.notifications.alertDialogsGetterLastCheckTime ", "Thu Oct 27 2011 03:48:41 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.notifications.alertInfoInterval ", 1440);
Line Deleted : user_pref( "CommunityToolbar.notifications.alertInfoLastCheckTime ", "Thu Oct 27 2011 05:34:28 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.notifications.clientsServerUrl ", "hxxp://alert.client.conduit.com ");
Line Deleted : user_pref( "CommunityToolbar.notifications.locale ", "en ");
Line Deleted : user_pref( "CommunityToolbar.notifications.loginIntervalMin ", 1440);
Line Deleted : user_pref( "CommunityToolbar.notifications.loginLastCheckTime ", "Thu Oct 27 2011 03:48:35 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.notifications.loginLastUpdateTime ", "1313487611 ");
Line Deleted : user_pref( "CommunityToolbar.notifications.messageShowTimeSec ", 20);
Line Deleted : user_pref( "CommunityToolbar.notifications.servicesServerUrl ", "hxxp://alert.services.conduit.com ");
Line Deleted : user_pref( "CommunityToolbar.notifications.showTrayIcon ", false);
Line Deleted : user_pref( "CommunityToolbar.notifications.userCloseIntervalMin ", 300);
Line Deleted : user_pref( "CommunityToolbar.notifications.userId ", "70203d6a-b373-40ca-9a4b-5d0685bd4f0b ");
Line Deleted : user_pref( "CommunityToolbar.originalHomepage ", "hxxp://search.conduit.com/?ctid=CT2475029&SearchSource=13 ");
Line Deleted : user_pref( "CommunityToolbar.originalSearchEngine ", "MyAshampoo Customized Web Search ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_1344951.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_16887175.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_17151925.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_20536157.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_30261067.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_34655603.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_428333.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_759251.LastCheckTime ", "Thu Oct 27 2011 03:48:51 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "CommunityToolbar.twitter.user_816653.LastCheckTime ", "Fri Oct 28 2011 07:53:01 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "ConduitEngine.FirstServerDate ", "10/27/2011 13 ");
Line Deleted : user_pref( "ConduitEngine.FirstTime ", true);
Line Deleted : user_pref( "ConduitEngine.FirstTimeFF3 ", true);
Line Deleted : user_pref( "ConduitEngine.HasUserGlobalKeys ", true);
Line Deleted : user_pref( "ConduitEngine.HideEngineAfterRestart ", false);
Line Deleted : user_pref( "ConduitEngine.Initialize ", true);
Line Deleted : user_pref( "ConduitEngine.InitializeCommonPrefs ", true);
Line Deleted : user_pref( "ConduitEngine.InstalledDate ", "Thu Oct 27 2011 03:48:37 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "ConduitEngine.IsMulticommunity ", false);
Line Deleted : user_pref( "ConduitEngine.IsOpenThankYouPage ", false);
Line Deleted : user_pref( "ConduitEngine.IsOpenUninstallPage ", true);
Line Deleted : user_pref( "ConduitEngine.LanguagePackLastCheckTime ", "Thu Oct 27 2011 03:48:37 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "ConduitEngine.LastLogin_3.2.5.2 ", "Thu Oct 27 2011 03:48:40 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "ConduitEngine.PublisherContainerWidth ", 0);
Line Deleted : user_pref( "ConduitEngine.SearchFromAddressBarIsInit ", true);
Line Deleted : user_pref( "ConduitEngine.SettingsLastCheckTime ", "Thu Oct 27 2011 03:48:33 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "ConduitEngine.UserID ", "UN32172703005703185 ");
Line Deleted : user_pref( "ConduitEngine.engineLocale ", "en-US ");
Line Deleted : user_pref( "ConduitEngine.enngineContextMenuLastCheckTime ", "Thu Oct 27 2011 03:48:37 GMT-0700 (Pacific Daylight Time) ");
Line Deleted : user_pref( "ConduitEngine.initDone ", true);
Line Deleted : user_pref( "browser.search.defaultengine ", "Ask.com ");
Line Deleted : user_pref( "browser.search.defaultthis.engineName ", "MyAshampoo Customized Web Search ");
Line Deleted : user_pref( "browser.search.order.1 ", "Ask.com ");
Line Deleted : user_pref( "extensions.enabledItems ", "{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{CAFEEFAC-0016-0000-0017[...]
Line Deleted : user_pref( "extensions.wrc.SearchRules.ask.com.style ", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\ "I[...]
Line Deleted : user_pref( "extensions.wrc.SearchRules.ask.com.url ", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.* ");
Line Deleted : user_pref( "extensions.wrc.SearchRules.rambler.ru.style ", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\ "IMAGE\ ") right no-repeat} ");
Line Deleted : user_pref( "extentions.y2layers.defaultEnableAppsList ", "bestvideodownloader,ezLooker,pagerage,buzzdock,toprelatedtopics,twittube ");
Line Deleted : user_pref( "extentions.y2layers.installId ", "836441e2-b700-4f6b-86ac-eb66b6523b61 ");
Line Deleted : user_pref( "extentions.y2layers.lastDnsTest ", 371037);
Line Deleted : user_pref( "searchreset.backup.browser.search.defaultenginename ", "Search the web (Babylon) ");
Line Deleted : user_pref( "browser.search.defaultenginename ", "Ask.com ");
Line Deleted : user_pref( "browser.search.selectedEngine ", "Ask.com ");
Line Deleted : user_pref( "extensions.asktb.ff-original-keyword-url ", "hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=994519&p= ");
Line Deleted : user_pref( "smartbar.conduitHomepageList ", "hxxp://search.conduit.com/?ctid=CT3289847&octid=CT3289847&SearchSource=61&CUI=UN99239319882492858&UM=2&UP=SP297113EA-A6D1-440B-BFEB-412B2E1ACAB8,hxxp://searc[...]
Line Deleted : user_pref( "smartbar.originalHomepage ", "about:home ");

[ File : C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\mhqvnyoa.default-1398863969359\prefs.js ]


-\\ Google Chrome v34.0.1847.137

[ File : C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=ff&src=crm&tb=FTB&o=41648106&locale=en_US&apn_uid=57D92367-F4B5-4F7C-BD49-E7E52BDD3A45&apn_ptnrs=9C&apn_sauid=193CD7D7-2D18-49D5-A34C-E5511A0DFFFD&apn_dtid=YYYYYYYYUS&q={searchTerms}&
Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=8F31C944-4B9F-4075-B47E-3DBD2B5031CD&apn_ptnrs=TV&apn_sauid=4CA3333D-5F20-48F6-B5A3-37D5B6EA22D9&apn_dtid=OSJ000YYUS&q={searchTerms}
Deleted [Search Provider] : hxxp://search.aol.com/aol/search?query={searchTerms}
Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPFED9443D-0DA5-4712-97BD-AF2CD9EC9C9B&q={searchTerms}&SSPV=
Deleted [Extension] : klibnahbojhkanfgaglnlalfkgpcppfi
Deleted [Extension] : pmlghpafmmnmmkjdhacccolfgnkiboco

*************************

AdwCleaner[R0].txt - [41715 octets] - [17/05/2014 03:54:20]
AdwCleaner[S0].txt - [42220 octets] - [17/05/2014 03:56:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [42281 octets] ##########

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by Gary on Sat 05/17/2014 at 4:12:27.12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\yt.ytnavassistplugin
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\yt.ytnavassistplugin.1
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Myfree Codec
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Myfree Codec
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{060C73C8-1167-4894-9655-313968FF463A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{CA051B20-F0FC-4230-AA0A-688B1E122C1B}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Gary\Local Settings\Application Data\cre "
Successfully deleted: [Folder] "C:\Program Files\myfree codec "
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{00F109CF-54CE-4D0A-8AD9-DFCDE9A933D1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{01FB8BCB-B057-4EA7-BC8B-86A235D7DCA5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{02263127-5154-40D8-97B8-5680241C9243}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{027C9A9A-2D6D-4F25-81A7-D1BE9599C0AE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{030186A4-E75F-49B9-8203-87B6E9528F9C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0307B57E-4E43-4433-BB99-6FDB8BCC02B5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{036D91EB-B922-4DE0-8103-C6D8ADA92FE2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{03B8A922-F94C-4E11-A166-FC61AD2D515A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{03E6F272-709B-4DD2-8417-3C48792B8E8F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{04A3D0AC-5A16-49C5-A4AC-AC784B6B7EC9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{054BDC04-5E03-4654-9246-F46BCC1EDC58}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{06046AA1-9B8D-4769-B0FA-68C269B706D2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{06445385-2FA7-4F51-BD5C-B5CB0E452AAD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{06A50DDF-4D52-4C74-9B3F-12E698986585}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{06E614F0-FAAB-40F6-A2F7-05E6E652ED80}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{07755C3C-D7AB-46E9-A0F5-0F0B8141F0DD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{07AD1D76-CF1F-4D36-A866-91AD558864C0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{07BE7B2B-5DC8-4F8F-98FB-714D9EA9FB8E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{086BE921-1898-4550-818F-7968EEFEC168}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{087B1CE4-0AA1-4C7F-99DF-AA158B30DE4F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{08829255-826E-4AFC-9E04-33F70FCEED7B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{08A97931-20C2-4EE1-AD45-031035295510}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{08DB0927-4E99-4D3C-9BEA-4E3EB92F4BE3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{09A5F0DD-6C59-419E-9A99-0ACE216DCA8E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{09FDF8B5-4191-47CF-AA26-6B46745AE369}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0ADD2470-D1C1-49BA-8ACF-262F0A4E95AC}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0C2890F2-E1BF-4BDB-B51B-BB228F807994}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0D8F5D17-BF68-4953-A1F2-109CEF7253C5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0DC8C1D3-D34C-4CB9-B966-3E46617A96D0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0DC8EE37-6574-4C5A-92F7-AA7D487477EE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0E70500C-99AA-45B1-9918-78A9F6464538}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{0F45755D-7DC8-4E3B-B7D6-B6285541AB31}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{104BF702-50E7-4B30-8C70-72D11C8D4A38}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{106B60D4-762A-49E6-81D9-68AF7F7A4516}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1103C0B8-B66B-4DB4-96BD-7089B10CF9B7}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{115CE739-AB9D-4159-A2D9-7FC93292B008}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1216FA87-EDDA-4F31-A266-49CA388936FF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{12652BAE-B684-4BEB-B117-BAE3BA5B2F47}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{128C2C20-71AC-4602-BE92-3415F51D65EF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{136FBC58-A530-4629-AF7F-61C89B9CD4BE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{13A1860B-3CB6-4165-9327-D15D167617A0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{154BCE53-98DF-4501-88FE-808C06C10C64}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{15A707C0-A51A-47A7-8637-6C97834411D9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{15E7F40E-CB19-4776-AE5F-2E36DA2933C8}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{16690183-55AF-4498-8A93-A32719350256}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{16C5C9B2-3428-44AF-941E-5159D92D8C23}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{16E7D5BA-4F1D-42A0-93AA-C0D4BA043933}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{172F072F-9E3C-411C-AFAC-E1168E58F3CD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1766F9D7-7E26-4981-99EB-9516607B838D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{181EC4AC-F4AB-4B0C-9DFB-A9E51F0AF474}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{18768548-A646-4419-902D-691E958C2598}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{18FC7BAD-AA29-4F7C-90F8-D453CAF9E195}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{19063C98-B2A8-4ECF-B9A9-8E8DA43AA94D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1913B7AC-EE25-4DE3-A779-D6AE5E850E1A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{19364B70-E1D3-4437-A1C7-5CF5ACCA3C51}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{194D3ACD-33A2-4CCD-AE27-EF2DEA97E443}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{19C9BFD8-3174-41D0-809E-0E3CF26F81F6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1A468FC3-FFC0-4569-8DDB-6CF924E2E486}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1A95F4EF-AF42-42A3-82FC-7B99DD610972}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1B00BA9B-A5FB-44DC-AABE-E69A94723A2F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1BB291E4-3AB9-45D0-9E91-37DF6705573C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1D678442-2ECF-49B7-A8CE-5CC100D879F9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1D92B385-606B-485F-A7F8-D2F4259E2D87}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1DDA3495-DD78-405D-B4DD-5727EF283917}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1E589462-FEDC-4F9B-B921-AB45C2FF3611}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1EC7C4BA-343F-4DC5-A0E9-E07522F16D96}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{1FC3D25E-7E1E-4B2B-A509-0C546FAF0782}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{20A3909A-4776-4AFC-8226-88DD5B56F8DD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2313C564-BD9E-4465-BB33-F20FADBFD076}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{235E6578-D6AB-426D-8FF5-AA2C9ABC53EC}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{237A6DE5-725D-4584-8E06-A21927F271F6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{23B4D9FC-5933-4707-BE03-D4FF1B30590A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2454EDE6-3873-45D1-866E-2BF942E435CE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{245EF1A5-6A82-405A-9709-5BD8F9A01BEF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{25E6B74C-57C4-446E-974B-993275EFE292}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{26553D5E-3353-4763-B3D9-871DF4F2E2B1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{265D2A1B-B038-4EFB-B1E1-B8FC441FA316}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2692D563-55D6-455E-A3AB-20AB2ED000FD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{26C14726-13F8-406A-9FD8-2075B4D0B83C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{279D752F-63FC-4B21-970C-D9F6E0FED627}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{27A7AD1D-E75D-44B5-86F2-0D72F3C67E43}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2830FA92-E228-479A-B080-EDD447A08CE7}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{28A41DB8-2D93-4EB6-BBC4-03F8FA1DEB22}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{28C1C1FB-9F8D-45A7-9731-8D3F8574C1E1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{290E16C3-3281-4946-B4B1-9AAC29A1744B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2912EA18-006D-49A4-B4A8-65288AF37A7F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2980A84D-34D0-406A-88CC-274E185AD0C8}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{29FD6AA8-EAFE-4137-A809-33EB8FF42C1D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2AE65BA2-3C8B-469E-9A21-B2D12044C54E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2B7E3056-3366-4DB3-8010-3B6B883413AE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2B7F4262-9F8F-409F-95BC-30E06A09AD21}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2C22C96D-2EF7-4EA6-BF68-824DCC4D269A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2CF9848D-6B9D-4B57-8F2C-30A0EA6C47A5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2D22C26F-46CC-4B8E-BA3D-69908399A2BD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2D301C10-ABBE-4708-A6B1-0878DF6DD876}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2F5C2808-766B-45BF-90EC-B0CB1B6029B6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{2F807836-D772-4399-90A0-9CD2EDD6F15F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{30CAF991-E908-4959-8284-68B9124F7D21}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{313CA027-03D5-41E0-BA01-AEC521A54C3B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{31537D3D-5BF9-44E8-A7E3-167B67ECC6E4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{31A47E83-E690-41C6-9F67-C26E59794F05}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{339EBEE4-E544-444D-91BE-25CD6383597A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{33EAC940-D97C-432F-8992-9E76555DF64B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{35055710-AF84-4872-936F-EB71FE4991A0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{356BC767-CD8B-4789-986C-BC0248F88719}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{36DE0600-2688-4B5D-9BCD-6548449CBDF1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{378F97C1-84B4-4845-86C6-E9C08587DF2F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{381BE362-F269-4D23-BD59-26A5288961E3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{38D46744-8E82-4B2E-982B-73F4876FD481}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3920581A-B6FF-4600-A20A-991E8DDC0F93}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{392095D9-BD61-45CE-B38F-4BDB267CFC14}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3983CC05-AEEC-4955-A6BD-8976432C1DC2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{39B8C434-DCF7-4350-9DB0-06E4F6C1E595}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{39BBF9D9-E8F7-476A-9FD5-B3701B982C5C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3B0B0489-B89E-4C4E-899F-60586DD15C6D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3C0CC9D8-5803-4AAB-94BE-0A04F85781A5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3C996507-373F-44A3-89E0-EA6370185AE0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3D9130C1-1D5F-4692-87E7-BA070127D5B6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3DE4BFEA-3C16-4096-BBA6-8CCB6AFAFA60}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3E1B7EF7-DB27-421E-BA9D-F1D86F537DA3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3F67C852-E4D2-48F8-9F27-D84A948CFD31}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3F6A62F0-4990-4871-BEA6-7F3EA4ECFED0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{3FEFD574-4223-4BCC-ACEC-067326C6C083}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{40EEF1DF-8355-47DC-B1E2-8958CB3EC828}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{40F64DA2-BEB4-4133-A917-EF8EAD8D9DA7}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{41C3C723-1936-49B0-BA6C-CC44C65E3D25}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{41F13F50-5E61-490B-A2F2-9E131ADF9B83}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{42555680-00CB-4511-B252-6782DAE27E68}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{42D79BF8-E7FA-4892-8348-2CFF112F957F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{43B4D523-0436-4537-97FB-79BEF6B4CAA6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{43D861F8-E6EC-4BC1-AC0F-A8F80BADD645}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{44548CEC-7BB4-4B34-92A8-F49FCB987815}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{449FE765-8707-446B-84B7-873209318036}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{44A0914C-D5FC-4567-BAFA-49F5B8F26671}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{45E36C61-FEA4-4A0F-8F59-91BCF8EDD477}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{487CBB95-E67F-442A-8A5E-5F33E4D9C8BA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{487CD3A5-2199-412B-B6E4-4A65F03F1267}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{48AB7393-23AA-434E-9C7B-1EE20AEB8A4E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{494676F5-7EFB-4324-9C65-C16CF85715F2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{49702A3B-E101-4054-A1D6-93D31C20C7AF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{4A101BA4-6371-4B52-B007-C6A017313973}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{4E166550-F9FA-4298-811E-AC59845727B9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{4EA8A4A3-08C2-4E93-84F3-8CBF64968D3D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{4F3B7FEF-755F-44A1-956B-CF3231C598A9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{50482FA7-8B25-4C26-A684-9482E4B86228}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5051F7C5-C78A-4FA8-88BF-6BF57C1CCD83}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{53E7C0CE-7EAE-493A-B12F-1313BABAF69C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5495813A-DEAD-4C89-B186-499F3D383908}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{54C09C49-5C7D-4BC7-84C8-9DD8F72D941D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{54E301D0-19BF-475C-947B-0BCD2CCEA08C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{54E9081B-E034-4A93-84E3-AF6113BE29DA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5537BA3D-AD16-4E8C-B0DD-5D99A16A7D01}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{55455E80-1276-440A-847B-84F58F9DE8ED}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{57455693-E542-4AA1-9227-E087F191607A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{57A42B83-AE17-4AAE-8EF0-1AEB533F4AAB}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5A2E8B76-1BD8-4449-975B-48BF39CC2A5E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5ACAD681-D677-4B13-9397-204123B5AFF1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5B2577A5-FC87-47C6-BDA2-441DBD3B6CA4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5BA9CFF5-577D-4882-B919-780D2D9B0E82}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5C15B2A4-6252-48DC-942B-1D3C4CA4B562}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5C43B2B0-2BD8-4C50-AE40-B0BACD7645B9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5C55C69F-8472-416E-BC57-A4C3F301436B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5CBBCF40-799B-45D4-B269-A013B1D50FED}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5CE4EDB3-CC2A-4515-9A0E-5ACBC631B620}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5E98F601-868D-4302-ACD3-DF21FBEBF8AD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5FA11A42-8E4B-47A7-8472-0289404ED267}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{5FE7A5F8-27A1-4B8F-8327-BD30A1302511}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{60243138-B782-407A-9CFF-8912D673D214}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{60A564EF-CE8D-4D07-924B-CDC03CA93237}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{60AFF3E4-C68A-4666-8875-8D125EA41CAD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{61B6A674-9003-4533-84BA-0615D6C77D89}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{62CE23A5-5F5E-4F0B-8850-2BD254EB0049}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{63CB6B61-8440-4B71-8A9B-0ACE69C4F297}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{64D56158-DB30-4039-A8CD-13841E9F6CE2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6509306A-003F-435D-A1A9-9FD6A75616D5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{668B9E60-E9F1-4AC8-8498-A9AED98AD942}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{66D11FD3-E50A-4F71-A3B8-09B3E0026D1D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6717547B-0007-4FFD-9114-2B06C2A36761}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6767DD95-081F-4F38-B587-7DEE7FCA1FF0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{67A78056-787D-40C5-9725-183B2F10C181}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{67B4E7B6-71A2-4614-8E6B-DF6BB66D28E2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{67CEC2CE-15DF-4CF2-ADDD-E84C44BA73AA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{692539A3-B611-4FA1-953F-B7F0BDCB2521}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6ACF771A-8B99-4679-8470-538A4DB7BA61}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6CE3DB37-F6B6-494E-991D-2FCD0CC41007}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6D5B730B-A380-44C0-BBC5-ABC9D6FD4446}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6D769049-89D3-4935-9213-FB47159053E2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6DE221D7-BFF5-4ED7-9C6D-6B9288904C98}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6E277967-F243-4D9B-85FE-7BD5B80F0758}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6E3F0D34-100A-4007-979D-CFE7AF29F73B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{6FDD6061-5543-494B-ABF8-DBE75BAC867C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{700BD59E-6ECB-4300-9B5D-E208373BB52A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7084FCFC-1B42-4880-A4C2-E8BEE454D7CA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7087298F-EAC4-4D2F-8E37-3A9A70133856}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{708EE12E-149C-4CCD-8D75-C4ACE43D60F8}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{70CCB4B0-B105-4E9B-82A0-E374713263EF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{71706848-3632-4B26-BDC9-EAA1B3C23BD9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{717D3D75-3CBF-47E7-820E-4B82BF1713E7}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{721A92B9-9CE1-4C26-9199-CC37555E5327}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{723122D8-C3FD-42F9-98AD-B1E870BE0136}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{72DFB7C0-8990-4D42-A8A4-C7406D59274B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{72EB9D8A-5D34-4385-B90F-85F086B57229}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{72FDF9E7-7E0E-49C9-8F1D-E3CCFB23DD6B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7349FF0B-BBE1-40D7-BC0B-CC4DCB6DF036}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{73F214E1-5F47-4D7E-9219-0221DCFF0EB9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7473B961-2FAC-4240-8D12-926F3153EEF2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{74D4399E-DC32-41FA-9DA1-A6B100A4F41E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{754F58CF-5215-42E6-B22F-E0D17740EC51}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7553C69E-F314-4FD3-8A84-27896CB0FC9E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{75AE0F62-FB35-407F-B68D-2C4D6AF1278C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{760796BF-186D-4142-958A-BF2A7FE8F7F6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{76461837-D4AF-4D39-8FBE-85E50AD79D81}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7674C609-081C-48A0-AEE0-0F1175A58BF1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{778E6CA4-1FBF-4B02-AF47-F629639EC133}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{786DA1CB-EEE6-450D-A0B7-25C19C73782B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{78B534F0-53E9-471B-8183-CBFC55B87ABE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{79BF2F65-763E-4ABE-B202-A3FF4473D1AF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7A2B9059-495F-4D45-8F95-CE45B30A0CDE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7A8F6462-E95F-4EA8-8AD2-223785110637}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7AD4A918-3B83-465B-89E0-4D622CCED76A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7B7B586F-07E9-484B-A003-49B9C1D3CABD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7C59546B-B0BB-4FC2-A18E-0C4E24AB88C4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7CCAF6DB-84D3-4D5D-9D21-E896E78F095B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7E57A5C7-BC08-4CCC-A032-2BE468B10104}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{7EB8DA84-9C91-4DED-B413-2430BE677C07}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8171D93C-1F82-4BA5-B1DA-B20BF3450CC0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{81CE7AD2-DB89-4FE0-BACD-2DB6C7B34989}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{82207FFC-0A64-4329-95C1-BB1D8DC26862}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{82D0D3B1-9E52-4250-9956-50BFB90E2901}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8322FA91-EBBF-4B29-A8F6-E7E3C743EA3B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8452FFF1-879B-4D01-8392-F81D41EC2F43}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{84DB50B5-6EB6-4D7E-9508-6267A5BAAA4E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{856D5E0C-F4E3-459A-97C9-53DCCD58FCE8}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{85A11210-44C6-468D-8CA3-EDF5555FD660}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{85A80A9A-208C-4D60-8973-061CC61205F4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{85E07E22-66F3-4A97-8F04-EF98D6DF8B2B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{865FAD95-4579-4F10-9AFF-EA6A6383B96A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{86B6C37F-EFC8-4475-B855-D9D7120B473A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8758F171-F874-4E33-B5CA-408976703AEB}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{876D7941-1179-4D4C-BBA4-A20CB32C181E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{877023BE-079A-42B8-816D-B480A70779F6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{878CA333-6F7D-4EBC-9B08-E0078B7C08D0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{879B5137-4FC8-4517-AC4D-B99F9F5814CA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{87DD7F2E-875A-44AD-8C9E-A081787817C6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8828C2C3-A1E5-46FD-827C-AAA899E2DF81}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8977A8D8-88B9-4B30-9370-79EDEE384C5C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8A236A6F-7A67-4D4C-9D65-995F29CE26E9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8B9D9D6B-7394-4B3B-9F6F-1EF8559C0A9B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8BE6C5A1-F789-4596-898B-937635A16885}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8C05144F-9809-4FF4-BD21-DB70ECF66491}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8CC8D3FE-264F-43B9-B3C3-C1529C077CDB}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8D0A8BE7-F749-4F1C-A888-253E6ABFB860}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8D9592DC-73CE-43BE-9E61-C3D31B0FF43D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8DBB0630-EE62-4A6C-81B7-5630B0C4FB6E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8DD1F815-2506-49C5-8728-E4702297CD5F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8DD4C5EA-45FB-437B-9914-41BB94632E89}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8E1977CA-634C-4148-8359-C6431D1BB998}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8E8B2655-4D62-41E3-9A3A-588AB033B396}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{8F1267EF-7484-454D-BDAF-EA2A6BB59213}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{90A08614-16B9-4841-9706-AFF4345B6107}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{90B6305A-3913-4523-AC35-384357745962}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{90C5E5EC-CC62-44E0-BAC0-34169E9D7FD1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{911BD563-AC29-4B41-9496-CC6A05E57E81}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{912C1232-C493-4BF6-B2D1-65F7FECF11C0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{916CA447-0F47-42FF-8563-73CB88AC2946}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9197DC34-D64C-4242-8EE7-93DE0A0CC673}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{919DFE14-DD8C-4B37-81B7-6B6259F902DC}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{92447937-EBC2-445E-934E-6C3BD932B1EA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{92AEC153-0676-4C38-AA5F-8D5B87E5EC1D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{93D95500-FB02-45CB-B17D-C99019481775}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9439256F-4A1E-4390-8239-DB51CFD4A926}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{95E3D691-5A71-4B1D-B99B-FE3B533B56CF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9652DBF2-C815-4D42-96EE-DE823B9DC4E4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{97A62C5B-B435-4FFF-BA84-A6B3EADCC7CF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9837CCB2-63E1-4CA8-A144-0920B4481E78}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{98D06C1F-FFCE-46C5-BDA3-7F9A2CFB1DD3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{993833F4-07AD-42B8-B9A0-A3F7A3B0079C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{99FDB567-80CD-486B-8EBA-06AE106E9341}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9ACDDC0D-3E5F-4A48-993E-B7268E3E808D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9B64C857-EC9F-40BF-BC14-8AF2418A7378}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9B6EB23F-3529-4053-BC92-3C48F18C7851}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9CCC025C-1AA0-4525-929A-FBC8F8AEA970}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9CEAC0FE-4D98-4A1C-A0C5-361F05C2A760}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9D7554AC-EF0F-4502-8930-714AC21A606A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9ED01CE4-4688-4220-84A0-7C255C5C1199}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{9ED5891B-1C37-4A73-BF3D-0DFCA74E22B1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A03150D3-4837-4EA6-8DE1-7F17ABE08813}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A0642B54-127E-4092-9CF9-A007177E3984}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A1DA72B5-61C7-444A-981A-F000DBAE492F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A23696C3-D956-42D6-BF87-08F98C6BAB7D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A3AB3823-F1DF-4E4D-8AE9-6915325FCA46}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A3EED885-AE77-488B-AF98-A869FE14B689}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A42D4C79-ED86-4651-8420-EB885D4EC443}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A4D70C20-08ED-48FF-849C-DAAC2DFDEBB9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A551BC58-9D10-429C-A4F2-A0D3D70094E9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A63153AD-22D9-4B12-9DC5-47A192E2A7AF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A688D227-EF1C-4FFA-B25B-02B23B8A614D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A734AD4B-EED9-4A98-BF2F-DDB86AB7143E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A73E7C9D-BD65-4AAF-8B59-903E068F0F7D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A7EE8FBD-AACA-4984-B07A-C3386A349939}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A8FF116B-7A34-4F1D-A2A7-FDC09377224A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{A96B9C4B-0D70-4B02-ADB4-9E539A85CC2A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AB0E8B72-3D37-402D-AC38-6D11190D9451}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AB780777-D0F5-4E51-BF68-575EB0F75270}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AD3BFFE3-B9CC-4E68-A588-C5F6E9A83806}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AD588965-E467-48E6-9E74-FA9BDC3CA864}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AD5EF4AF-1C47-4D03-A4A8-17B1C6DC78F9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AEACCDFD-57AD-486F-8FD2-D49EC75D514B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AFF1B68D-2EFE-4A05-8EBD-538802F6C756}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{AFF443CF-211B-4592-9D63-371D3B146ABB}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B0984DE3-9DBB-4BE2-8539-704A39F90C70}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B100A2CB-905F-4017-8834-E5C7BB5E95A6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B14E143F-BFFF-4B85-89B4-A0A13F362A0D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B16C30DE-0BE5-4B11-89C8-D58E19310702}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B1918B4D-E2DF-4CA5-B2B8-08E48983FBD5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B1B91A03-3BF0-4DB6-8562-2775B5A766B0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B1EA78C1-56B5-4218-B303-3ABF0FF93CD9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B2618EB2-C5EA-4F6A-B806-B1A701E522D1}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B395A355-5CAD-4E67-BEA2-57BD87624693}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B3992150-F62B-45A6-A583-88582E94C001}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B45F1B92-1955-4460-84D6-F05405E34389}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B527604B-9D1D-4857-8567-DE2689B409B3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B5A138AA-445A-4467-8567-B2A7DBF61AF7}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B5DDBAFA-F335-4551-AF0C-F6254993C8E5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B613AD4E-6E52-4ACE-89EF-FAFF5125D612}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B7A13E76-6412-421B-B546-2C80F6DEDAAF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B8C0469A-E84E-4E33-9C1C-6BEFBA414B7D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B8E45AE7-3541-4CBC-8C13-9B3FD9F7C37A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B90D2D39-227A-43D0-84B9-55D195CBE043}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B97745F2-ED29-43BC-848C-F9A7D98D1018}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B99A9F1E-79FE-4775-ADFE-987F83B5BC90}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{B9E55470-6ECE-4BEE-A020-16B2A5277B2D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BA3251CA-2021-43C7-949C-FDBACC39AD71}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BAD0DFC4-0180-40CF-B332-E002E40F0B8A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BBAE9DF9-AFD6-4FA6-A652-F620866658FE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BC5FB256-ECF7-46AE-8B44-39FFF886B0F6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BC7DA280-A131-49B1-942C-FB06F7234EDB}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BD0908C2-5519-4E5F-AD9C-2E50975A0311}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BDEA5EA4-8661-43BC-9EE5-60BD2F8D36FF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BDF1E9D5-E7C5-4496-B948-09FAA3D30D1E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BE1F40BA-F516-4754-AD44-4E2EE37803B3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{BF1FE2E5-9A77-4801-9E4E-A4D8D4C34729}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C02AFA70-1FDA-44AD-95A9-557326218D56}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C2DF94D1-5C0F-4C59-B118-E82D58478249}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C42CAB5F-4AB6-4BDD-8113-E98A5E5313A0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C44E0CE5-0079-4919-9C89-8021111C90E5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C460B960-8AA2-4685-8491-0DB539241FAF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C58A3A13-0F55-48BF-9C71-C6C361DBF986}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C5A13849-502A-4F2D-9349-328DAB3EB0CE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C5BF27B5-9B78-43CC-B0FB-6435E3C2EE1C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C5E5394F-AE17-4A97-95A1-B939B6044C98}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C765DF66-AE47-474A-98A4-3DD03576D47E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C77DE3AC-5553-4AF2-A4F4-7791FF446115}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{C7AD5F2D-AF5C-4B06-9F0F-2EF12422A1E5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CAC0E2DB-6B2F-4856-A19E-43F703D6D6F2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CAEF55B2-777C-4018-B9CB-42A7C362005E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CBA7EE0A-FB9B-46C3-9061-F675960528C4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CBB50D8D-E821-491A-9A41-BC778096D834}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CC6BD733-6BD3-46AE-B796-E54568C91C19}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CC8DCFBB-4D84-4E06-8145-C81896D0B259}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CCA2E4F1-2C31-40E6-963F-CEFD595A88D2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CD2FD29D-9A25-466C-AD9F-0CB18186B7DF}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CD3350A0-A296-4677-B27E-38F93D1C47F3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CD53757E-72E4-4C67-94F3-4ADBF68DAFAC}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CD7104CC-1DE0-439B-B382-8BC2C2602003}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CDE29CF5-4F70-4A36-8128-605F3BA0815D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CE55ED9D-D7F3-4A96-9682-61004F168F39}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CEFE97BF-E212-44B4-A5CC-304B7B286DDA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{CF991EE1-90F9-414D-923E-1885E2875578}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D00E8026-D533-4D61-A7D4-3F1C7EDAB290}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D086C1DF-4AB0-441B-A60B-4888D4ECDF53}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D0C800A8-A717-4C9B-8F2D-F48D1CF1BC42}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D1705651-851A-40BA-AD33-0DB0C5ACDA92}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D18B2DE3-51AB-4D50-BD79-392152A65E47}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D1B116BA-ACD6-4111-887B-6BD0522A0FA5}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D225CDCD-F6D2-462C-B725-DD9B10B9EC1A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D27E9428-4438-4DD9-B2C1-63E967263EFE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D41D37F7-1B27-4C27-B94A-E1DEF7251FB6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D4BDB2D3-1866-4BD9-A2E3-8BDB60A445D0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D4CBCBCB-55D3-43AB-87C7-3FA4F09D4D86}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D52688C7-5D71-4C61-BB01-9F7F5E1FBFE6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D552CA29-8E7E-4836-97B1-C6EF80089366}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D5669FA1-4474-479D-9A0F-1321B260D26E}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D6D51D99-ADAB-4BFA-AC0C-54FE42337B2C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D72C8C1E-3208-4B7B-A010-2DA790D7E882}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D73E14D6-0E7B-4147-8D21-F8B3D3977871}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D7A0E47E-BC35-4903-90A0-3B2E1CF8771F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{D7A71A95-2DD2-4276-85E5-D5BEE1FE93C9}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DA09181F-1BAC-4B39-B049-94282DC052B8}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DA2A972E-386A-47DA-BD33-309A5AAF6A59}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DB4F2C75-6C7D-490D-9C32-BDA7396BE81F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DB7D825A-651C-46E5-9405-685FE15B5C17}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DD578F80-43F2-423A-87C4-2AB472B7565D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DD975E4F-7DF7-40DE-9EFB-D6E10CB5073B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DF0D00FA-B9FE-493C-92E3-43CFB86B996F}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{DFAE6A01-C923-4EDE-9763-980E3718C25A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E11F8090-D7B6-4BB9-A069-B09CA2CF47E8}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E18C2B41-1BA8-4114-8C5F-50F6E022CB28}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E29C7642-FF38-46CF-8568-8543D4939183}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E3861B5A-14D1-4904-B0D5-C7C260D936EA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E3C3013A-C68B-45A5-BEF7-5F117D0E9FF2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E3F9414A-FC83-4C8D-97CE-0874816D0345}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E3FB0CA6-1272-4BB7-974D-C54116A94317}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E578FC7C-CEED-4A2E-A187-057B732806CD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E6902D63-6BEA-48C5-87A9-4F9E671AF3DA}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E7B171D9-A291-41F1-A1DC-EFFD8B6EE986}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E7F93D23-BDBA-498C-8B2E-7F39B3A4634C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E8C763E7-5252-4D22-94CE-B738ED86A88C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E9910E91-61BA-4A5C-A802-165EDA0947A2}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{E9CFB1B7-94BD-409C-A04E-AC003E765B57}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EA4B0606-FE08-45CC-BAB3-807775DE8A2A}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EB94F9FB-EA96-4294-A954-F3E368C6D1C4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EBE604E4-E4A6-4158-A215-91232AAF63A6}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EC2AAEB4-F518-495E-B7CB-4FF834B0FC81}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{ED8650BB-4CE6-4810-BD64-0E4D30AD6F4C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EDBE538C-946B-42D0-AF7C-A1C81CAC6D9B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EE04AD33-4448-4A02-8B8D-064DAF07391B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EE5BC022-C1F4-4B4C-A2C5-FE8C7CCE5A7D}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{EF08624A-1A88-4A31-9549-80BA339B16B3}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F034D03C-6715-46CC-A7DF-0F3CD1EC702B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F0980596-1443-47D7-B5D4-8DC67D1F4D62}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F0DCF0A0-3B46-4840-BEA6-5986954FEB10}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F143FEBC-072C-43B9-8116-625BD738CFBD}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F18E99D3-8D23-4FCB-B63B-9B891B169D93}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F19FAC13-2CE8-483A-B284-B367745712CB}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F2D860EB-3030-41AE-A87C-116E39537F65}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F3E516A6-666C-47DC-8314-0B4A318B5676}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F4862542-3F5F-4695-954F-9FBC25CF4B71}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F50E593D-9094-4177-B665-80BC8629C461}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F577A3D8-D5E0-4948-8A19-E00DB5CE6460}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F670CA7A-CFEB-49B7-84BE-BB3FBBB8D6E4}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F6A12CA9-38EA-4FE7-A24A-C40FAD19CBAE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F7325F6B-A8ED-488E-93F8-723A23609B9B}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F79F1717-F7F8-435C-9E5D-A42DEC1A6786}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F7C1A531-F6BB-413C-B3A2-91AD745F4FB0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F8093BDC-B241-4522-95AB-A305EA88C6EE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F8605D97-591D-49FA-846C-9D30D2CBD8C0}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{F95D4B05-400F-4A41-983C-53E63CF0B761}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FB22C33F-5CBF-4BD4-9E57-05FC3FD2EB3C}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FB752171-2E6F-4E62-B080-2D61E51A8AF8}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FD36DE5B-8D04-4387-8999-7A4D4195C334}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FD45344C-CEB1-4B09-AFBA-6BB7A67E4E77}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FDE33BE7-46AA-4D60-9966-97B11DE1DEEE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FEAE1ADD-2878-4BFB-9AF3-241991047F20}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FF2F101F-BBF2-438C-969E-0E0EBFE12FDE}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FF72E6AE-BBCA-472A-BE8D-1DA0101FFF94}
Successfully deleted: [Empty Folder] C:\Users\Gary\appdata\local\{FFEF20AE-FA5B-4FA6-8A70-5658A89F3550}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [Folder] C:\Users\Gary\AppData\Roaming\mozilla\firefox\profiles\05lzepug.default\extensions\staged
Emptied folder: C:\Users\Gary\AppData\Roaming\mozilla\firefox\profiles\05lzepug.default\minidumps [8 files]
Emptied folder: C:\Users\Gary\AppData\Roaming\mozilla\firefox\profiles\mhqvnyoa.default-1398863969359\minidumps [5 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 05/17/2014 at 4:17:00.90
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

OTL logfile created on: 5/17/2014 4:24:24 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gary\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.87 Gb Total Physical Memory | 1.85 Gb Available Physical Memory | 64.52% Memory free
5.81 Gb Paging File | 4.77 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): C:\pagefile.sys 3070 3070J:\pagef [Binary data over 200 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.43 Gb Total Space | 41.03 Gb Free Space | 14.32% Space Free | Partition Type: NTFS
Drive D: | 11.66 Gb Total Space | 1.59 Gb Free Space | 13.62% Space Free | Partition Type: NTFS
Drive F: | 931.51 Gb Total Space | 355.81 Gb Free Space | 38.20% Space Free | Partition Type: NTFS

Computer Name: GARY-PC | User Name: Gary | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/05/17 04:22:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gary\Desktop\OTL.exe
PRC - [2014/05/07 18:52:34 | 032,668,056 | ---- | M] (Dropbox, Inc.) -- C:\Users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2014/04/26 07:12:53 | 003,873,704 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014/04/26 07:12:53 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014/04/03 09:49:12 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2013/12/18 11:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/09/25 07:37:14 | 000,181,152 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2013/09/07 10:20:56 | 000,071,224 | ---- | M] (AOL Inc.) -- C:\Program Files\AOL Desktop 9.7a\waol.exe
PRC - [2013/09/07 10:20:48 | 000,045,624 | ---- | M] (AOL Inc.) -- C:\Program Files\AOL Desktop 9.7a\shellmon.exe
PRC - [2013/05/30 11:23:18 | 000,122,984 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
PRC - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe
PRC - [2011/10/13 23:01:48 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\sua.exe
PRC - [2011/02/24 21:08:34 | 000,566,688 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
PRC - [2011/02/24 21:08:32 | 007,034,272 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe
PRC - [2011/02/24 21:08:32 | 001,770,400 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
PRC - [2011/02/11 18:28:52 | 001,522,080 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\dlnaPlugin.exe
PRC - [2011/02/02 09:46:40 | 001,095,168 | ---- | M] (Belkin International, Inc.) -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\Connect.exe
PRC - [2010/03/08 00:27:49 | 000,041,800 | ---- | M] (AOL Inc.) -- C:\Program Files\Common Files\AOL\1325011021\ee\aolsoftware.exe
PRC - [2010/02/17 18:25:12 | 000,152,064 | ---- | M] () -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
PRC - [2010/02/09 15:55:52 | 000,049,152 | ---- | M] () -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
PRC - [2009/12/10 09:27:42 | 000,045,056 | ---- | M] () -- C:\Windows\System32\UTSCSI.EXE
PRC - [2009/04/10 23:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2006/10/23 05:50:35 | 000,046,640 | R--- | M] (AOL LLC) -- C:\Program Files\Common Files\AOL\acs\AOLacsd.exe


========== Modules (No Company Name) ==========

MOD - [2014/05/17 04:12:23 | 000,041,984 | ---- | M] () -- c:\Users\Gary\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpu2agzv.dll
MOD - [2014/05/14 03:04:40 | 001,947,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\ae18426916e4acf912f54aefb8cd00c7\Microsoft.VisualBasic.ni.dll
MOD - [2014/05/14 03:04:24 | 000,805,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\04824fdbd5dce32530ba44ae012e4fb9\System.Runtime.Remoting.ni.dll
MOD - [2014/02/18 04:04:19 | 012,894,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f4f6ee0df2aa4189bf36e6335cb92761\System.Windows.Forms.ni.dll
MOD - [2014/02/18 04:04:10 | 001,644,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5cd2aee5e7c07227c694d89219688ab3\System.Drawing.ni.dll
MOD - [2014/02/18 04:03:53 | 007,662,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\bada32953bb6b16a53d653eae23d78dc\System.Xml.ni.dll
MOD - [2014/02/18 04:03:53 | 006,990,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\dce99d8de14d8a015313db98c72552ee\System.Core.ni.dll
MOD - [2014/02/18 04:03:47 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bbc48ec4245e502ae19b0601d3799c9e\System.Configuration.ni.dll
MOD - [2014/02/18 04:03:46 | 010,060,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff26cc03e6d57d8abd13b990332e67c6\System.ni.dll
MOD - [2014/02/18 04:03:37 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll
MOD - [2014/01/02 20:42:50 | 003,610,624 | ---- | M] () -- C:\Users\Gary\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2013/11/22 06:24:57 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013/10/18 16:55:02 | 025,100,288 | ---- | M] () -- C:\Users\Gary\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2013/09/07 10:20:57 | 000,048,640 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\zlib.dll
MOD - [2013/09/07 10:19:37 | 021,117,440 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\libcef.dll
MOD - [2013/09/07 10:19:35 | 000,648,704 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\libGLESv2.dll
MOD - [2013/09/07 10:19:35 | 000,122,880 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\libEGL.dll
MOD - [2011/02/24 21:08:36 | 000,022,944 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinServicePS.dll
MOD - [2011/02/24 20:39:00 | 000,658,432 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\gateways\GenericBelkinGatewayLOC.dll
MOD - [2011/02/15 13:16:44 | 007,187,456 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtGui4.dll
MOD - [2011/02/15 13:15:58 | 000,325,632 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtXml4.dll
MOD - [2011/02/15 13:15:52 | 001,954,304 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtCore4.dll
MOD - [2011/02/15 13:15:52 | 000,847,360 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtNetwork4.dll
MOD - [2011/02/15 12:25:30 | 000,119,808 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\imageformats\qjpeg4.dll
MOD - [2010/02/17 18:25:12 | 000,132,096 | ---- | M] () -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkLocalBackup.dll


========== Services (SafeList) ==========

SRV - [2014/05/14 05:02:15 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/05/09 23:15:08 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/04/26 07:12:53 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014/04/03 09:49:12 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/04/03 09:49:12 | 000,857,912 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/12/18 11:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/09/25 07:37:14 | 000,181,152 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor12.0)
SRV - [2013/05/30 11:19:36 | 000,016,000 | ---- | M] (Seagate Technology LLC) [Auto | Stopped] -- C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe -- (Seagate Dashboard Services)
SRV - [2013/03/01 12:11:32 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/01/31 04:21:23 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011/10/13 23:01:50 | 000,994,360 | ---- | M] (Secunia) [On_Demand | Stopped] -- C:\Program Files\Secunia\PSI\psia.exe -- (Secunia PSI Agent)
SRV - [2011/10/13 23:01:48 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2011/02/24 21:08:34 | 000,566,688 | ---- | M] (Affinegy, Inc.) [Auto | Running] -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe -- (AffinegyService)
SRV - [2010/02/17 18:25:12 | 000,152,064 | ---- | M] () [Auto | Running] -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe -- (Belkin Local Backup Service)
SRV - [2010/02/09 15:55:52 | 000,049,152 | ---- | M] () [Auto | Running] -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe -- (Belkin Network USB Helper)
SRV - [2009/12/10 09:27:42 | 000,045,056 | ---- | M] () [Auto | Running] -- C:\Windows\System32\UTSCSI.EXE -- (UTSCSI)
SRV - [2008/11/09 13:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Disabled | Stopped] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/01/20 19:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006/10/23 05:50:35 | 000,046,640 | R--- | M] (AOL LLC) [On_Demand | Running] -- C:\Program Files\Common Files\AOL\acs\AOLacsd.exe -- (AOL ACS)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\PeerGuardian2\pgfilter.sys -- (pgfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [File_System | Boot | Stopped] -- system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2014/05/17 02:50:39 | 000,107,736 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2014/05/15 16:45:12 | 000,026,624 | ---- | M] () [Kernel | On_Demand | Unknown] -- C:\Windows\System32\TrueSight.sys -- (TrueSight)
DRV - [2014/05/15 07:05:55 | 000,777,488 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsnx.sys -- (aswSnx)
DRV - [2014/05/15 07:05:55 | 000,411,680 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsp.sys -- (aswSP)
DRV - [2014/05/15 07:05:55 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswrdr.sys -- (aswRdr)
DRV - [2014/04/26 07:12:58 | 000,180,632 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014/04/26 07:12:58 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014/04/26 07:12:58 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014/04/26 07:12:58 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014/04/26 07:12:58 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2014/04/03 09:51:10 | 000,051,416 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV - [2014/04/03 09:50:56 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013/06/20 17:07:50 | 000,153,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2013/06/20 17:07:50 | 000,136,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus)
DRV - [2013/06/20 17:07:50 | 000,017,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2013/06/20 17:07:34 | 000,153,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2013/06/20 17:07:34 | 000,136,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2013/06/20 17:07:34 | 000,032,064 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadadb.sys -- (androidusb)
DRV - [2013/06/20 17:07:34 | 000,017,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2013/01/31 04:21:23 | 010,919,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012/01/01 09:57:58 | 000,197,224 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2011/10/02 06:04:05 | 000,255,096 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2010/09/01 01:30:58 | 000,015,544 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\psi_mf.sys -- (PSI)
DRV - [2009/12/30 10:21:18 | 000,027,192 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\revoflt.sys -- (Revoflt)
DRV - [2009/11/08 20:21:18 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2009/06/22 16:49:00 | 000,247,320 | ---- | M] (silex technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\sxuptp.sys -- (sxuptp)
DRV - [2008/09/10 05:48:20 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [2008/09/10 05:46:22 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DP.sys -- (HSF_DP)
DRV - [2008/09/09 17:58:08 | 000,020,640 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\PC-Doctor for Windows\pcd5srvc.pkms -- (PCD5SRVC{BD6912E3-AC9D80E8-05040000})
DRV - [2008/09/04 04:34:34 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2008/08/01 05:51:14 | 001,052,704 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2008/07/21 09:12:50 | 000,133,152 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2008/07/21 09:12:22 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2008/05/22 02:39:34 | 000,015,360 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2006/11/29 15:24:57 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wanatw4.sys -- (wanatw)
DRV - [2005/12/12 10:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)
DRV - [2004/04/27 00:31:04 | 000,474,304 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvcd.sys -- (QCDonner)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr9/*http://www.yahoo.com/ext/search/search.html
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{8809A334-604B-472E-BC73-02DBFE49AAC8}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{63140ECF-C629-BE59-8F0E-90B4FF340C03}: "URL" = http://www.bing.com/search?q={searchTerms}&pc=Z128&form=ZGAIDF&install_date=20111231&iesrc={referrer:source}
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{8809A334-604B-472E-BC73-02DBFE49AAC8}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{CA051B20-F0FC-4230-AA0A-688B1E122C1B}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=HPDTDF&pc=HPDTDF&src=IE-SearchBox
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm "
FF - prefs.js..browser.search.param.yahoo-type: "${8} "
FF - prefs.js..browser.search.suggest.enabled: true
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20120515
FF - prefs.js..extensions.enabledAddons: wrc@avast.com:7.0.1456
FF - prefs.js..extensions.enabledAddons: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.22
FF - prefs.js..network.proxy.no_proxies_on: "*.local "
FF - prefs.js..browser.startup.homepage: "about:home "
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=994519 "
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/04/26 07:13:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2009/05/31 14:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Extensions
[2014/05/17 04:16:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions
[2010/04/28 05:45:54 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/05/18 05:46:38 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012/08/03 16:32:43 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2014/04/30 06:27:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\mhqvnyoa.default-1398863969359\extensions
[2012/07/24 16:06:58 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014/05/09 23:14:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/05/09 23:15:11 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{googleageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://google.com/
CHR - plugin: Default Profile (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Error reading preferences file
CHR - Extension: Profile Visitors for Facebook = C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjbpjahiibmjdlcgodcnmpelpmilamk\1.6_0\
CHR - Extension: Google Wallet = C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1\
CHR - Extension: Google Wallet = C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

O1 HOSTS File: ([2014/05/15 22:55:43 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [InstaLAN] C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe (Affinegy, Inc.)
O4 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000..\Run: [AOL Fast Start] C:\Program Files\AOL Desktop 9.7a\AOL.EXE (AOL Inc.)
O4 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000..\Run: [Uploader] C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe (Seagate Technology LLC)
O4 - Startup: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStartupSound = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 10.55.2)
O16 - DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 1.7.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 10.55.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DEFE736B-C868-43F1-8A26-556BABDE9FA1}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\aWave_1440x900.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\aWave_1440x900.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 14:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2014/02/16 06:56:20 | 000,000,000 | ---D | M] - F:\Automatically Add to iTunes -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2014/05/17 04:22:52 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Gary\Desktop\OTL.exe
[2014/05/17 04:06:02 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/05/17 04:05:21 | 001,016,261 | ---- | C] (Thisisu) -- C:\Users\Gary\Desktop\JRT.exe
[2014/05/17 03:55:19 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
[2014/05/17 03:54:05 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/05/16 04:44:14 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2014/05/15 22:55:59 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2014/05/15 22:34:36 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/05/15 22:34:36 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/05/15 22:34:36 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/05/15 22:34:20 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/05/15 16:55:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2014/05/15 16:54:23 | 000,000,000 | ---D | C] -- C:\Users\Gary\Desktop\mbar
[2014/05/15 16:44:11 | 000,000,000 | ---D | C] -- C:\Users\Gary\Desktop\RK_Quarantine
[2014/05/09 23:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014/05/09 19:18:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/05/09 19:18:15 | 000,075,480 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/05/09 19:18:15 | 000,051,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/05/09 19:18:15 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
[2014/05/09 16:46:53 | 000,107,736 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014/05/02 04:34:30 | 000,000,000 | ---D | C] -- C:\Users\Gary\AppData\Roaming\dBpoweramp
[2014/04/30 06:19:36 | 000,000,000 | ---D | C] -- C:\Users\Gary\Desktop\Old Firefox Data
[2014/04/30 06:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014/04/26 07:32:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dBpoweramp
[2014/04/26 07:12:57 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/04/26 07:08:12 | 000,000,000 | ---D | C] -- C:\ProgramData\VS Revo Group
[2014/04/25 06:40:34 | 000,000,000 | ---D | C] -- C:\Users\Gary\AppData\Roaming\AnvSoft
[2014/04/25 06:18:41 | 000,000,000 | ---D | C] -- C:\Users\Gary\Documents\Any Video Converter
[2014/04/24 17:48:30 | 000,000,000 | ---D | C] -- C:\ProgramData\LockHunter
[2014/04/23 06:55:03 | 000,000,000 | ---D | C] -- C:\Users\Gary\Documents\My MQ Time Sales
[2014/04/23 06:54:56 | 000,000,000 | ---D | C] -- C:\Users\Gary\Documents\My MQ Workspaces
[2014/04/22 04:42:55 | 000,000,000 | ---D | C] -- C:\Users\Gary\AppData\Roaming\Oracle
[2014/04/18 06:12:08 | 000,000,000 | ---D | C] -- C:\Users\Gary\New Folder (1)
[8 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/05/17 04:22:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gary\Desktop\OTL.exe
[2014/05/17 04:13:18 | 000,003,616 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014/05/17 04:13:18 | 000,003,616 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014/05/17 04:11:19 | 000,000,878 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/05/17 04:09:55 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/05/17 04:05:21 | 001,016,261 | ---- | M] (Thisisu) -- C:\Users\Gary\Desktop\JRT.exe
[2014/05/17 04:02:50 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/05/17 03:53:01 | 001,325,827 | ---- | M] () -- C:\Users\Gary\Desktop\adwcleaner_3.208.exe
[2014/05/17 03:43:01 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/05/17 02:50:39 | 000,107,736 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014/05/15 22:55:43 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2014/05/15 17:44:02 | 000,075,480 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/05/15 16:45:12 | 000,026,624 | ---- | M] () -- C:\Windows\System32\TrueSight.sys
[2014/05/15 16:42:55 | 003,972,608 | ---- | M] () -- C:\Users\Gary\Desktop\RogueKiller.exe
[2014/05/15 07:05:55 | 000,777,488 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys
[2014/05/15 07:05:55 | 000,411,680 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2014/05/15 07:05:55 | 000,054,832 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswrdr.sys
[2014/05/14 03:43:22 | 000,000,952 | ---- | M] () -- C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014/05/14 03:43:10 | 000,000,918 | ---- | M] () -- C:\Users\Gary\Desktop\Dropbox.lnk
[2014/05/13 16:46:45 | 000,645,644 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/05/13 16:46:45 | 000,120,776 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/05/09 20:44:03 | 000,000,318 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForGary.job
[2014/05/09 19:18:21 | 000,000,901 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/05/09 16:40:51 | 193,275,328 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2014/04/27 06:15:50 | 000,000,456 | ---- | M] () -- C:\Windows\tasks\PCDRScheduledMaintenance.job
[2014/04/26 09:31:09 | 000,003,411 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Shorten Codec.dat
[2014/04/26 09:30:29 | 000,033,846 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Shorten Codec.bmp
[2014/04/26 09:28:39 | 000,653,176 | ---- | M] () -- C:\Windows\System32\SpoonUninstall.exe
[2014/04/26 08:44:30 | 000,003,320 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp m4a FDK (AAC) Encoder.dat
[2014/04/26 07:32:53 | 000,000,998 | ---- | M] () -- C:\Users\Gary\Desktop\dBpoweramp Batch Converter.lnk
[2014/04/26 07:32:53 | 000,000,993 | ---- | M] () -- C:\Users\Gary\Desktop\dBpoweramp Music Converter.lnk
[2014/04/26 07:32:25 | 000,013,771 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp DSP Effects.dat
[2014/04/26 07:32:17 | 000,016,686 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Music Converter.dat
[2014/04/26 07:13:25 | 000,001,831 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014/04/26 07:12:58 | 000,776,976 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys.1400162753161
[2014/04/26 07:12:58 | 000,180,632 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014/04/26 07:12:58 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2014/04/26 07:12:58 | 000,057,672 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2014/04/26 07:12:58 | 000,054,832 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswrdr.sys.1400162753161
[2014/04/26 07:12:58 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2014/04/26 07:12:58 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/04/26 07:12:58 | 000,024,184 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014/04/26 07:12:57 | 000,271,264 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2014/04/26 07:08:13 | 000,001,091 | ---- | M] () -- C:\Users\Gary\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2014/04/19 16:47:15 | 000,020,992 | ---- | M] () -- C:\Users\Gary\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[8 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/05/17 03:53:00 | 001,325,827 | ---- | C] () -- C:\Users\Gary\Desktop\adwcleaner_3.208.exe
[2014/05/15 22:34:36 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014/05/15 22:34:36 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014/05/15 22:34:36 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014/05/15 22:34:36 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014/05/15 22:34:36 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014/05/15 16:45:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\TrueSight.sys
[2014/05/15 16:42:41 | 003,972,608 | ---- | C] () -- C:\Users\Gary\Desktop\RogueKiller.exe
[2014/05/10 08:59:08 | 000,000,952 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014/05/09 19:18:21 | 000,000,901 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/05/09 16:40:51 | 193,275,328 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2014/04/26 08:44:30 | 000,003,320 | ---- | C] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp m4a FDK (AAC) Encoder.dat
[2014/04/26 07:32:53 | 000,000,998 | ---- | C] () -- C:\Users\Gary\Desktop\dBpoweramp Batch Converter.lnk
[2014/04/26 07:32:53 | 000,000,993 | ---- | C] () -- C:\Users\Gary\Desktop\dBpoweramp Music Converter.lnk
[2014/04/26 07:32:17 | 000,016,686 | ---- | C] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Music Converter.dat
[2014/04/26 07:13:00 | 000,024,184 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014/04/26 07:08:13 | 000,001,091 | ---- | C] () -- C:\Users\Gary\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2014/04/24 16:10:46 | 000,013,771 | ---- | C] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp DSP Effects.dat
[2013/11/22 08:46:51 | 000,004,096 | -H-- | C] () -- C:\Users\Gary\AppData\Local\keyfile3.drm
[2013/07/18 14:32:38 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2013/07/18 14:32:34 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2013/07/18 14:32:34 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2013/07/18 14:32:34 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2013/07/18 14:32:34 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2013/04/06 05:05:39 | 000,000,258 | RHS- | C] () -- C:\Users\Gary\ntuser.pol
[2013/03/06 07:20:40 | 000,180,632 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013/03/06 07:20:39 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2012/03/31 13:19:40 | 000,004,481 | ---- | C] () -- C:\ProgramData\buynow.html
[2011/11/28 07:18:58 | 000,000,084 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\wklnhst.dat
[2011/07/30 09:07:53 | 000,000,134 | ---- | C] () -- C:\Users\Gary\webphonecfg.dat
[2011/05/22 14:48:30 | 000,000,000 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\downloads.m3u
[2011/01/02 15:16:57 | 000,000,208 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\default.rss
[2010/03/27 15:19:52 | 000,003,090 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpTUDTOO.0
[2010/03/27 15:19:52 | 000,001,317 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpTUDTOO.JPG
[2010/02/21 07:25:50 | 000,000,000 | ---- | C] () -- C:\Users\Gary\AppData\Local\prvlcl.dat
[2009/12/17 17:34:01 | 000,000,056 | ---- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/08/09 08:40:26 | 000,000,105 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\default.pls
[2009/08/09 07:21:12 | 000,001,024 | ---- | C] () -- C:\Users\Gary\.rnd
[2009/08/05 06:40:43 | 000,018,255 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpSIRIN 2.JPG
[2009/08/05 06:40:43 | 000,016,291 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpSIRIN 2.0
[2009/07/31 06:36:45 | 000,020,992 | ---- | C] () -- C:\Users\Gary\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/06/24 16:21:19 | 000,007,620 | ---- | C] () -- C:\Users\Gary\AppData\Local\d3d9caps.dat

========== ZeroAccess Check ==========

[2006/11/02 05:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2014/03/25 06:26:04 | 011,587,584 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/10 23:28:20 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
" " = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/10 23:28:26 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012/01/14 17:12:02 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\AVG10
[2014/04/05 12:46:36 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\14358
[2012/04/01 11:46:56 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\4Media
[2011/04/04 16:21:23 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\acccore
[2014/04/25 06:40:34 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\AnvSoft
[2012/10/27 06:44:49 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Any Video Converter
[2011/10/26 17:41:45 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Ashampoo
[2013/10/17 06:15:28 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Auslogics
[2013/11/22 06:42:20 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\AVAST Software
[2012/12/01 17:47:57 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Azureus
[2013/04/02 18:23:33 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\BitTorrent
[2011/12/10 08:29:30 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Catalina Marketing Corp
[2013/11/10 05:00:53 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2013/08/07 06:31:54 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2014/01/31 07:42:49 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Convert Audio Free
[2014/05/02 04:34:30 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\dBpoweramp
[2013/10/07 05:35:06 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\DriverFinder
[2014/05/17 04:12:50 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Dropbox
[2014/03/29 22:31:02 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\DropboxMaster
[2014/03/20 05:03:21 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\DVDFab9
[2013/06/11 05:02:34 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\EasyDuplicateFinder
[2011/12/30 11:34:37 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\ImgBurn
[2013/06/02 17:50:50 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Leadertech
[2013/09/30 05:32:05 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\LockHunter
[2013/11/09 07:47:57 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\mjusbsp
[2012/11/30 05:51:38 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Nico Mak Computing
[2014/04/22 04:42:55 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Oracle
[2013/11/10 05:55:32 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\PDAppFlex
[2009/05/31 12:53:53 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\PictureMover
[2011/08/25 04:47:38 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Sammsoft
[2014/04/16 17:45:20 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Samsung
[2013/06/02 17:52:39 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Seagate
[2011/11/22 18:39:09 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Sir
[2011/10/20 11:40:39 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Southwest Airlines
[2011/11/28 07:19:00 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Template
[2014/05/13 16:49:57 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\uTorrent
[2010/10/21 05:26:11 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\webex
[2009/06/01 16:31:13 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\WinBatch
[2014/04/10 17:05:02 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Windows Live Writer
[2013/10/07 05:06:19 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Xilisoft
[2009/08/09 22:19:06 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Xilisoft Corporation
[2011/11/22 18:42:30 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Ycgezo

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:07BF512B

< End of report >

 

OTL logfile created on: 5/17/2014 4:24:24 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gary\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.87 Gb Total Physical Memory | 1.85 Gb Available Physical Memory | 64.52% Memory free
5.81 Gb Paging File | 4.77 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): C:\pagefile.sys 3070 3070J:\pagef [Binary data over 200 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.43 Gb Total Space | 41.03 Gb Free Space | 14.32% Space Free | Partition Type: NTFS
Drive D: | 11.66 Gb Total Space | 1.59 Gb Free Space | 13.62% Space Free | Partition Type: NTFS
Drive F: | 931.51 Gb Total Space | 355.81 Gb Free Space | 38.20% Space Free | Partition Type: NTFS

Computer Name: GARY-PC | User Name: Gary | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/05/17 04:22:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gary\Desktop\OTL.exe
PRC - [2014/05/07 18:52:34 | 032,668,056 | ---- | M] (Dropbox, Inc.) -- C:\Users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2014/04/26 07:12:53 | 003,873,704 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014/04/26 07:12:53 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014/04/03 09:49:12 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2013/12/18 11:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/09/25 07:37:14 | 000,181,152 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2013/09/07 10:20:56 | 000,071,224 | ---- | M] (AOL Inc.) -- C:\Program Files\AOL Desktop 9.7a\waol.exe
PRC - [2013/09/07 10:20:48 | 000,045,624 | ---- | M] (AOL Inc.) -- C:\Program Files\AOL Desktop 9.7a\shellmon.exe
PRC - [2013/05/30 11:23:18 | 000,122,984 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe
PRC - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe
PRC - [2011/10/13 23:01:48 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\sua.exe
PRC - [2011/02/24 21:08:34 | 000,566,688 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
PRC - [2011/02/24 21:08:32 | 007,034,272 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe
PRC - [2011/02/24 21:08:32 | 001,770,400 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
PRC - [2011/02/11 18:28:52 | 001,522,080 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\dlnaPlugin.exe
PRC - [2011/02/02 09:46:40 | 001,095,168 | ---- | M] (Belkin International, Inc.) -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\Connect.exe
PRC - [2010/03/08 00:27:49 | 000,041,800 | ---- | M] (AOL Inc.) -- C:\Program Files\Common Files\AOL\1325011021\ee\aolsoftware.exe
PRC - [2010/02/17 18:25:12 | 000,152,064 | ---- | M] () -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
PRC - [2010/02/09 15:55:52 | 000,049,152 | ---- | M] () -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
PRC - [2009/12/10 09:27:42 | 000,045,056 | ---- | M] () -- C:\Windows\System32\UTSCSI.EXE
PRC - [2009/04/10 23:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2006/10/23 05:50:35 | 000,046,640 | R--- | M] (AOL LLC) -- C:\Program Files\Common Files\AOL\acs\AOLacsd.exe


========== Modules (No Company Name) ==========

MOD - [2014/05/17 04:12:23 | 000,041,984 | ---- | M] () -- c:\Users\Gary\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpu2agzv.dll
MOD - [2014/05/14 03:04:40 | 001,947,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\ae18426916e4acf912f54aefb8cd00c7\Microsoft.VisualBasic.ni.dll
MOD - [2014/05/14 03:04:24 | 000,805,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\04824fdbd5dce32530ba44ae012e4fb9\System.Runtime.Remoting.ni.dll
MOD - [2014/02/18 04:04:19 | 012,894,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f4f6ee0df2aa4189bf36e6335cb92761\System.Windows.Forms.ni.dll
MOD - [2014/02/18 04:04:10 | 001,644,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5cd2aee5e7c07227c694d89219688ab3\System.Drawing.ni.dll
MOD - [2014/02/18 04:03:53 | 007,662,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\bada32953bb6b16a53d653eae23d78dc\System.Xml.ni.dll
MOD - [2014/02/18 04:03:53 | 006,990,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\dce99d8de14d8a015313db98c72552ee\System.Core.ni.dll
MOD - [2014/02/18 04:03:47 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bbc48ec4245e502ae19b0601d3799c9e\System.Configuration.ni.dll
MOD - [2014/02/18 04:03:46 | 010,060,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff26cc03e6d57d8abd13b990332e67c6\System.ni.dll
MOD - [2014/02/18 04:03:37 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll
MOD - [2014/01/02 20:42:50 | 003,610,624 | ---- | M] () -- C:\Users\Gary\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2013/11/22 06:24:57 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013/10/18 16:55:02 | 025,100,288 | ---- | M] () -- C:\Users\Gary\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2013/09/07 10:20:57 | 000,048,640 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\zlib.dll
MOD - [2013/09/07 10:19:37 | 021,117,440 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\libcef.dll
MOD - [2013/09/07 10:19:35 | 000,648,704 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\libGLESv2.dll
MOD - [2013/09/07 10:19:35 | 000,122,880 | ---- | M] () -- C:\Program Files\AOL Desktop 9.7a\libEGL.dll
MOD - [2011/02/24 21:08:36 | 000,022,944 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinServicePS.dll
MOD - [2011/02/24 20:39:00 | 000,658,432 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\gateways\GenericBelkinGatewayLOC.dll
MOD - [2011/02/15 13:16:44 | 007,187,456 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtGui4.dll
MOD - [2011/02/15 13:15:58 | 000,325,632 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtXml4.dll
MOD - [2011/02/15 13:15:52 | 001,954,304 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtCore4.dll
MOD - [2011/02/15 13:15:52 | 000,847,360 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtNetwork4.dll
MOD - [2011/02/15 12:25:30 | 000,119,808 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\imageformats\qjpeg4.dll
MOD - [2010/02/17 18:25:12 | 000,132,096 | ---- | M] () -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkLocalBackup.dll


========== Services (SafeList) ==========

SRV - [2014/05/14 05:02:15 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/05/09 23:15:08 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/04/26 07:12:53 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014/04/03 09:49:12 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/04/03 09:49:12 | 000,857,912 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/12/18 11:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/09/25 07:37:14 | 000,181,152 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor12.0)
SRV - [2013/05/30 11:19:36 | 000,016,000 | ---- | M] (Seagate Technology LLC) [Auto | Stopped] -- C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe -- (Seagate Dashboard Services)
SRV - [2013/03/01 12:11:32 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/01/31 04:21:23 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/07/13 16:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011/10/13 23:01:50 | 000,994,360 | ---- | M] (Secunia) [On_Demand | Stopped] -- C:\Program Files\Secunia\PSI\psia.exe -- (Secunia PSI Agent)
SRV - [2011/10/13 23:01:48 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2011/02/24 21:08:34 | 000,566,688 | ---- | M] (Affinegy, Inc.) [Auto | Running] -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe -- (AffinegyService)
SRV - [2010/02/17 18:25:12 | 000,152,064 | ---- | M] () [Auto | Running] -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe -- (Belkin Local Backup Service)
SRV - [2010/02/09 15:55:52 | 000,049,152 | ---- | M] () [Auto | Running] -- C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe -- (Belkin Network USB Helper)
SRV - [2009/12/10 09:27:42 | 000,045,056 | ---- | M] () [Auto | Running] -- C:\Windows\System32\UTSCSI.EXE -- (UTSCSI)
SRV - [2008/11/09 13:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Disabled | Stopped] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/01/20 19:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006/10/23 05:50:35 | 000,046,640 | R--- | M] (AOL LLC) [On_Demand | Running] -- C:\Program Files\Common Files\AOL\acs\AOLacsd.exe -- (AOL ACS)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\PeerGuardian2\pgfilter.sys -- (pgfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [File_System | Boot | Stopped] -- system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2014/05/17 02:50:39 | 000,107,736 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2014/05/15 16:45:12 | 000,026,624 | ---- | M] () [Kernel | On_Demand | Unknown] -- C:\Windows\System32\TrueSight.sys -- (TrueSight)
DRV - [2014/05/15 07:05:55 | 000,777,488 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsnx.sys -- (aswSnx)
DRV - [2014/05/15 07:05:55 | 000,411,680 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsp.sys -- (aswSP)
DRV - [2014/05/15 07:05:55 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswrdr.sys -- (aswRdr)
DRV - [2014/04/26 07:12:58 | 000,180,632 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014/04/26 07:12:58 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014/04/26 07:12:58 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014/04/26 07:12:58 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014/04/26 07:12:58 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2014/04/03 09:51:10 | 000,051,416 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV - [2014/04/03 09:50:56 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013/06/20 17:07:50 | 000,153,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2013/06/20 17:07:50 | 000,136,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus)
DRV - [2013/06/20 17:07:50 | 000,017,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2013/06/20 17:07:34 | 000,153,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2013/06/20 17:07:34 | 000,136,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2013/06/20 17:07:34 | 000,032,064 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadadb.sys -- (androidusb)
DRV - [2013/06/20 17:07:34 | 000,017,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2013/01/31 04:21:23 | 010,919,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012/01/01 09:57:58 | 000,197,224 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2011/10/02 06:04:05 | 000,255,096 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2010/09/01 01:30:58 | 000,015,544 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\psi_mf.sys -- (PSI)
DRV - [2009/12/30 10:21:18 | 000,027,192 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\revoflt.sys -- (Revoflt)
DRV - [2009/11/08 20:21:18 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2009/06/22 16:49:00 | 000,247,320 | ---- | M] (silex technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\sxuptp.sys -- (sxuptp)
DRV - [2008/09/10 05:48:20 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [2008/09/10 05:46:22 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DP.sys -- (HSF_DP)
DRV - [2008/09/09 17:58:08 | 000,020,640 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\PC-Doctor for Windows\pcd5srvc.pkms -- (PCD5SRVC{BD6912E3-AC9D80E8-05040000})
DRV - [2008/09/04 04:34:34 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2008/08/01 05:51:14 | 001,052,704 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2008/07/21 09:12:50 | 000,133,152 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2008/07/21 09:12:22 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2008/05/22 02:39:34 | 000,015,360 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2006/11/29 15:24:57 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wanatw4.sys -- (wanatw)
DRV - [2005/12/12 10:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)
DRV - [2004/04/27 00:31:04 | 000,474,304 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvcd.sys -- (QCDonner)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr9/*http://www.yahoo.com/ext/search/search.html
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{8809A334-604B-472E-BC73-02DBFE49AAC8}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{63140ECF-C629-BE59-8F0E-90B4FF340C03}: "URL" = http://www.bing.com/search?q={searchTerms}&pc=Z128&form=ZGAIDF&install_date=20111231&iesrc={referrer:source}
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{8809A334-604B-472E-BC73-02DBFE49AAC8}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{CA051B20-F0FC-4230-AA0A-688B1E122C1B}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=HPDTDF&pc=HPDTDF&src=IE-SearchBox
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm "
FF - prefs.js..browser.search.param.yahoo-type: "${8} "
FF - prefs.js..browser.search.suggest.enabled: true
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20120515
FF - prefs.js..extensions.enabledAddons: wrc@avast.com:7.0.1456
FF - prefs.js..extensions.enabledAddons: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.22
FF - prefs.js..network.proxy.no_proxies_on: "*.local "
FF - prefs.js..browser.startup.homepage: "about:home "
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=994519 "
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/04/26 07:13:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2009/05/31 14:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Extensions
[2014/05/17 04:16:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions
[2010/04/28 05:45:54 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/05/18 05:46:38 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012/08/03 16:32:43 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2014/04/30 06:27:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\mhqvnyoa.default-1398863969359\extensions
[2012/07/24 16:06:58 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\Gary\AppData\Roaming\Mozilla\Firefox\Profiles\05lzepug.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014/05/09 23:14:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/05/09 23:15:11 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{googleageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://google.com/
CHR - plugin: Default Profile (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Error reading preferences file
CHR - Extension: Profile Visitors for Facebook = C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihjbpjahiibmjdlcgodcnmpelpmilamk\1.6_0\
CHR - Extension: Google Wallet = C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1\
CHR - Extension: Google Wallet = C:\Users\Gary\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

O1 HOSTS File: ([2014/05/15 22:55:43 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [InstaLAN] C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe (Affinegy, Inc.)
O4 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000..\Run: [AOL Fast Start] C:\Program Files\AOL Desktop 9.7a\AOL.EXE (AOL Inc.)
O4 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000..\Run: [Uploader] C:\Program Files\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe (Seagate Technology LLC)
O4 - Startup: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Gary\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStartupSound = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-2060793998-228504606-3227568861-1000\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 10.55.2)
O16 - DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 1.7.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 10.55.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DEFE736B-C868-43F1-8A26-556BABDE9FA1}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\aWave_1440x900.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\aWave_1440x900.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 14:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2014/02/16 06:56:20 | 000,000,000 | ---D | M] - F:\Automatically Add to iTunes -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2014/05/17 04:22:52 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Gary\Desktop\OTL.exe
[2014/05/17 04:06:02 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/05/17 04:05:21 | 001,016,261 | ---- | C] (Thisisu) -- C:\Users\Gary\Desktop\JRT.exe
[2014/05/17 03:55:19 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
[2014/05/17 03:54:05 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/05/16 04:44:14 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2014/05/15 22:55:59 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2014/05/15 22:34:36 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/05/15 22:34:36 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/05/15 22:34:36 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/05/15 22:34:20 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/05/15 16:55:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2014/05/15 16:54:23 | 000,000,000 | ---D | C] -- C:\Users\Gary\Desktop\mbar
[2014/05/15 16:44:11 | 000,000,000 | ---D | C] -- C:\Users\Gary\Desktop\RK_Quarantine
[2014/05/09 23:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014/05/09 19:18:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/05/09 19:18:15 | 000,075,480 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/05/09 19:18:15 | 000,051,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/05/09 19:18:15 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
[2014/05/09 16:46:53 | 000,107,736 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014/05/02 04:34:30 | 000,000,000 | ---D | C] -- C:\Users\Gary\AppData\Roaming\dBpoweramp
[2014/04/30 06:19:36 | 000,000,000 | ---D | C] -- C:\Users\Gary\Desktop\Old Firefox Data
[2014/04/30 06:07:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014/04/26 07:32:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dBpoweramp
[2014/04/26 07:12:57 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/04/26 07:08:12 | 000,000,000 | ---D | C] -- C:\ProgramData\VS Revo Group
[2014/04/25 06:40:34 | 000,000,000 | ---D | C] -- C:\Users\Gary\AppData\Roaming\AnvSoft
[2014/04/25 06:18:41 | 000,000,000 | ---D | C] -- C:\Users\Gary\Documents\Any Video Converter
[2014/04/24 17:48:30 | 000,000,000 | ---D | C] -- C:\ProgramData\LockHunter
[2014/04/23 06:55:03 | 000,000,000 | ---D | C] -- C:\Users\Gary\Documents\My MQ Time Sales
[2014/04/23 06:54:56 | 000,000,000 | ---D | C] -- C:\Users\Gary\Documents\My MQ Workspaces
[2014/04/22 04:42:55 | 000,000,000 | ---D | C] -- C:\Users\Gary\AppData\Roaming\Oracle
[2014/04/18 06:12:08 | 000,000,000 | ---D | C] -- C:\Users\Gary\New Folder (1)
[8 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/05/17 04:22:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gary\Desktop\OTL.exe
[2014/05/17 04:13:18 | 000,003,616 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014/05/17 04:13:18 | 000,003,616 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014/05/17 04:11:19 | 000,000,878 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/05/17 04:09:55 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/05/17 04:05:21 | 001,016,261 | ---- | M] (Thisisu) -- C:\Users\Gary\Desktop\JRT.exe
[2014/05/17 04:02:50 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/05/17 03:53:01 | 001,325,827 | ---- | M] () -- C:\Users\Gary\Desktop\adwcleaner_3.208.exe
[2014/05/17 03:43:01 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/05/17 02:50:39 | 000,107,736 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014/05/15 22:55:43 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2014/05/15 17:44:02 | 000,075,480 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/05/15 16:45:12 | 000,026,624 | ---- | M] () -- C:\Windows\System32\TrueSight.sys
[2014/05/15 16:42:55 | 003,972,608 | ---- | M] () -- C:\Users\Gary\Desktop\RogueKiller.exe
[2014/05/15 07:05:55 | 000,777,488 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys
[2014/05/15 07:05:55 | 000,411,680 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2014/05/15 07:05:55 | 000,054,832 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswrdr.sys
[2014/05/14 03:43:22 | 000,000,952 | ---- | M] () -- C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014/05/14 03:43:10 | 000,000,918 | ---- | M] () -- C:\Users\Gary\Desktop\Dropbox.lnk
[2014/05/13 16:46:45 | 000,645,644 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/05/13 16:46:45 | 000,120,776 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/05/09 20:44:03 | 000,000,318 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForGary.job
[2014/05/09 19:18:21 | 000,000,901 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/05/09 16:40:51 | 193,275,328 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2014/04/27 06:15:50 | 000,000,456 | ---- | M] () -- C:\Windows\tasks\PCDRScheduledMaintenance.job
[2014/04/26 09:31:09 | 000,003,411 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Shorten Codec.dat
[2014/04/26 09:30:29 | 000,033,846 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Shorten Codec.bmp
[2014/04/26 09:28:39 | 000,653,176 | ---- | M] () -- C:\Windows\System32\SpoonUninstall.exe
[2014/04/26 08:44:30 | 000,003,320 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp m4a FDK (AAC) Encoder.dat
[2014/04/26 07:32:53 | 000,000,998 | ---- | M] () -- C:\Users\Gary\Desktop\dBpoweramp Batch Converter.lnk
[2014/04/26 07:32:53 | 000,000,993 | ---- | M] () -- C:\Users\Gary\Desktop\dBpoweramp Music Converter.lnk
[2014/04/26 07:32:25 | 000,013,771 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp DSP Effects.dat
[2014/04/26 07:32:17 | 000,016,686 | ---- | M] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Music Converter.dat
[2014/04/26 07:13:25 | 000,001,831 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014/04/26 07:12:58 | 000,776,976 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys.1400162753161
[2014/04/26 07:12:58 | 000,180,632 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014/04/26 07:12:58 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2014/04/26 07:12:58 | 000,057,672 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2014/04/26 07:12:58 | 000,054,832 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswrdr.sys.1400162753161
[2014/04/26 07:12:58 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2014/04/26 07:12:58 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/04/26 07:12:58 | 000,024,184 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014/04/26 07:12:57 | 000,271,264 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2014/04/26 07:08:13 | 000,001,091 | ---- | M] () -- C:\Users\Gary\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2014/04/19 16:47:15 | 000,020,992 | ---- | M] () -- C:\Users\Gary\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[8 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/05/17 03:53:00 | 001,325,827 | ---- | C] () -- C:\Users\Gary\Desktop\adwcleaner_3.208.exe
[2014/05/15 22:34:36 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014/05/15 22:34:36 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014/05/15 22:34:36 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014/05/15 22:34:36 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014/05/15 22:34:36 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014/05/15 16:45:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\TrueSight.sys
[2014/05/15 16:42:41 | 003,972,608 | ---- | C] () -- C:\Users\Gary\Desktop\RogueKiller.exe
[2014/05/10 08:59:08 | 000,000,952 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014/05/09 19:18:21 | 000,000,901 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/05/09 16:40:51 | 193,275,328 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2014/04/26 08:44:30 | 000,003,320 | ---- | C] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp m4a FDK (AAC) Encoder.dat
[2014/04/26 07:32:53 | 000,000,998 | ---- | C] () -- C:\Users\Gary\Desktop\dBpoweramp Batch Converter.lnk
[2014/04/26 07:32:53 | 000,000,993 | ---- | C] () -- C:\Users\Gary\Desktop\dBpoweramp Music Converter.lnk
[2014/04/26 07:32:17 | 000,016,686 | ---- | C] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp Music Converter.dat
[2014/04/26 07:13:00 | 000,024,184 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014/04/26 07:08:13 | 000,001,091 | ---- | C] () -- C:\Users\Gary\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2014/04/24 16:10:46 | 000,013,771 | ---- | C] () -- C:\Windows\System32\SpoonUninstall-dBpoweramp DSP Effects.dat
[2013/11/22 08:46:51 | 000,004,096 | -H-- | C] () -- C:\Users\Gary\AppData\Local\keyfile3.drm
[2013/07/18 14:32:38 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2013/07/18 14:32:34 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2013/07/18 14:32:34 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2013/07/18 14:32:34 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2013/07/18 14:32:34 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2013/04/06 05:05:39 | 000,000,258 | RHS- | C] () -- C:\Users\Gary\ntuser.pol
[2013/03/06 07:20:40 | 000,180,632 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013/03/06 07:20:39 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2012/03/31 13:19:40 | 000,004,481 | ---- | C] () -- C:\ProgramData\buynow.html
[2011/11/28 07:18:58 | 000,000,084 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\wklnhst.dat
[2011/07/30 09:07:53 | 000,000,134 | ---- | C] () -- C:\Users\Gary\webphonecfg.dat
[2011/05/22 14:48:30 | 000,000,000 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\downloads.m3u
[2011/01/02 15:16:57 | 000,000,208 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\default.rss
[2010/03/27 15:19:52 | 000,003,090 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpTUDTOO.0
[2010/03/27 15:19:52 | 000,001,317 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpTUDTOO.JPG
[2010/02/21 07:25:50 | 000,000,000 | ---- | C] () -- C:\Users\Gary\AppData\Local\prvlcl.dat
[2009/12/17 17:34:01 | 000,000,056 | ---- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/08/09 08:40:26 | 000,000,105 | ---- | C] () -- C:\Users\Gary\AppData\Roaming\default.pls
[2009/08/09 07:21:12 | 000,001,024 | ---- | C] () -- C:\Users\Gary\.rnd
[2009/08/05 06:40:43 | 000,018,255 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpSIRIN 2.JPG
[2009/08/05 06:40:43 | 000,016,291 | ---- | C] () -- C:\Users\Gary\AppData\Local\tmpSIRIN 2.0
[2009/07/31 06:36:45 | 000,020,992 | ---- | C] () -- C:\Users\Gary\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/06/24 16:21:19 | 000,007,620 | ---- | C] () -- C:\Users\Gary\AppData\Local\d3d9caps.dat

========== ZeroAccess Check ==========

[2006/11/02 05:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2014/03/25 06:26:04 | 011,587,584 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/10 23:28:20 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
" " = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/10 23:28:26 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012/01/14 17:12:02 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\AVG10
[2014/04/05 12:46:36 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\14358
[2012/04/01 11:46:56 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\4Media
[2011/04/04 16:21:23 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\acccore
[2014/04/25 06:40:34 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\AnvSoft
[2012/10/27 06:44:49 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Any Video Converter
[2011/10/26 17:41:45 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Ashampoo
[2013/10/17 06:15:28 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Auslogics
[2013/11/22 06:42:20 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\AVAST Software
[2012/12/01 17:47:57 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Azureus
[2013/04/02 18:23:33 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\BitTorrent
[2011/12/10 08:29:30 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Catalina Marketing Corp
[2013/11/10 05:00:53 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2013/08/07 06:31:54 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2014/01/31 07:42:49 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Convert Audio Free
[2014/05/02 04:34:30 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\dBpoweramp
[2013/10/07 05:35:06 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\DriverFinder
[2014/05/17 04:12:50 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Dropbox
[2014/03/29 22:31:02 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\DropboxMaster
[2014/03/20 05:03:21 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\DVDFab9
[2013/06/11 05:02:34 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\EasyDuplicateFinder
[2011/12/30 11:34:37 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\ImgBurn
[2013/06/02 17:50:50 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Leadertech
[2013/09/30 05:32:05 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\LockHunter
[2013/11/09 07:47:57 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\mjusbsp
[2012/11/30 05:51:38 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Nico Mak Computing
[2014/04/22 04:42:55 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Oracle
[2013/11/10 05:55:32 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\PDAppFlex
[2009/05/31 12:53:53 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\PictureMover
[2011/08/25 04:47:38 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Sammsoft
[2014/04/16 17:45:20 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Samsung
[2013/06/02 17:52:39 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Seagate
[2011/11/22 18:39:09 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Sir
[2011/10/20 11:40:39 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Southwest Airlines
[2011/11/28 07:19:00 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Template
[2014/05/13 16:49:57 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\uTorrent
[2010/10/21 05:26:11 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\webex
[2009/06/01 16:31:13 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\WinBatch
[2014/04/10 17:05:02 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Windows Live Writer
[2013/10/07 05:06:19 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Xilisoft
[2009/08/09 22:19:06 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Xilisoft Corporation
[2011/11/22 18:42:30 | 000,000,000 | ---D | M] -- C:\Users\Gary\AppData\Roaming\Ycgezo

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:07BF512B

< End of report >

 

OTL Extras logfile created on: 5/17/2014 4:24:24 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gary\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.87 Gb Total Physical Memory | 1.85 Gb Available Physical Memory | 64.52% Memory free
5.81 Gb Paging File | 4.77 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): C:\pagefile.sys 3070 3070J:\pagef [Binary data over 200 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.43 Gb Total Space | 41.03 Gb Free Space | 14.32% Space Free | Partition Type: NTFS
Drive D: | 11.66 Gb Total Space | 1.59 Gb Free Space | 13.62% Space Free | Partition Type: NTFS
Drive F: | 931.51 Gb Total Space | 355.81 Gb Free Space | 38.20% Space Free | Partition Type: NTFS

Computer Name: GARY-PC | User Name: Gary | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Generate MD5 Signatures] -- "C:\Program Files\Michael K. Weise\mkw Audio Compression Toolkit\mkwACT.exe" (Michael K. Weise)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [runas] -- cmd.exe /c takeown /f "%1" /r /d y && icacls "%1" /grant administrators:F /t (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UpdatesDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{098A3CA0-2C33-4F83-898A-9CD56D2E7EDD}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{0D4BDCDE-6D60-4099-9F57-3CF76856B52F}" = rport=139 | protocol=6 | dir=out | app=system |
"{1654958B-5C40-450C-9DBB-2DE8FCD8E691}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{18AD434F-AEDD-4055-9BC2-8F3B1DD961FA}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{2AEEF52D-D430-4D3D-A47D-2B31BD4F04CB}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{2FCA120B-2C84-4631-B430-F0A4CB2EAE9F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3B6A553D-669E-4F57-9AF6-89AADB2F1F73}" = lport=445 | protocol=6 | dir=in | app=system |
"{4383EAA4-CED9-4732-98AD-D3A3946849FE}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{4974C002-0E60-422A-A2A4-B66357A4B2D6}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{4AE90EAE-B904-4002-AC08-CE9701F63CFE}" = rport=138 | protocol=17 | dir=out | app=system |
"{4BD08651-BE6C-4F09-BA1B-7BA721B8C7C3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{54360432-0BFA-4281-B976-6AC396A7D710}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{7C24895B-9BCF-4214-BE08-6964B5C7297E}" = rport=445 | protocol=6 | dir=out | app=system |
"{9430F92C-0683-411A-9A2E-75487230A6A2}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{963F0353-00D9-4451-A104-4F7E7472D9B6}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A3E5438C-4028-4A21-A9ED-A95385526F7E}" = lport=138 | protocol=17 | dir=in | app=system |
"{C31BE99A-3D45-48F8-8DDF-E0C2D34AD01B}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{C818C152-3538-4F4C-B52B-5F6AF8154C52}" = rport=137 | protocol=17 | dir=out | app=system |
"{CC2D9EA7-BAE9-4823-B1A8-DFA1664527DC}" = lport=137 | protocol=17 | dir=in | app=system |
"{D7620934-0018-4696-85CC-B36E7C9BED84}" = lport=19540 | protocol=17 | dir=in | name=sxuptp |
"{F7691ABB-E87E-45D4-98C6-BE2620F2DF6C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{FC9D6823-2199-468F-89CD-C8218CCC6E75}" = lport=139 | protocol=6 | dir=in | app=system |
"{FCBC6BF9-9B6A-402F-A0FC-8125F75AE818}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00DFEC83-902B-48C0-B4D1-243B6C940FBC}" = protocol=6 | dir=in | app=c:\program files\aol desktop 9.7a\waol.exe |
"{091A25DC-B5F9-42F5-AD2A-0AE3C8FE60AF}" = dir=in | app=c:\program files\belkin\belkin usb print and storage center\connect.exe |
"{09B44A34-B020-4F66-BBEA-3B5561C49401}" = protocol=6 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe |
"{0D23A54B-92C9-4428-8366-5B1ECDD07BB9}" = dir=in | app=c:\program files\hewlett-packard\media\dvd\hpdvdsmart.exe |
"{1162D46D-943B-4A68-A638-7FD699C8B460}" = dir=in | app=c:\program files\hewlett-packard\touchsmart\media\hptouchsmartvideo.exe |
"{142BB313-C40A-4F64-8015-2F7C9F5116B3}" = protocol=17 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{14D978EF-B873-442D-9BC8-3E948D31B1EE}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe |
"{1528F6F9-296B-4535-A2E5-FD3C539042CA}" = protocol=17 | dir=in | app=c:\users\gary\appdata\roaming\dropbox\bin\dropbox.exe |
"{184E5BA5-36CB-41D7-A190-657D929249B7}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"{1A0E3EB5-9BEB-41E3-87AC-D0552FCB177D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{20BBDF95-32E4-45DF-AADE-EF3257263290}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{2195A72B-7866-47DF-BCF0-B0844B85E442}" = protocol=17 | dir=in | app=c:\program files\aol desktop 9.7a\aolbrowser\aolbrowser.exe |
"{25D404F9-801D-448B-BF5B-B95627F5072D}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{27DD1522-A798-4A9F-9FC8-22F6BB2A0A24}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{2CBBED7A-0BED-4CBF-B853-0D95788D4D4E}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{32751A38-2E99-41D4-9E2D-109EC1E5BD6B}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{3BF90591-600D-4D60-BB80-938F89D8A95D}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{401AA840-29DE-44A5-AC09-99DF60DD63C4}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{44125E51-E826-47FC-A2EE-90E57A27AD8C}" = protocol=17 | dir=in | app=c:\program files\belkin\router setup and monitor\belkinsetup.exe |
"{50537361-344A-45EA-B444-F3ADA024C489}" = protocol=6 | dir=in | app=c:\program files\belkin\router setup and monitor\belkinsetup.exe |
"{536E1EE9-A8F3-422D-B489-DA7CFABA4D77}" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe |
"{5BAADE07-1A67-4FCB-B3F1-C5DFE57C12A5}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe |
"{5CF81B04-0390-436F-977C-93A487962C65}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe |
"{5DB8BB5C-60C5-4614-A054-FEB02042DF89}" = protocol=6 | dir=in | app=c:\program files\aol desktop 9.7\aolbrowser\aolbrowser.exe |
"{60573F47-CA7A-4A1A-B02F-6DA13C324655}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aolacsd.exe |
"{61A05C15-58FD-4CFA-9540-880FDA70E189}" = dir=in | app=c:\program files\hewlett-packard\touchsmart\media\tsmagent.exe |
"{6221F87B-8B12-4695-BA59-D40987D6FB2D}" = protocol=6 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe |
"{67E356FE-CAAA-4FBF-A330-D937663CA346}" = protocol=17 | dir=in | app=c:\program files\aol desktop 9.7\waol.exe |
"{681A82A5-4A89-4632-967E-51CCAC50C3A4}" = protocol=17 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{6914C447-EC39-4B62-833E-CF8DF72746C8}" = dir=in | app=c:\program files\hewlett-packard\touchsmart\media\hptouchsmartphoto.exe |
"{6EB0B4A4-CDAC-4864-912E-AFE0C044A194}" = protocol=17 | dir=in | app=c:\program files\aol desktop 9.7a\waol.exe |
"{71167DFB-F6EF-41E7-AEEA-CBD4BE17DD71}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{715A5B91-6B02-42FE-944B-2608E91383AE}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{723B4D0A-7FBD-407F-9618-6457A8949D91}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{724DF8AF-EA1D-4C3A-87E8-65848C6EC683}" = protocol=17 | dir=in | app=c:\program files\common files\aol\1325011021\ee\aolsoftware.exe |
"{73F24D21-768F-4E1D-B1E7-13F06428639D}" = protocol=17 | dir=in | app=c:\program files\common files\aol\1325011021\ee\aolsoftware.exe |
"{73F406DF-DF52-4B5A-9D78-16F4723066CC}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe |
"{7680D1F3-6FF9-4261-BA79-34B78B552DC0}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{777AAA81-AC31-40F6-96BC-57D71E539D48}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{7C4A6087-69BD-4B6E-B1E0-A5C70D26B7D9}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{7CBE7E5D-76EA-4545-8FE3-A93234F66F86}" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe |
"{84BE36FE-86EE-4DF5-AEB3-737B42BB6C63}" = protocol=6 | dir=in | app=c:\program files\belkin\router setup and monitor\belkinsetup.exe |
"{8D5C2A19-5D7F-48C4-8E19-E7229B75C44B}" = protocol=6 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{91333215-3DBC-45E0-870D-051D08CF7B86}" = protocol=6 | dir=in | app=c:\program files\common files\aol\1325011021\ee\aolsoftware.exe |
"{9408C98C-CCC6-4F55-8E2E-BC30F50348DA}" = protocol=17 | dir=in | app=c:\program files\nero\km\kwikmedia.exe |
"{96A08668-0746-46C0-A66F-EFBD8108A808}" = protocol=6 | dir=in | app=c:\program files\aol desktop 9.7\waol.exe |
"{99220750-D168-4683-A160-422CDD039EFD}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{9DB4202B-2AA2-43F5-8E7A-7DB1EF001193}" = protocol=6 | dir=in | app=c:\program files\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{9E411F01-728B-4B7F-8C59-9171DDFF17A6}" = dir=in | app=c:\users\gary\appdata\local\microsoft\skydrive\skydrive.exe |
"{A0A47F44-B3BF-437F-B27F-482C433B97F1}" = protocol=17 | dir=in | app=c:\program files\belkin\router setup and monitor\belkinsetup.exe |
"{A1647596-1F99-446E-8E60-8B9B6DA1D09F}" = dir=in | app=c:\program files\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe |
"{A50A96B4-0900-48DF-A302-41D2472F453E}" = dir=in | app=c:\program files\hewlett-packard\touchsmart\media\hptouchsmartmusic.exe |
"{A9FA898B-09D4-4A0C-B400-0D604BEC9F04}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{AA354F1C-EA9E-4B5C-88CB-04D5ACB25F92}" = dir=in | app=c:\program files\belkin\router setup and monitor\belkinsetup.exe |
"{AAA426ED-39A3-4173-A1E1-85A63543046B}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{AF512894-FFAD-45E2-BFBB-82EF34F073BA}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{B5122609-39F5-474C-816A-C262439F3C07}" = protocol=6 | dir=in | app=c:\program files\nero\nero 12\nero backitup\backitup.exe |
"{B57B8239-FC5C-48EE-A745-126A94CCF75E}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{BC18290F-BB19-47EE-BA65-E217795C77EA}" = protocol=6 | dir=in | app=c:\program files\nero\km\kwikmedia.exe |
"{BC739A46-FB13-4859-95DE-3A21BF4ACCF4}" = protocol=17 | dir=in | app=c:\program files\aol desktop 9.7\aolbrowser\aolbrowser.exe |
"{C2A4BE70-02E6-4C59-A9F2-1DECF5B24794}" = protocol=17 | dir=in | app=c:\program files\nero\nero 12\nero backitup\backitup.exe |
"{C2D9F2F0-6783-4C8B-8120-FF11DBF27822}" = protocol=6 | dir=in | app=c:\program files\common files\aol\1325011021\ee\aolsoftware.exe |
"{C38B636D-B8F1-4B8F-BDCD-46E1BB16B741}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe |
"{C815C95B-C62C-4336-8ADA-5712C3D3857C}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{CD346570-266E-4A4D-9DB0-920375DD108F}" = protocol=6 | dir=in | app=c:\program files\nero\nero blu-ray player\blu-rayplayer.exe |
"{CF16FA3C-8C76-401C-AC1B-49453B922EDA}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D7EAB150-FA7F-4C94-AE96-2C327688EAB0}" = protocol=17 | dir=in | app=c:\program files\nero\nero blu-ray player\blu-rayplayer.exe |
"{E25935CB-5541-4E5C-A688-B8B451C11193}" = protocol=6 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe |
"{E587F934-C901-41CC-A181-62E255908EE1}" = protocol=17 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe |
"{E7E2B14A-1EB3-4761-ACEE-DA3A8618E57C}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{E80C776E-DFAE-4203-A75C-A633F0E4EFB4}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"{E8D34307-7419-4A55-A21C-CE54BEF3C624}" = protocol=6 | dir=in | app=c:\program files\aol desktop 9.7a\aolbrowser\aolbrowser.exe |
"{EE35A9B6-3245-4DD6-B3C8-217565FB833E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{EFD52531-3D88-424E-B068-47879B49291F}" = protocol=6 | dir=in | app=c:\users\gary\appdata\roaming\dropbox\bin\dropbox.exe |
"{F8B16C52-53E5-4E03-A306-EEC8EA15865C}" = protocol=17 | dir=in | app=c:\program files\common files\aol\system information\sinf.exe |
"{F8EB50DE-324D-4D7B-837E-89B54AF19E94}" = dir=in | app=c:\program files\hewlett-packard\media\dvd\hpdvdsmart.exe |
"{FC8352F8-1052-4333-99AB-FAFBCA2B4C8D}" = protocol=17 | dir=in | app=c:\program files\common files\aol\acs\aoldial.exe |
"TCP Query User{0D5D8548-855D-467F-B04C-BB21E25274A2}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{2BF36531-C9D9-44D0-9B70-1210BCE8EB16}C:\program files\1clickdownload\1clickdownloader.exe" = protocol=6 | dir=in | app=c:\program files\1clickdownload\1clickdownloader.exe |
"TCP Query User{465CC5A5-4381-4BBE-B4B1-3C4D43CBC5C5}C:\users\gary\documents\documents\utorrent(1).exe" = protocol=6 | dir=in | app=c:\users\gary\documents\documents\utorrent(1).exe |
"TCP Query User{525EE50C-BA5D-4088-A8B1-07E6E97DB833}C:\program files\seagate\seagate dashboard 2.0\dashboard.exe" = protocol=6 | dir=in | app=c:\program files\seagate\seagate dashboard 2.0\dashboard.exe |
"TCP Query User{73906AE9-FC81-4B92-AB08-F8B159B6C4ED}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{BBC24516-4D99-4CE3-946C-2AF658399DC0}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"TCP Query User{CB0E7EED-7C06-499B-9CED-DBB1DECB124A}C:\program files\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"TCP Query User{E70E52F6-8154-4FBB-B03E-A45E1E7B3BDC}C:\program files\seagate\seagate dashboard 2.0\dashboard.exe" = protocol=6 | dir=in | app=c:\program files\seagate\seagate dashboard 2.0\dashboard.exe |
"TCP Query User{E99C13E7-5A4E-4508-B6EA-107DFE40D231}C:\users\gary\appdata\roaming\mjusbsp\magicjack.exe" = protocol=6 | dir=in | app=c:\users\gary\appdata\roaming\mjusbsp\magicjack.exe |
"TCP Query User{EA04D129-23B5-4890-8B74-BB69BB1C359B}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"TCP Query User{F053C8DB-BC9D-4A63-91B4-3B253E72E5E0}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe |
"TCP Query User{F313D53D-23AD-4A39-928B-892672603FBE}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{F5B019A2-660D-4B0B-9245-3DC844F53D56}C:\users\gary\appdata\roaming\mjusbsp\magicjack.exe" = protocol=6 | dir=in | app=c:\users\gary\appdata\roaming\mjusbsp\magicjack.exe |
"TCP Query User{FE557EC1-68C9-4A45-875A-F00BF6737370}C:\users\gary\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\gary\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{101FAA3E-001F-436D-A1E9-58CBDC0E1D7D}C:\users\gary\documents\documents\utorrent(1).exe" = protocol=17 | dir=in | app=c:\users\gary\documents\documents\utorrent(1).exe |
"UDP Query User{26441B09-92A7-4567-BE04-C01056386FE0}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{2A87A404-DBA0-4601-8889-78048074746E}C:\users\gary\appdata\roaming\mjusbsp\magicjack.exe" = protocol=17 | dir=in | app=c:\users\gary\appdata\roaming\mjusbsp\magicjack.exe |
"UDP Query User{33C86F0A-F3BC-4FA3-93FA-26FF1B08E49D}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{3C17A86F-FE70-46E7-9E2C-31D17D5E93B4}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"UDP Query User{43F2E4EB-BCE1-41D2-89FB-97AF41DC9D2E}C:\program files\1clickdownload\1clickdownloader.exe" = protocol=17 | dir=in | app=c:\program files\1clickdownload\1clickdownloader.exe |
"UDP Query User{4B0C80C2-1A73-4E5F-AF69-335E72188920}C:\program files\seagate\seagate dashboard 2.0\dashboard.exe" = protocol=17 | dir=in | app=c:\program files\seagate\seagate dashboard 2.0\dashboard.exe |
"UDP Query User{58080C79-591C-4C65-80E3-E118A8766E4A}C:\users\gary\appdata\roaming\mjusbsp\magicjack.exe" = protocol=17 | dir=in | app=c:\users\gary\appdata\roaming\mjusbsp\magicjack.exe |
"UDP Query User{5A80BCA2-5892-4E8B-B7D7-AD9E8A3F3405}C:\program files\seagate\seagate dashboard 2.0\dashboard.exe" = protocol=17 | dir=in | app=c:\program files\seagate\seagate dashboard 2.0\dashboard.exe |
"UDP Query User{70EC51D9-BFDC-424B-ADD3-E1D64C57570E}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe |
"UDP Query User{88A0C4AC-CBDF-46BA-B2B6-F775D2B5025C}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{BD3523E9-3112-41FB-8206-5C3E1BB3EE55}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"UDP Query User{C590052D-3CE9-44CE-B9F8-F15F802E44CE}C:\program files\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"UDP Query User{DFB92507-3405-4B51-B2E9-252AD76D26C1}C:\users\gary\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\gary\appdata\roaming\dropbox\bin\dropbox.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{03BF5CB1-B72E-4CA6-A278-F65680F05420}" = HP Picasso Media Center Add-In
"{052A1E34-A54B-458C-A4E3-24C3E054754A}" = Nero Kwik Media
"{0708FF30-78C0-47B0-81F0-C84604DC769C}" = Nero Express Help (CHM)
"{0A5B39D2-7ED6-4779-BCC9-37F381139DB3}" = Adobe AIR
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B311221-05A5-4766-8D03-7A6446794156}" = Nero RescueAgent Help (CHM)
"{11F9A376-342F-4297-82DA-1F6EA8ED4B6B}" = PSE12 STI Installer
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
"{1896E712-2B3D-45eb-BCE9-542742A51032}" = PictureMover
"{18A8E78B-9EF2-496E-B310-BCD8E4C1DAB3}" = iSEEK AnswerWorks English Runtime
"{18D47FA1-0440-48D3-A7E0-DA09537FF471}" = Apple Mobile Device Support
"{1943C3BD-4462-4612-92C3-D36DD917C447}" = Nero Recode
"{19506BDB-4EA7-491F-E8AB-E97109FDB296}" = muvee Reveal
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1B6F5E51-575E-4693-BCA2-7543570D076D}" = Nero Kwik Themes Basic
"{1F16820E-D0E7-4636-939E-45CBFEFB06E1}" = Nero Kwik Media Help (CHM)
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{247C5DDA-FFD7-44E0-8BF7-79BC80A0BF87}" = Windows Live Family Safety
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26A24AE4-039D-4CA4-87B4-2F83217055FF}" = Java 7 Update 55
"{2890E324-6F3B-4975-8B95-E7D6D80E0226}" = Nero Burning ROM Help (CHM)
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29F67D84-3A70-456E-806A-52301B02070B}" = Nero Effects Basic
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{2F21564D-DE05-4C6D-B21E-08B9D313FAB3}" = iTunes
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{38058455-8C21-4C2F-B2F6-14ED166039CB}" = HP Total Care Setup
"{3AAB08A3-F129-4BD5-B409-AE674F93759D}" = Prerequisite installer
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{43C423D9-E6D6-4607-ADC9-EBB54F690C57}" = Seagate Dashboard 2.0
"{44CD39FC-AC58-4F03-AA32-331BA086B49D}_is1" = Clone Tools version 2.0.2.0
"{450C790A-8C60-4B3D-887E-2124AC823D6D}" = iTunesFolderWatch
"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{4FAB5122-775E-4418-B8D9-E2873BC93570}" = Microsoft Live Search Toolbar
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}" = Nero Blu-ray Player Help (CHM)
"{5CD2E27A-F2C9-4A87-9A06-DFAF9A182481}" = Nero Express
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5FE545A1-D215-4216-9189-E7B39C9D1CC1}" = Quicken 2011
"{628C2C7D-8AD1-E614-E8E2-6EEAD8D5F2D0}" = Acrobat.com
"{6423EF83-6E1D-4D22-A36F-689CD19FD4D2}" = Juno Preloader
"{64B9E2F5-558E-4C56-B419-A1679518F6E7}" = HP Customer Experience Enhancements
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 3.0.8
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6B976ADF-8AE8-434E-B282-A06C7F624D2F}" = Python 2.5.2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{777B751F-C904-4BD7-8DFF-81F97A3C0BC5}" = Adobe Photoshop Elements 12
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{80836C86-1305-40C9-B7C9-F3A75266070D}" = Nero 12
"{828175FA-7307-4DBF-95AD-9CEE086B6F45}" = Welcome App (Start-up experience)
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{83FCCFCD-46E3-43FB-A397-78BFD5A8980A}" = Nero Video
"{84031A18-BA9A-4156-A74F-E05B52DDFCE2}" = DING!
"{8651784F-123E-4E8F-A5AD-60B8BE121033}" = Nero 8 Essentials
"{86847081-B387-4F49-AED1-C9B0A090D66C}" = Nero Recode Help (CHM)
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{93E9D2A0-8C35-4E79-99F3-8325443EC10B}_is1" = Serial Key Generator version 5.0
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-0081-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9D80A7B7-DC01-485D-AE93-710D559B5C56}" = Elements 12 Organizer
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{A0640EC2-B97E-4FC1-AD14-227C9E386BB4}" = HP Recovery Manager RSS
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A2016015-8323-4AF8-8B3E-F56239D7D59D}" = HP Demo
"{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}" = Nero Blu-ray Player
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA027AE9-DD20-4677-AA72-D760A358320B}" = Microsoft VC9 runtime libraries
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}" = Apple Application Support
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{ABC88553-8770-4B97-B43E-5A90647A5B63}" = Nero ControlCenter
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.10)
"{ACE49D50-19CD-44A6-B192-46F985283B26}" = Nero PiP Effects Basic
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B128179D-A5E1-43AC-9422-12A109ECD2A0}" = Nero Video Help (CHM)
"{B1615F2A-105F-48FD-AA3E-0BDF8B3EE644}" = FLAC Frontend
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B953732D-B623-4E84-B369-CFFF7B1AE06F}" = Nero RescueAgent
"{BE19A54F-8291-417A-82C1-B22B19339927}" = iTunes Library Toolkit
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C994C746-C6D0-4EBA-B09E-DF7B18381B69}" = Nero ControlCenter Help (CHM)
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}" = HP Active Support Library
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF508721-0E1E-4F99-A359-59E4EA8DAEC1}" = Nero Burning ROM
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D9F58859-61BA-44A2-9E56-7DC7E8970AE3}" = M3U2iTunes
"{DA2D3078-A58C-45E8-8EE0-18B8BE6B34F7}" = Nero BackItUp
"{dba84796-8503-4ff0-af57-1747dd9a166d}" = Nero Online Upgrade
"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E15BC10F-04AA-0AFD-A6C9-476730195F8B}" = Adobe Download Assistant
"{E17BCB76-9924-4BD5-B6D6-50D3407B4E74}" = Nero Disc Menus Basic
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{EF0D1292-8FC1-41BE-9740-DBC134F66415}" = Nero BackItUp Help (CHM)
"{EFC5939F-470F-454E-B3DA-F51FDD83F6CE}" = HP MediaSmart SmartMenu
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"4Media iPod to PC Transfer" = 4Media iPod to PC Transfer
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 13 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 13 Plugin
"Adobe Photoshop Elements 12" = Adobe Photoshop Elements 12
"AIM_7" = AIM 7
"Any Video Converter_is1" = Any Video Converter 5.5.9
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"AusLogics BoostSpeed" = AusLogics BoostSpeed 6.3.0.0
"avast" = avast! Free Antivirus
"Belkin Setup and Router Monitor_is1" = Belkin Setup and Router Monitor
"Belkin USB Print and Storage Center" = Belkin USB Print and Storage Center
"BitTorrent" = BitTorrent
"CCleaner" = CCleaner
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1" = Soft Data Fax Modem with SmartCP
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"dBpoweramp AAC Encoder" = dBpoweramp AAC Encoder
"dBpoweramp DSP Effects" = dBpoweramp DSP Effects
"dBpoweramp FLAC Codec" = dBpoweramp FLAC Codec
"dBpoweramp m4a Codec" = dBpoweramp m4a Codec
"dBpoweramp m4a FDK (AAC) Encoder" = dBpoweramp m4a FDK (AAC) Encoder
"dBpoweramp m4a Utilities" = dBpoweramp m4a Utilities
"dBpoweramp m4b Audio book Encoder" = dBpoweramp m4b Audio book Encoder
"dBpoweramp Monkeys Audio Codec" = dBpoweramp Monkeys Audio Codec
"dBpoweramp Music Converter" = dBpoweramp Music Converter
"dBpoweramp Shorten Codec" = dBpoweramp Shorten Codec
"Driver Performer_is1" = Driver Performer
"DVDFab 8 Qt_is1" = DVDFab 8.2.2.0 (16/11/2012) Qt
"DVDFab 9_is1" = DVDFab 9.1.1.9 (18/12/2013)
"Easy Duplicate Finder 4_is1" = EasyDuplicateFinder v4.3
"ESET Online Scanner" = ESET Online Scanner v3
"Exact Audio Copy" = Exact Audio Copy 0.99pb5
"ExpressZip" = Express Zip
"Google Chrome" = Google Chrome
"ImgBurn" = ImgBurn
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"iPod PC Transfer Suit_is1" = iPod PC Transfer Suit 4.2
"KLiteCodecPack_is1" = K-Lite Codec Pack 8.1.0 (Basic)
"LockHunter_is1" = LockHunter 3.0, 32/64 bit
"magicJack Recovery Tool_is1" = magicJack Recovery Tool 1.0
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.0.1.1004
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"mkwACT" = mkw Audio Compression Toolkit
"mkwMFCRTL" = mkw Runtime Libraries
"Mozilla Firefox 29.0.1 (x86 en-US)" = Mozilla Firefox 29.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA Drivers" = NVIDIA Drivers
"OfficeTrial" = Microsoft Office Home and Student 60 day trial
"PC-Doctor for Windows" = Hardware Diagnostic Tools
"PowerISO" = PowerISO
"Prism" = Prism Video File Converter
"R-Studio 4.2NSIS" = R-Studio 4.2
"Secunia PSI" = Secunia PSI (2.0.0.4003)
"Switch" = Switch Sound File Converter
"The Rosetta Stone" = The Rosetta Stone
"TradersLittleHelper_is1" = Trader's Little Helper 2.7.0
"uTorrent" = µTorrent
"Video Mover_is1" = Video Mover
"VLC media player" = VLC media player 2.0.5
"WildTangent hp Master Uninstall" = My HP Games
"Winamp" = Winamp
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"Xilisoft AVI to DVD Converter" = Xilisoft AVI to DVD Converter
"Xilisoft FLAC Converter" = Xilisoft FLAC Converter
"Xilisoft ISO Pro" = Xilisoft ISO Pro
"Xilisoft Video Converter Ultimate" = Xilisoft Video Converter Ultimate
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"magicJack" = magicJack
"MyFreeCodec" = MyFreeCodec
"SkyDriveSetup.exe" = Microsoft SkyDrive
"uTorrent" = µTorrent

< End of report >

 

All processes killed
Error: Unable to interpret <Code:> in the current context!
========== OTL ==========
Service pgfilter stopped successfully!
Service pgfilter deleted successfully!
File C:\Program Files\PeerGuardian2\pgfilter.sys not found.
Service NwlnkFwd stopped successfully!
Service NwlnkFwd deleted successfully!
File system32\DRIVERS\nwlnkfwd.sys not found.
Service NwlnkFlt stopped successfully!
Service NwlnkFlt deleted successfully!
File system32\DRIVERS\nwlnkflt.sys not found.
Service Lbd stopped successfully!
Service Lbd deleted successfully!
File system32\DRIVERS\Lbd.sys not found.
Service IpInIp stopped successfully!
Service IpInIp deleted successfully!
File system32\DRIVERS\ipinip.sys not found.
Service catchme stopped successfully!
Service catchme deleted successfully!
File C:\ComboFix\catchme.sys not found.
Registry key HKEY_USERS\S-1-5-21-2060793998-228504606-3227568861-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aol.com\objects\ deleted successfully.
C:\Users\Administrator\AppData\Roaming\AVG10\cfgall folder moved successfully.
C:\Users\Administrator\AppData\Roaming\AVG10 folder moved successfully.
C:\Users\Gary\AppData\Roaming\Ycgezo folder moved successfully.
ADS C:\ProgramData\Temp:07BF512B deleted successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File\Folder C:\FRST not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Gary
->Temp folder emptied: 3687771 bytes
->Temporary Internet Files folder emptied: 1110568 bytes
->Java cache emptied: 103060200 bytes
->FireFox cache emptied: 77424427 bytes
->Google Chrome cache emptied: 11663607 bytes
->Flash cache emptied: 14511 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: yfl
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 8402 bytes
RecycleBin emptied: 1766001488 bytes

Total Files Cleaned = 1,872.00 mb


[EMPTYJAVA]

User: Administrator
->Java cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Gary
->Java cache emptied: 0 bytes

User: Public

User: UpdatusUser

User: yfl

Total Java Files Cleaned = 0.00 mb


[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Gary
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

User: yfl

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 05172014_092726

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

Results of screen317's Security Check version 0.99.83
Windows Vista Service Pack 2 x86 (UAC is enabled)
Internet Explorer 9
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Secunia PSI (2.0.0.4003)
CCleaner
Java 7 Update 55
Adobe Flash Player 13.0.0.214
Adobe Reader 10.1.10 Adobe Reader out of Date!
Mozilla Firefox (29.0.1)
Google Chrome 34.0.1847.131
Google Chrome 34.0.1847.137
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamscheduler.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

 

Farbar Service Scanner Version: 14-05-2014
Ran by Gary (administrator) on 17-05-2014 at 09:49:32
Running from "C:\Users\Gary\Desktop "
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

 

is this ESET scan usually long? It's at 29% after almost 2 hours