Solved Video Ad Popups

[Resolved] Video Ad Popups

Ran Malwarebytes and then restarted computer to remove items as directed. Then ran DDS. All logs are below.
Thanks.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.12.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Janny :: JANNY-DESKTOP [administrator]

1/12/2014 6:01:59 PM
mbam-log-2014-01-12 (18-01-59).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 257711
Time elapsed: 3 minute(s), 24 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 7
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Video Player (Adware.VPlayer) -> Quarantined and deleted successfully.
HKCR\CLSID\{53fd08e5-f44f-4b23-9018-8a0039cff087} (Adware.VPlayer) -> Quarantined and deleted successfully.
HKCR\TypeLib\{78c4731e-cb8f-4182-9227-a10f56c95f59} (Adware.VPlayer) -> Quarantined and deleted successfully.
HKCR\Interface\{9EBCCF6D-7D6A-4978-9E4D-A7B76672B493} (Adware.VPlayer) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53FD08E5-F44F-4B23-9018-8A0039CFF087} (Adware.VPlayer) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{53FD08E5-F44F-4B23-9018-8A0039CFF087} (Adware.VPlayer) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{53FD08E5-F44F-4B23-9018-8A0039CFF087} (Adware.VPlayer) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 8
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998 (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ch (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content\icons (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content\icons\default (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ie (Adware.VPlayer) -> Quarantined and deleted successfully.

Files Detected: 10
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\uninstall.exe (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ch\VideoPlayerV3beta998.crx (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome.manifest (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\install.rdf (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content\ffVideoPlayerV3beta998.js (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content\ffVideoPlayerV3beta998ffaction.js (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content\overlay.xul (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content\icons\Thumbs.db (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff\chrome\content\icons\default\VideoPlayerV3beta998_32.png (Adware.VPlayer) -> Quarantined and deleted successfully.
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ie\VideoPlayerV3beta998.dll (Adware.VPlayer) -> Quarantined and deleted successfully.

(end)

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16428 BrowserJavaVersion: 10.45.2
Run by Janny at 8:47:43 on 2014-01-13
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6135.3678 [GMT -5:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\PROGRA~2\WinTV\TVServer\HAUPPA~1.EXE
C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\PROGRA~2\WinTV\TVServer\CAPTUR~3.EXE
C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe
C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe
C:\Windows\SysWOW64\NLSSRV32.EXE
C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\ehome\ehRecvr.exe
C:\Users\Janny\AppData\Roaming\uTorrent\uTorrent.exe
C:\Windows\eHome\EhTray.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = userinit.exe,
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL
BHO: Microsoft SkyDrive Pro Browser Helper: {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
uRun: [AirVideoServer] C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe
mRun: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
mRun: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
dRunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink: "http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
StartupFolder: C:\Users\Janny\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\DELLDO~1.LNK - C:\Program Files\Dell\DellDock\DellDock.exe
StartupFolder: C:\Users\Janny\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\LOGITE~1.LNK - C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
TCP: NameServer = 24.226.1.93 24.226.10.193 24.226.10.194
TCP: Interfaces\{AEF86246-B3E5-4540-AFD1-EF3B3EAE55E9} : DHCPNameServer = 209.222.18.222 209.222.18.218
TCP: Interfaces\{F9CCC665-E5B7-44D6-B286-F5573C7F52CF} : DHCPNameServer = 24.226.1.93 24.226.10.193 24.226.10.194
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL
x64-TB: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-Run: [LogMeIn GUI] "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe "
x64-IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll
x64-Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
x64-Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - <orphaned>
x64-Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Janny\AppData\Roaming\Mozilla\Firefox\Profiles\39gnb7o6.default\
FF - plugin: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll
FF - plugin: C:\Program Files (x86)\Nitro\Pro 9\npdf.dll
FF - plugin: C:\Program Files (x86)\Nitro\Pro 9\npnitroie.dll
FF - plugin: C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll
FF - plugin: C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2013-11-28 65776]
R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswVmm.sys [2013-11-28 207904]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2013-12-16 55024]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2013-11-28 1034464]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2013-11-28 422216]
R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2013-11-28 78648]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-1-11 50344]
R2 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2010-1-11 155648]
R2 HauppaugeTVServer;HauppaugeTVServer;C:\PROGRA~2\WinTV\TVServer\HAUPPA~1.EXE [2014-1-11 601088]
R2 LMIGuardianSvc;LMIGuardianSvc;C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2013-10-24 376144]
R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files (x86)\LogMeIn\x64\rainfo.sys [2013-4-30 16056]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\Windows\System32\drivers\LMIRfsDriver.sys [2013-11-29 72216]
R2 LVPrcS64;Process Monitor;C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe [2009-10-7 191000]
R2 NitroDriverReadSpool9;NitroPDFDriverCreatorReadSpool9;C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [2013-11-12 230920]
R2 nlsX86cc;Nalpeiron Licensing Service;C:\Windows\SysWOW64\NLSSRV32.EXE [2013-11-12 69640]
R3 aswStm;aswStm;C:\Windows\System32\drivers\aswstm.sys [2014-1-11 79672]
R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;C:\Windows\System32\drivers\e1y60x64.sys [2009-6-10 281088]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;C:\Windows\System32\drivers\HCW85BDA.sys [2014-1-11 1705600]
R3 LVPr2M64;Logitech LVPr2M64 Driver;C:\Windows\System32\drivers\LVPr2M64.sys [2009-10-7 30232]
R3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\System32\drivers\lvrs64.sys [2014-1-12 327704]
R3 LVUVC64;Logitech Webcam 300(UVC);C:\Windows\System32\drivers\lvuvc64.sys [2014-1-12 6379288]
R3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2013-12-12 111616]
S3 lvpopf64;Logitech POP Suppression Filter;C:\Windows\System32\drivers\lvpopf64.sys [2014-1-12 271640]
S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-1 178824]
S3 Revoflt;Revoflt;C:\Windows\System32\drivers\revoflt.sys [2013-12-3 31800]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-11-30 59392]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-11-30 1255736]
.
=============== Created Last 30 ================
.
2014-01-13 07:32:09 75888 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1C20AF9F-F24F-4568-BC01-08EAB6688439}\offreg.dll
2014-01-12 22:42:33 767000 ----a-w- C:\Windows\System32\LVUI64.dll
2014-01-12 22:42:33 6379288 ----a-w- C:\Windows\System32\drivers\lvuvc64.sys
2014-01-12 22:42:33 559640 ----a-w- C:\Windows\System32\LVUIRC64.dll
2014-01-12 22:42:33 539160 ----a-w- C:\Windows\SysWow64\LVUI2RC.dll
2014-01-12 22:42:33 539160 ----a-w- C:\Windows\SysWow64\LVUI2.dll
2014-01-12 22:42:33 416280 ----a-w- C:\Windows\SysWow64\lvcodec2.dll
2014-01-12 22:42:33 398360 ----a-w- C:\Windows\System32\lvcod64.dll
2014-01-12 22:42:21 34068 ----a-w- C:\Windows\System32\Repository.reg
2014-01-12 22:42:21 327704 ----a-w- C:\Windows\System32\drivers\lvrs64.sys
2014-01-12 22:42:21 271640 ----a-w- C:\Windows\System32\drivers\lvpopf64.sys
2014-01-12 22:42:21 266776 ----a-w- C:\Windows\System32\lvco12101110.dll
2014-01-12 22:13:37 -------- d-----w- C:\Windows\pss
2014-01-12 21:52:51 -------- d-----w- C:\Users\Janny\AppData\Roaming\QuickScan
2014-01-12 15:45:00 1431040 ----a-r- C:\Users\Janny\AppData\Roaming\Microsoft\Installer\{0E6ED660-498C-42F7-9EF4-FB0C96DFC01A}\Icon0E6ED660.exe
2014-01-12 15:44:43 -------- d-----w- C:\Users\Janny\AppData\Local\TechSmith
2014-01-12 01:54:22 53248 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\msihook.dll
2014-01-12 01:54:22 126976 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\knlwrap.exe
2014-01-12 01:54:20 77824 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2014-01-12 01:54:20 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2014-01-12 01:54:20 225280 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll
2014-01-12 01:54:20 176128 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2014-01-12 01:14:40 -------- d-----w- C:\Program Files\PlayReady
2014-01-12 00:32:34 -------- d-----w- C:\Users\Janny\AppData\Roaming\Malwarebytes
2014-01-12 00:32:22 -------- d-----w- C:\ProgramData\Malwarebytes
2014-01-12 00:32:21 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
2014-01-12 00:32:21 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-12 00:25:41 -------- d-----w- C:\Windows\System32\Hauppauge
2014-01-12 00:25:23 36921 ------w- C:\Windows\SysWow64\hcwutl32_priv.dll
2014-01-12 00:25:23 303160 ------w- C:\Windows\SysWow64\hcwpnp32_priv.dll
2014-01-12 00:24:16 1081616 ----a-w- C:\Windows\SysWow64\MSComCtl.ocx
2014-01-12 00:24:15 142337 ----a-w- C:\Windows\SysWow64\Wait.exe
2014-01-12 00:24:14 499712 ----a-w- C:\Windows\SysWow64\msvcp71.dll
2014-01-12 00:24:14 -------- d-----w- C:\Program Files (x86)\WinTV
2014-01-12 00:21:54 79672 ----a-w- C:\Windows\System32\drivers\aswstm.sys
2014-01-11 15:05:44 1705600 ----a-w- C:\Windows\System32\drivers\HCW85BDA.sys
2014-01-11 15:05:44 110592 ----a-w- C:\Windows\System32\hcw85prop.ax
2014-01-11 15:05:43 139776 ----a-w- C:\Windows\System32\hcw85enc.ax
2014-01-11 15:05:22 -------- d-----w- C:\ProgramData\Hauppauge
2014-01-11 15:02:25 831554 ----a-w- C:\Windows\SysWow64\hcwtvwnd.dll
2014-01-11 15:02:25 36921 ----a-w- C:\Windows\SysWow64\hcwutl32.dll
2014-01-11 15:02:25 323640 ----a-w- C:\Windows\SysWow64\hcwpnp32.dll
2014-01-11 15:02:25 118840 ----a-w- C:\Windows\SysWow64\hcwi2c32.dll
2014-01-11 15:00:31 99328 ----a-w- C:\Windows\System32\hcwcp.ax
2014-01-11 15:00:31 147456 ----a-w- C:\Windows\System32\hcwecppp.ax
2014-01-11 14:52:43 48648 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2014-01-11 14:52:34 42168 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2014-01-11 14:50:04 736952 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2014-01-11 14:49:44 2876528 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2014-01-11 14:49:33 42168 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2014-01-11 14:49:29 539984 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2014-01-11 00:24:03 -------- d-----w- C:\Program Files (x86)\Belarc
2014-01-10 15:13:02 -------- d-----w- C:\Program Files (x86)\VideoPlayerV3
2014-01-10 08:23:11 10315576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1C20AF9F-F24F-4568-BC01-08EAB6688439}\mpengine.dll
2014-01-08 14:39:49 99840 ----a-w- C:\Windows\System32\drivers\usbccgp.sys
2014-01-08 14:39:49 7808 ----a-w- C:\Windows\System32\drivers\usbd.sys
2014-01-08 14:39:49 52736 ----a-w- C:\Windows\System32\drivers\usbehci.sys
2014-01-08 14:39:49 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys
2014-01-08 14:39:49 325120 ----a-w- C:\Windows\System32\drivers\usbport.sys
2014-01-08 14:39:49 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys
2014-01-08 14:39:49 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys
2014-01-07 15:26:34 -------- d-----w- C:\Users\Janny\AppData\Roaming\Foxit Software
2014-01-06 20:12:35 -------- d-----w- C:\Program Files (x86)\Foxit Software
2014-01-05 14:44:13 -------- d-----w- C:\ProgramData\Microsoft Toolkit
2013-12-30 00:41:05 -------- d-----w- C:\Users\Janny\AppData\Local\Nero
2013-12-30 00:39:15 -------- d-----w- C:\Program Files (x86)\Nero
2013-12-30 00:39:00 -------- d-----w- C:\ProgramData\Nero
2013-12-23 01:05:53 29704 ----a-w- C:\Windows\System32\nitrolocalmon9.dll
2013-12-23 01:05:53 17928 ----a-w- C:\Windows\System32\nitrolocalui9.dll
2013-12-23 01:05:39 -------- d-----w- C:\Program Files\Common Files\Nitro
2013-12-23 01:05:38 -------- d-----w- C:\Program Files (x86)\Nitro
2013-12-23 01:05:38 -------- d-----w- C:\Program Files (x86)\Common Files\Nitro
2013-12-22 14:40:07 -------- d-----w- C:\Users\Janny\AppData\Roaming\Nitro
2013-12-22 14:34:07 -------- d-----w- C:\ProgramData\Nitro
2013-12-22 14:32:42 -------- d-----w- C:\Users\Janny\AppData\Roaming\Downloaded Installations
2013-12-22 14:18:49 -------- d-----r- C:\Users\Janny\Google Drive
2013-12-19 01:06:16 -------- d-----w- C:\Windows\System32\MRT
2013-12-18 23:07:41 -------- d-----w- C:\Users\Janny\AppData\Local\Macromedia
2013-12-17 05:22:56 -------- d-----w- C:\ProgramData\vsosdk
2013-12-16 15:28:41 -------- d-----w- C:\Program Files (x86)\Common Files\Macrovision Shared
2013-12-16 15:28:29 55024 ------w- C:\Windows\System32\drivers\PxHlpa64.sys
2013-12-16 15:26:56 -------- d-----w- C:\Program Files (x86)\Common Files\Sonic Shared
2013-12-16 15:26:55 -------- d-----w- C:\Program Files (x86)\Common Files\PX Storage Engine
2013-12-15 18:38:47 -------- d-----w- C:\Windows\en
2013-12-15 18:37:54 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-12-15 18:34:47 77656 ----a-w- C:\Windows\System32\XAPOFX1_5.dll
2013-12-15 18:34:47 74072 ----a-w- C:\Windows\SysWow64\XAPOFX1_5.dll
2013-12-15 18:34:47 527192 ----a-w- C:\Windows\SysWow64\XAudio2_7.dll
2013-12-15 18:34:47 518488 ----a-w- C:\Windows\System32\XAudio2_7.dll
2013-12-15 18:34:45 2526056 ----a-w- C:\Windows\System32\D3DCompiler_43.dll
2013-12-15 18:34:45 2106216 ----a-w- C:\Windows\SysWow64\D3DCompiler_43.dll
2013-12-15 18:34:44 276832 ----a-w- C:\Windows\System32\d3dx11_43.dll
2013-12-15 18:34:44 248672 ----a-w- C:\Windows\SysWow64\d3dx11_43.dll
2013-12-15 18:33:27 523088 ----a-w- C:\Windows\System32\d3dx10_42.dll
2013-12-15 18:33:27 453456 ----a-w- C:\Windows\SysWow64\d3dx10_42.dll
2013-12-15 18:32:10 4398360 ----a-w- C:\Windows\System32\d3dx9_32.dll
2013-12-15 18:32:10 3426072 ----a-w- C:\Windows\SysWow64\d3dx9_32.dll
2013-12-15 18:29:55 94040 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a3e943ec1cef9c304\DSETUP.dll
2013-12-15 18:29:55 525656 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a3e943ec1cef9c304\DXSETUP.exe
2013-12-15 18:29:55 1691480 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a3e943ec1cef9c304\dsetup32.dll
2013-12-15 18:29:49 89944 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a071272b1cef9c303\DSETUP.dll
2013-12-15 18:29:49 537432 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a071272b1cef9c303\DXSETUP.exe
2013-12-15 18:29:49 1801048 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\a071272b1cef9c303\dsetup32.dll
2013-12-15 18:29:44 89944 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\9ed858be1cef9c302\DSETUP.dll
2013-12-15 18:29:44 537432 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\9ed858be1cef9c302\DXSETUP.exe
2013-12-15 18:29:44 1801048 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\9ed858be1cef9c302\dsetup32.dll
2013-12-15 18:29:32 -------- d-----w- C:\Users\Janny\AppData\Local\Windows Live
2013-12-15 18:29:15 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live
2013-12-15 17:01:28 -------- d-----w- C:\Program Files (x86)\SciLor's grooveshark(tm).com Downloader
2013-12-15 17:01:15 -------- d-----w- C:\Users\Janny\AppData\Local\SwvUpdater
2013-12-14 20:11:15 -------- d-----w- C:\ProgramData\FreeRIP MP3 Converter
2013-12-14 20:11:14 -------- d-----w- C:\Program Files (x86)\FreeRIP
2013-12-14 20:06:39 -------- d-----w- C:\Program Files (x86)\Photodex Presenter
2013-12-14 20:06:30 -------- d-----w- C:\Program Files (x86)\Photodex
2013-12-14 20:06:10 -------- d-----w- C:\Users\Janny\AppData\Roaming\Photodex
2013-12-14 20:06:09 -------- d-----w- C:\ProgramData\Photodex
.
==================== Find3M ====================
.
2014-01-12 00:21:48 78648 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2014-01-12 00:21:48 207904 ----a-w- C:\Windows\System32\drivers\aswVmm.sys
2014-01-12 00:21:48 1034464 ----a-w- C:\Windows\System32\drivers\aswSnx.sys
2014-01-12 00:21:47 43152 ----a-w- C:\Windows\avastSS.scr
2013-12-15 18:24:34 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-15 18:24:34 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-12-13 03:17:53 92488 ----a-w- C:\Windows\System32\LMIinit.dll
2013-12-13 03:17:53 35656 ----a-w- C:\Windows\System32\LMIport.dll
2013-12-13 03:17:53 107368 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll
2013-12-04 08:02:34 878080 ----a-w- C:\Windows\System32\advapi32.dll
2013-12-04 08:01:54 327168 ----a-w- C:\Windows\System32\mswsock.dll
2013-12-04 08:01:54 231424 ----a-w- C:\Windows\SysWow64\mswsock.dll
2013-12-04 08:01:54 1903552 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2013-12-02 08:14:31 1887232 ----a-w- C:\Windows\System32\d3d11.dll
2013-12-02 08:14:31 1505280 ----a-w- C:\Windows\SysWow64\d3d11.dll
2013-12-01 08:28:23 175616 ----a-w- C:\Windows\System32\msclmd.dll
2013-12-01 08:28:23 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2013-11-29 16:58:17 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-11-28 22:33:59 0 ----a-w- C:\Windows\ativpsrm.bin
2013-11-28 21:38:00 99384 ----a-w- C:\Users\Janny\AppData\Roaming\inst.exe
2013-11-28 21:38:00 82816 ----a-w- C:\Windows\System32\drivers\pcouffin.sys
2013-11-28 21:38:00 82816 ----a-w- C:\Users\Janny\AppData\Roaming\pcouffin.sys
2013-11-28 18:35:57 31232 ----a-w- C:\Windows\System32\drivers\tap0901.sys
2013-11-28 17:33:21 92544 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
2013-11-28 17:33:21 65776 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys
2013-11-26 17:25:52 267936 ----a-w- C:\Windows\System32\MpSigStub.exe
2013-11-26 10:19:07 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2013-11-26 10:18:23 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2013-11-26 09:48:07 66048 ----a-w- C:\Windows\System32\iesetup.dll
2013-11-26 09:46:25 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2013-11-26 09:23:02 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-11-26 09:18:39 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2013-11-26 09:18:09 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
2013-11-26 09:16:57 708608 ----a-w- C:\Windows\System32\jscript9diag.dll
2013-11-26 08:35:02 5769216 ----a-w- C:\Windows\System32\jscript9.dll
2013-11-26 08:28:16 553472 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2013-11-26 08:16:12 4243968 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-11-26 08:02:16 1995264 ----a-w- C:\Windows\System32\inetcpl.cpl
2013-11-26 07:32:06 1928192 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2013-11-26 07:07:57 2334208 ----a-w- C:\Windows\System32\wininet.dll
2013-11-26 06:33:33 1820160 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-11-23 18:26:20 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll
2013-11-23 17:47:34 465920 ----a-w- C:\Windows\System32\WMPhoto.dll
2013-11-13 01:09:36 69640 ----a-w- C:\Windows\SysWow64\NLSSRV32.EXE
2013-11-12 02:23:09 2048 ----a-w- C:\Windows\System32\tzres.dll
2013-11-12 02:07:29 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2013-10-30 02:32:01 335360 ----a-w- C:\Windows\System32\msieftp.dll
2013-10-30 02:19:52 301568 ----a-w- C:\Windows\SysWow64\msieftp.dll
2013-10-30 01:24:31 3155968 ----a-w- C:\Windows\System32\win32k.sys
2013-10-24 17:41:00 107368 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll.000.bak
2013-10-19 02:18:57 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2013-10-19 01:36:59 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
.
============= FINISH: 8:48:09.47 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume3
Install Date: 11/28/2013 12:18:42 PM
System Uptime: 1/12/2014 6:08:41 PM (14 hours ago)
.
Motherboard: Dell Inc. | | 0R849J
Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz | CPU 1 | 2668/133mhz
.
==== Disk Partitions =========================
.
B: is FIXED (NTFS) - 2794 GiB total, 1779.183 GiB free.
C: is FIXED (NTFS) - 916 GiB total, 661.562 GiB free.
D: is FIXED (NTFS) - 15 GiB total, 8.356 GiB free.
E: is CDROM ()
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP11: 11/29/2013 12:06:09 AM - Scheduled Checkpoint
RP12: 11/29/2013 11:57:58 AM - Installed Java 7 Update 45
RP13: 11/29/2013 10:16:08 PM - Installed LogMeIn
RP14: 11/30/2013 3:00:13 AM - Windows Update
RP15: 12/1/2013 3:00:12 AM - Windows Update
RP16: 12/2/2013 3:00:15 AM - Windows Update
RP17: 12/3/2013 12:38:03 PM - Revo Uninstaller Pro's restore point - DupDetector 3.201
RP18: 12/3/2013 12:51:52 PM - Revo Uninstaller Pro's restore point - Duplicate Photo Cleaner
RP19: 12/4/2013 3:00:13 AM - Windows Update
RP20: 12/4/2013 11:10:46 AM - Installed Microsoft Office Professional Plus 2013
RP21: 12/4/2013 11:11:25 AM - PROPLUS
RP22: 12/5/2013 3:00:16 AM - Windows Update
RP23: 12/6/2013 3:00:14 AM - Windows Update
RP24: 12/10/2013 9:15:56 AM - Windows Update
RP25: 12/12/2013 3:00:19 AM - Windows Update
RP26: 12/15/2013 3:00:22 AM - Windows Update
RP27: 12/15/2013 1:29:33 PM - Windows Live Essentials
RP28: 12/15/2013 1:30:58 PM - Installed DirectX
RP29: 12/15/2013 1:32:20 PM - Installed DirectX
RP30: 12/15/2013 1:33:35 PM - Installed DirectX
RP31: 12/15/2013 1:36:32 PM - WLSetup
RP32: 12/16/2013 10:24:39 AM - Installed Adobe Photoshop Elements 8.0.
RP33: 12/18/2013 8:05:31 PM - Windows Update
RP34: 12/22/2013 9:33:27 AM - Installed Nitro Pro 9
RP35: 12/22/2013 9:51:33 AM - Revo Uninstaller Pro's restore point - Nitro Pro 9
RP36: 12/22/2013 9:51:57 AM - Removed Nitro Pro 9
RP37: 12/22/2013 8:05:09 PM - Installed Nitro Pro 9
RP38: 12/24/2013 2:08:48 PM - Windows Update
RP39: 12/29/2013 7:38:24 PM - Installed Nero MediaHome 4 Essentials 4.4.9.0
RP40: 12/30/2013 9:01:53 PM - Configured Nero MediaHome 4 Essentials 4.4.9.0
RP41: 12/31/2013 1:35:58 AM - Windows Update
RP42: 12/31/2013 3:00:24 AM - Windows Update
RP43: 1/2/2014 11:45:47 AM - Installed calibre
RP44: 1/3/2014 12:25:32 PM - Windows Update
RP45: 1/6/2014 3:11:28 PM - Installed Foxit PhantomPDF Business
RP46: 1/6/2014 3:11:52 PM - Installed Foxit PhantomPDF Business
RP47: 1/7/2014 11:35:19 AM - Windows Update
RP48: 1/9/2014 3:00:27 AM - Windows Update
RP49: 1/10/2014 7:32:26 PM - Windows Update
RP50: 1/11/2014 10:01:17 AM - Device Driver Package Install: Hauppauge Sound, video and game controllers
RP51: 1/11/2014 7:19:19 PM - avast! antivirus system restore point
RP52: 1/11/2014 7:56:19 PM - Revo Uninstaller Pro's restore point - PlayReady PC Runtime amd64
RP53: 1/11/2014 7:56:54 PM - Removed PlayReady PC Runtime amd64
RP54: 1/11/2014 8:14:22 PM - Windows Update
RP55: 1/12/2014 10:44:08 AM - Installed Snagit 9.1
RP56: 1/12/2014 12:22:26 PM - Restore Operation
RP57: 1/12/2014 3:45:33 PM - avast! antivirus system restore point
RP58: 1/12/2014 4:10:44 PM - Restore Operation
RP59: 1/12/2014 4:28:47 PM - avast! antivirus system restore point
RP60: 1/12/2014 5:41:22 PM - Logitech Webcam Software v12.10.1110
RP61: 1/13/2014 3:00:29 AM - Windows Update
.
==== Installed Programs ======================
.
µTorrent
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Photoshop Elements 8.0
Adobe Reader XI (11.0.05)
Advertising Center
Air Video Server 2.4.6-beta3
Apple Application Support
Apple Mobile Device Support
Apple Software Update
avast! Free Antivirus
Belarc Advisor 8.4
Bigasoft MKV Converter 3.3.14.4128
Bonjour
calibre
Canon iP100 series Printer Driver
Canon MP Navigator EX 2.0
CanoScan LiDE 100 Scanner Driver
CCleaner
ConvertXtoDVD 4.0.9.322
D3DX10
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition
Dell Dock
Foxit PhantomPDF Business
FreeRIP MP3 Converter 4.5
Google Chrome
Google Drive
Google Update Helper
Hauppauge MCE XP/Vista Software Encoder (2.0.27022)
Hauppauge WinTV 7
iTunes
Java 7 Update 45
Java Auto Updater
Logitech Webcam Software
Logitech Webcam Software Driver Package
LogMeIn
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Access MUI (English) 2013
Microsoft Access Setup Metadata MUI (English) 2013
Microsoft Application Error Reporting
Microsoft DCF MUI (English) 2013
Microsoft Excel MUI (English) 2013
Microsoft Groove MUI (English) 2013
Microsoft InfoPath MUI (English) 2013
Microsoft Lync MUI (English) 2013
Microsoft Office 32-bit Components 2013
Microsoft Office OSM MUI (English) 2013
Microsoft Office OSM UX MUI (English) 2013
Microsoft Office Professional Plus 2013
Microsoft Office Proofing (English) 2013
Microsoft Office Proofing Tools 2013 - English
Microsoft Office Proofing Tools 2013 - Español
Microsoft Office Shared 32-bit MUI (English) 2013
Microsoft Office Shared MUI (English) 2013
Microsoft Office Shared Setup Metadata MUI (English) 2013
Microsoft OneNote MUI (English) 2013
Microsoft Outlook MUI (English) 2013
Microsoft PowerPoint MUI (English) 2013
Microsoft Publisher MUI (English) 2013
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Word MUI (English) 2013
Movie Maker
Mozilla Firefox 26.0 (x86 en-US)
Mozilla Maintenance Service
Mozilla Thunderbird 24.2.0 (x86 en-GB)
MSVCRT
MSVCRT110
MSVCRT110_amd64
Nero ControlCenter
Nero Installer
Nero MediaHome 4
Nero MediaHome 4 Essentials
Nero MediaHome 4 Help
Nero Online Upgrade
Nitro Pro 9
Outils de vérification linguistique 2013 de Microsoft Office*- Français
Photo Common
Photo Gallery
Photodex Presenter
PlayReady PC Runtime amd64
PowerISO
Private Internet Access Support Files
ProShow Gold
Revo Uninstaller Pro 2.5.9
SciLor's groovesharkâ„¢.com Downloader 0.4.12
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)
Security Update for Microsoft Excel 2013 (KB2827238) 64-Bit Edition
Security Update for Microsoft Lync 2013 (KB2850057) 64-Bit Edition
Security Update for Microsoft Office 2013 (KB2768005) 64-Bit Edition
Security Update for Microsoft Office 2013 (KB2810009) 64-Bit Edition
Security Update for Microsoft Office 2013 (KB2850064) 64-Bit Edition
Security Update for Microsoft Outlook 2013 (KB2837618) 64-Bit Edition
Skypeâ„¢ 6.11
Snagit 9.1
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition
Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition
Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2826004) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837626) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837637) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837638) 64-Bit Edition
Update for Microsoft Office 2013 (KB2837655) 64-Bit Edition
Update for Microsoft Office 2013 (KB2850066) 64-Bit Edition
Update for Microsoft OneNote 2013 (KB2850063) 64-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2767850) 64-Bit Edition
Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition
Update for Microsoft Publisher 2013 (KB2837635) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2817495) 64-Bit Edition
Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition
Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition
Update for Microsoft Word 2013 (KB2837647) 64-Bit Edition
Update for Microsoft Word 2013 (KB2850060) 64-Bit Edition
VisiPics V1.31
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
WinRAR archiver
.
==== Event Viewer Messages From Past Week ========
.
1/12/2014 12:34:44 PM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
1/11/2014 10:27:37 AM, Error: Service Control Manager [7023] - The Server service terminated with the following error: The data is invalid.
1/11/2014 10:27:36 AM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: A system shutdown is in progress.
1/11/2014 10:27:35 AM, Error: Service Control Manager [7023] - The Windows Update service terminated with the following error: %%-2147467243
1/10/2014 7:32:49 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
.
==== End Of File ===========================

 

RogueKiller V8.8.0 _x64_ [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Janny [Admin rights]
Mode : Remove -- Date : 01/14/2014 09:08:13
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 4 ¤¤¤
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤
-> D:\windows\system32\config\SYSTEM | DRVINFO [Drv - D:] | SYSTEMINFO [Sys - x:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> D:\windows\system32\config\SOFTWARE | DRVINFO [Drv - D:] | SYSTEMINFO [Sys - x:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> D:\windows\system32\config\SECURITY | DRVINFO [Drv - D:] | SYSTEMINFO [Sys - x:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> D:\windows\system32\config\SAM | DRVINFO [Drv - D:] | SYSTEMINFO [Sys - x:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> D:\windows\system32\config\DEFAULT | DRVINFO [Drv - D:] | SYSTEMINFO [Sys - x:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]
-> D:\Users\Default\NTUSER.DAT | DRVINFO [Drv - D:] | SYSTEMINFO [Sys - x:] [Sys32 - FOUND] | USERINFO [Startup - NOT_FOUND]

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) SAMSUNG HD103UJ ATA Device +++++
--- User ---
[MBR] 2631b9dca6ae6db305b408756ac20c84
[BSP] c3ba5f37cd917729e9bf6d6558ea4f68 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 70 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 145408 | Size: 15360 Mo
2 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 31602688 | Size: 938437 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_D_01142014_090813.txt >>
RKreport[0]_S_01142014_090351.txt;RKreport[0]_S_01142014_090801.txt

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org

Database version: v2014.01.14.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Janny :: JANNY-DESKTOP [administrator]

1/14/2014 9:11:53 AM
mbar-log-2014-01-14 (09-11-53).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 285574
Time elapsed: 12 minute(s), 50 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1008

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: B:\ DRIVE_FIXED, C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.660000 GHz
Memory total: 6433202176, free: 3695136768

Downloaded database version: v2014.01.14.03
Downloaded database version: v2013.12.18.01
=======================================
------------ Kernel report ------------
01/14/2014 09:11:49
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\PxHlpa64.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\System32\Drivers\aswVmm.sys
\SystemRoot\System32\Drivers\aswRvrt.sys
\SystemRoot\system32\drivers\cdrom.sys
\??\C:\Windows\system32\drivers\aswSnx.sys
\??\C:\Windows\system32\drivers\aswSP.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\drivers\afd.sys
\??\C:\Windows\system32\drivers\aswRdr2.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\System32\Drivers\SCDEmu.SYS
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\drivers\atikmdag.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\e1y60x64.sys
\SystemRoot\system32\DRIVERS\usbuhci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\drivers\1394ohci.sys
\SystemRoot\system32\drivers\HCW85BDA.sys
\SystemRoot\system32\drivers\BdaSup.SYS
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\lmimirr.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\tap0901.sys
\SystemRoot\System32\Drivers\pcouffin.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\drivers\mouclass.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\drivers\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\HdAudio.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_atapi.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\system32\DRIVERS\usbscan.sys
\SystemRoot\system32\DRIVERS\lvuvc64.sys
\SystemRoot\system32\drivers\usbaudio.sys
\SystemRoot\system32\DRIVERS\lvrs64.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\drivers\luafv.sys
\??\C:\Windows\system32\drivers\aswMonFlt.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys
\??\C:\Windows\system32\drivers\LMIRfsDriver.sys
\SystemRoot\system32\drivers\MSPQM.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\??\C:\Windows\system32\drivers\aswStm.sys
\SystemRoot\system32\DRIVERS\LVPr2M64.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\system32\drivers\MSPCLOCK.sys
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\system32\DRIVERS\wdcsam64.sys
\SystemRoot\system32\drivers\WudfPf.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\oleaut32.dll
\Windows\System32\normaliz.dll
\Windows\System32\comdlg32.dll
\Windows\System32\shell32.dll
\Windows\System32\shlwapi.dll
\Windows\System32\imm32.dll
\Windows\System32\difxapi.dll
\Windows\System32\advapi32.dll
\Windows\System32\wininet.dll
\Windows\System32\iertutil.dll
\Windows\System32\usp10.dll
\Windows\System32\user32.dll
\Windows\System32\ole32.dll
\Windows\System32\clbcatq.dll
\Windows\System32\setupapi.dll
\Windows\System32\msctf.dll
\Windows\System32\lpk.dll
\Windows\System32\imagehlp.dll
\Windows\System32\psapi.dll
\Windows\System32\rpcrt4.dll
\Windows\System32\sechost.dll
\Windows\System32\gdi32.dll
\Windows\System32\Wldap32.dll
\Windows\System32\kernel32.dll
\Windows\System32\urlmon.dll
\Windows\System32\msvcrt.dll
\Windows\System32\nsi.dll
\Windows\System32\ws2_32.dll
\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
\Windows\System32\wintrust.dll
\Windows\System32\devobj.dll
\Windows\System32\cfgmgr32.dll
\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
\Windows\System32\KernelBase.dll
\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
\Windows\System32\comctl32.dll
\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
\Windows\System32\crypt32.dll
\Windows\System32\msasn1.dll
\Windows\SysWOW64\normaliz.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk1\DR2
Upper Device Object: 0xfffffa8005d591d0
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\0000008d\
Lower Device Object: 0xfffffa800857c1e0
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8006542790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xfffffa80062f7680
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8006542790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80065422c0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8006542790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80062fb520, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xfffffa80062f7680, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: B0000000

Partition information:

Partition 0 type is Other (0xde)
Partition is NOT ACTIVE.
Partition starts at LBA: 63 Numsec = 144522

Partition 1 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 145408 Numsec = 31457280

Partition 2 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 31602688 Numsec = 1921918976
Partition is not bootable

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 1000204886016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-1953505168-1953525168)...
Done!
Physical Sector Size: 4096
Drive: 1, DevicePointer: 0xfffffa8005d591d0, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8005513230, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8005d591d0, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa800857c1e0, DeviceName: \Device\0000008d\, DriverName: \Driver\USBSTOR\
------------ End ----------
Alternate DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
This drive is a GPT Drive.
MBR Signature: 55AA
Disk Signature: 246C6

GPT Protective MBR Partition information:

Partition 0 type is EFI-GPT (0xee)
Partition is NOT ACTIVE.
Partition starts at LBA: 1 Numsec = 4294967295

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

GPT Partition information:

GPT Header Signature 4546492050415254
GPT Header Revision 65536 Size 92 CRC 3762983172
GPT Header CurrentLba = 1 BackupLba 732558335
GPT Header FirstUsableLba 6 LastUsableLba 732558330
GPT Header Guid 69581b67-7250-4b98-b6d6-97c431572ba7
GPT Header Contains 128 partition entries starting at LBA 2
GPT Header Partition entry size = 128

Backup GPT header Signature 4546492050415254
Backup GPT header Revision 65536 Size 92 CRC 3762983172
Backup GPT header CurrentLba = 732558335 BackupLba 1
Backup GPT header FirstUsableLba 6 LastUsableLba 732558330
Backup GPT header Guid 69581b67-7250-4b98-b6d6-97c431572ba7
Backup GPT header Contains 128 partition entries starting at LBA 732558331
Backup GPT header Partition entry size = 128

Partition 0 Type e3c9e316-b5c-4db8-817d-f92df0215ae
Partition ID 7d1d2a7e-ce30-4d60-b748-8c3c6a114478
FirstLBA 6 Last LBA 32773
Attributes 0
Partition Name Microsoft reserved partition

Partition 1 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Partition ID 8f58e784-dc39-40a7-917c-26b175cee1f
FirstLBA 33024 Last LBA 732558079
Attributes 0
Partition Name Basic data partition

Disk Size: 3000558944256 bytes
Sector size: 4096 bytes

Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\Bootstrap_0_2_31602688_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_1_i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_1_r.mbam...
Removal finished

 

ComboFix 14-01-14.02 - Janny 01/14/2014 21:21:25.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6135.3506 [GMT -5:00]
Running from: c:\users\Janny\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
ADS - Windows: deleted 192 bytes in 1 streams.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Janny\AppData\Roaming\inst.exe
c:\users\Janny\AppData\Roaming\vso_ts_preview.xml
.
.
((((((((((((((((((((((((( Files Created from 2013-12-15 to 2014-01-15 )))))))))))))))))))))))))))))))
.
.
2014-01-15 02:31 . 2014-01-15 02:31 -------- d-----w- c:\users\LogMeInRemoteUser\AppData\Local\temp
2014-01-15 02:31 . 2014-01-15 02:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-01-14 14:11 . 2014-01-14 14:25 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-01-14 14:11 . 2014-01-14 14:11 117464 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-01-14 14:09 . 2014-01-14 14:09 89304 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-01-14 14:01 . 2014-01-14 14:06 155584 ----a-w- c:\windows\system32\drivers\ataport.sys.bak
2014-01-14 12:46 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{61E789C4-6F56-4450-9154-5C0462636A12}\mpengine.dll
2014-01-14 08:00 . 2014-01-14 08:00 -------- d-----w- c:\program files (x86)\Microsoft CAPICOM 2.1.0.2
2014-01-13 18:29 . 2014-01-13 18:29 573776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2014-01-12 22:43 . 2014-01-12 22:43 -------- d-----w- c:\users\Janny\AppData\Roaming\Leadertech
2014-01-12 22:42 . 2009-10-07 08:49 6379288 ----a-w- c:\windows\system32\drivers\lvuvc64.sys
2014-01-12 22:42 . 2009-10-07 08:48 539160 ----a-w- c:\windows\SysWow64\LVUI2RC.dll
2014-01-12 22:42 . 2009-10-07 08:48 559640 ----a-w- c:\windows\system32\LVUIRC64.dll
2014-01-12 22:42 . 2009-10-07 08:48 539160 ----a-w- c:\windows\SysWow64\LVUI2.dll
2014-01-12 22:42 . 2009-10-07 08:48 767000 ----a-w- c:\windows\system32\LVUI64.dll
2014-01-12 22:42 . 2009-10-07 08:43 416280 ----a-w- c:\windows\SysWow64\lvcodec2.dll
2014-01-12 22:42 . 2009-10-07 08:43 398360 ----a-w- c:\windows\system32\lvcod64.dll
2014-01-12 22:42 . 2009-10-07 08:47 327704 ----a-w- c:\windows\system32\drivers\lvrs64.sys
2014-01-12 22:42 . 2009-10-07 08:45 271640 ----a-w- c:\windows\system32\drivers\lvpopf64.sys
2014-01-12 22:42 . 2009-10-07 08:43 266776 ----a-w- c:\windows\system32\lvco12101110.dll
2014-01-12 22:42 . 2009-10-07 08:24 34068 ----a-w- c:\windows\system32\Repository.reg
2014-01-12 22:40 . 2014-01-12 22:40 -------- d-----w- c:\programdata\LogiShrd
2014-01-12 22:40 . 2014-01-12 22:40 -------- d-----w- c:\program files\Logitech
2014-01-12 21:52 . 2014-01-12 21:52 -------- d-----w- c:\users\Janny\AppData\Roaming\QuickScan
2014-01-12 15:45 . 2014-01-12 15:45 1431040 ----a-r- c:\users\Janny\AppData\Roaming\Microsoft\Installer\{0E6ED660-498C-42F7-9EF4-FB0C96DFC01A}\Icon0E6ED660.exe
2014-01-12 15:44 . 2014-01-12 15:44 -------- d-----w- c:\programdata\TechSmith
2014-01-12 15:44 . 2014-01-13 00:23 -------- d-----w- c:\users\Janny\AppData\Local\TechSmith
2014-01-12 15:44 . 2014-01-13 00:22 -------- d-----w- c:\program files (x86)\TechSmith
2014-01-12 01:54 . 2014-01-13 00:24 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2014-01-12 01:14 . 2014-01-13 00:24 -------- d-----w- c:\program files\PlayReady
2014-01-12 00:32 . 2014-01-13 00:23 -------- d-----w- c:\users\Janny\AppData\Roaming\Malwarebytes
2014-01-12 00:32 . 2014-01-13 00:22 -------- d-----w- c:\programdata\Malwarebytes
2014-01-12 00:32 . 2014-01-13 00:24 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-01-12 00:32 . 2013-04-04 19:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-01-12 00:25 . 2014-01-13 00:24 -------- d-----w- c:\windows\system32\Hauppauge
2014-01-12 00:25 . 2009-01-16 22:21 303160 ------w- c:\windows\SysWow64\hcwpnp32_priv.dll
2014-01-12 00:25 . 2006-10-10 22:47 36921 ------w- c:\windows\SysWow64\hcwutl32_priv.dll
2014-01-12 00:24 . 2004-03-09 04:00 1081616 ----a-w- c:\windows\SysWow64\MSComCtl.ocx
2014-01-12 00:24 . 2009-01-28 15:52 142337 ----a-w- c:\windows\SysWow64\Wait.exe
2014-01-12 00:24 . 2014-01-12 22:09 -------- d-----w- c:\program files (x86)\WinTV
2014-01-12 00:24 . 2008-06-30 14:02 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll
2014-01-12 00:24 . 2014-01-13 00:24 -------- d-----w- c:\program files (x86)\InstallShield Installation Information
2014-01-12 00:21 . 2014-01-12 00:22 79672 ----a-w- c:\windows\system32\drivers\aswstm.sys
2014-01-11 15:05 . 2009-09-11 22:19 1705600 ----a-w- c:\windows\system32\drivers\HCW85BDA.sys
2014-01-11 15:05 . 2009-09-11 22:18 110592 ----a-w- c:\windows\system32\hcw85prop.ax
2014-01-11 15:05 . 2009-09-11 22:18 139776 ----a-w- c:\windows\system32\hcw85enc.ax
2014-01-11 15:05 . 2014-01-11 15:05 -------- d-----w- c:\programdata\Hauppauge
2014-01-11 15:02 . 2013-04-17 20:05 323640 ----a-w- c:\windows\SysWow64\hcwpnp32.dll
2014-01-11 15:02 . 2012-05-18 22:03 118840 ----a-w- c:\windows\SysWow64\hcwi2c32.dll
2014-01-11 15:02 . 2009-02-17 03:09 831554 ----a-w- c:\windows\SysWow64\hcwtvwnd.dll
2014-01-11 15:02 . 2006-10-10 21:47 36921 ----a-w- c:\windows\SysWow64\hcwutl32.dll
2014-01-11 15:00 . 2006-09-08 16:37 147456 ----a-w- c:\windows\system32\hcwecppp.ax
2014-01-11 15:00 . 2006-09-08 16:36 99328 ----a-w- c:\windows\system32\hcwcp.ax
2014-01-11 15:00 . 2014-01-12 22:09 -------- d-----w- c:\users\Public\WinTV
2014-01-11 14:52 . 2014-01-11 14:52 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2014-01-11 14:52 . 2014-01-11 14:52 42168 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2014-01-11 14:50 . 2014-01-11 14:50 736952 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2014-01-11 14:49 . 2014-01-11 14:49 2876528 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2014-01-11 14:49 . 2014-01-11 14:49 42168 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2014-01-11 14:49 . 2014-01-11 14:49 539984 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2014-01-11 00:24 . 2014-01-13 00:21 -------- d-----w- c:\program files (x86)\Belarc
2014-01-10 15:13 . 2014-01-12 23:05 -------- d-----w- c:\program files (x86)\VideoPlayerV3
2014-01-08 14:39 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-08 14:39 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-08 14:39 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-08 14:39 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-08 14:39 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-08 14:39 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-08 14:39 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-07 15:26 . 2014-01-07 15:26 -------- d-----w- c:\users\Janny\AppData\Roaming\Foxit Software
2014-01-06 20:12 . 2014-01-06 20:12 -------- d-----w- c:\program files (x86)\Foxit Software
2014-01-05 14:44 . 2014-01-05 14:44 -------- d-----w- c:\programdata\Microsoft Toolkit
2014-01-02 18:48 . 2014-01-02 18:48 -------- d-----w- c:\users\Public\Kailyn Scans
2013-12-30 00:41 . 2013-12-30 00:41 -------- d-----w- c:\users\Janny\AppData\Roaming\Nero
2013-12-30 00:41 . 2014-01-13 00:24 -------- d-----w- c:\users\Janny\AppData\Local\Nero
2013-12-30 00:41 . 2014-01-12 21:27 -------- d-----w- c:\users\NeroMediaHomeUser.4
2013-12-30 00:39 . 2013-12-30 00:40 -------- d-----w- c:\program files (x86)\Nero
2013-12-30 00:39 . 2013-12-30 00:41 -------- d-----w- c:\programdata\Nero
2013-12-30 00:38 . 2013-12-30 00:40 -------- d-----w- c:\program files (x86)\Common Files\Nero
2013-12-23 01:05 . 2013-11-13 01:08 29704 ----a-w- c:\windows\system32\nitrolocalmon9.dll
2013-12-23 01:05 . 2013-11-13 01:08 17928 ----a-w- c:\windows\system32\nitrolocalui9.dll
2013-12-23 01:05 . 2013-12-23 01:05 -------- d-----w- c:\program files\Common Files\Nitro
2013-12-23 01:05 . 2013-12-23 01:05 -------- d-----w- c:\program files (x86)\Nitro
2013-12-23 01:05 . 2013-12-23 01:05 -------- d-----w- c:\program files (x86)\Common Files\Nitro
2013-12-22 14:40 . 2013-12-22 14:46 -------- d-----w- c:\users\Janny\AppData\Roaming\Nitro
2013-12-22 14:36 . 2014-01-13 00:24 -------- d-----w- c:\program files\WinRAR
2013-12-22 14:34 . 2013-12-22 14:34 -------- d-----w- c:\programdata\Nitro
2013-12-22 14:32 . 2013-12-23 01:04 -------- d-----w- c:\users\Janny\AppData\Roaming\Downloaded Installations
2013-12-22 14:18 . 2014-01-13 00:24 -------- d-----r- c:\users\Janny\Google Drive
2013-12-19 01:06 . 2013-12-19 01:07 -------- d-----w- c:\windows\system32\MRT
2013-12-18 23:07 . 2013-12-18 23:07 -------- d-----w- c:\users\Janny\AppData\Local\Macromedia
2013-12-17 05:22 . 2013-12-17 05:22 -------- d-----w- c:\programdata\vsosdk
2013-12-16 15:30 . 2013-12-16 15:32 -------- d-----w- c:\programdata\FLEXnet
2013-12-16 15:28 . 2013-12-16 15:28 -------- d-----w- c:\program files (x86)\Common Files\Macrovision Shared
2013-12-16 15:28 . 2008-06-16 08:00 55024 ------w- c:\windows\system32\drivers\PxHlpa64.sys
2013-12-16 15:26 . 2013-12-16 15:26 -------- d-----w- c:\program files (x86)\Common Files\Sonic Shared
2013-12-16 15:26 . 2013-12-16 15:26 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-12 00:21 . 2013-11-28 17:33 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-01-12 00:21 . 2013-11-28 17:33 1034464 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-01-12 00:21 . 2013-11-28 17:33 422216 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-01-12 00:21 . 2013-11-28 17:33 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-01-12 00:21 . 2013-11-28 17:33 334136 ----a-w- c:\windows\system32\aswBoot.exe
2014-01-12 00:21 . 2013-11-28 17:33 43152 ----a-w- c:\windows\avastSS.scr
2013-12-15 18:36 . 2012-07-17 19:37 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-12-15 18:24 . 2013-12-08 19:30 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-15 18:24 . 2013-12-08 19:30 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-13 03:17 . 2013-11-30 03:17 35656 ----a-w- c:\windows\system32\LMIport.dll
2013-12-13 03:17 . 2013-11-30 03:17 107368 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2013-12-13 03:17 . 2013-11-30 03:17 92488 ----a-w- c:\windows\system32\LMIinit.dll
2013-12-04 08:03 . 2013-12-04 08:03 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 08:03 . 2013-12-04 08:03 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-04 08:03 . 2013-12-04 08:03 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-12-04 08:03 . 2013-12-04 08:03 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-12-04 08:03 . 2013-12-04 08:03 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-12-04 08:03 . 2013-12-04 08:03 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 08:03 . 2013-12-04 08:03 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-12-04 08:03 . 2013-12-04 08:03 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-12-04 08:03 . 2013-12-04 08:03 81408 ----a-w- c:\windows\system32\icardie.dll
2013-12-04 08:03 . 2013-12-04 08:03 774144 ----a-w- c:\windows\system32\jscript.dll
2013-12-04 08:03 . 2013-12-04 08:03 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-12-04 08:03 . 2013-12-04 08:03 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-04 08:03 . 2013-12-04 08:03 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-04 08:03 . 2013-12-04 08:03 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-12-04 08:03 . 2013-12-04 08:03 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-12-04 08:03 . 2013-12-04 08:03 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-12-04 08:03 . 2013-12-04 08:03 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-12-04 08:03 . 2013-12-04 08:03 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-12-04 08:03 . 2013-12-04 08:03 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-12-04 08:03 . 2013-12-04 08:03 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-12-04 08:03 . 2013-12-04 08:03 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-12-04 08:03 . 2013-12-04 08:03 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-12-04 08:03 . 2013-12-04 08:03 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-12-04 08:03 . 2013-12-04 08:03 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-12-04 08:03 . 2013-12-04 08:03 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-12-04 08:03 . 2013-12-04 08:03 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-12-04 08:03 . 2013-12-04 08:03 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-12-04 08:03 . 2013-12-04 08:03 413696 ----a-w- c:\windows\system32\html.iec
2013-12-04 08:03 . 2013-12-04 08:03 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 08:03 . 2013-12-04 08:03 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-12-04 08:03 . 2013-12-04 08:03 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-04 08:03 . 2013-12-04 08:03 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-12-04 08:03 . 2013-12-04 08:03 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-12-04 08:03 . 2013-12-04 08:03 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-12-04 08:03 . 2013-12-04 08:03 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-12-04 08:03 . 2013-12-04 08:03 247808 ----a-w- c:\windows\system32\msls31.dll
2013-12-04 08:03 . 2013-12-04 08:03 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-12-04 08:03 . 2013-12-04 08:03 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-12-04 08:03 . 2013-12-04 08:03 235520 ----a-w- c:\windows\system32\url.dll
2013-12-04 08:03 . 2013-12-04 08:03 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-12-04 08:03 . 2013-12-04 08:03 195584 ----a-w- c:\windows\system32\msrating.dll
2013-12-04 08:03 . 2013-12-04 08:03 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-12-04 08:03 . 2013-12-04 08:03 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-12-04 08:03 . 2013-12-04 08:03 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-12-04 08:03 . 2013-12-04 08:03 147968 ----a-w- c:\windows\system32\occache.dll
2013-12-04 08:03 . 2013-12-04 08:03 143872 ----a-w- c:\windows\system32\wextract.exe
2013-12-04 08:03 . 2013-12-04 08:03 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-12-04 08:03 . 2013-12-04 08:03 13824 ----a-w- c:\windows\system32\mshta.exe
2013-12-04 08:03 . 2013-12-04 08:03 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-12-04 08:03 . 2013-12-04 08:03 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-12-04 08:03 . 2013-12-04 08:03 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-12-04 08:03 . 2013-12-04 08:03 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-12-04 08:03 . 2013-12-04 08:03 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-12-04 08:03 . 2013-12-04 08:03 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-12-04 08:03 . 2013-12-04 08:03 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-12-04 08:03 . 2013-12-04 08:03 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-12-04 08:03 . 2013-12-04 08:03 101376 ----a-w- c:\windows\system32\inseng.dll
2013-12-04 08:03 . 2013-12-04 08:03 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-12-04 08:03 . 2013-12-04 08:03 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-12-04 08:02 . 2013-12-04 08:02 878080 ----a-w- c:\windows\system32\advapi32.dll
2013-12-04 08:02 . 2013-12-04 08:02 859648 ----a-w- c:\windows\system32\tdh.dll
2013-12-04 08:02 . 2013-12-04 08:02 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-12-04 08:02 . 2013-12-04 08:02 640512 ----a-w- c:\windows\SysWow64\advapi32.dll
2013-12-04 08:02 . 2013-12-04 08:02 619520 ----a-w- c:\windows\SysWow64\tdh.dll
2013-12-04 08:02 . 2013-12-04 08:02 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-12-04 08:02 . 2013-12-04 08:02 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-12-04 08:02 . 2013-12-04 08:02 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-12-04 08:02 . 2013-12-04 08:02 3969472 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-12-04 08:02 . 2013-12-04 08:02 3914176 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-12-04 08:02 . 2013-12-04 08:02 362496 ----a-w- c:\windows\system32\wow64win.dll
2013-12-04 08:02 . 2013-12-04 08:02 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-12-04 08:02 . 2013-12-04 08:02 243712 ----a-w- c:\windows\system32\wow64.dll
2013-12-04 08:02 . 2013-12-04 08:02 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-12-04 08:02 . 2013-12-04 08:02 1732032 ----a-w- c:\windows\system32\ntdll.dll
2013-12-04 08:02 . 2013-12-04 08:02 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2013-12-04 08:02 . 2013-12-04 08:02 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-12-04 08:02 . 2013-12-04 08:02 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2013-12-04 08:02 . 2013-12-04 08:02 1292192 ----a-w- c:\windows\SysWow64\ntdll.dll
2013-12-04 08:01 . 2013-12-04 08:01 327168 ----a-w- c:\windows\system32\mswsock.dll
2013-12-04 08:01 . 2013-12-04 08:01 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
2013-12-04 08:01 . 2013-12-04 08:01 1903552 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-12-02 08:15 . 2013-12-02 08:15 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-02 08:15 . 2013-12-02 08:15 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-12-02 08:15 . 2013-12-02 08:15 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-12-02 08:15 . 2013-12-02 08:15 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-12-02 08:15 . 2013-12-02 08:15 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-12-02 08:15 . 2013-12-02 08:15 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-12-02 08:15 . 2013-12-02 08:15 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@= "{8BA85C75-763B-4103-94EB-9470F12FE0F7} "
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-11-02 17:35 1727176 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@= "{CD55129A-B1A1-438E-A425-CEBC7DC684EE} "
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-11-02 17:35 1727176 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@= "{E768CD3B-BDDC-436D-9C13-E1B39CA257B1} "
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-11-02 17:35 1727176 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AirVideoServer "= "c:\program files (x86)\AirVideoServer\AirVideoServer.exe" [2012-07-19 4935112]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe "= "c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-12 3764024]
"LogitechQuickCamRibbon "= "c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
.
c:\users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2010-10-12 1324384]
Logitech . Product Registration.lnk - c:\program files\Logitech\Logitech WebCam Software\eReg.exe /remind /language=ENU /_WFM= "." [2009-10-14 517384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin "= 5 (0x5)
"ConsentPromptBehaviorUser "= 3 (0x3)
"EnableUIADesktopToggle "= 0 (0x0)
"PromptOnSecureDesktop "= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 lvpopf64;Logitech POP Suppression Filter;c:\windows\system32\DRIVERS\lvpopf64.sys;c:\windows\SYSNATIVE\DRIVERS\lvpopf64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe;c:\program files\Dell\DellDock\DockLogin.exe [x]
S2 HauppaugeTVServer;HauppaugeTVServer;c:\progra~2\WinTV\TVServer\HAUPPA~1.EXE;c:\progra~2\WinTV\TVServer\HAUPPA~1.EXE [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [x]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [x]
S2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [x]
S2 NitroDriverReadSpool9;NitroPDFDriverCreatorReadSpool9;c:\program files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe;c:\program files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [x]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\NLSSRV32.EXE;c:\windows\SysWOW64\NLSSRV32.EXE [x]
S3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y60x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1y60x64.sys [x]
S3 HCW85BDA;Hauppauge WinTV 885 Video Capture;c:\windows\system32\drivers\HCW85BDA.sys;c:\windows\SYSNATIVE\drivers\HCW85BDA.sys [x]
S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech Webcam 300(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-06 03:46 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-01-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-28 17:25]
.
2014-01-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-28 17:25]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@= "{472083B0-C522-11CF-8763-00608CC02F24} "
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-01-12 00:21 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 20:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 20:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 20:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 20:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 20:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogMeIn GUI "= "c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe" [2013-04-30 57928]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000
TCP: DhcpNameServer = 24.226.1.93 24.226.10.193 24.226.10.194
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\Janny\AppData\Roaming\Mozilla\Firefox\Profiles\39gnb7o6.default\
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled "=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= "c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled "=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= "Shockwave Flash Object "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx "
"ThreadingModel "= "Apartment "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@= "0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@= "ShockwaveFlash.ShockwaveFlash.11 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@= "{D27CDB6B-AE6D-11cf-96B8-444553540000} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@= "1.0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= "ShockwaveFlash.ShockwaveFlash "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= "Macromedia Flash Factory Object "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx "
"ThreadingModel "= "Apartment "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@= "FlashFactory.FlashFactory.1 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@= "{D27CDB6B-AE6D-11cf-96B8-444553540000} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@= "1.0 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= "FlashFactory.FlashFactory "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-01-14 21:44:16
ComboFix-quarantined-files.txt 2014-01-15 02:44
.
Pre-Run: 697,926,426,624 bytes free
Post-Run: 697,520,984,064 bytes free
.
- - End Of File - - FD4B57BF8A1D29D4B44AF52D588C8477
A36C5E4F47E84449FF07ED3517B43A31

 

# AdwCleaner v3.017 - Report created 15/01/2014 at 10:21:19
# Updated 12/01/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Janny - JANNY-DESKTOP
# Running from : C:\Users\Janny\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\FreeRIP
Folder Deleted : C:\Users\Janny\AppData\Local\PackageAware
Folder Deleted : C:\Users\Janny\AppData\Local\SwvUpdater

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{501451DE-5808-4599-B544-8BD0915B6B24}_is1

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (en-US)

[ File : C:\Users\Janny\AppData\Roaming\Mozilla\Firefox\Profiles\39gnb7o6.default\prefs.js ]


-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1420 octets] - [15/01/2014 10:19:26]
AdwCleaner[R1].txt - [1480 octets] - [15/01/2014 10:20:22]
AdwCleaner[S0].txt - [1417 octets] - [15/01/2014 10:21:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1477 octets] ##########

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by Janny on Wed 01/15/2014 at 10:28:21.64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\bigfishcache "



~~~ FireFox

Successfully deleted: [File] C:\user.js



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 01/15/2014 at 10:34:53.03
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

OTL logfile created on: 1/15/2014 10:38:31 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Janny\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.99 Gb Total Physical Memory | 4.38 Gb Available Physical Memory | 73.12% Memory free
11.98 Gb Paging File | 10.19 Gb Available in Paging File | 85.02% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 916.44 Gb Total Space | 644.89 Gb Free Space | 70.37% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 8.36 Gb Free Space | 55.71% Space Free | Partition Type: NTFS

Computer Name: JANNY-DESKTOP | User Name: Janny | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/01/15 10:37:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Janny\Desktop\OTL.exe
PRC - [2014/01/11 19:21:44 | 003,764,024 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014/01/11 19:21:44 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/12/14 15:06:32 | 000,186,760 | ---- | M] () -- C:\Program Files (x86)\Photodex\ProShow Gold\scsiaccess.exe
PRC - [2013/11/12 20:09:36 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\NLSSRV32.EXE
PRC - [2013/09/05 09:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/07/19 18:25:28 | 004,935,112 | ---- | M] () -- C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe
PRC - [2010/10/26 16:52:28 | 000,517,416 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe
PRC - [2010/01/11 13:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2009/12/18 04:29:36 | 000,306,688 | ---- | M] (Hauppauge Computer Works) -- C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe
PRC - [2009/12/17 05:00:08 | 000,601,088 | ---- | M] (Hauppauge Computer Works) -- C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe
PRC - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
PRC - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe
PRC - [2009/09/06 06:06:20 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2013/11/28 12:33:18 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2012/07/19 18:25:28 | 004,935,112 | ---- | M] () -- C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe
MOD - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
MOD - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe


========== Services (SafeList) ==========

SRV:64bit: - [2014/01/11 19:21:44 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013/11/26 04:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013/11/12 20:09:28 | 000,230,920 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe -- (NitroDriverReadSpool9)
SRV:64bit: - [2013/05/27 00:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010/01/11 13:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV:64bit: - [2009/10/07 01:47:10 | 000,191,000 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64)
SRV - [2013/12/16 10:28:41 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2013/12/14 15:06:32 | 000,186,760 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Photodex\ProShow Gold\scsiaccess.exe -- (ScsiAccess)
SRV - [2013/12/12 22:17:56 | 000,226,640 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2013/12/12 22:17:52 | 000,376,144 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013/12/05 14:36:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/11/12 20:09:36 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2013/10/23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/09/05 09:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/30 10:57:00 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2010/10/26 16:52:28 | 000,517,416 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe -- (NeroMediaHomeService.4)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/17 05:00:08 | 000,601,088 | ---- | M] (Hauppauge Computer Works) [Auto | Running] -- C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe -- (HauppaugeTVServer)
SRV - [2009/09/06 06:06:20 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor8.0)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/01/11 19:22:18 | 000,079,672 | ---- | M] (AVAST Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
DRV:64bit: - [2014/01/11 19:21:48 | 001,034,464 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2014/01/11 19:21:48 | 000,422,216 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2014/01/11 19:21:48 | 000,207,904 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2014/01/11 19:21:48 | 000,078,648 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013/12/12 22:17:53 | 000,107,368 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2013/11/28 16:38:00 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2013/11/28 13:35:57 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:64bit: - [2013/11/28 12:33:21 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013/11/28 12:33:21 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013/04/30 10:57:00 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2013/04/30 10:56:42 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/08/19 04:27:30 | 004,869,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:64bit: - [2011/08/19 04:27:30 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2009/12/30 11:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2009/10/07 03:45:37 | 000,271,640 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvpopf64.sys -- (lvpopf64)
DRV:64bit: - [2009/10/07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2Mon)
DRV:64bit: - [2009/10/07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
DRV:64bit: - [2009/09/11 17:19:08 | 001,705,600 | ---- | M] (Hauppauge Computer Works) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HCW85BDA.sys -- (HCW85BDA)
DRV:64bit: - [2009/07/26 21:54:30 | 000,090,544 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 16:59:33 | 005,020,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/06/10 15:35:02 | 000,281,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1y60x64.sys -- (e1yexpress)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008/06/16 03:00:00 | 000,055,024 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV - [2013/04/30 10:57:00 | 000,016,056 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 04 E9 60 35 42 EE CE 01 [binary data]
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-531570899-4083146332-835557271-1005\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF)
FF - HKLM\Software\MozillaPlugins\@photodex.com/PhotodexPresenter: C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll ( )
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/01/12 16:31:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta998.net: C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/12/05 03:17:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

[2013/11/28 12:44:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Janny\AppData\Roaming\Mozilla\Extensions
[2013/12/18 17:57:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/12/18 17:57:38 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\PROGRAM FILES (X86)\VIDEOPLAYERV3\VIDEOPLAYERV3BETA998\FF
[2013/10/17 11:25:52 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{googleageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.ca/
CHR - Extension: BIODIGITAL HUMAN = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\agoenciogemlojlhccbcpcfflicgnaak\0.9.5_0\
CHR - Extension: Show Blank Page = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajdcamekcdkokccnhadcjbibcoaegcdi\1.0_0\
CHR - Extension: Stitches = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\annpjgednbdhheijbefcpeaipapajkof\1.0_0\
CHR - Extension: Google Docs = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Listhings = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aooobeadnfddkmlcfcmjhjldpbefmnjf\2.1_0\
CHR - Extension: Google Drive = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: Sothink Flash Downloader for Chrome = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\biceobciobbhhkplgocbaigojbnepcoi\1.0.24_0\
CHR - Extension: YouTube = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Hide My Ass! Web Proxy = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd\1.2.5_0\
CHR - Extension: Google Search = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Calendar = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0\
CHR - Extension: Print this page with CleanPrint = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fklmmmdcofimkjmfjdnobmmgmefbapkf\4.8.1_0\
CHR - Extension: AdBlock = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0\
CHR - Extension: AdBlock = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.18_0\
CHR - Extension: History Eraser = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjieilkfnnjoihjjonajndjldjoagffm\3.9.7_0\
CHR - Extension: TinEye Reverse Image Search = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.4_0\
CHR - Extension: Tabs to the front! = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjaooagfdhdhmbfchnkhggjmacjlacla\0.2.4_0\
CHR - Extension: Eye Dropper = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka\0.3.3_0\
CHR - Extension: Wolfram|Alpha (Official) = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\icncamkooinmbehmkeilcccmoljfkdhp\1.2.2_0\
CHR - Extension: Chrome to Mobile = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd\3.1_0\
CHR - Extension: FVD Downloader = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.6.6_0\
CHR - Extension: FVD Downloader = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.6.6_0\modules\clickberry\_
CHR - Extension: Linkclump = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj\2.7.2_0\
CHR - Extension: Google Maps = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0\
CHR - Extension: Explain and Send Screenshots = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdddabjhelpilpnpgondfmehhcplpiin\6.8.2_0\
CHR - Extension: Google Dictionary (by Google) = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja\3.1.0_0\
CHR - Extension: Google Wallet = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Print Friendly & PDF = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlencieiipommannpdfcmfdpjjmeolj\2.3_0\
CHR - Extension: Click&Clean App = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.0_0\
CHR - Extension: Gmail = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: RSS Feed Reader = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.2_0\

O1 HOSTS File: ([2014/01/14 21:31:34 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKU\S-1-5-21-531570899-4083146332-835557271-1001..\Run: [AirVideoServer] C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe ()
O4 - HKU\S-1-5-21-531570899-4083146332-835557271-1005..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-531570899-4083146332-835557271-1005..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O4 - Startup: C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk = C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe (Leader Technologies/Logitech)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-531570899-4083146332-835557271-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-531570899-4083146332-835557271-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.226.1.93 24.226.10.193 24.226.10.194
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AEF86246-B3E5-4540-AFD1-EF3B3EAE55E9}: DhcpNameServer = 209.222.18.222 209.222.18.218
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F9CCC665-E5B7-44D6-B286-F5573C7F52CF}: DhcpNameServer = 24.226.1.93 24.226.10.193 24.226.10.194
O18:64bit: - Protocol\Handler\belarc - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/08/21 09:57:26 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/01/15 10:37:34 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Janny\Desktop\OTL.exe
[2014/01/15 10:28:19 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/01/15 10:27:22 | 001,037,068 | ---- | C] (Thisisu) -- C:\Users\Janny\Desktop\JRT.exe
[2014/01/15 10:19:23 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/01/15 09:48:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logitech
[2014/01/14 21:45:09 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2014/01/14 21:19:16 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/01/14 21:19:16 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/01/14 21:19:16 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/01/14 21:19:08 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/01/14 21:18:51 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2014/01/14 09:36:39 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Saving Mr.Banks [2013] DVDSCr XviD-SaM[ETRG]
[2014/01/14 09:11:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2014/01/14 09:11:48 | 000,117,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/01/14 09:09:35 | 000,089,304 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/01/14 09:02:42 | 000,014,464 | ---- | C] (Western Digital Technologies) -- C:\Windows\SysNative\drivers\wdcsam64.sys.bak
[2014/01/14 09:02:34 | 000,031,232 | ---- | C] (The OpenVPN Project) -- C:\Windows\SysNative\drivers\tap0901.sys.bak
[2014/01/14 09:02:30 | 000,090,544 | ---- | C] (PowerISO Computing, Inc.) -- C:\Windows\SysNative\drivers\scdemu.sys.bak
[2014/01/14 09:02:29 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys.bak
[2014/01/14 09:02:26 | 000,082,816 | ---- | C] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys.bak
[2014/01/14 09:02:18 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys.bak
[2014/01/14 09:02:16 | 000,072,216 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys.bak
[2014/01/14 09:02:16 | 000,065,600 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys.bak
[2014/01/14 09:02:15 | 000,011,552 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\lmimirr.sys.bak
[2014/01/14 09:02:11 | 000,031,232 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys.bak
[2014/01/14 09:02:10 | 001,705,600 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\drivers\HCW85BDA.sys.bak
[2014/01/14 09:01:58 | 000,194,128 | ---- | C] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys.bak
[2014/01/14 03:00:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
[2014/01/13 22:41:03 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Blue Jasmine [2013] BRRip XviD-SaM[ETRG]
[2014/01/13 22:40:09 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Enough Said 2013 HDRIP XVID AC3 TiTAN
[2014/01/13 22:39:07 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\The Secret Life of Walter Mitty[2013]DVDScr XviD-SaM[ETRG]
[2014/01/13 19:24:44 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Her [2013] DVDScr XviD-SaM[ETRG]
[2014/01/13 19:23:48 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\The Book Thief [2013] DVDScr XviD-SaM[ETRG]
[2014/01/12 17:43:10 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Leadertech
[2014/01/12 17:40:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2014/01/12 17:40:38 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
[2014/01/12 17:40:35 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2014/01/12 17:13:37 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2014/01/12 16:52:51 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\QuickScan
[2014/01/12 10:45:52 | 000,000,000 | ---D | C] -- C:\Users\Janny\Documents\Snagit
[2014/01/12 10:45:00 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Snagit 9
[2014/01/12 10:44:45 | 000,000,000 | ---D | C] -- C:\ProgramData\TechSmith
[2014/01/12 10:44:43 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\TechSmith
[2014/01/12 10:44:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TechSmith
[2014/01/11 20:54:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2014/01/11 20:14:40 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady
[2014/01/11 19:32:34 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Malwarebytes
[2014/01/11 19:32:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014/01/11 19:32:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/01/11 19:32:21 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014/01/11 19:32:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2014/01/11 19:25:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Hauppauge
[2014/01/11 19:25:23 | 000,303,160 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwpnp32_priv.dll
[2014/01/11 19:25:23 | 000,036,921 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwutl32_priv.dll
[2014/01/11 19:24:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge WinTV
[2014/01/11 19:24:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinTV
[2014/01/11 19:24:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2014/01/11 19:21:54 | 000,079,672 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys
[2014/01/11 10:05:44 | 001,705,600 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\drivers\HCW85BDA.sys
[2014/01/11 10:05:44 | 000,110,592 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\hcw85prop.ax
[2014/01/11 10:05:43 | 000,139,776 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\hcw85enc.ax
[2014/01/11 10:05:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Hauppauge
[2014/01/11 10:02:25 | 000,831,554 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwtvwnd.dll
[2014/01/11 10:02:25 | 000,323,640 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwpnp32.dll
[2014/01/11 10:02:25 | 000,118,840 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysWow64\hcwi2c32.dll
[2014/01/11 10:02:25 | 000,036,921 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwutl32.dll
[2014/01/11 10:00:31 | 000,147,456 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\hcwecppp.ax
[2014/01/11 10:00:31 | 000,099,328 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\hcwcp.ax
[2014/01/10 19:24:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Belarc
[2014/01/10 10:13:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoPlayerV3
[2014/01/07 10:26:34 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Foxit Software
[2014/01/06 15:13:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF
[2014/01/06 15:12:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software
[2014/01/05 09:44:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Toolkit
[2014/01/03 10:08:19 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Annie's Attic
[2014/01/03 10:03:17 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Leisure Arts Leaflets
[2013/12/29 19:41:09 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Nero
[2013/12/29 19:41:05 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\Nero
[2013/12/29 19:39:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
[2013/12/29 19:39:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2013/12/29 19:39:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2013/12/29 19:38:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2013/12/27 17:10:49 | 000,000,000 | ---D | C] -- C:\Users\Janny\Documents\My Wallpapers
[2013/12/22 20:05:53 | 000,029,704 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon9.dll
[2013/12/22 20:05:53 | 000,017,928 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui9.dll
[2013/12/22 20:05:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro
[2013/12/22 20:05:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nitro
[2013/12/22 20:05:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nitro
[2013/12/22 09:40:07 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Nitro
[2013/12/22 09:37:33 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\WinRAR
[2013/12/22 09:36:58 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/12/22 09:36:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/12/22 09:36:50 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013/12/22 09:34:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro
[2013/12/22 09:32:42 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Downloaded Installations
[2013/12/22 09:18:49 | 000,000,000 | R--D | C] -- C:\Users\Janny\Google Drive
[2013/12/22 09:17:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2013/12/18 20:06:16 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013/12/18 18:07:41 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\Macromedia
[2013/12/18 17:57:47 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\Mozilla
[2013/12/17 00:22:56 | 000,000,000 | ---D | C] -- C:\ProgramData\vsosdk
[2013/12/16 23:55:01 | 000,000,000 | ---D | C] -- C:\Users\Janny\Documents\ConvertXToDVD
[2013/11/28 16:38:00 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Janny\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 30 Days ==========

[2014/01/15 10:37:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Janny\Desktop\OTL.exe
[2014/01/15 10:32:21 | 000,023,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/01/15 10:32:21 | 000,023,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/01/15 10:27:30 | 001,037,068 | ---- | M] (Thisisu) -- C:\Users\Janny\Desktop\JRT.exe
[2014/01/15 10:25:58 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/01/15 10:23:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/01/15 10:23:26 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs
[2014/01/15 10:22:54 | 529,932,287 | -HS- | M] () -- C:\hiberfil.sys
[2014/01/15 10:19:42 | 000,000,119 | ---- | M] () -- C:\Users\Janny\Desktop\[Active] Video Ad Popups - WindowsBBS Forum.url
[2014/01/15 10:18:36 | 001,236,282 | ---- | M] () -- C:\Users\Janny\Desktop\adwcleaner.exe
[2014/01/15 09:51:23 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/15 09:43:54 | 000,001,031 | ---- | M] () -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
[2014/01/14 21:31:34 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2014/01/14 09:11:48 | 000,117,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/01/14 09:09:35 | 000,089,304 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/01/14 09:07:57 | 000,014,464 | ---- | M] (Western Digital Technologies) -- C:\Windows\SysNative\drivers\wdcsam64.sys.bak
[2014/01/14 09:07:46 | 000,031,232 | ---- | M] (The OpenVPN Project) -- C:\Windows\SysNative\drivers\tap0901.sys.bak
[2014/01/14 09:07:41 | 000,090,544 | ---- | M] (PowerISO Computing, Inc.) -- C:\Windows\SysNative\drivers\scdemu.sys.bak
[2014/01/14 09:07:40 | 000,031,800 | ---- | M] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys.bak
[2014/01/14 09:07:34 | 000,082,816 | ---- | M] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys.bak
[2014/01/14 09:07:22 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys.bak
[2014/01/14 09:07:20 | 000,030,232 | ---- | M] () -- C:\Windows\SysNative\drivers\LVPr2M64.sys.bak
[2014/01/14 09:07:19 | 000,072,216 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys.bak
[2014/01/14 09:07:19 | 000,065,600 | ---- | M] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys.bak
[2014/01/14 09:07:18 | 000,011,552 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\lmimirr.sys.bak
[2014/01/14 09:07:12 | 001,705,600 | ---- | M] (Hauppauge Computer Works) -- C:\Windows\SysNative\drivers\HCW85BDA.sys.bak
[2014/01/14 09:07:12 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys.bak
[2014/01/14 09:06:56 | 000,194,128 | ---- | M] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys.bak
[2014/01/12 17:09:39 | 000,005,098 | ---- | M] () -- C:\Windows\HCWPNP.INI
[2014/01/12 17:09:11 | 000,000,209 | ---- | M] () -- C:\Windows\ODBCINST.INI
[2014/01/12 17:09:11 | 000,000,135 | ---- | M] () -- C:\Windows\ODBC.INI
[2014/01/11 21:27:44 | 000,779,266 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/01/11 21:27:44 | 000,660,280 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/01/11 21:27:44 | 000,121,208 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/01/11 20:54:48 | 000,000,000 | ---- | M] () -- C:\Debug.QC6
[2014/01/11 19:22:18 | 000,079,672 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys
[2014/01/11 19:21:48 | 001,034,464 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2014/01/11 19:21:48 | 000,422,216 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2014/01/11 19:21:48 | 000,334,136 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2014/01/11 19:21:48 | 000,207,904 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2014/01/11 19:21:48 | 000,078,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2014/01/11 19:21:47 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/01/10 19:24:03 | 000,002,146 | ---- | M] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk
[2014/01/10 00:16:49 | 000,322,944 | ---- | M] () -- C:\Users\Janny\Desktop\cute-scrub-caps-for-women.jpg
[2014/01/06 15:58:17 | 000,404,830 | ---- | M] () -- C:\Users\Janny\Desktop\WEB-C-1PND-TexturedBabyBlanket-ENG.pdf
[2014/01/05 22:47:21 | 000,073,167 | ---- | M] () -- C:\Users\Janny\Desktop\1601381_694191547279813_111197505_n.jpg
[2013/12/29 19:39:33 | 000,002,413 | ---- | M] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero MediaHome 4.lnk
[2013/12/19 22:00:50 | 000,437,576 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/12/16 10:46:27 | 072,641,309 | ---- | M] () -- C:\Users\Janny\Desktop\Blue Rodeo - In The Darkness (The Farmhouse Sessions).mp4
[2013/12/16 10:45:36 | 046,178,665 | ---- | M] () -- C:\Users\Janny\Desktop\Blue Rodeo- Over Me (The Farmhouse Sessions).mp4

========== Files Created - No Company Name ==========

[2014/01/15 10:19:42 | 000,000,119 | ---- | C] () -- C:\Users\Janny\Desktop\[Active] Video Ad Popups - WindowsBBS Forum.url
[2014/01/15 10:18:30 | 001,236,282 | ---- | C] () -- C:\Users\Janny\Desktop\adwcleaner.exe
[2014/01/14 21:19:16 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014/01/14 21:19:16 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014/01/14 21:19:16 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014/01/14 21:19:16 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014/01/14 21:19:16 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014/01/14 09:02:17 | 000,030,232 | ---- | C] () -- C:\Windows\SysNative\drivers\LVPr2M64.sys.bak
[2014/01/12 17:43:10 | 000,001,031 | ---- | C] () -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
[2014/01/11 20:54:48 | 000,000,000 | ---- | C] () -- C:\Debug.QC6
[2014/01/11 19:24:50 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2014/01/11 19:24:50 | 000,000,135 | ---- | C] () -- C:\Windows\ODBC.INI
[2014/01/11 19:24:15 | 000,142,337 | ---- | C] () -- C:\Windows\SysWow64\Wait.exe
[2014/01/11 10:02:26 | 000,005,098 | ---- | C] () -- C:\Windows\HCWPNP.INI
[2014/01/11 10:00:31 | 000,016,382 | ---- | C] () -- C:\Windows\SysNative\drivers\hcw85mlD.rom
[2014/01/10 19:24:03 | 000,002,146 | ---- | C] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk
[2014/01/10 19:24:03 | 000,002,134 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk
[2014/01/10 00:16:49 | 000,322,944 | ---- | C] () -- C:\Users\Janny\Desktop\cute-scrub-caps-for-women.jpg
[2014/01/06 15:58:17 | 000,404,830 | ---- | C] () -- C:\Users\Janny\Desktop\WEB-C-1PND-TexturedBabyBlanket-ENG.pdf
[2014/01/05 22:47:20 | 000,073,167 | ---- | C] () -- C:\Users\Janny\Desktop\1601381_694191547279813_111197505_n.jpg
[2013/12/29 19:39:33 | 000,002,413 | ---- | C] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero MediaHome 4.lnk
[2013/12/22 20:05:47 | 000,002,531 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 9.lnk
[2013/12/18 17:57:40 | 000,001,161 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/12/16 10:45:38 | 072,641,309 | ---- | C] () -- C:\Users\Janny\Desktop\Blue Rodeo - In The Darkness (The Farmhouse Sessions).mp4
[2013/12/16 10:45:01 | 046,178,665 | ---- | C] () -- C:\Users\Janny\Desktop\Blue Rodeo- Over Me (The Farmhouse Sessions).mp4
[2013/12/15 12:02:27 | 000,001,534 | ---- | C] () -- C:\ProgramData\ss.ini
[2013/11/28 17:33:59 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013/11/28 16:38:00 | 000,007,859 | ---- | C] () -- C:\Users\Janny\AppData\Roaming\pcouffin.cat
[2013/11/28 16:38:00 | 000,001,167 | ---- | C] () -- C:\Users\Janny\AppData\Roaming\pcouffin.inf
[2013/11/28 16:04:51 | 000,772,990 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

========== ZeroAccess Check ==========

[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
" " = C:\Windows\SysNative\shell32.dll -- [2013/07/25 21:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2013/07/25 20:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/11/28 12:36:48 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\AVAST Software
[2014/01/02 12:21:34 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\calibre
[2013/12/02 13:59:04 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Canon
[2013/12/22 20:04:26 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Downloaded Installations
[2013/12/03 12:55:06 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\DuplicatePhotoCleaner
[2014/01/07 10:26:35 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Foxit Software
[2014/01/12 17:43:10 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Leadertech
[2013/12/14 15:06:39 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Netscape
[2013/12/22 09:46:33 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Nitro
[2013/12/14 15:06:10 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Photodex
[2014/01/12 16:52:56 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\QuickScan
[2013/11/28 12:44:55 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Thunderbird
[2013/11/28 13:37:21 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Titanium
[2014/01/15 10:19:05 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\uTorrent
[2014/01/11 19:17:42 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Vso

========== Purity Check ==========



< End of report >

 

OTL logfile created on: 1/15/2014 10:38:31 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Janny\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.99 Gb Total Physical Memory | 4.38 Gb Available Physical Memory | 73.12% Memory free
11.98 Gb Paging File | 10.19 Gb Available in Paging File | 85.02% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 916.44 Gb Total Space | 644.89 Gb Free Space | 70.37% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 8.36 Gb Free Space | 55.71% Space Free | Partition Type: NTFS

Computer Name: JANNY-DESKTOP | User Name: Janny | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/01/15 10:37:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Janny\Desktop\OTL.exe
PRC - [2014/01/11 19:21:44 | 003,764,024 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014/01/11 19:21:44 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/12/14 15:06:32 | 000,186,760 | ---- | M] () -- C:\Program Files (x86)\Photodex\ProShow Gold\scsiaccess.exe
PRC - [2013/11/12 20:09:36 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\NLSSRV32.EXE
PRC - [2013/09/05 09:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/07/19 18:25:28 | 004,935,112 | ---- | M] () -- C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe
PRC - [2010/10/26 16:52:28 | 000,517,416 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe
PRC - [2010/01/11 13:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2009/12/18 04:29:36 | 000,306,688 | ---- | M] (Hauppauge Computer Works) -- C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe
PRC - [2009/12/17 05:00:08 | 000,601,088 | ---- | M] (Hauppauge Computer Works) -- C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe
PRC - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
PRC - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe
PRC - [2009/09/06 06:06:20 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2013/11/28 12:33:18 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2012/07/19 18:25:28 | 004,935,112 | ---- | M] () -- C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe
MOD - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
MOD - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe


========== Services (SafeList) ==========

SRV:64bit: - [2014/01/11 19:21:44 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013/11/26 04:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013/11/12 20:09:28 | 000,230,920 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe -- (NitroDriverReadSpool9)
SRV:64bit: - [2013/05/27 00:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2010/01/11 13:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV:64bit: - [2009/10/07 01:47:10 | 000,191,000 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64)
SRV - [2013/12/16 10:28:41 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2013/12/14 15:06:32 | 000,186,760 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Photodex\ProShow Gold\scsiaccess.exe -- (ScsiAccess)
SRV - [2013/12/12 22:17:56 | 000,226,640 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2013/12/12 22:17:52 | 000,376,144 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013/12/05 14:36:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/11/12 20:09:36 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2013/10/23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/09/05 09:04:00 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/30 10:57:00 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2010/10/26 16:52:28 | 000,517,416 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe -- (NeroMediaHomeService.4)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/17 05:00:08 | 000,601,088 | ---- | M] (Hauppauge Computer Works) [Auto | Running] -- C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe -- (HauppaugeTVServer)
SRV - [2009/09/06 06:06:20 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor8.0)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/01/11 19:22:18 | 000,079,672 | ---- | M] (AVAST Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
DRV:64bit: - [2014/01/11 19:21:48 | 001,034,464 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2014/01/11 19:21:48 | 000,422,216 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2014/01/11 19:21:48 | 000,207,904 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2014/01/11 19:21:48 | 000,078,648 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013/12/12 22:17:53 | 000,107,368 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2013/11/28 16:38:00 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2013/11/28 13:35:57 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:64bit: - [2013/11/28 12:33:21 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013/11/28 12:33:21 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013/04/30 10:57:00 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2013/04/30 10:56:42 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2012/12/13 14:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/08/19 04:27:30 | 004,869,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:64bit: - [2011/08/19 04:27:30 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2009/12/30 11:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2009/10/07 03:45:37 | 000,271,640 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvpopf64.sys -- (lvpopf64)
DRV:64bit: - [2009/10/07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2Mon)
DRV:64bit: - [2009/10/07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
DRV:64bit: - [2009/09/11 17:19:08 | 001,705,600 | ---- | M] (Hauppauge Computer Works) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HCW85BDA.sys -- (HCW85BDA)
DRV:64bit: - [2009/07/26 21:54:30 | 000,090,544 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 16:59:33 | 005,020,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/06/10 15:35:02 | 000,281,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1y60x64.sys -- (e1yexpress)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008/06/16 03:00:00 | 000,055,024 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV - [2013/04/30 10:57:00 | 000,016,056 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 04 E9 60 35 42 EE CE 01 [binary data]
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-531570899-4083146332-835557271-1005\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-531570899-4083146332-835557271-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF)
FF - HKLM\Software\MozillaPlugins\@photodex.com/PhotodexPresenter: C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll ( )
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/01/12 16:31:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta998.net: C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta998\ff
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/12/05 03:17:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

[2013/11/28 12:44:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Janny\AppData\Roaming\Mozilla\Extensions
[2013/12/18 17:57:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/12/18 17:57:38 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\PROGRAM FILES (X86)\VIDEOPLAYERV3\VIDEOPLAYERV3BETA998\FF
[2013/10/17 11:25:52 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{googleageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.ca/
CHR - Extension: BIODIGITAL HUMAN = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\agoenciogemlojlhccbcpcfflicgnaak\0.9.5_0\
CHR - Extension: Show Blank Page = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajdcamekcdkokccnhadcjbibcoaegcdi\1.0_0\
CHR - Extension: Stitches = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\annpjgednbdhheijbefcpeaipapajkof\1.0_0\
CHR - Extension: Google Docs = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Listhings = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aooobeadnfddkmlcfcmjhjldpbefmnjf\2.1_0\
CHR - Extension: Google Drive = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: Sothink Flash Downloader for Chrome = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\biceobciobbhhkplgocbaigojbnepcoi\1.0.24_0\
CHR - Extension: YouTube = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Hide My Ass! Web Proxy = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmgnmcnlncejehjlnhaglpnoolgbflbd\1.2.5_0\
CHR - Extension: Google Search = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Calendar = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0\
CHR - Extension: Print this page with CleanPrint = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\fklmmmdcofimkjmfjdnobmmgmefbapkf\4.8.1_0\
CHR - Extension: AdBlock = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0\
CHR - Extension: AdBlock = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.18_0\
CHR - Extension: History Eraser = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjieilkfnnjoihjjonajndjldjoagffm\3.9.7_0\
CHR - Extension: TinEye Reverse Image Search = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.4_0\
CHR - Extension: Tabs to the front! = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjaooagfdhdhmbfchnkhggjmacjlacla\0.2.4_0\
CHR - Extension: Eye Dropper = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka\0.3.3_0\
CHR - Extension: Wolfram|Alpha (Official) = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\icncamkooinmbehmkeilcccmoljfkdhp\1.2.2_0\
CHR - Extension: Chrome to Mobile = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\idknbmbdnapjicclomlijcgfpikmndhd\3.1_0\
CHR - Extension: FVD Downloader = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.6.6_0\
CHR - Extension: FVD Downloader = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.6.6_0\modules\clickberry\_
CHR - Extension: Linkclump = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj\2.7.2_0\
CHR - Extension: Google Maps = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0\
CHR - Extension: Explain and Send Screenshots = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdddabjhelpilpnpgondfmehhcplpiin\6.8.2_0\
CHR - Extension: Google Dictionary (by Google) = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja\3.1.0_0\
CHR - Extension: Google Wallet = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Print Friendly & PDF = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlencieiipommannpdfcmfdpjjmeolj\2.3_0\
CHR - Extension: Click&Clean App = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.0_0\
CHR - Extension: Gmail = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: RSS Feed Reader = C:\Users\Janny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.2_0\

O1 HOSTS File: ([2014/01/14 21:31:34 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKU\S-1-5-21-531570899-4083146332-835557271-1001..\Run: [AirVideoServer] C:\Program Files (x86)\AirVideoServer\AirVideoServer.exe ()
O4 - HKU\S-1-5-21-531570899-4083146332-835557271-1005..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-531570899-4083146332-835557271-1005..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O4 - Startup: C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk = C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe (Leader Technologies/Logitech)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-531570899-4083146332-835557271-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-531570899-4083146332-835557271-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.226.1.93 24.226.10.193 24.226.10.194
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AEF86246-B3E5-4540-AFD1-EF3B3EAE55E9}: DhcpNameServer = 209.222.18.222 209.222.18.218
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F9CCC665-E5B7-44D6-B286-F5573C7F52CF}: DhcpNameServer = 24.226.1.93 24.226.10.193 24.226.10.194
O18:64bit: - Protocol\Handler\belarc - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/08/21 09:57:26 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/01/15 10:37:34 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Janny\Desktop\OTL.exe
[2014/01/15 10:28:19 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/01/15 10:27:22 | 001,037,068 | ---- | C] (Thisisu) -- C:\Users\Janny\Desktop\JRT.exe
[2014/01/15 10:19:23 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/01/15 09:48:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logitech
[2014/01/14 21:45:09 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2014/01/14 21:19:16 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/01/14 21:19:16 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/01/14 21:19:16 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/01/14 21:19:08 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/01/14 21:18:51 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2014/01/14 09:36:39 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Saving Mr.Banks [2013] DVDSCr XviD-SaM[ETRG]
[2014/01/14 09:11:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2014/01/14 09:11:48 | 000,117,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/01/14 09:09:35 | 000,089,304 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/01/14 09:02:42 | 000,014,464 | ---- | C] (Western Digital Technologies) -- C:\Windows\SysNative\drivers\wdcsam64.sys.bak
[2014/01/14 09:02:34 | 000,031,232 | ---- | C] (The OpenVPN Project) -- C:\Windows\SysNative\drivers\tap0901.sys.bak
[2014/01/14 09:02:30 | 000,090,544 | ---- | C] (PowerISO Computing, Inc.) -- C:\Windows\SysNative\drivers\scdemu.sys.bak
[2014/01/14 09:02:29 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys.bak
[2014/01/14 09:02:26 | 000,082,816 | ---- | C] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys.bak
[2014/01/14 09:02:18 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys.bak
[2014/01/14 09:02:16 | 000,072,216 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys.bak
[2014/01/14 09:02:16 | 000,065,600 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys.bak
[2014/01/14 09:02:15 | 000,011,552 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\lmimirr.sys.bak
[2014/01/14 09:02:11 | 000,031,232 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys.bak
[2014/01/14 09:02:10 | 001,705,600 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\drivers\HCW85BDA.sys.bak
[2014/01/14 09:01:58 | 000,194,128 | ---- | C] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys.bak
[2014/01/14 03:00:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
[2014/01/13 22:41:03 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Blue Jasmine [2013] BRRip XviD-SaM[ETRG]
[2014/01/13 22:40:09 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Enough Said 2013 HDRIP XVID AC3 TiTAN
[2014/01/13 22:39:07 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\The Secret Life of Walter Mitty[2013]DVDScr XviD-SaM[ETRG]
[2014/01/13 19:24:44 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Her [2013] DVDScr XviD-SaM[ETRG]
[2014/01/13 19:23:48 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\The Book Thief [2013] DVDScr XviD-SaM[ETRG]
[2014/01/12 17:43:10 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Leadertech
[2014/01/12 17:40:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2014/01/12 17:40:38 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
[2014/01/12 17:40:35 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2014/01/12 17:13:37 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2014/01/12 16:52:51 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\QuickScan
[2014/01/12 10:45:52 | 000,000,000 | ---D | C] -- C:\Users\Janny\Documents\Snagit
[2014/01/12 10:45:00 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Snagit 9
[2014/01/12 10:44:45 | 000,000,000 | ---D | C] -- C:\ProgramData\TechSmith
[2014/01/12 10:44:43 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\TechSmith
[2014/01/12 10:44:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TechSmith
[2014/01/11 20:54:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2014/01/11 20:14:40 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady
[2014/01/11 19:32:34 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Malwarebytes
[2014/01/11 19:32:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014/01/11 19:32:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/01/11 19:32:21 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014/01/11 19:32:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2014/01/11 19:25:41 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Hauppauge
[2014/01/11 19:25:23 | 000,303,160 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwpnp32_priv.dll
[2014/01/11 19:25:23 | 000,036,921 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwutl32_priv.dll
[2014/01/11 19:24:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge WinTV
[2014/01/11 19:24:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinTV
[2014/01/11 19:24:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2014/01/11 19:21:54 | 000,079,672 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys
[2014/01/11 10:05:44 | 001,705,600 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\drivers\HCW85BDA.sys
[2014/01/11 10:05:44 | 000,110,592 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\hcw85prop.ax
[2014/01/11 10:05:43 | 000,139,776 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysNative\hcw85enc.ax
[2014/01/11 10:05:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Hauppauge
[2014/01/11 10:02:25 | 000,831,554 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwtvwnd.dll
[2014/01/11 10:02:25 | 000,323,640 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwpnp32.dll
[2014/01/11 10:02:25 | 000,118,840 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysWow64\hcwi2c32.dll
[2014/01/11 10:02:25 | 000,036,921 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\SysWow64\hcwutl32.dll
[2014/01/11 10:00:31 | 000,147,456 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\hcwecppp.ax
[2014/01/11 10:00:31 | 000,099,328 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\hcwcp.ax
[2014/01/10 19:24:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Belarc
[2014/01/10 10:13:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoPlayerV3
[2014/01/07 10:26:34 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Foxit Software
[2014/01/06 15:13:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF
[2014/01/06 15:12:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software
[2014/01/05 09:44:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Toolkit
[2014/01/03 10:08:19 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Annie's Attic
[2014/01/03 10:03:17 | 000,000,000 | ---D | C] -- C:\Users\Janny\Desktop\Leisure Arts Leaflets
[2013/12/29 19:41:09 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Nero
[2013/12/29 19:41:05 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\Nero
[2013/12/29 19:39:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
[2013/12/29 19:39:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2013/12/29 19:39:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2013/12/29 19:38:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2013/12/27 17:10:49 | 000,000,000 | ---D | C] -- C:\Users\Janny\Documents\My Wallpapers
[2013/12/22 20:05:53 | 000,029,704 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon9.dll
[2013/12/22 20:05:53 | 000,017,928 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui9.dll
[2013/12/22 20:05:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro
[2013/12/22 20:05:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nitro
[2013/12/22 20:05:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nitro
[2013/12/22 09:40:07 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Nitro
[2013/12/22 09:37:33 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\WinRAR
[2013/12/22 09:36:58 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/12/22 09:36:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/12/22 09:36:50 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013/12/22 09:34:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro
[2013/12/22 09:32:42 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Roaming\Downloaded Installations
[2013/12/22 09:18:49 | 000,000,000 | R--D | C] -- C:\Users\Janny\Google Drive
[2013/12/22 09:17:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2013/12/18 20:06:16 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013/12/18 18:07:41 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\Macromedia
[2013/12/18 17:57:47 | 000,000,000 | ---D | C] -- C:\Users\Janny\AppData\Local\Mozilla
[2013/12/17 00:22:56 | 000,000,000 | ---D | C] -- C:\ProgramData\vsosdk
[2013/12/16 23:55:01 | 000,000,000 | ---D | C] -- C:\Users\Janny\Documents\ConvertXToDVD
[2013/11/28 16:38:00 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Janny\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 30 Days ==========

[2014/01/15 10:37:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Janny\Desktop\OTL.exe
[2014/01/15 10:32:21 | 000,023,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/01/15 10:32:21 | 000,023,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/01/15 10:27:30 | 001,037,068 | ---- | M] (Thisisu) -- C:\Users\Janny\Desktop\JRT.exe
[2014/01/15 10:25:58 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/01/15 10:23:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/01/15 10:23:26 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs
[2014/01/15 10:22:54 | 529,932,287 | -HS- | M] () -- C:\hiberfil.sys
[2014/01/15 10:19:42 | 000,000,119 | ---- | M] () -- C:\Users\Janny\Desktop\[Active] Video Ad Popups - WindowsBBS Forum.url
[2014/01/15 10:18:36 | 001,236,282 | ---- | M] () -- C:\Users\Janny\Desktop\adwcleaner.exe
[2014/01/15 09:51:23 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/15 09:43:54 | 000,001,031 | ---- | M] () -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
[2014/01/14 21:31:34 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2014/01/14 09:11:48 | 000,117,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/01/14 09:09:35 | 000,089,304 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/01/14 09:07:57 | 000,014,464 | ---- | M] (Western Digital Technologies) -- C:\Windows\SysNative\drivers\wdcsam64.sys.bak
[2014/01/14 09:07:46 | 000,031,232 | ---- | M] (The OpenVPN Project) -- C:\Windows\SysNative\drivers\tap0901.sys.bak
[2014/01/14 09:07:41 | 000,090,544 | ---- | M] (PowerISO Computing, Inc.) -- C:\Windows\SysNative\drivers\scdemu.sys.bak
[2014/01/14 09:07:40 | 000,031,800 | ---- | M] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys.bak
[2014/01/14 09:07:34 | 000,082,816 | ---- | M] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys.bak
[2014/01/14 09:07:22 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys.bak
[2014/01/14 09:07:20 | 000,030,232 | ---- | M] () -- C:\Windows\SysNative\drivers\LVPr2M64.sys.bak
[2014/01/14 09:07:19 | 000,072,216 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys.bak
[2014/01/14 09:07:19 | 000,065,600 | ---- | M] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys.bak
[2014/01/14 09:07:18 | 000,011,552 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\lmimirr.sys.bak
[2014/01/14 09:07:12 | 001,705,600 | ---- | M] (Hauppauge Computer Works) -- C:\Windows\SysNative\drivers\HCW85BDA.sys.bak
[2014/01/14 09:07:12 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys.bak
[2014/01/14 09:06:56 | 000,194,128 | ---- | M] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys.bak
[2014/01/12 17:09:39 | 000,005,098 | ---- | M] () -- C:\Windows\HCWPNP.INI
[2014/01/12 17:09:11 | 000,000,209 | ---- | M] () -- C:\Windows\ODBCINST.INI
[2014/01/12 17:09:11 | 000,000,135 | ---- | M] () -- C:\Windows\ODBC.INI
[2014/01/11 21:27:44 | 000,779,266 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/01/11 21:27:44 | 000,660,280 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/01/11 21:27:44 | 000,121,208 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/01/11 20:54:48 | 000,000,000 | ---- | M] () -- C:\Debug.QC6
[2014/01/11 19:22:18 | 000,079,672 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys
[2014/01/11 19:21:48 | 001,034,464 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2014/01/11 19:21:48 | 000,422,216 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2014/01/11 19:21:48 | 000,334,136 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2014/01/11 19:21:48 | 000,207,904 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2014/01/11 19:21:48 | 000,078,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2014/01/11 19:21:47 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/01/10 19:24:03 | 000,002,146 | ---- | M] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk
[2014/01/10 00:16:49 | 000,322,944 | ---- | M] () -- C:\Users\Janny\Desktop\cute-scrub-caps-for-women.jpg
[2014/01/06 15:58:17 | 000,404,830 | ---- | M] () -- C:\Users\Janny\Desktop\WEB-C-1PND-TexturedBabyBlanket-ENG.pdf
[2014/01/05 22:47:21 | 000,073,167 | ---- | M] () -- C:\Users\Janny\Desktop\1601381_694191547279813_111197505_n.jpg
[2013/12/29 19:39:33 | 000,002,413 | ---- | M] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero MediaHome 4.lnk
[2013/12/19 22:00:50 | 000,437,576 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/12/16 10:46:27 | 072,641,309 | ---- | M] () -- C:\Users\Janny\Desktop\Blue Rodeo - In The Darkness (The Farmhouse Sessions).mp4
[2013/12/16 10:45:36 | 046,178,665 | ---- | M] () -- C:\Users\Janny\Desktop\Blue Rodeo- Over Me (The Farmhouse Sessions).mp4

========== Files Created - No Company Name ==========

[2014/01/15 10:19:42 | 000,000,119 | ---- | C] () -- C:\Users\Janny\Desktop\[Active] Video Ad Popups - WindowsBBS Forum.url
[2014/01/15 10:18:30 | 001,236,282 | ---- | C] () -- C:\Users\Janny\Desktop\adwcleaner.exe
[2014/01/14 21:19:16 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014/01/14 21:19:16 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014/01/14 21:19:16 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014/01/14 21:19:16 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014/01/14 21:19:16 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014/01/14 09:02:17 | 000,030,232 | ---- | C] () -- C:\Windows\SysNative\drivers\LVPr2M64.sys.bak
[2014/01/12 17:43:10 | 000,001,031 | ---- | C] () -- C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
[2014/01/11 20:54:48 | 000,000,000 | ---- | C] () -- C:\Debug.QC6
[2014/01/11 19:24:50 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2014/01/11 19:24:50 | 000,000,135 | ---- | C] () -- C:\Windows\ODBC.INI
[2014/01/11 19:24:15 | 000,142,337 | ---- | C] () -- C:\Windows\SysWow64\Wait.exe
[2014/01/11 10:02:26 | 000,005,098 | ---- | C] () -- C:\Windows\HCWPNP.INI
[2014/01/11 10:00:31 | 000,016,382 | ---- | C] () -- C:\Windows\SysNative\drivers\hcw85mlD.rom
[2014/01/10 19:24:03 | 000,002,146 | ---- | C] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk
[2014/01/10 19:24:03 | 000,002,134 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk
[2014/01/10 00:16:49 | 000,322,944 | ---- | C] () -- C:\Users\Janny\Desktop\cute-scrub-caps-for-women.jpg
[2014/01/06 15:58:17 | 000,404,830 | ---- | C] () -- C:\Users\Janny\Desktop\WEB-C-1PND-TexturedBabyBlanket-ENG.pdf
[2014/01/05 22:47:20 | 000,073,167 | ---- | C] () -- C:\Users\Janny\Desktop\1601381_694191547279813_111197505_n.jpg
[2013/12/29 19:39:33 | 000,002,413 | ---- | C] () -- C:\Users\Janny\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero MediaHome 4.lnk
[2013/12/22 20:05:47 | 000,002,531 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 9.lnk
[2013/12/18 17:57:40 | 000,001,161 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/12/16 10:45:38 | 072,641,309 | ---- | C] () -- C:\Users\Janny\Desktop\Blue Rodeo - In The Darkness (The Farmhouse Sessions).mp4
[2013/12/16 10:45:01 | 046,178,665 | ---- | C] () -- C:\Users\Janny\Desktop\Blue Rodeo- Over Me (The Farmhouse Sessions).mp4
[2013/12/15 12:02:27 | 000,001,534 | ---- | C] () -- C:\ProgramData\ss.ini
[2013/11/28 17:33:59 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013/11/28 16:38:00 | 000,007,859 | ---- | C] () -- C:\Users\Janny\AppData\Roaming\pcouffin.cat
[2013/11/28 16:38:00 | 000,001,167 | ---- | C] () -- C:\Users\Janny\AppData\Roaming\pcouffin.inf
[2013/11/28 16:04:51 | 000,772,990 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

 

========== ZeroAccess Check ==========

[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
" " = C:\Windows\SysNative\shell32.dll -- [2013/07/25 21:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2013/07/25 20:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
" " = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/11/28 12:36:48 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\AVAST Software
[2014/01/02 12:21:34 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\calibre
[2013/12/02 13:59:04 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Canon
[2013/12/22 20:04:26 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Downloaded Installations
[2013/12/03 12:55:06 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\DuplicatePhotoCleaner
[2014/01/07 10:26:35 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Foxit Software
[2014/01/12 17:43:10 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Leadertech
[2013/12/14 15:06:39 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Netscape
[2013/12/22 09:46:33 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Nitro
[2013/12/14 15:06:10 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Photodex
[2014/01/12 16:52:56 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\QuickScan
[2013/11/28 12:44:55 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Thunderbird
[2013/11/28 13:37:21 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Titanium
[2014/01/15 10:19:05 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\uTorrent
[2014/01/11 19:17:42 | 000,000,000 | ---D | M] -- C:\Users\Janny\AppData\Roaming\Vso

========== Purity Check ==========



< End of report >

 

OTL Extras logfile created on: 1/15/2014 10:38:31 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Janny\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.99 Gb Total Physical Memory | 4.38 Gb Available Physical Memory | 73.12% Memory free
11.98 Gb Paging File | 10.19 Gb Available in Paging File | 85.02% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 916.44 Gb Total Space | 644.89 Gb Free Space | 70.37% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 8.36 Gb Free Space | 55.71% Space Free | Partition Type: NTFS

Computer Name: JANNY-DESKTOP | User Name: Janny | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll ",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll ",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1 ",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{16C8A451-AA84-4F00-90D5-611CFACC1B39}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{1706DC34-3C87-4B78-9905-8795AB2F420B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{188C4324-3CF6-49A0-A9E4-C79EE086698B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{336DF73B-9D7D-48EA-9B44-930D038EFCB1}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{357A6C4A-0D39-4089-BE83-B52F86C70401}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{37F511F2-AAAE-4682-B2D1-B2B9A2A74033}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{4223BDCE-4622-47C3-B158-5654C7BB2915}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{45BA9EF5-71BD-4FDC-9418-AFB966BE9FC4}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{815C8CA7-9285-4BCC-B91C-0E1957D3BB48}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{82270B7E-430B-4BDB-A088-09773E766889}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8590BA01-C1B9-4E78-AFE4-5793437212AA}" = lport=138 | protocol=17 | dir=in | app=system |
"{8C0AC211-7BA6-41DA-840E-F476CC1C6FF2}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8FE441F1-95F8-4133-913D-7F92D473E364}" = lport=445 | protocol=6 | dir=in | app=system |
"{9182F04A-693B-4B15-B373-CA8063E37AA4}" = lport=2869 | protocol=6 | dir=in | app=system |
"{9E5D76CB-BDDF-44DA-9333-11A52B32D5A7}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe |
"{9F75F98D-E080-45C1-A8AA-298CA2B9378A}" = lport=137 | protocol=17 | dir=in | app=system |
"{B059A6AE-2695-4DA5-AB6E-0F3877153FBB}" = rport=138 | protocol=17 | dir=out | app=system |
"{B48342AF-63A5-44E5-AB8E-18427DAB4603}" = rport=10243 | protocol=6 | dir=out | app=system |
"{C130BE32-A67A-4BE7-9FD9-F8A2019905F8}" = lport=139 | protocol=6 | dir=in | app=system |
"{C3449EB2-D501-4B10-A3D9-38179E0B9FBE}" = rport=445 | protocol=6 | dir=out | app=system |
"{C51778D8-9B66-422F-B03F-39EAE9E4D329}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CE0049C9-18F4-4750-B114-C6F5E7FF3C14}" = rport=139 | protocol=6 | dir=out | app=system |
"{CF5B25E3-C8B9-42B1-AB06-8B4B5E5A630F}" = rport=137 | protocol=17 | dir=out | app=system |
"{E4698610-8EB6-4786-9729-F457CAEF97A7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E4EA0BDE-4FA3-468F-BFDD-08905F11D3F0}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F3320C0A-2158-4786-96FF-AC509831C63C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F7CCE149-A6D7-4410-9D71-0565F41236EB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{015E121F-71FC-4827-B691-A75AF24588FC}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{07D9D258-32D6-41E4-AC40-08FCF6FB3B9B}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{0A7116A0-9CB8-496F-AAD3-CBF81D5050B9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{14A8AA6D-4E34-400E-8C8C-FD61FCC8DC34}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{2256F29F-314F-4841-8FAB-F200108D6257}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2983FD16-0FC8-455C-9265-87A202452585}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2B47DF73-681C-44C2-BD38-F3C32719715E}" = protocol=6 | dir=out | app=system |
"{2EB85059-6D9A-4816-844F-AFCF8DF8B1C7}" = protocol=6 | dir=in | app=c:\program files (x86)\airvideoserver\airvideoserver.exe |
"{3585C205-0CE1-410F-91F5-C2328D3F1DA7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{3D5DB6F6-666F-4DCD-99D0-8EBDE67D479A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{462C31D4-E6BC-42EE-8E72-FB5E7B48963E}" = protocol=6 | dir=in | app=c:\program files (x86)\nero\nero mediahome 4\nmmediaserverservice.exe |
"{50F4C965-AAC5-4B84-AD99-E2BF544FEE20}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{583B244C-60A5-45BB-B458-47525E3407C1}" = protocol=6 | dir=in | app=c:\program files (x86)\airvideoserver\airvideoserver.exe |
"{6306A62E-1098-4B35-8BA9-C37C1C79D8CD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{67A47A71-2A61-4CDC-A68B-621C38E03590}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{6FC09674-6D4C-483C-93E6-A7CE40130314}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{714B20DC-0B09-4859-AD3F-19C145D9E453}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{810E8791-3E92-44DD-B245-490796DF0944}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{897C2EBB-08AE-4FF4-899D-95A9D97AC264}" = protocol=17 | dir=in | app=c:\program files (x86)\nero\nero mediahome 4\nmmediaserverservice.exe |
"{8CD4AF26-08CC-49B1-9E9E-07028337ACBF}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{A0EAE3CE-C0E4-467E-82E2-9E6D1BF45BCA}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{A10E3C51-FE20-418E-99C9-CC10C0CFEBEC}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{B0D8AD7C-635E-492D-8BA7-80FF62CE84B2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{B1ACEDFC-22FA-4943-A817-77C2AA49CF82}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{B24C8F6A-FBD4-442A-AF9C-FA3D843323FB}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{BAF6A00F-C86C-4ABE-B5D0-D4FEE5FC75A6}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{BEEA25BB-DDBC-47F0-9784-EE7276C954DF}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{C0377914-A6D2-4A6B-AFFA-793614539B6F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C432A6E3-8841-4F1E-8499-77E8B8C2912C}" = protocol=17 | dir=in | app=c:\program files (x86)\airvideoserver\airvideoserver.exe |
"{C5AFCA41-33D3-4102-98C2-B32A9343313D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CA5F199C-5137-4824-A21D-855EAE512233}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CADF5D1B-438A-4712-BBAA-D5A3A1B57E44}" = protocol=17 | dir=in | app=c:\users\janny\appdata\roaming\utorrent\utorrent.exe |
"{CBD4BA89-660A-4594-B3A6-3F7ADC40AC71}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{CE698C5B-5620-4D20-9BEE-F48D2E9FE2F7}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{D45C938F-E299-4134-9645-0BBB63B5EA01}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E40DEF41-6ADD-4FF1-90AB-E428A1BE279E}" = protocol=6 | dir=out | app=c:\program files (x86)\airvideoserver\airvideoserver.exe |
"{E455DCE4-BC41-4C3A-8C56-7960F51DBD57}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{F464CD73-375F-4836-A775-B6F07324C343}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F94B70EE-0905-4CC5-AE02-BFA6907AC9B2}" = protocol=6 | dir=in | app=c:\users\janny\appdata\roaming\utorrent\utorrent.exe |
"TCP Query User{79C3085F-CC0D-4872-B291-EF9B9111997D}C:\program files (x86)\calibre2\calibre.exe" = protocol=6 | dir=in | app=c:\program files (x86)\calibre2\calibre.exe |
"UDP Query User{BECAE817-45A4-4851-BC3F-D7690614A63C}C:\program files (x86)\calibre2\calibre.exe" = protocol=17 | dir=in | app=c:\program files (x86)\calibre2\calibre.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP100_series" = Canon iP100 series Printer Driver
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2413" = CanoScan LiDE 100 Scanner Driver
"{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.5.9
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
"{90150000-0015-0409-1000-0000000FF1CE}" = Microsoft Access MUI (English) 2013
"{90150000-0016-0409-1000-0000000FF1CE}" = Microsoft Excel MUI (English) 2013
"{90150000-0018-0409-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (English) 2013
"{90150000-0019-0409-1000-0000000FF1CE}" = Microsoft Publisher MUI (English) 2013
"{90150000-001A-0409-1000-0000000FF1CE}" = Microsoft Outlook MUI (English) 2013
"{90150000-001B-0409-1000-0000000FF1CE}" = Microsoft Word MUI (English) 2013
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office*- Français
"{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español
"{90150000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2013
"{90150000-0044-0409-1000-0000000FF1CE}" = Microsoft InfoPath MUI (English) 2013
"{90150000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2013
"{90150000-0090-0409-1000-0000000FF1CE}" = Microsoft DCF MUI (English) 2013
"{90150000-00A1-0409-1000-0000000FF1CE}" = Microsoft OneNote MUI (English) 2013
"{90150000-00BA-0409-1000-0000000FF1CE}" = Microsoft Groove MUI (English) 2013
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2013
"{90150000-00E1-0409-1000-0000000FF1CE}" = Microsoft Office OSM MUI (English) 2013
"{90150000-00E2-0409-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (English) 2013
"{90150000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2013
"{90150000-0117-0409-1000-0000000FF1CE}" = Microsoft Access Setup Metadata MUI (English) 2013
"{90150000-012B-0409-1000-0000000FF1CE}" = Microsoft Lync MUI (English) 2013
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{BC8E7DF0-4434-4688-B615-0A3E5FACFC26}" = Nitro Pro 9
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}" = iTunes
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Office15.PROPLUS" = Microsoft Office Professional Plus 2013
"WinRAR archiver" = WinRAR archiver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform
"{0E6ED660-498C-42F7-9EF4-FB0C96DFC01A}" = Snagit 9.1
"{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery
"{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions
"{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8}" = Adobe Photoshop Elements 8.0
"{208b9f9e-599d-427e-8b25-b06de190e578}" = Nero MediaHome 4 Essentials
"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 45
"{2AC01935-3774-4981-98C8-14E93C14372C}" = Windows Live UX Platform Language Pack
"{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skypeâ„¢ 6.11
"{53E10F4E-B361-45D7-8DBD-A6BF073236F0}" = LogMeIn
"{56D4499E-AC3E-4B8D-91C9-C700C148C44B}" = Google Drive
"{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer
"{5E094C92-6288-4F43-AA9A-D452D0218F3F}" = Windows Live Essentials
"{69FC3B9A-4149-43DB-A557-6ED0C8D8BA44}" = Nero MediaHome 4 Help
"{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7D69BF2B-6C60-4D0A-8A6C-BCFD025D5D84}" = calibre
"{7D72DAFF-DCB2-437B-BC22-4B2ABF21462B}" = Private Internet Access Support Files
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{89C7E0A7-4D9D-4DCC-8834-A9A2B92D7EBB}" = Photo Gallery
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{99EF387E-633E-4CFB-BFA3-AB961B685DDF}" = Nero MediaHome 4
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.05)
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B39A6825-EA20-43EA-AB2D-A6BC0298D9A1}" = Movie Maker
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C346E068-1C3E-4834-81E5-89FDDD84E4B5}" = Foxit PhantomPDF Business
"{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CC568376-DDDE-45F4-AC88-C39184455B8D}_is1" = Bigasoft MKV Converter 3.3.14.4128
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.9.322
"{DD7C5FC1-DCA5-487A-AF23-658B1C00243F}" = Photo Common
"{DDEAE484-D5FB-49CB-BD47-9512E8ACCA65}_is1" = SciLor's groovesharkâ„¢.com Downloader 0.4.12
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 8.0" = Adobe Photoshop Elements 8.0
"Air Video Server" = Air Video Server 2.4.6-beta3
"Avast" = avast! Free Antivirus
"Belarc Advisor" = Belarc Advisor 8.4
"Dell Dock" = Dell Dock
"Google Chrome" = Google Chrome
"Hauppauge MCE2005 Software Encoder" = Hauppauge MCE XP/Vista Software Encoder (2.0.27022)
"Hauppauge WinTV 7" = Hauppauge WinTV 7
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Mozilla Firefox 26.0 (x86 en-US)" = Mozilla Firefox 26.0 (x86 en-US)
"Mozilla Thunderbird 24.2.0 (x86 en-GB)" = Mozilla Thunderbird 24.2.0 (x86 en-GB)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 2.0" = Canon MP Navigator EX 2.0
"Photodex Presenter" = Photodex Presenter
"PowerISO" = PowerISO
"ProShow Gold" = ProShow Gold
"VisiPics_is1" = VisiPics V1.31
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-531570899-4083146332-835557271-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

< End of report >

 

All processes killed
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-531570899-4083146332-835557271-1005\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
C:\Users\Janny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk moved successfully.
C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe moved successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\belarc\ deleted successfully.
File Protocol\Handler\belarc - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File\Folder C:\FRST not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Janny
->Temp folder emptied: 297847570 bytes
->Temporary Internet Files folder emptied: 145702480 bytes
->Java cache emptied: 2147384 bytes
->FireFox cache emptied: 2312715 bytes
->Google Chrome cache emptied: 323773548 bytes
->Flash cache emptied: 1190 bytes

User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NeroMediaHomeUser.4
->Temp folder emptied: 28672 bytes
->Temporary Internet Files folder emptied: 195 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 249381 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 43257862 bytes
RecycleBin emptied: 1647720851 bytes

Total Files Cleaned = 2,349.00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Janny
->Java cache emptied: 0 bytes

User: LogMeInRemoteUser

User: NeroMediaHomeUser.4

User: Public

Total Java Files Cleaned = 0.00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Janny
->Flash cache emptied: 0 bytes

User: LogMeInRemoteUser

User: NeroMediaHomeUser.4

User: Public

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 01152014_201058

Files\Folders moved on Reboot...
C:\Users\Janny\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Janny\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
C:\Users\NeroMediaHomeUser.4\AppData\Local\Temp\etilqs_OpHeezhp3WQUKb3Qu1Ve moved successfully.
C:\Users\NeroMediaHomeUser.4\AppData\Local\Temp\etilqs_OpHeezhp3WQUKb3Qu1Ve-journal moved successfully.
C:\Users\NeroMediaHomeUser.4\AppData\Local\Temp\etilqs_RfRreBtMNHM187QctgO4 moved successfully.
C:\Users\NeroMediaHomeUser.4\AppData\Local\Temp\etilqs_RfRreBtMNHM187QctgO4-journal moved successfully.
File move failed. C:\Users\NeroMediaHomeUser.4\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

Results of screen317's Security Check version 0.99.79
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 45
Java version out of Date!
Adobe Flash Player 11.9.900.152
Adobe Reader XI
Mozilla Firefox (26.0)
Mozilla Thunderbird (24.2.0)
Google Chrome 31.0.1650.57
Google Chrome 31.0.1650.63
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

 

Farbar Service Scanner Version: 08-01-2014
Ran by Janny (administrator) on 15-01-2014 at 21:03:24
Running from "C:\Users\Janny\Desktop "
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

 

No log was produced with Eset.