PING.exe taking up system memory and CPU usage.

Hello, since yesterday my computer has been running a process called PING.exe*32 that can take up to 1,700,000K of memory and 70% cpu usage if left to its own devices. While my computer is functional, and doesn't appear to be in any other ways damaged, this does make running more intensive processes like games impractical. I can thwart it while doing normal tasks by keeping the task manager open and ending the process when it pops up, but it still pops up a few seconds later. I have run the latest version of MBAM, and it picked up three viruses and removed them, but that doesn't seem to have helped. I am running a Dell Inspiron 570 with Windows 7 Home Premium 64 bit. I have included in this post a scan log from both Malwarebytes, which I have had for some time now, and HijackThis, which I downloaded from your site's recommendation. Any help you guys could provide me with would be greatly appreciated!


Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 7810

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

9/27/2011 3:24:33 PM
mbam-log-2011-09-27 (15-24-33).txt

Scan type: Quick scan
Objects scanned: 197264
Time elapsed: 5 minute(s), 38 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
c:\program files (x86)\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Delete on reboot.

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM\COMPONENTS\WIDGITOOLBARFF.DLL (Adware.WidgiToolbar) -> Value: WIDGITOOLBARFF.DLL -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\program files (x86)\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.





Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:27:41 PM, on 9/27/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\AVG\AVG10\avgtray.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files (x86)\IObit\Game Booster\gbtray.exe
C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Users\Jacob\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Desktop Disc Tool] "c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" –auto-start
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Wisdom-soft ScreenHunter 5.1 Plus] 0
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: AutoClick.lnk = C:\Program Files (x86)\AutoClick\AutoClick.exe
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{424680D7-6577-48F1-9FCB-D46C6DE7B976}: NameServer = 207.217.126.81,207.217.120.83
O17 - HKLM\System\CS1\Services\Tcpip\..\{424680D7-6577-48F1-9FCB-D46C6DE7B976}: NameServer = 207.217.126.81,207.217.120.83
O17 - HKLM\System\CS2\Services\Tcpip\..\{424680D7-6577-48F1-9FCB-D46C6DE7B976}: NameServer = 207.217.126.81,207.217.120.83
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent\Dell Games\Dell Game Console\GameConsoleService.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: mental ray 3.9 Satellite for Autodesk 3ds Max Design 2012 64-bit - English 64-bit (mi-raysat_3dsmax2012_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
O23 - Service: Autodesk Moldflow Inventor Tool Suite Integration 2012 Job Manager (mitsijm2012) - Autodesk, Inc. - c:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 12624 bytes

Hello,
Welcome to WhatTheTech. My name is mowman, and I will be helping you fix your problems.

If you do not make a reply in 3 days, we will have to close your topic.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the Options button at the top bar of this topic and Track this topic. The topics you are tracking can be found by clicking on My Topics at the top of any page.

Please take note of some guidelines for this fix:

•Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
•If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
•Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
•Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply.
Only attach them if requested or if they do not fit into the post





Please download TDSSKiller.zip

• Extract it to your desktop
• Double click TDSSKiller.exe
• Press Start Scan
  
  • Only if Malicious objects are found then ensure Cure is selected
    If suspicious objects are found select skip
  • Then click Continue > Reboot now
• Copy and paste the log in your next reply
  
  • A copy of the log will be saved automatically to the root of the drive (typically C:\)

• Download OTL to your desktop.
• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top change it to Minimal Output.
• Check the boxes beside LOP Check and Purity Check.
• Under Custom Scan paste this in
  
  netsvcs
  drivers32
  %SYSTEMDRIVE%\*.*
  %systemroot%\Fonts\*.com
  %systemroot%\Fonts\*.dll
  %systemroot%\Fonts\*.ini
  %systemroot%\Fonts\*.ini2
  %systemroot%\Fonts\*.exe
  %systemroot%\system32\spool\prtprocs\w32x86\*.*
  %systemroot%\REPAIR\*.bak1
  %systemroot%\REPAIR\*.ini
  %systemroot%\system32\*.jpg
  %systemroot%\*.jpg
  %systemroot%\*.png
  %systemroot%\*.scr
  %systemroot%\*._sy
  %APPDATA%\Adobe\Update\*.*
  %ALLUSERSPROFILE%\Favorites\*.*
  %APPDATA%\Microsoft\*.*
  %PROGRAMFILES%\*.*
  %APPDATA%\Update\*.*
  %systemroot%\*. /mp /s
  CREATERESTOREPOINT
  %systemroot%\System32\config\*.sav
  %PROGRAMFILES%\bak. /s
  %systemroot%\system32\bak. /s
  %ALLUSERSPROFILE%\Start Menu\*.lnk /x
  %systemroot%\system32\config\systemprofile\*.dat /x
  %systemroot%\*.config
  %systemroot%\system32\*.db
  %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
  %USERPROFILE%\Desktop\*.exe
  %PROGRAMFILES%\Common Files\*.*
  %systemroot%\*.src
  %systemroot%\install\*.*
  %systemroot%\system32\DLL\*.*
  %systemroot%\system32\HelpFiles\*.*
  %systemroot%\system32\rundll\*.*
  %systemroot%\winn32\*.*
  %systemroot%\Java\*.*
  %systemroot%\system32\test\*.*
  %systemroot%\system32\Rundll32\*.*
  %systemroot%\AppPatch\Custom\*.*
  %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
  %PROGRAMFILES%\PC-Doctor\Downloads\*.*
  %PROGRAMFILES%\Internet Explorer\*.tmp
  %PROGRAMFILES%\Internet Explorer\*.dat
  %USERPROFILE%\My Documents\*.exe
  %USERPROFILE%\*.exe
  %systemroot%\ADDINS\*.*
  %systemroot%\assembly\*.bak2
  %systemroot%\Config\*.*
  %systemroot%\REPAIR\*.bak2
  %systemroot%\SECURITY\Database\*.sdb /x
  %systemroot%\SYSTEM\*.bak2
  %systemroot%\Web\*.bak2
  %systemroot%\Driver Cache\*.*
  %PROGRAMFILES%\Mozilla Firefox\0*.exe
  %ProgramFiles%\Microsoft Common\*.*
  %ProgramFiles%\TinyProxy.
  %USERPROFILE%\Favorites\*.url /x
  %systemroot%\system32\*.bk
  %systemroot%\*.te
  %systemroot%\system32\system32\*.*
  %ALLUSERSPROFILE%\*.dat /x
  %systemroot%\system32\drivers\*.rmv
  dir /b "%systemroot%\system32\*.exe" | find /i " " /c
  dir /b "%systemroot%\*.exe" | find /i " " /c
  %PROGRAMFILES%\Microsoft\*.*
  %systemroot%\System32\Wbem\proquota.exe
  %PROGRAMFILES%\Mozilla Firefox\*.dat
  %USERPROFILE%\Cookies\*.txt /x
  %SystemRoot%\system32\fonts\*.*
  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  
  
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
• You may need two posts to fit them both in.

Hello, here are the attached logs you requested, as well as a log from a Malwarebytes full computer scan I ran before you replied, which removed 5 objects, but seems to have again done nothing. The TDSSKiller also picked up nothing, and gave me no option to restart.



20:05:50.0834 3276 TDSS rootkit removing tool [removed] Sep 26 2011 18:56:43
20:05:51.0248 3276 ============================================================
20:05:51.0248 3276 Current date / time: 2011/09/27 20:05:51.0248
20:05:51.0248 3276 SystemInfo:
20:05:51.0248 3276
20:05:51.0248 3276 OS Version: 6.1.7601 ServicePack: 1.0
20:05:51.0248 3276 Product type: Workstation
20:05:51.0249 3276 ComputerName: JACOBPC
20:05:51.0249 3276 UserName: Jacob
20:05:51.0249 3276 Windows directory: C:\Windows
20:05:51.0249 3276 System windows directory: C:\Windows
20:05:51.0249 3276 Running under WOW64
20:05:51.0249 3276 Processor architecture: Intel x64
20:05:51.0249 3276 Number of processors: 3
20:05:51.0249 3276 Page size: 0x1000
20:05:51.0249 3276 Boot type: Normal boot
20:05:51.0249 3276 ============================================================
20:05:52.0040 3276 Initialize success
20:05:54.0384 2980 ============================================================
20:05:54.0384 2980 Scan started
20:05:54.0384 2980 Mode: Manual;
20:05:54.0384 2980 ============================================================
20:05:54.0951 2980 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
20:05:54.0953 2980 1394ohci - ok
20:05:54.0975 2980 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
20:05:54.0977 2980 ACPI - ok
20:05:55.0010 2980 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
20:05:55.0010 2980 AcpiPmi - ok
20:05:55.0051 2980 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
20:05:55.0054 2980 adp94xx - ok
20:05:55.0070 2980 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
20:05:55.0072 2980 adpahci - ok
20:05:55.0089 2980 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
20:05:55.0090 2980 adpu320 - ok
20:05:55.0150 2980 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
20:05:55.0153 2980 AFD - ok
20:05:55.0191 2980 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
20:05:55.0191 2980 agp440 - ok
20:05:55.0246 2980 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
20:05:55.0247 2980 aliide - ok
20:05:55.0284 2980 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
20:05:55.0284 2980 amdide - ok
20:05:55.0307 2980 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
20:05:55.0308 2980 AmdK8 - ok
20:05:55.0464 2980 amdkmdag (dcc8177244fe79c61c4e73c65e63922a) C:\Windows\system32\DRIVERS\atikmdag.sys
20:05:55.0505 2980 amdkmdag - ok
20:05:55.0545 2980 amdkmdap (7fe67d107329dc2cf89136a8e19bceb7) C:\Windows\system32\DRIVERS\atikmpag.sys
20:05:55.0546 2980 amdkmdap - ok
20:05:55.0566 2980 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
20:05:55.0566 2980 AmdPPM - ok
20:05:55.0603 2980 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
20:05:55.0604 2980 amdsata - ok
20:05:55.0623 2980 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
20:05:55.0625 2980 amdsbs - ok
20:05:55.0640 2980 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
20:05:55.0640 2980 amdxata - ok
20:05:55.0673 2980 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
20:05:55.0674 2980 AppID - ok
20:05:55.0713 2980 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
20:05:55.0714 2980 arc - ok
20:05:55.0722 2980 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
20:05:55.0723 2980 arcsas - ok
20:05:55.0756 2980 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
20:05:55.0756 2980 AsyncMac - ok
20:05:55.0792 2980 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
20:05:55.0792 2980 atapi - ok
20:05:55.0812 2980 AtiHdmiService (fb7602c5c508be281368aae0b61b51c6) C:\Windows\system32\drivers\AtiHdmi.sys
20:05:55.0813 2980 AtiHdmiService - ok
20:05:55.0963 2980 atikmdag (dcc8177244fe79c61c4e73c65e63922a) C:\Windows\system32\DRIVERS\atikmdag.sys
20:05:56.0005 2980 atikmdag - ok
20:05:56.0050 2980 AtiPcie (7c5d273e29dcc5505469b299c6f29163) C:\Windows\system32\DRIVERS\AtiPcie.sys
20:05:56.0051 2980 AtiPcie - ok
20:05:56.0097 2980 AVGIDSDriver (e6671e90d38c88764412e07c9d9b3d63) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
20:05:56.0098 2980 AVGIDSDriver - ok
20:05:56.0132 2980 AVGIDSEH (1553b388e0f0462c25ad8f30c3c29e83) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
20:05:56.0133 2980 AVGIDSEH - ok
20:05:56.0142 2980 AVGIDSFilter (dca426a66739e75f51a72160dfb945ad) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
20:05:56.0142 2980 AVGIDSFilter - ok
20:05:56.0186 2980 Avgldx64 (ff7383388a7d2283dae5831abc2b0720) C:\Windows\system32\DRIVERS\avgldx64.sys
20:05:56.0188 2980 Avgldx64 - ok
20:05:56.0209 2980 Avgmfx64 (997d002827d3e3dcbbb25bf46db161ab) C:\Windows\system32\DRIVERS\avgmfx64.sys
20:05:56.0210 2980 Avgmfx64 - ok
20:05:56.0241 2980 Avgrkx64 (bccfe3374c887075cde2ac8fdb1cb2f8) C:\Windows\system32\DRIVERS\avgrkx64.sys
20:05:56.0241 2980 Avgrkx64 - ok
20:05:56.0304 2980 Avgtdia (0d49adcebe243b79366ea523b647519a) C:\Windows\system32\DRIVERS\avgtdia.sys
20:05:56.0306 2980 Avgtdia - ok
20:05:56.0356 2980 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
20:05:56.0359 2980 b06bdrv - ok
20:05:56.0387 2980 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
20:05:56.0388 2980 b57nd60a - ok
20:05:56.0425 2980 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
20:05:56.0426 2980 Beep - ok
20:05:56.0458 2980 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
20:05:56.0458 2980 blbdrive - ok
20:05:56.0491 2980 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
20:05:56.0492 2980 bowser - ok
20:05:56.0511 2980 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:05:56.0512 2980 BrFiltLo - ok
20:05:56.0532 2980 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:05:56.0532 2980 BrFiltUp - ok
20:05:56.0554 2980 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
20:05:56.0555 2980 Brserid - ok
20:05:56.0563 2980 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
20:05:56.0564 2980 BrSerWdm - ok
20:05:56.0572 2980 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
20:05:56.0573 2980 BrUsbMdm - ok
20:05:56.0581 2980 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
20:05:56.0582 2980 BrUsbSer - ok
20:05:56.0600 2980 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
20:05:56.0601 2980 BTHMODEM - ok
20:05:56.0623 2980 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
20:05:56.0623 2980 cdfs - ok
20:05:56.0663 2980 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
20:05:56.0664 2980 cdrom - ok
20:05:56.0675 2980 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
20:05:56.0676 2980 circlass - ok
20:05:56.0700 2980 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
20:05:56.0702 2980 CLFS - ok
20:05:56.0733 2980 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
20:05:56.0734 2980 CmBatt - ok
20:05:56.0777 2980 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
20:05:56.0778 2980 cmdide - ok
20:05:56.0898 2980 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
20:05:56.0901 2980 CNG - ok
20:05:56.0932 2980 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
20:05:56.0932 2980 Compbatt - ok
20:05:56.0976 2980 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
20:05:56.0976 2980 CompositeBus - ok
20:05:57.0029 2980 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
20:05:57.0030 2980 crcdisk - ok
20:05:57.0106 2980 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
20:05:57.0107 2980 DfsC - ok
20:05:57.0138 2980 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
20:05:57.0138 2980 discache - ok
20:05:57.0178 2980 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
20:05:57.0179 2980 Disk - ok
20:05:57.0242 2980 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
20:05:57.0243 2980 drmkaud - ok
20:05:57.0301 2980 dtsoftbus01 (fb9bef3401ee5ecc2603311b9c64f44a) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
20:05:57.0302 2980 dtsoftbus01 - ok
20:05:57.0348 2980 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
20:05:57.0353 2980 DXGKrnl - ok
20:05:57.0429 2980 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
20:05:57.0445 2980 ebdrv - ok
20:05:57.0470 2980 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
20:05:57.0477 2980 elxstor - ok
20:05:57.0516 2980 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
20:05:57.0517 2980 ErrDev - ok
20:05:57.0534 2980 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
20:05:57.0537 2980 exfat - ok
20:05:57.0551 2980 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
20:05:57.0555 2980 fastfat - ok
20:05:57.0571 2980 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
20:05:57.0572 2980 fdc - ok
20:05:57.0593 2980 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
20:05:57.0596 2980 FileInfo - ok
20:05:57.0612 2980 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
20:05:57.0614 2980 Filetrace - ok
20:05:57.0645 2980 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
20:05:57.0646 2980 flpydisk - ok
20:05:57.0688 2980 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
20:05:57.0692 2980 FltMgr - ok
20:05:57.0714 2980 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
20:05:57.0716 2980 FsDepends - ok
20:05:57.0729 2980 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
20:05:57.0731 2980 Fs_Rec - ok
20:05:57.0770 2980 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
20:05:57.0774 2980 fvevol - ok
20:05:57.0794 2980 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
20:05:57.0796 2980 gagp30kx - ok
20:05:57.0848 2980 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
20:05:57.0850 2980 hamachi - ok
20:05:57.0886 2980 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
20:05:57.0888 2980 hcw85cir - ok
20:05:57.0928 2980 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
20:05:57.0930 2980 HDAudBus - ok
20:05:57.0938 2980 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
20:05:57.0940 2980 HidBatt - ok
20:05:57.0958 2980 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
20:05:57.0960 2980 HidBth - ok
20:05:57.0985 2980 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
20:05:57.0989 2980 HidIr - ok
20:05:58.0025 2980 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
20:05:58.0027 2980 HidUsb - ok
20:05:58.0049 2980 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
20:05:58.0051 2980 HpSAMD - ok
20:05:58.0100 2980 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
20:05:58.0108 2980 HTTP - ok
20:05:58.0151 2980 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
20:05:58.0153 2980 hwpolicy - ok
20:05:58.0187 2980 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
20:05:58.0190 2980 i8042prt - ok
20:05:58.0211 2980 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
20:05:58.0216 2980 iaStorV - ok
20:05:58.0242 2980 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
20:05:58.0244 2980 iirsp - ok
20:05:58.0305 2980 IntcAzAudAddService (9526f32b8a76f8dc25a1587400e30084) C:\Windows\system32\drivers\RTKVHD64.sys
20:05:58.0330 2980 IntcAzAudAddService - ok
20:05:58.0346 2980 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
20:05:58.0348 2980 intelide - ok
20:05:58.0370 2980 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
20:05:58.0372 2980 intelppm - ok
20:05:58.0417 2980 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:05:58.0419 2980 IpFilterDriver - ok
20:05:58.0445 2980 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
20:05:58.0447 2980 IPMIDRV - ok
20:05:58.0467 2980 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
20:05:58.0470 2980 IPNAT - ok
20:05:58.0493 2980 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
20:05:58.0495 2980 IRENUM - ok
20:05:58.0528 2980 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
20:05:58.0530 2980 isapnp - ok
20:05:58.0553 2980 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
20:05:58.0557 2980 iScsiPrt - ok
20:05:58.0579 2980 k57nd60a (d85f3f18e44f7447b5f1ba5c85baeb7c) C:\Windows\system32\DRIVERS\k57nd60a.sys
20:05:58.0584 2980 k57nd60a - ok
20:05:58.0615 2980 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
20:05:58.0617 2980 kbdclass - ok
20:05:58.0634 2980 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
20:05:58.0636 2980 kbdhid - ok
20:05:58.0655 2980 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
20:05:58.0657 2980 KSecDD - ok
20:05:58.0693 2980 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
20:05:58.0696 2980 KSecPkg - ok
20:05:58.0714 2980 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
20:05:58.0716 2980 ksthunk - ok
20:05:58.0753 2980 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
20:05:58.0755 2980 lltdio - ok
20:05:58.0783 2980 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
20:05:58.0786 2980 LSI_FC - ok
20:05:58.0795 2980 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
20:05:58.0798 2980 LSI_SAS - ok
20:05:58.0808 2980 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:05:58.0810 2980 LSI_SAS2 - ok
20:05:58.0824 2980 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:05:58.0826 2980 LSI_SCSI - ok
20:05:58.0844 2980 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
20:05:58.0846 2980 luafv - ok
20:05:58.0858 2980 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
20:05:58.0860 2980 megasas - ok
20:05:58.0881 2980 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
20:05:58.0885 2980 MegaSR - ok
20:05:58.0935 2980 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
20:05:58.0937 2980 Modem - ok
20:05:58.0976 2980 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
20:05:58.0978 2980 monitor - ok
20:05:59.0045 2980 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
20:05:59.0047 2980 mouclass - ok
20:05:59.0084 2980 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
20:05:59.0086 2980 mouhid - ok
20:05:59.0122 2980 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
20:05:59.0124 2980 mountmgr - ok
20:05:59.0159 2980 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
20:05:59.0162 2980 mpio - ok
20:05:59.0178 2980 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
20:05:59.0180 2980 mpsdrv - ok
20:05:59.0217 2980 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
20:05:59.0220 2980 MRxDAV - ok
20:05:59.0256 2980 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:05:59.0259 2980 mrxsmb - ok
20:05:59.0301 2980 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:05:59.0306 2980 mrxsmb10 - ok
20:05:59.0319 2980 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:05:59.0322 2980 mrxsmb20 - ok
20:05:59.0356 2980 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
20:05:59.0358 2980 msahci - ok
20:05:59.0394 2980 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
20:05:59.0396 2980 msdsm - ok
20:05:59.0426 2980 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
20:05:59.0428 2980 Msfs - ok
20:05:59.0439 2980 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
20:05:59.0441 2980 mshidkmdf - ok
20:05:59.0477 2980 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
20:05:59.0479 2980 msisadrv - ok
20:05:59.0516 2980 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
20:05:59.0517 2980 MSKSSRV - ok
20:05:59.0526 2980 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
20:05:59.0528 2980 MSPCLOCK - ok
20:05:59.0543 2980 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
20:05:59.0545 2980 MSPQM - ok
20:05:59.0593 2980 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
20:05:59.0598 2980 MsRPC - ok
20:05:59.0612 2980 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
20:05:59.0614 2980 mssmbios - ok
20:05:59.0631 2980 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
20:05:59.0633 2980 MSTEE - ok
20:05:59.0647 2980 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
20:05:59.0649 2980 MTConfig - ok
20:05:59.0665 2980 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
20:05:59.0667 2980 Mup - ok
20:05:59.0695 2980 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
20:05:59.0699 2980 NativeWifiP - ok
20:05:59.0761 2980 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
20:05:59.0770 2980 NDIS - ok
20:05:59.0784 2980 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
20:05:59.0786 2980 NdisCap - ok
20:05:59.0822 2980 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
20:05:59.0824 2980 NdisTapi - ok
20:05:59.0869 2980 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
20:05:59.0871 2980 Ndisuio - ok
20:05:59.0910 2980 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
20:05:59.0913 2980 NdisWan - ok
20:05:59.0949 2980 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
20:05:59.0951 2980 NDProxy - ok
20:05:59.0969 2980 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
20:05:59.0971 2980 NetBIOS - ok
20:06:00.0010 2980 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
20:06:00.0014 2980 NetBT - ok
20:06:00.0066 2980 netr28x (b72bb9496a126fcfc7fc5945ded9b411) C:\Windows\system32\DRIVERS\netr28x.sys
20:06:00.0073 2980 netr28x - ok
20:06:00.0111 2980 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
20:06:00.0113 2980 nfrd960 - ok
20:06:00.0123 2980 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
20:06:00.0125 2980 Npfs - ok
20:06:00.0148 2980 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
20:06:00.0150 2980 nsiproxy - ok
20:06:00.0216 2980 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
20:06:00.0239 2980 Ntfs - ok
20:06:00.0269 2980 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
20:06:00.0270 2980 Null - ok
20:06:00.0304 2980 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
20:06:00.0307 2980 nvraid - ok
20:06:00.0338 2980 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
20:06:00.0341 2980 nvstor - ok
20:06:00.0360 2980 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
20:06:00.0362 2980 nv_agp - ok
20:06:00.0395 2980 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
20:06:00.0398 2980 ohci1394 - ok
20:06:00.0429 2980 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
20:06:00.0432 2980 Parport - ok
20:06:00.0473 2980 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
20:06:00.0476 2980 partmgr - ok
20:06:00.0547 2980 PCDSRVC{1E208CE0-FB7451FF-06020101}_0 (7317a0b550f7ac0223b7070897670476) c:\program files\dell support center\pcdsrvc_x64.pkms
20:06:00.0549 2980 PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - ok
20:06:00.0580 2980 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
20:06:00.0582 2980 pci - ok
20:06:00.0611 2980 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
20:06:00.0613 2980 pciide - ok
20:06:00.0633 2980 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
20:06:00.0636 2980 pcmcia - ok
20:06:00.0657 2980 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
20:06:00.0659 2980 pcw - ok
20:06:00.0684 2980 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
20:06:00.0691 2980 PEAUTH - ok
20:06:00.0761 2980 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
20:06:00.0764 2980 PptpMiniport - ok
20:06:00.0772 2980 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
20:06:00.0775 2980 Processor - ok
20:06:00.0833 2980 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
20:06:00.0835 2980 Psched - ok
20:06:00.0876 2980 PxHlpa64 (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys
20:06:00.0878 2980 PxHlpa64 - ok
20:06:00.0917 2980 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
20:06:00.0940 2980 ql2300 - ok
20:06:00.0948 2980 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
20:06:00.0951 2980 ql40xx - ok
20:06:00.0965 2980 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
20:06:00.0967 2980 QWAVEdrv - ok
20:06:00.0980 2980 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
20:06:00.0982 2980 RasAcd - ok
20:06:00.0999 2980 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
20:06:01.0001 2980 RasAgileVpn - ok
20:06:01.0041 2980 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:06:01.0043 2980 Rasl2tp - ok
20:06:01.0064 2980 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
20:06:01.0066 2980 RasPppoe - ok
20:06:01.0078 2980 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
20:06:01.0080 2980 RasSstp - ok
20:06:01.0124 2980 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
20:06:01.0128 2980 rdbss - ok
20:06:01.0141 2980 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
20:06:01.0143 2980 rdpbus - ok
20:06:01.0172 2980 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:06:01.0173 2980 RDPCDD - ok
20:06:01.0190 2980 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
20:06:01.0191 2980 RDPENCDD - ok
20:06:01.0205 2980 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
20:06:01.0207 2980 RDPREFMP - ok
20:06:01.0245 2980 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
20:06:01.0248 2980 RDPWD - ok
20:06:01.0291 2980 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
20:06:01.0294 2980 rdyboost - ok
20:06:01.0316 2980 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
20:06:01.0318 2980 rspndr - ok
20:06:01.0357 2980 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
20:06:01.0360 2980 sbp2port - ok
20:06:01.0402 2980 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
20:06:01.0403 2980 scfilter - ok
20:06:01.0438 2980 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
20:06:01.0440 2980 secdrv - ok
20:06:01.0461 2980 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
20:06:01.0463 2980 Serenum - ok
20:06:01.0483 2980 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
20:06:01.0485 2980 Serial - ok
20:06:01.0499 2980 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
20:06:01.0500 2980 sermouse - ok
20:06:01.0538 2980 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
20:06:01.0540 2980 sffdisk - ok
20:06:01.0557 2980 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
20:06:01.0559 2980 sffp_mmc - ok
20:06:01.0582 2980 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
20:06:01.0583 2980 sffp_sd - ok
20:06:01.0602 2980 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
20:06:01.0603 2980 sfloppy - ok
20:06:01.0642 2980 Sftfs (a40abfdcb75f835fdf3ce0cc64e4250d) C:\Windows\system32\DRIVERS\Sftfslh.sys
20:06:01.0650 2980 Sftfs - ok
20:06:01.0696 2980 Sftplay (411769ed1cb12d2b44217734347bdb7a) C:\Windows\system32\DRIVERS\Sftplaylh.sys
20:06:01.0700 2980 Sftplay - ok
20:06:01.0740 2980 Sftredir (a14d0df34bbb00ea94da16193d0c7957) C:\Windows\system32\DRIVERS\Sftredirlh.sys
20:06:01.0742 2980 Sftredir - ok
20:06:01.0754 2980 Sftvol (393b22addd89979eb1c60898f51c3648) C:\Windows\system32\DRIVERS\Sftvollh.sys
20:06:01.0756 2980 Sftvol - ok
20:06:01.0779 2980 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:06:01.0781 2980 SiSRaid2 - ok
20:06:01.0790 2980 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
20:06:01.0792 2980 SiSRaid4 - ok
20:06:01.0814 2980 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
20:06:01.0816 2980 Smb - ok
20:06:01.0847 2980 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
20:06:01.0848 2980 spldr - ok
20:06:01.0895 2980 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
20:06:01.0900 2980 srv - ok
20:06:01.0933 2980 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
20:06:01.0938 2980 srv2 - ok
20:06:01.0954 2980 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
20:06:01.0957 2980 srvnet - ok
20:06:01.0996 2980 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
20:06:01.0998 2980 stexstor - ok
20:06:02.0041 2980 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
20:06:02.0043 2980 swenum - ok
20:06:02.0107 2980 Tcpip (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\drivers\tcpip.sys
20:06:02.0131 2980 Tcpip - ok
20:06:02.0159 2980 TCPIP6 (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\DRIVERS\tcpip.sys
20:06:02.0168 2980 TCPIP6 - ok
20:06:02.0211 2980 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
20:06:02.0212 2980 tcpipreg - ok
20:06:02.0232 2980 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
20:06:02.0233 2980 TDPIPE - ok
20:06:02.0250 2980 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
20:06:02.0251 2980 TDTCP - ok
20:06:02.0287 2980 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
20:06:02.0289 2980 tdx - ok
20:06:02.0308 2980 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
20:06:02.0310 2980 TermDD - ok
20:06:02.0356 2980 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:06:02.0358 2980 tssecsrv - ok
20:06:02.0410 2980 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
20:06:02.0412 2980 TsUsbFlt - ok
20:06:02.0466 2980 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
20:06:02.0469 2980 tunnel - ok
20:06:02.0486 2980 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
20:06:02.0488 2980 uagp35 - ok
20:06:02.0530 2980 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
20:06:02.0534 2980 udfs - ok
20:06:02.0554 2980 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
20:06:02.0556 2980 uliagpkx - ok
20:06:02.0608 2980 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
20:06:02.0610 2980 umbus - ok
20:06:02.0625 2980 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
20:06:02.0627 2980 UmPass - ok
20:06:02.0677 2980 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys
20:06:02.0680 2980 usbaudio - ok
20:06:02.0690 2980 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
20:06:02.0693 2980 usbccgp - ok
20:06:02.0734 2980 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
20:06:02.0736 2980 usbcir - ok
20:06:02.0754 2980 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
20:06:02.0756 2980 usbehci - ok
20:06:02.0778 2980 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
20:06:02.0783 2980 usbhub - ok
20:06:02.0798 2980 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
20:06:02.0800 2980 usbohci - ok
20:06:02.0818 2980 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
20:06:02.0820 2980 usbprint - ok
20:06:02.0857 2980 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:06:02.0858 2980 USBSTOR - ok
20:06:02.0876 2980 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
20:06:02.0878 2980 usbuhci - ok
20:06:02.0901 2980 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
20:06:02.0904 2980 usbvideo - ok
20:06:02.0924 2980 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
20:06:02.0925 2980 vdrvroot - ok
20:06:02.0952 2980 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
20:06:02.0954 2980 vga - ok
20:06:02.0973 2980 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
20:06:02.0975 2980 VgaSave - ok
20:06:02.0999 2980 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
20:06:03.0003 2980 vhdmp - ok
20:06:03.0036 2980 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
20:06:03.0037 2980 viaide - ok
20:06:03.0046 2980 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
20:06:03.0049 2980 volmgr - ok
20:06:03.0088 2980 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
20:06:03.0093 2980 volmgrx - ok
20:06:03.0107 2980 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
20:06:03.0112 2980 volsnap - ok
20:06:03.0140 2980 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
20:06:03.0143 2980 vsmraid - ok
20:06:03.0153 2980 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
20:06:03.0155 2980 vwifibus - ok
20:06:03.0169 2980 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
20:06:03.0171 2980 vwififlt - ok
20:06:03.0187 2980 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
20:06:03.0189 2980 WacomPen - ok
20:06:03.0202 2980 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
20:06:03.0204 2980 WANARP - ok
20:06:03.0208 2980 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
20:06:03.0209 2980 Wanarpv6 - ok
20:06:03.0247 2980 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
20:06:03.0248 2980 Wd - ok
20:06:03.0277 2980 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
20:06:03.0284 2980 Wdf01000 - ok
20:06:03.0312 2980 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
20:06:03.0312 2980 WfpLwf - ok
20:06:03.0367 2980 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys
20:06:03.0368 2980 WimFltr - ok
20:06:03.0377 2980 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
20:06:03.0377 2980 WIMMount - ok
20:06:03.0438 2980 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
20:06:03.0439 2980 WmiAcpi - ok
20:06:03.0484 2980 WMP110 (a64e13873806fbdb9c0081002336ff72) C:\Windows\system32\DRIVERS\WMP110.sys
20:06:03.0489 2980 WMP110 - ok
20:06:03.0511 2980 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
20:06:03.0511 2980 ws2ifsl - ok
20:06:03.0553 2980 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
20:06:03.0555 2980 WudfPf - ok
20:06:03.0575 2980 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:06:03.0576 2980 WUDFRd - ok
20:06:03.0616 2980 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
20:06:03.0624 2980 \Device\Harddisk0\DR0 - ok
20:06:03.0627 2980 Boot (0x1200) (940debf7ee7dd4ad4cc168bbd8f9eb1c) \Device\Harddisk0\DR0\Partition0
20:06:03.0628 2980 \Device\Harddisk0\DR0\Partition0 - ok
20:06:03.0638 2980 Boot (0x1200) (76e9ec331290c1db31e9781b14b86875) \Device\Harddisk0\DR0\Partition1
20:06:03.0639 2980 \Device\Harddisk0\DR0\Partition1 - ok
20:06:03.0640 2980 ============================================================
20:06:03.0640 2980 Scan finished
20:06:03.0640 2980 ============================================================
20:06:03.0650 6380 Detected object count: 0
20:06:03.0650 6380 Actual detected object count: 0









OTL logfile created on: 9/27/2011 8:12:38 PM - Run 1
OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\Jacob\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 1.26 Gb Available Physical Memory | 33.68% Memory free
7.50 Gb Paging File | 4.62 Gb Available in Paging File | 61.66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 454.28 Gb Total Space | 272.02 Gb Free Space | 59.88% Space Free | Partition Type: NTFS
Drive Z: | 39.10 Mb Total Space | 30.06 Mb Free Space | 76.89% Space Free | Partition Type: FAT

Computer Name: JACOBPC | User Name: Jacob | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Jacob\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (SoftThinks - Dell)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe ()
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (SoftThinks SAS)
PRC - C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
PRC - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (SoftThinks - Dell)
PRC - C:\Program Files (x86)\IObit\Game Booster\gbtray.exe (IObit)
PRC - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
PRC - C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe ()
PRC - C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe ()
PRC - C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (Veoh Networks)
PRC - C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe ()
PRC - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
PRC - C:\Windows\SysWOW64\PING.EXE (Microsoft Corporation)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Steam\bin\libcef.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avcodec-52.dll ()
MOD - C:\Program Files (x86)\Steam\bin\chromehtml.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avformat-52.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avutil-50.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7f94f6b13f92f1e093716d3e15bf86d1\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c60906a715473ceccf93f0559527e84d\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\5566b57732d9edea236f54d06149835a\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6124dbbfd45927c4a6226d6e6bca6253\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\ebdaeeb5ef1a6209d67a2f70fcaf5cd5\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\0d43c5e77ee7b8466700b16d7e7d4bb7\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9e87dd8fe5d0f925d80a6a6eaf74fdb9\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\16d2854bf69d59d94e64a918365705f1\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\36d0ed3f2a65b9d67933ed46dfcd2ccb\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\3da7c6c1a0f26ae91883fd8b03ec192d\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\16b68fcaff063835ae0ee348a1201f2a\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe ()
MOD - C:\Program Files (x86)\IObit\Game Booster\sqlite3.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
MOD - C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe ()
MOD - \\.\globalroot\systemroot\syswow64\mswsock.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtWebKit4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtGui4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtXmlPatterns4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtCore4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtScript4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\QtNetwork4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\phonon4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\imageformats\qjpeg4.dll ()
MOD - C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\imageformats\qgif4.dll ()
MOD - C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe ()
MOD - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
MOD - C:\Program Files (x86)\Roxio\Roxio Burn\BBEngineAS.dll ()
MOD - c:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\SQLite352.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (FLEXnet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (mi-raysat_3dsmax2012_64) – C:\Program Files\Autodesk\3ds Max Design 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe ()
SRV:64bit: - (mitsijm2012) – c:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe (Autodesk, Inc.)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV - (Akamai) – c:\Program Files (x86)\Common Files\Akamai\netsession_win_b31de1e.dll ()
SRV - (SftService) – C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (SoftThinks SAS)
SRV - (AVGIDSAgent) – C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (Application Updater) – C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Hamachi2Svc) – C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (avgwd) – C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (GoToAssist) – C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (sftvsa) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (GameConsoleService) – C:\Program Files (x86)\WildTangent\Dell Games\Dell Game Console\GameConsoleService.exe (WildTangent, Inc.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (PCDSRVC{1E208CE0-FB7451FF-06020101}_0) – c:\Program Files\Dell Support Center\pcdsrvc_x64.pkms (PC-Doctor, Inc.)
DRV:64bit: - (dtsoftbus01) – C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (AVGIDSDriver) – C:\Windows\SysNative\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV:64bit: - (Avgtdia) – C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgrkx64) – C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (Avgmfx64) – C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSEH) – C:\Windows\SysNative\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV:64bit: - (AVGIDSFilter) – C:\Windows\SysNative\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV:64bit: - (Avgldx64) – C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (Sftvol) – C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:64bit: - (Sftredir) – C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) – C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:64bit: - (Sftfs) – C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:64bit: - (AtiHdmiService) – C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (k57nd60a) Broadcom NetLink ™ – C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (netr28x) – C:\Windows\SysNative\drivers\netr28x.sys (Ralink Technology, Corp.)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (AtiPcie) AMD PCI Express (3GIO) – C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV:64bit: - (hamachi) – C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
DRV:64bit: - (WMP110) – C:\Windows\SysNative\drivers\WMP110.sys (Atheros Communications, Inc.)
DRV:64bit: - (WimFltr) – C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.themeparkreview.com/"
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="


FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG10\Firefox4\ [2011/09/15 08:20:55 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/07 16:10:59 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/08/03 22:23:10 | 000,000,000 | —D | M]

[2010/12/26 17:47:57 | 000,000,000 | —D | M] (No name found) – C:\Users\Jacob\AppData\Roaming\Mozilla\Extensions
[2011/09/08 17:07:50 | 000,000,000 | —D | M] (No name found) – C:\Users\Jacob\AppData\Roaming\Mozilla\Firefox\Profiles\etir9734.default\extensions
[2011/08/01 18:31:05 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\Jacob\AppData\Roaming\Mozilla\Firefox\Profiles\etir9734.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/09/08 17:07:50 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\Jacob\AppData\Roaming\Mozilla\Firefox\Profiles\etir9734.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011/06/13 21:02:37 | 000,000,000 | —D | M] (German Dictionary) – C:\Users\Jacob\AppData\Roaming\Mozilla\Firefox\Profiles\etir9734.default\extensions\[removed]
[2010/10/20 15:40:12 | 000,000,923 | —- | M] () – C:\Users\Jacob\AppData\Roaming\Mozilla\Firefox\Profiles\etir9734.default\searchplugins\conduit.xml
[2011/09/14 17:11:46 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/08/24 21:38:13 | 000,000,000 | —D | M] (Click to call with Skype) – C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2010/12/29 14:34:30 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/09/15 08:20:55 | 000,000,000 | —D | M] (AVG Safe Search) – C:\PROGRAM FILES (X86)\AVG\AVG10\FIREFOX4
[2011/09/26 23:02:16 | 000,000,000 | —D | M] (Widgi Toolbar Platform) – C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM
[2011/08/24 16:52:46 | 000,000,000 | —D | M] (IObit Toolbar) – C:\PROGRAM FILES (X86)\IOBIT TOOLBAR\FF
() (No name found) – C:\USERS\JACOB\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ETIR9734.DEFAULT\EXTENSIONS\{25A1388B-6B18-46C3-BEBA-A81915D0DE8F}.XPI
() (No name found) – C:\USERS\JACOB\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ETIR9734.DEFAULT\EXTENSIONS\{DD3D7613-0246-469D-BC65-2A3CC1668ADC}.XPI
() (No name found) – C:\USERS\JACOB\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ETIR9734.DEFAULT\EXTENSIONS\[removed]
[2011/09/07 16:10:59 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/06/04 22:20:14 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

========== Chrome ==========


Hosts file not found
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Desktop Disc Tool] c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" File not found
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [VeohPlugin] C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (Veoh Networks)
O4 - HKCU..\Run: [Wisdom-soft ScreenHunter 5.1 Plus] 0 File not found
O4 - HKLM..\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe (Dell)
O4 - Startup: C:\Users\Jacob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutoClick.lnk = C:\Program Files (x86)\AutoClick\AutoClick.exe ()
O4 - Startup: C:\Users\Jacob\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000007 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000008 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000009 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000010 - mmswsock.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - %SystemRoot%\System32\winrnr.dll File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstLS&…#92;x00

(Continued from previous post)


O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.0.0)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{424680D7-6577-48F1-9FCB-D46C6DE7B976}: NameServer = 207.217.126.81,207.217.120.83
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/05/31 06:07:35 | 000,000,000 | —D | M] - C:\Autodesk – [ NTFS ]
O32 - AutoRun File - [2010/08/27 10:50:56 | 000,001,050 | —- | M] () - Z:\AUTOEXEC.BAT – [ FAT ]
O32 - AutoRun File - [2010/08/27 10:50:56 | 000,001,050 | —- | M] () - Z:\AUTOEXEC.UP – [ FAT ]
O33 - MountPoints2\{4543fe8e-fc99-11df-b665-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4543fe8e-fc99-11df-b665-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgchsva.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O35 - HKCU\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – "%1" %*


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/09/27 20:03:49 | 001,548,080 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe
[2011/09/27 20:03:21 | 000,582,656 | —- | C] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/26 23:12:36 | 000,000,000 | —D | C] – C:\Windows\SysWow64\SL-SL
[2011/09/26 19:29:15 | 000,000,000 | —D | C] – C:\Windows\system64
[2011/09/24 19:28:32 | 000,404,640 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/09/24 19:28:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation
[2011/09/20 21:39:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE
[2011/09/20 15:34:45 | 000,000,000 | —D | C] – C:\Users\Jacob\Documents\Arduino
[2011/09/20 15:34:45 | 000,000,000 | —D | C] – C:\Users\Jacob\AppData\Roaming\Arduino
[2011/09/20 15:34:18 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\arduino-0022
[2011/09/18 20:15:21 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\Facility
[2011/09/18 12:32:21 | 000,000,000 | R–D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Support Center
[2011/09/18 12:31:48 | 000,000,000 | —D | C] – C:\Program Files\Dell Support Center
[2011/09/17 17:41:12 | 000,000,000 | —D | C] – C:\Users\Jacob\AppData\Roaming\MathWorks
[2011/09/17 17:41:02 | 000,000,000 | —D | C] – C:\Users\Jacob\Documents\MATLAB
[2011/09/17 17:36:50 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB
[2011/09/17 17:28:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\MATLAB
[2011/09/14 17:12:39 | 000,252,296 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2011/09/14 17:12:39 | 000,188,808 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2011/09/14 17:12:38 | 000,188,808 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2011/09/14 17:12:30 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/09/14 17:04:15 | 021,323,656 | —- | C] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/09/13 22:06:00 | 000,000,000 | —D | C] – C:\ProgramData\Trymedia
[2011/09/13 22:05:08 | 000,000,000 | —D | C] – C:\GameHouse Games
[2011/09/13 22:05:04 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameHouse
[2011/09/13 22:04:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\RealArcade
[2011/09/06 06:30:23 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\BEST Stuff
[2011/09/04 21:57:41 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/09/27 20:12:13 | 000,000,153 | —- | M] () – C:\ADRInfos.xml
[2011/09/27 20:03:22 | 000,582,656 | —- | M] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/27 20:03:19 | 001,529,134 | —- | M] () – C:\Users\Jacob\Desktop\tdsskiller.zip
[2011/09/27 20:01:28 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/09/27 20:01:28 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/09/27 19:53:52 | 000,000,892 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/09/27 19:53:09 | 000,000,506 | —- | M] () – C:\Windows\tasks\SystemToolsDailyTest.job
[2011/09/27 19:53:02 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/09/27 19:52:54 | 3019,091,968 | -HS- | M] () – C:\hiberfil.sys
[2011/09/27 19:19:35 | 000,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/09/27 17:12:32 | 133,531,579 | —- | M] () – C:\Windows\SysNative\drivers\AVG\incavi.avm
[2011/09/27 09:56:00 | 000,000,402 | -H– | M] () – C:\Windows\tasks\Norton Security Scan for Jacob.job
[2011/09/26 22:28:13 | 000,000,564 | —- | M] () – C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2011/09/26 21:15:54 | 000,002,058 | —- | M] () – C:\Users\Jacob\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/09/26 18:59:02 | 001,548,080 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe
[2011/09/25 18:56:42 | 000,773,944 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/09/25 18:56:42 | 000,660,732 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/09/25 18:56:42 | 000,121,402 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/09/25 18:56:37 | 000,773,944 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/09/24 19:28:32 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/09/24 18:58:51 | 000,312,707 | —- | M] () – C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2011/09/20 15:19:43 | 000,092,609 | —- | M] () – C:\Users\Jacob\Desktop\eediots.png
[2011/09/19 19:08:38 | 089,688,842 | —- | M] () – C:\Users\Jacob\Desktop\arduino-0022.zip
[2011/09/18 20:22:37 | 000,000,336 | —- | M] () – C:\Users\Jacob\Desktop\server.properties
[2011/09/18 20:14:08 | 000,802,375 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2011/09/18 20:09:51 | 005,812,145 | —- | M] () – C:\Users\Jacob\Desktop\Facility.zip
[2011/09/17 18:53:49 | 000,003,735 | —- | M] () – C:\Users\Jacob\Desktop\smart_constraint.zip
[2011/09/17 17:36:50 | 000,001,187 | —- | M] () – C:\Users\Public\Desktop\MATLAB R2010bSP1.lnk
[2011/09/17 16:39:48 | 000,005,243 | —- | M] () – C:\Users\Jacob\Desktop\fin2.zip
[2011/09/14 17:12:33 | 000,252,296 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2011/09/14 17:12:33 | 000,188,808 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2011/09/14 17:12:33 | 000,188,808 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2011/09/14 17:12:32 | 000,627,600 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\deployJava1.dll
[2011/09/14 17:05:07 | 021,323,656 | —- | M] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/09/13 21:53:37 | 000,782,691 | —- | M] () – C:\Users\Jacob\Desktop\PreViewer v1.47 (February. 2011).zip
[2011/09/10 20:48:32 | 000,003,464 | —- | M] () – C:\Users\Jacob\Desktop\zz.class
[2011/09/10 18:58:24 | 000,324,495 | —- | M] () – C:\Users\Jacob\Desktop\fading_door_tool.zip
[2011/09/10 18:54:35 | 000,016,489 | —- | M] () – C:\Users\Jacob\Desktop\tb's_duplicator.zip
[2011/09/09 22:05:40 | 000,103,862 | —- | M] () – C:\Users\Jacob\Desktop\276-1594-STEP.zip
[2011/09/09 22:05:36 | 000,024,567 | —- | M] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.zip
[2011/09/09 22:05:30 | 000,029,522 | —- | M] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.zip
[2011/09/08 17:11:53 | 000,000,220 | —- | M] () – C:\Users\Jacob\Desktop\Garry's Mod.url
[2011/09/05 19:17:14 | 000,002,533 | —- | M] () – C:\Users\Jacob\Desktop\Skype.lnk
[2011/09/05 03:09:24 | 384,494,123 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/09/04 22:46:34 | 000,000,000 | —- | M] () – C:\Users\Jacob\AppData\Local\{9423F6E5-A3AD-4DA3-9750-BE95325A2525}
[2011/08/31 17:00:50 | 000,025,416 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\Users\Jacob\AppData\Local\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/09/27 20:03:15 | 001,529,134 | —- | C] () – C:\Users\Jacob\Desktop\tdsskiller.zip
[2011/09/20 15:19:43 | 000,092,609 | —- | C] () – C:\Users\Jacob\Desktop\eediots.png
[2011/09/19 19:06:40 | 089,688,842 | —- | C] () – C:\Users\Jacob\Desktop\arduino-0022.zip
[2011/09/19 18:33:56 | 000,000,153 | —- | C] () – C:\ADRInfos.xml
[2011/09/18 20:14:21 | 000,000,336 | —- | C] () – C:\Users\Jacob\Desktop\server.properties
[2011/09/18 20:13:52 | 000,802,375 | —- | C] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2011/09/18 20:08:22 | 005,812,145 | —- | C] () – C:\Users\Jacob\Desktop\Facility.zip
[2011/09/18 12:32:48 | 000,000,564 | —- | C] () – C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2011/09/18 12:32:47 | 000,000,506 | —- | C] () – C:\Windows\tasks\SystemToolsDailyTest.job
[2011/09/17 18:53:47 | 000,003,735 | —- | C] () – C:\Users\Jacob\Desktop\smart_constraint.zip
[2011/09/17 17:36:50 | 000,001,187 | —- | C] () – C:\Users\Public\Desktop\MATLAB R2010bSP1.lnk
[2011/09/17 16:39:47 | 000,005,243 | —- | C] () – C:\Users\Jacob\Desktop\fin2.zip
[2011/09/13 21:58:43 | 000,651,503 | —- | C] () – C:\Users\Jacob\Desktop\PreViewer v1.46.zip
[2011/09/13 21:57:56 | 000,000,904 | —- | C] () – C:\Users\Jacob\Desktop\Facebook PreViewer README.rtf
[2011/09/13 21:53:36 | 000,782,691 | —- | C] () – C:\Users\Jacob\Desktop\PreViewer v1.47 (February. 2011).zip
[2011/09/10 20:48:30 | 000,003,464 | —- | C] () – C:\Users\Jacob\Desktop\zz.class
[2011/09/10 18:58:24 | 000,324,495 | —- | C] () – C:\Users\Jacob\Desktop\fading_door_tool.zip
[2011/09/10 18:54:33 | 000,016,489 | —- | C] () – C:\Users\Jacob\Desktop\tb's_duplicator.zip
[2011/09/09 22:08:37 | 000,219,454 | —- | C] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.STEP
[2011/09/09 22:08:35 | 000,188,299 | —- | C] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.STEP
[2011/09/09 22:08:28 | 000,411,953 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-002 Rev2.STEP
[2011/09/09 22:08:28 | 000,394,247 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-001 Rev2.STEP
[2011/09/09 22:05:40 | 000,103,862 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-STEP.zip
[2011/09/09 22:05:35 | 000,024,567 | —- | C] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.zip
[2011/09/09 22:05:29 | 000,029,522 | —- | C] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.zip
[2011/09/08 17:11:52 | 000,000,220 | —- | C] () – C:\Users\Jacob\Desktop\Garry's Mod.url
[2011/09/05 19:17:14 | 000,002,533 | —- | C] () – C:\Users\Jacob\Desktop\Skype.lnk
[2011/09/05 03:09:24 | 384,494,123 | —- | C] () – C:\Windows\MEMORY.DMP
[2011/09/04 22:46:34 | 000,000,000 | —- | C] () – C:\Users\Jacob\AppData\Local\{9423F6E5-A3AD-4DA3-9750-BE95325A2525}
[2011/08/28 20:21:21 | 000,001,244 | -HS- | C] () – C:\Users\Jacob\AppData\Local\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/08/28 20:21:21 | 000,001,244 | -HS- | C] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/07/30 01:47:30 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2011/07/12 01:36:36 | 000,090,112 | —- | C] () – C:\Windows\SysWow64\bsrlback.dll
[2011/07/12 01:36:36 | 000,090,112 | —- | C] () – C:\Windows\SysWow64\bsreffs.dll
[2011/07/12 01:36:35 | 000,692,224 | —- | C] () – C:\Windows\SysWow64\bsrmgcv.dll
[2011/07/12 01:36:35 | 000,192,512 | —- | C] () – C:\Windows\SysWow64\bsrmgps.dll
[2011/07/12 01:36:35 | 000,081,920 | —- | C] () – C:\Windows\SysWow64\bsrgvas.dll
[2011/07/12 01:35:37 | 000,585,728 | —- | C] () – C:\Windows\SysWow64\bsratswf.dll
[2011/07/12 01:35:37 | 000,147,456 | —- | C] () – C:\Windows\SysWow64\bsratwmv.dll
[2011/06/26 10:04:38 | 000,000,263 | —- | C] () – C:\Windows\PowerReg.dat
[2011/06/26 10:04:37 | 000,045,568 | —- | C] () – C:\Windows\UniFish3.exe
[2011/06/17 03:17:07 | 000,001,538 | -HS- | C] () – C:\Users\Jacob\AppData\Local\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/06/17 03:17:07 | 000,001,538 | -HS- | C] () – C:\ProgramData\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/06/13 23:56:53 | 000,001,610 | -HS- | C] () – C:\Users\Jacob\AppData\Local\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b
[2011/06/13 23:56:53 | 000,001,610 | -HS- | C] () – C:\ProgramData\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b
[2011/05/28 18:17:20 | 000,017,172 | -HS- | C] () – C:\Users\Jacob\AppData\Local\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/05/28 18:17:20 | 000,017,172 | -HS- | C] () – C:\ProgramData\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/04/25 21:01:17 | 000,000,268 | —- | C] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2011/03/01 20:59:47 | 000,003,113 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2011/02/07 17:58:23 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/12/28 02:34:35 | 000,773,944 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/30 10:50:13 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[1997/11/15 10:35:26 | 000,264,704 | —- | C] () – C:\Windows\VideoSetup.exe
[1997/11/15 10:34:18 | 001,446,912 | —- | C] () – C:\Windows\SCEEunin.exe
[1997/11/15 06:54:48 | 000,009,748 | —- | C] () – C:\Windows\Froggersetup.ini

========== LOP Check ==========

[2011/08/05 06:38:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\.anki
[2011/09/25 03:47:56 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\.minecraft
[2011/09/20 15:34:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Arduino
[2011/09/09 22:03:00 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Autodesk
[2011/03/27 03:18:18 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\AVG10
[2011/07/30 01:47:30 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Broken Rules
[2011/07/03 17:28:16 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\C-Free
[2011/05/14 18:06:32 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011/07/30 03:21:47 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Crayon Physics Deluxe
[2011/04/06 18:36:23 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\DAEMON Tools Lite
[2011/04/06 18:30:04 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\DAEMON Tools Pro
[2011/08/06 03:46:38 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\derp
[2011/07/03 18:52:51 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Dev-Cpp
[2011/03/13 23:42:34 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\fretsonfire
[2011/07/12 08:03:22 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\go
[2011/05/17 21:17:26 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\gtk-2.0
[2011/07/30 15:38:15 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Lazy 8 Studios
[2011/07/10 19:17:57 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Leadertech
[2011/06/04 22:51:21 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Notepad++
[2011/09/18 12:30:44 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\PCDr
[2011/09/05 05:28:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Rainmeter
[2011/04/14 23:14:16 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Runiter
[2011/09/11 02:57:32 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\SoftGrid Client
[2011/01/09 16:55:24 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Subversion
[2010/12/28 02:35:29 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\TP
[2011/09/27 20:14:17 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\uTorrent
[2010/12/26 01:24:22 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\WildTangent
[2011/06/22 01:47:01 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\XTrackCad
[2011/09/26 22:28:13 | 000,000,564 | —- | M] () – C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2009/07/14 00:08:49 | 000,025,374 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2011/09/27 19:53:09 | 000,000,506 | —- | M] () – C:\Windows\Tasks\SystemToolsDailyTest.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/09/27 20:12:13 | 000,000,153 | —- | M] () – C:\ADRInfos.xml
[2010/11/30 10:41:11 | 000,003,847 | RH– | M] () – C:\dell.sdr
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/09/27 19:52:54 | 3019,091,968 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 09:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2006/12/02 00:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2011/09/27 19:52:55 | 4025,458,688 | -HS- | M] () – C:\pagefile.sys
[2011/09/27 20:09:49 | 000,076,522 | —- | M] () – C:\TDSSKiller.2.6.2.0_27.09.2011_20.03.51_log.txt
[2011/09/27 20:09:56 | 000,076,522 | —- | M] () – C:\TDSSKiller.2.6.2.0_27.09.2011_20.05.50_log.txt
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI

< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2006/09/11 11:49:08 | 000,184,320 | —- | M] ( ) – C:\Windows\nlscrs.scr
[2009/07/10 13:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/12/26 15:05:07 | 000,000,221 | -HS- | M] () – C:\Users\Jacob\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/09/14 17:05:07 | 021,323,656 | —- | M] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/06/30 09:15:52 | 000,270,142 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft.exe
[2011/09/18 20:14:08 | 000,802,375 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2009/09/19 12:56:30 | 000,434,688 | —- | M] (entropy) – C:\Users\Jacob\Desktop\newton2.exe
[2011/09/27 20:03:22 | 000,582,656 | —- | M] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/26 18:59:02 | 001,548,080 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2009/06/10 16:20:04 | 000,000,802 | —- | M] () – C:\Windows\ADDINS\FXSEXT.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2011/08/25 16:07:29 | 000,000,402 | -HS- | M] () – C:\Users\Jacob\Favorites\desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2011/05/28 18:43:27 | 000,017,172 | -HS- | M] () – C:\ProgramData\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/06/17 03:17:37 | 000,001,538 | -HS- | M] () – C:\ProgramData\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/06/13 23:57:01 | 000,001,610 | -HS- | M] () – C:\ProgramData\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

LS\x00\x00\x00\x00

(Continued from previous post)


O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.0.0)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{424680D7-6577-48F1-9FCB-D46C6DE7B976}: NameServer = 207.217.126.81,207.217.120.83
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/05/31 06:07:35 | 000,000,000 | —D | M] - C:\Autodesk – [ NTFS ]
O32 - AutoRun File - [2010/08/27 10:50:56 | 000,001,050 | —- | M] () - Z:\AUTOEXEC.BAT – [ FAT ]
O32 - AutoRun File - [2010/08/27 10:50:56 | 000,001,050 | —- | M] () - Z:\AUTOEXEC.UP – [ FAT ]
O33 - MountPoints2\{4543fe8e-fc99-11df-b665-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4543fe8e-fc99-11df-b665-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgchsva.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O35 - HKCU\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – "%1" %*


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/09/27 20:03:49 | 001,548,080 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe
[2011/09/27 20:03:21 | 000,582,656 | —- | C] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/26 23:12:36 | 000,000,000 | —D | C] – C:\Windows\SysWow64\SL-SL
[2011/09/26 19:29:15 | 000,000,000 | —D | C] – C:\Windows\system64
[2011/09/24 19:28:32 | 000,404,640 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/09/24 19:28:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation
[2011/09/20 21:39:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE
[2011/09/20 15:34:45 | 000,000,000 | —D | C] – C:\Users\Jacob\Documents\Arduino
[2011/09/20 15:34:45 | 000,000,000 | —D | C] – C:\Users\Jacob\AppData\Roaming\Arduino
[2011/09/20 15:34:18 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\arduino-0022
[2011/09/18 20:15:21 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\Facility
[2011/09/18 12:32:21 | 000,000,000 | R–D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Support Center
[2011/09/18 12:31:48 | 000,000,000 | —D | C] – C:\Program Files\Dell Support Center
[2011/09/17 17:41:12 | 000,000,000 | —D | C] – C:\Users\Jacob\AppData\Roaming\MathWorks
[2011/09/17 17:41:02 | 000,000,000 | —D | C] – C:\Users\Jacob\Documents\MATLAB
[2011/09/17 17:36:50 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB
[2011/09/17 17:28:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\MATLAB
[2011/09/14 17:12:39 | 000,252,296 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2011/09/14 17:12:39 | 000,188,808 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2011/09/14 17:12:38 | 000,188,808 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2011/09/14 17:12:30 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/09/14 17:04:15 | 021,323,656 | —- | C] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/09/13 22:06:00 | 000,000,000 | —D | C] – C:\ProgramData\Trymedia
[2011/09/13 22:05:08 | 000,000,000 | —D | C] – C:\GameHouse Games
[2011/09/13 22:05:04 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameHouse
[2011/09/13 22:04:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\RealArcade
[2011/09/06 06:30:23 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\BEST Stuff
[2011/09/04 21:57:41 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/09/27 20:12:13 | 000,000,153 | —- | M] () – C:\ADRInfos.xml
[2011/09/27 20:03:22 | 000,582,656 | —- | M] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/27 20:03:19 | 001,529,134 | —- | M] () – C:\Users\Jacob\Desktop\tdsskiller.zip
[2011/09/27 20:01:28 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/09/27 20:01:28 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/09/27 19:53:52 | 000,000,892 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/09/27 19:53:09 | 000,000,506 | —- | M] () – C:\Windows\tasks\SystemToolsDailyTest.job
[2011/09/27 19:53:02 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/09/27 19:52:54 | 3019,091,968 | -HS- | M] () – C:\hiberfil.sys
[2011/09/27 19:19:35 | 000,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/09/27 17:12:32 | 133,531,579 | —- | M] () – C:\Windows\SysNative\drivers\AVG\incavi.avm
[2011/09/27 09:56:00 | 000,000,402 | -H– | M] () – C:\Windows\tasks\Norton Security Scan for Jacob.job
[2011/09/26 22:28:13 | 000,000,564 | —- | M] () – C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2011/09/26 21:15:54 | 000,002,058 | —- | M] () – C:\Users\Jacob\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/09/26 18:59:02 | 001,548,080 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe
[2011/09/25 18:56:42 | 000,773,944 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/09/25 18:56:42 | 000,660,732 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/09/25 18:56:42 | 000,121,402 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/09/25 18:56:37 | 000,773,944 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/09/24 19:28:32 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/09/24 18:58:51 | 000,312,707 | —- | M] () – C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2011/09/20 15:19:43 | 000,092,609 | —- | M] () – C:\Users\Jacob\Desktop\eediots.png
[2011/09/19 19:08:38 | 089,688,842 | —- | M] () – C:\Users\Jacob\Desktop\arduino-0022.zip
[2011/09/18 20:22:37 | 000,000,336 | —- | M] () – C:\Users\Jacob\Desktop\server.properties
[2011/09/18 20:14:08 | 000,802,375 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2011/09/18 20:09:51 | 005,812,145 | —- | M] () – C:\Users\Jacob\Desktop\Facility.zip
[2011/09/17 18:53:49 | 000,003,735 | —- | M] () – C:\Users\Jacob\Desktop\smart_constraint.zip
[2011/09/17 17:36:50 | 000,001,187 | —- | M] () – C:\Users\Public\Desktop\MATLAB R2010bSP1.lnk
[2011/09/17 16:39:48 | 000,005,243 | —- | M] () – C:\Users\Jacob\Desktop\fin2.zip
[2011/09/14 17:12:33 | 000,252,296 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2011/09/14 17:12:33 | 000,188,808 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2011/09/14 17:12:33 | 000,188,808 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2011/09/14 17:12:32 | 000,627,600 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\deployJava1.dll
[2011/09/14 17:05:07 | 021,323,656 | —- | M] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/09/13 21:53:37 | 000,782,691 | —- | M] () – C:\Users\Jacob\Desktop\PreViewer v1.47 (February. 2011).zip
[2011/09/10 20:48:32 | 000,003,464 | —- | M] () – C:\Users\Jacob\Desktop\zz.class
[2011/09/10 18:58:24 | 000,324,495 | —- | M] () – C:\Users\Jacob\Desktop\fading_door_tool.zip
[2011/09/10 18:54:35 | 000,016,489 | —- | M] () – C:\Users\Jacob\Desktop\tb's_duplicator.zip
[2011/09/09 22:05:40 | 000,103,862 | —- | M] () – C:\Users\Jacob\Desktop\276-1594-STEP.zip
[2011/09/09 22:05:36 | 000,024,567 | —- | M] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.zip
[2011/09/09 22:05:30 | 000,029,522 | —- | M] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.zip
[2011/09/08 17:11:53 | 000,000,220 | —- | M] () – C:\Users\Jacob\Desktop\Garry's Mod.url
[2011/09/05 19:17:14 | 000,002,533 | —- | M] () – C:\Users\Jacob\Desktop\Skype.lnk
[2011/09/05 03:09:24 | 384,494,123 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/09/04 22:46:34 | 000,000,000 | —- | M] () – C:\Users\Jacob\AppData\Local\{9423F6E5-A3AD-4DA3-9750-BE95325A2525}
[2011/08/31 17:00:50 | 000,025,416 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\Users\Jacob\AppData\Local\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/09/27 20:03:15 | 001,529,134 | —- | C] () – C:\Users\Jacob\Desktop\tdsskiller.zip
[2011/09/20 15:19:43 | 000,092,609 | —- | C] () – C:\Users\Jacob\Desktop\eediots.png
[2011/09/19 19:06:40 | 089,688,842 | —- | C] () – C:\Users\Jacob\Desktop\arduino-0022.zip
[2011/09/19 18:33:56 | 000,000,153 | —- | C] () – C:\ADRInfos.xml
[2011/09/18 20:14:21 | 000,000,336 | —- | C] () – C:\Users\Jacob\Desktop\server.properties
[2011/09/18 20:13:52 | 000,802,375 | —- | C] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2011/09/18 20:08:22 | 005,812,145 | —- | C] () – C:\Users\Jacob\Desktop\Facility.zip
[2011/09/18 12:32:48 | 000,000,564 | —- | C] () – C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2011/09/18 12:32:47 | 000,000,506 | —- | C] () – C:\Windows\tasks\SystemToolsDailyTest.job
[2011/09/17 18:53:47 | 000,003,735 | —- | C] () – C:\Users\Jacob\Desktop\smart_constraint.zip
[2011/09/17 17:36:50 | 000,001,187 | —- | C] () – C:\Users\Public\Desktop\MATLAB R2010bSP1.lnk
[2011/09/17 16:39:47 | 000,005,243 | —- | C] () – C:\Users\Jacob\Desktop\fin2.zip
[2011/09/13 21:58:43 | 000,651,503 | —- | C] () – C:\Users\Jacob\Desktop\PreViewer v1.46.zip
[2011/09/13 21:57:56 | 000,000,904 | —- | C] () – C:\Users\Jacob\Desktop\Facebook PreViewer README.rtf
[2011/09/13 21:53:36 | 000,782,691 | —- | C] () – C:\Users\Jacob\Desktop\PreViewer v1.47 (February. 2011).zip
[2011/09/10 20:48:30 | 000,003,464 | —- | C] () – C:\Users\Jacob\Desktop\zz.class
[2011/09/10 18:58:24 | 000,324,495 | —- | C] () – C:\Users\Jacob\Desktop\fading_door_tool.zip
[2011/09/10 18:54:33 | 000,016,489 | —- | C] () – C:\Users\Jacob\Desktop\tb's_duplicator.zip
[2011/09/09 22:08:37 | 000,219,454 | —- | C] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.STEP
[2011/09/09 22:08:35 | 000,188,299 | —- | C] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.STEP
[2011/09/09 22:08:28 | 000,411,953 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-002 Rev2.STEP
[2011/09/09 22:08:28 | 000,394,247 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-001 Rev2.STEP
[2011/09/09 22:05:40 | 000,103,862 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-STEP.zip
[2011/09/09 22:05:35 | 000,024,567 | —- | C] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.zip
[2011/09/09 22:05:29 | 000,029,522 | —- | C] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.zip
[2011/09/08 17:11:52 | 000,000,220 | —- | C] () – C:\Users\Jacob\Desktop\Garry's Mod.url
[2011/09/05 19:17:14 | 000,002,533 | —- | C] () – C:\Users\Jacob\Desktop\Skype.lnk
[2011/09/05 03:09:24 | 384,494,123 | —- | C] () – C:\Windows\MEMORY.DMP
[2011/09/04 22:46:34 | 000,000,000 | —- | C] () – C:\Users\Jacob\AppData\Local\{9423F6E5-A3AD-4DA3-9750-BE95325A2525}
[2011/08/28 20:21:21 | 000,001,244 | -HS- | C] () – C:\Users\Jacob\AppData\Local\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/08/28 20:21:21 | 000,001,244 | -HS- | C] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/07/30 01:47:30 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2011/07/12 01:36:36 | 000,090,112 | —- | C] () – C:\Windows\SysWow64\bsrlback.dll
[2011/07/12 01:36:36 | 000,090,112 | —- | C] () – C:\Windows\SysWow64\bsreffs.dll
[2011/07/12 01:36:35 | 000,692,224 | —- | C] () – C:\Windows\SysWow64\bsrmgcv.dll
[2011/07/12 01:36:35 | 000,192,512 | —- | C] () – C:\Windows\SysWow64\bsrmgps.dll
[2011/07/12 01:36:35 | 000,081,920 | —- | C] () – C:\Windows\SysWow64\bsrgvas.dll
[2011/07/12 01:35:37 | 000,585,728 | —- | C] () – C:\Windows\SysWow64\bsratswf.dll
[2011/07/12 01:35:37 | 000,147,456 | —- | C] () – C:\Windows\SysWow64\bsratwmv.dll
[2011/06/26 10:04:38 | 000,000,263 | —- | C] () – C:\Windows\PowerReg.dat
[2011/06/26 10:04:37 | 000,045,568 | —- | C] () – C:\Windows\UniFish3.exe
[2011/06/17 03:17:07 | 000,001,538 | -HS- | C] () – C:\Users\Jacob\AppData\Local\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/06/17 03:17:07 | 000,001,538 | -HS- | C] () – C:\ProgramData\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/06/13 23:56:53 | 000,001,610 | -HS- | C] () – C:\Users\Jacob\AppData\Local\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b
[2011/06/13 23:56:53 | 000,001,610 | -HS- | C] () – C:\ProgramData\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b
[2011/05/28 18:17:20 | 000,017,172 | -HS- | C] () – C:\Users\Jacob\AppData\Local\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/05/28 18:17:20 | 000,017,172 | -HS- | C] () – C:\ProgramData\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/04/25 21:01:17 | 000,000,268 | —- | C] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2011/03/01 20:59:47 | 000,003,113 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2011/02/07 17:58:23 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/12/28 02:34:35 | 000,773,944 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/30 10:50:13 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[1997/11/15 10:35:26 | 000,264,704 | —- | C] () – C:\Windows\VideoSetup.exe
[1997/11/15 10:34:18 | 001,446,912 | —- | C] () – C:\Windows\SCEEunin.exe
[1997/11/15 06:54:48 | 000,009,748 | —- | C] () – C:\Windows\Froggersetup.ini

========== LOP Check ==========

[2011/08/05 06:38:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\.anki
[2011/09/25 03:47:56 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\.minecraft
[2011/09/20 15:34:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Arduino
[2011/09/09 22:03:00 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Autodesk
[2011/03/27 03:18:18 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\AVG10
[2011/07/30 01:47:30 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Broken Rules
[2011/07/03 17:28:16 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\C-Free
[2011/05/14 18:06:32 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011/07/30 03:21:47 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Crayon Physics Deluxe
[2011/04/06 18:36:23 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\DAEMON Tools Lite
[2011/04/06 18:30:04 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\DAEMON Tools Pro
[2011/08/06 03:46:38 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\derp
[2011/07/03 18:52:51 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Dev-Cpp
[2011/03/13 23:42:34 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\fretsonfire
[2011/07/12 08:03:22 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\go
[2011/05/17 21:17:26 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\gtk-2.0
[2011/07/30 15:38:15 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Lazy 8 Studios
[2011/07/10 19:17:57 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Leadertech
[2011/06/04 22:51:21 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Notepad++
[2011/09/18 12:30:44 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\PCDr
[2011/09/05 05:28:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Rainmeter
[2011/04/14 23:14:16 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Runiter
[2011/09/11 02:57:32 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\SoftGrid Client
[2011/01/09 16:55:24 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Subversion
[2010/12/28 02:35:29 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\TP
[2011/09/27 20:14:17 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\uTorrent
[2010/12/26 01:24:22 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\WildTangent
[2011/06/22 01:47:01 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\XTrackCad
[2011/09/26 22:28:13 | 000,000,564 | —- | M] () – C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2009/07/14 00:08:49 | 000,025,374 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2011/09/27 19:53:09 | 000,000,506 | —- | M] () – C:\Windows\Tasks\SystemToolsDailyTest.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/09/27 20:12:13 | 000,000,153 | —- | M] () – C:\ADRInfos.xml
[2010/11/30 10:41:11 | 000,003,847 | RH– | M] () – C:\dell.sdr
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/09/27 19:52:54 | 3019,091,968 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 09:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2006/12/02 00:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2011/09/27 19:52:55 | 4025,458,688 | -HS- | M] () – C:\pagefile.sys
[2011/09/27 20:09:49 | 000,076,522 | —- | M] () – C:\TDSSKiller.2.6.2.0_27.09.2011_20.03.51_log.txt
[2011/09/27 20:09:56 | 000,076,522 | —- | M] () – C:\TDSSKiller.2.6.2.0_27.09.2011_20.05.50_log.txt
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI

< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2006/09/11 11:49:08 | 000,184,320 | —- | M] ( ) – C:\Windows\nlscrs.scr
[2009/07/10 13:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/12/26 15:05:07 | 000,000,221 | -HS- | M] () – C:\Users\Jacob\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/09/14 17:05:07 | 021,323,656 | —- | M] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/06/30 09:15:52 | 000,270,142 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft.exe
[2011/09/18 20:14:08 | 000,802,375 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2009/09/19 12:56:30 | 000,434,688 | —- | M] (entropy) – C:\Users\Jacob\Desktop\newton2.exe
[2011/09/27 20:03:22 | 000,582,656 | —- | M] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/26 18:59:02 | 001,548,080 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2009/06/10 16:20:04 | 000,000,802 | —- | M] () – C:\Windows\ADDINS\FXSEXT.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2011/08/25 16:07:29 | 000,000,402 | -HS- | M] () – C:\Users\Jacob\Favorites\desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2011/05/28 18:43:27 | 000,017,172 | -HS- | M] () – C:\ProgramData\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/06/17 03:17:37 | 000,001,538 | -HS- | M] () – C:\ProgramData\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/06/13 23:57:01 | 000,001,610 | -HS- | M] () – C:\ProgramData\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

LS\x00\x00\x00\x00

(Continued from previous post)


O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.0.0)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{424680D7-6577-48F1-9FCB-D46C6DE7B976}: NameServer = 207.217.126.81,207.217.120.83
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/05/31 06:07:35 | 000,000,000 | —D | M] - C:\Autodesk – [ NTFS ]
O32 - AutoRun File - [2010/08/27 10:50:56 | 000,001,050 | —- | M] () - Z:\AUTOEXEC.BAT – [ FAT ]
O32 - AutoRun File - [2010/08/27 10:50:56 | 000,001,050 | —- | M] () - Z:\AUTOEXEC.UP – [ FAT ]
O33 - MountPoints2\{4543fe8e-fc99-11df-b665-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4543fe8e-fc99-11df-b665-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgchsva.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O35 - HKCU\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – "%1" %*


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/09/27 20:03:49 | 001,548,080 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe
[2011/09/27 20:03:21 | 000,582,656 | —- | C] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/26 23:12:36 | 000,000,000 | —D | C] – C:\Windows\SysWow64\SL-SL
[2011/09/26 19:29:15 | 000,000,000 | —D | C] – C:\Windows\system64
[2011/09/24 19:28:32 | 000,404,640 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/09/24 19:28:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation
[2011/09/20 21:39:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE
[2011/09/20 15:34:45 | 000,000,000 | —D | C] – C:\Users\Jacob\Documents\Arduino
[2011/09/20 15:34:45 | 000,000,000 | —D | C] – C:\Users\Jacob\AppData\Roaming\Arduino
[2011/09/20 15:34:18 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\arduino-0022
[2011/09/18 20:15:21 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\Facility
[2011/09/18 12:32:21 | 000,000,000 | R–D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Support Center
[2011/09/18 12:31:48 | 000,000,000 | —D | C] – C:\Program Files\Dell Support Center
[2011/09/17 17:41:12 | 000,000,000 | —D | C] – C:\Users\Jacob\AppData\Roaming\MathWorks
[2011/09/17 17:41:02 | 000,000,000 | —D | C] – C:\Users\Jacob\Documents\MATLAB
[2011/09/17 17:36:50 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB
[2011/09/17 17:28:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\MATLAB
[2011/09/14 17:12:39 | 000,252,296 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2011/09/14 17:12:39 | 000,188,808 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2011/09/14 17:12:38 | 000,188,808 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2011/09/14 17:12:30 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/09/14 17:04:15 | 021,323,656 | —- | C] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/09/13 22:06:00 | 000,000,000 | —D | C] – C:\ProgramData\Trymedia
[2011/09/13 22:05:08 | 000,000,000 | —D | C] – C:\GameHouse Games
[2011/09/13 22:05:04 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameHouse
[2011/09/13 22:04:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\RealArcade
[2011/09/06 06:30:23 | 000,000,000 | —D | C] – C:\Users\Jacob\Desktop\BEST Stuff
[2011/09/04 21:57:41 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/09/27 20:12:13 | 000,000,153 | —- | M] () – C:\ADRInfos.xml
[2011/09/27 20:03:22 | 000,582,656 | —- | M] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/27 20:03:19 | 001,529,134 | —- | M] () – C:\Users\Jacob\Desktop\tdsskiller.zip
[2011/09/27 20:01:28 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/09/27 20:01:28 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/09/27 19:53:52 | 000,000,892 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/09/27 19:53:09 | 000,000,506 | —- | M] () – C:\Windows\tasks\SystemToolsDailyTest.job
[2011/09/27 19:53:02 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/09/27 19:52:54 | 3019,091,968 | -HS- | M] () – C:\hiberfil.sys
[2011/09/27 19:19:35 | 000,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/09/27 17:12:32 | 133,531,579 | —- | M] () – C:\Windows\SysNative\drivers\AVG\incavi.avm
[2011/09/27 09:56:00 | 000,000,402 | -H– | M] () – C:\Windows\tasks\Norton Security Scan for Jacob.job
[2011/09/26 22:28:13 | 000,000,564 | —- | M] () – C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2011/09/26 21:15:54 | 000,002,058 | —- | M] () – C:\Users\Jacob\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/09/26 18:59:02 | 001,548,080 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe
[2011/09/25 18:56:42 | 000,773,944 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/09/25 18:56:42 | 000,660,732 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/09/25 18:56:42 | 000,121,402 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/09/25 18:56:37 | 000,773,944 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/09/24 19:28:32 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/09/24 18:58:51 | 000,312,707 | —- | M] () – C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2011/09/20 15:19:43 | 000,092,609 | —- | M] () – C:\Users\Jacob\Desktop\eediots.png
[2011/09/19 19:08:38 | 089,688,842 | —- | M] () – C:\Users\Jacob\Desktop\arduino-0022.zip
[2011/09/18 20:22:37 | 000,000,336 | —- | M] () – C:\Users\Jacob\Desktop\server.properties
[2011/09/18 20:14:08 | 000,802,375 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2011/09/18 20:09:51 | 005,812,145 | —- | M] () – C:\Users\Jacob\Desktop\Facility.zip
[2011/09/17 18:53:49 | 000,003,735 | —- | M] () – C:\Users\Jacob\Desktop\smart_constraint.zip
[2011/09/17 17:36:50 | 000,001,187 | —- | M] () – C:\Users\Public\Desktop\MATLAB R2010bSP1.lnk
[2011/09/17 16:39:48 | 000,005,243 | —- | M] () – C:\Users\Jacob\Desktop\fin2.zip
[2011/09/14 17:12:33 | 000,252,296 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaws.exe
[2011/09/14 17:12:33 | 000,188,808 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\javaw.exe
[2011/09/14 17:12:33 | 000,188,808 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\java.exe
[2011/09/14 17:12:32 | 000,627,600 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\deployJava1.dll
[2011/09/14 17:05:07 | 021,323,656 | —- | M] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/09/13 21:53:37 | 000,782,691 | —- | M] () – C:\Users\Jacob\Desktop\PreViewer v1.47 (February. 2011).zip
[2011/09/10 20:48:32 | 000,003,464 | —- | M] () – C:\Users\Jacob\Desktop\zz.class
[2011/09/10 18:58:24 | 000,324,495 | —- | M] () – C:\Users\Jacob\Desktop\fading_door_tool.zip
[2011/09/10 18:54:35 | 000,016,489 | —- | M] () – C:\Users\Jacob\Desktop\tb's_duplicator.zip
[2011/09/09 22:05:40 | 000,103,862 | —- | M] () – C:\Users\Jacob\Desktop\276-1594-STEP.zip
[2011/09/09 22:05:36 | 000,024,567 | —- | M] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.zip
[2011/09/09 22:05:30 | 000,029,522 | —- | M] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.zip
[2011/09/08 17:11:53 | 000,000,220 | —- | M] () – C:\Users\Jacob\Desktop\Garry's Mod.url
[2011/09/05 19:17:14 | 000,002,533 | —- | M] () – C:\Users\Jacob\Desktop\Skype.lnk
[2011/09/05 03:09:24 | 384,494,123 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/09/04 22:46:34 | 000,000,000 | —- | M] () – C:\Users\Jacob\AppData\Local\{9423F6E5-A3AD-4DA3-9750-BE95325A2525}
[2011/08/31 17:00:50 | 000,025,416 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\Users\Jacob\AppData\Local\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/09/27 20:03:15 | 001,529,134 | —- | C] () – C:\Users\Jacob\Desktop\tdsskiller.zip
[2011/09/20 15:19:43 | 000,092,609 | —- | C] () – C:\Users\Jacob\Desktop\eediots.png
[2011/09/19 19:06:40 | 089,688,842 | —- | C] () – C:\Users\Jacob\Desktop\arduino-0022.zip
[2011/09/19 18:33:56 | 000,000,153 | —- | C] () – C:\ADRInfos.xml
[2011/09/18 20:14:21 | 000,000,336 | —- | C] () – C:\Users\Jacob\Desktop\server.properties
[2011/09/18 20:13:52 | 000,802,375 | —- | C] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2011/09/18 20:08:22 | 005,812,145 | —- | C] () – C:\Users\Jacob\Desktop\Facility.zip
[2011/09/18 12:32:48 | 000,000,564 | —- | C] () – C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2011/09/18 12:32:47 | 000,000,506 | —- | C] () – C:\Windows\tasks\SystemToolsDailyTest.job
[2011/09/17 18:53:47 | 000,003,735 | —- | C] () – C:\Users\Jacob\Desktop\smart_constraint.zip
[2011/09/17 17:36:50 | 000,001,187 | —- | C] () – C:\Users\Public\Desktop\MATLAB R2010bSP1.lnk
[2011/09/17 16:39:47 | 000,005,243 | —- | C] () – C:\Users\Jacob\Desktop\fin2.zip
[2011/09/13 21:58:43 | 000,651,503 | —- | C] () – C:\Users\Jacob\Desktop\PreViewer v1.46.zip
[2011/09/13 21:57:56 | 000,000,904 | —- | C] () – C:\Users\Jacob\Desktop\Facebook PreViewer README.rtf
[2011/09/13 21:53:36 | 000,782,691 | —- | C] () – C:\Users\Jacob\Desktop\PreViewer v1.47 (February. 2011).zip
[2011/09/10 20:48:30 | 000,003,464 | —- | C] () – C:\Users\Jacob\Desktop\zz.class
[2011/09/10 18:58:24 | 000,324,495 | —- | C] () – C:\Users\Jacob\Desktop\fading_door_tool.zip
[2011/09/10 18:54:33 | 000,016,489 | —- | C] () – C:\Users\Jacob\Desktop\tb's_duplicator.zip
[2011/09/09 22:08:37 | 000,219,454 | —- | C] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.STEP
[2011/09/09 22:08:35 | 000,188,299 | —- | C] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.STEP
[2011/09/09 22:08:28 | 000,411,953 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-002 Rev2.STEP
[2011/09/09 22:08:28 | 000,394,247 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-001 Rev2.STEP
[2011/09/09 22:05:40 | 000,103,862 | —- | C] () – C:\Users\Jacob\Desktop\276-1594-STEP.zip
[2011/09/09 22:05:35 | 000,024,567 | —- | C] () – C:\Users\Jacob\Desktop\276-1610-STEP-Rev1A.zip
[2011/09/09 22:05:29 | 000,029,522 | —- | C] () – C:\Users\Jacob\Desktop\276-1611-STEP-Rev1A.zip
[2011/09/08 17:11:52 | 000,000,220 | —- | C] () – C:\Users\Jacob\Desktop\Garry's Mod.url
[2011/09/05 19:17:14 | 000,002,533 | —- | C] () – C:\Users\Jacob\Desktop\Skype.lnk
[2011/09/05 03:09:24 | 384,494,123 | —- | C] () – C:\Windows\MEMORY.DMP
[2011/09/04 22:46:34 | 000,000,000 | —- | C] () – C:\Users\Jacob\AppData\Local\{9423F6E5-A3AD-4DA3-9750-BE95325A2525}
[2011/08/28 20:21:21 | 000,001,244 | -HS- | C] () – C:\Users\Jacob\AppData\Local\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/08/28 20:21:21 | 000,001,244 | -HS- | C] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/07/30 01:47:30 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2011/07/12 01:36:36 | 000,090,112 | —- | C] () – C:\Windows\SysWow64\bsrlback.dll
[2011/07/12 01:36:36 | 000,090,112 | —- | C] () – C:\Windows\SysWow64\bsreffs.dll
[2011/07/12 01:36:35 | 000,692,224 | —- | C] () – C:\Windows\SysWow64\bsrmgcv.dll
[2011/07/12 01:36:35 | 000,192,512 | —- | C] () – C:\Windows\SysWow64\bsrmgps.dll
[2011/07/12 01:36:35 | 000,081,920 | —- | C] () – C:\Windows\SysWow64\bsrgvas.dll
[2011/07/12 01:35:37 | 000,585,728 | —- | C] () – C:\Windows\SysWow64\bsratswf.dll
[2011/07/12 01:35:37 | 000,147,456 | —- | C] () – C:\Windows\SysWow64\bsratwmv.dll
[2011/06/26 10:04:38 | 000,000,263 | —- | C] () – C:\Windows\PowerReg.dat
[2011/06/26 10:04:37 | 000,045,568 | —- | C] () – C:\Windows\UniFish3.exe
[2011/06/17 03:17:07 | 000,001,538 | -HS- | C] () – C:\Users\Jacob\AppData\Local\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/06/17 03:17:07 | 000,001,538 | -HS- | C] () – C:\ProgramData\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/06/13 23:56:53 | 000,001,610 | -HS- | C] () – C:\Users\Jacob\AppData\Local\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b
[2011/06/13 23:56:53 | 000,001,610 | -HS- | C] () – C:\ProgramData\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b
[2011/05/28 18:17:20 | 000,017,172 | -HS- | C] () – C:\Users\Jacob\AppData\Local\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/05/28 18:17:20 | 000,017,172 | -HS- | C] () – C:\ProgramData\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/04/25 21:01:17 | 000,000,268 | —- | C] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2011/03/01 20:59:47 | 000,003,113 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2011/02/07 17:58:23 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/12/28 02:34:35 | 000,773,944 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/30 10:50:13 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[1997/11/15 10:35:26 | 000,264,704 | —- | C] () – C:\Windows\VideoSetup.exe
[1997/11/15 10:34:18 | 001,446,912 | —- | C] () – C:\Windows\SCEEunin.exe
[1997/11/15 06:54:48 | 000,009,748 | —- | C] () – C:\Windows\Froggersetup.ini

========== LOP Check ==========

[2011/08/05 06:38:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\.anki
[2011/09/25 03:47:56 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\.minecraft
[2011/09/20 15:34:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Arduino
[2011/09/09 22:03:00 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Autodesk
[2011/03/27 03:18:18 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\AVG10
[2011/07/30 01:47:30 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Broken Rules
[2011/07/03 17:28:16 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\C-Free
[2011/05/14 18:06:32 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011/07/30 03:21:47 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Crayon Physics Deluxe
[2011/04/06 18:36:23 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\DAEMON Tools Lite
[2011/04/06 18:30:04 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\DAEMON Tools Pro
[2011/08/06 03:46:38 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\derp
[2011/07/03 18:52:51 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Dev-Cpp
[2011/03/13 23:42:34 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\fretsonfire
[2011/07/12 08:03:22 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\go
[2011/05/17 21:17:26 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\gtk-2.0
[2011/07/30 15:38:15 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Lazy 8 Studios
[2011/07/10 19:17:57 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Leadertech
[2011/06/04 22:51:21 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Notepad++
[2011/09/18 12:30:44 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\PCDr
[2011/09/05 05:28:45 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Rainmeter
[2011/04/14 23:14:16 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Runiter
[2011/09/11 02:57:32 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\SoftGrid Client
[2011/01/09 16:55:24 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\Subversion
[2010/12/28 02:35:29 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\TP
[2011/09/27 20:14:17 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\uTorrent
[2010/12/26 01:24:22 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\WildTangent
[2011/06/22 01:47:01 | 000,000,000 | —D | M] – C:\Users\Jacob\AppData\Roaming\XTrackCad
[2011/09/26 22:28:13 | 000,000,564 | —- | M] () – C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2009/07/14 00:08:49 | 000,025,374 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2011/09/27 19:53:09 | 000,000,506 | —- | M] () – C:\Windows\Tasks\SystemToolsDailyTest.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/09/27 20:12:13 | 000,000,153 | —- | M] () – C:\ADRInfos.xml
[2010/11/30 10:41:11 | 000,003,847 | RH– | M] () – C:\dell.sdr
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/09/27 19:52:54 | 3019,091,968 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 09:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2006/12/02 00:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2011/09/27 19:52:55 | 4025,458,688 | -HS- | M] () – C:\pagefile.sys
[2011/09/27 20:09:49 | 000,076,522 | —- | M] () – C:\TDSSKiller.2.6.2.0_27.09.2011_20.03.51_log.txt
[2011/09/27 20:09:56 | 000,076,522 | —- | M] () – C:\TDSSKiller.2.6.2.0_27.09.2011_20.05.50_log.txt
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI

< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2006/09/11 11:49:08 | 000,184,320 | —- | M] ( ) – C:\Windows\nlscrs.scr
[2009/07/10 13:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/12/26 15:05:07 | 000,000,221 | -HS- | M] () – C:\Users\Jacob\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/09/14 17:05:07 | 021,323,656 | —- | M] (Oracle Corporation) – C:\Users\Jacob\Desktop\jre-7-windows-x64.exe
[2011/06/30 09:15:52 | 000,270,142 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft.exe
[2011/09/18 20:14:08 | 000,802,375 | —- | M] () – C:\Users\Jacob\Desktop\Minecraft_Server.exe
[2009/09/19 12:56:30 | 000,434,688 | —- | M] (entropy) – C:\Users\Jacob\Desktop\newton2.exe
[2011/09/27 20:03:22 | 000,582,656 | —- | M] (OldTimer Tools) – C:\Users\Jacob\Desktop\OTL.exe
[2011/09/26 18:59:02 | 001,548,080 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Jacob\Desktop\TDSSKiller.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2009/06/10 16:20:04 | 000,000,802 | —- | M] () – C:\Windows\ADDINS\FXSEXT.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2011/08/25 16:07:29 | 000,000,402 | -HS- | M] () – C:\Users\Jacob\Favorites\desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2011/05/28 18:43:27 | 000,017,172 | -HS- | M] () – C:\ProgramData\245337r41f060nm5sc34053da45p08wb8sf13d412u
[2011/06/17 03:17:37 | 000,001,538 | -HS- | M] () – C:\ProgramData\2jfc8wwm7ycpfm031iq1747w633v26o7v3ik
[2011/08/28 20:21:21 | 000,001,244 | -HS- | M] () – C:\ProgramData\50c88111oety03mw6k6rn38730b03ocf2cciiy3fpj85
[2011/06/13 23:57:01 | 000,001,610 | -HS- | M] () – C:\ProgramData\sewu82yv4ua2vd263021pp88mv7sq2h7vn6d1er4a6b

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

LS\x00\x00\x00\x00