vGrabber infection [Solved]

Hello WTT - this is my first post - I have been infected by VGrabber and found this forum
I have tried to uninstall - no luck.

I followed the instructions in this link :
http://forums.whatthetech.com/index.php?showtopic=122859
and did not do the Hijack this or DDS items as recommended in the subforum - I hope this is acceptable - please let me know if not.
Thanks in advance for your help!

Here are the files created


OTL logfile created on: 6/17/2012 4:59:59 PM - Run 1
OTL by OldTimer - Version 3.2.49.0 Folder = C:\Users\Bruce\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.92 Gb Total Physical Memory | 13.63 Gb Available Physical Memory | 85.64% Memory free
31.84 Gb Paging File | 28.92 Gb Available in Paging File | 90.83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 56.24 Gb Total Space | 14.13 Gb Free Space | 25.12% Space Free | Partition Type: NTFS
Drive D: | 55.45 Gb Total Space | 39.43 Gb Free Space | 71.12% Space Free | Partition Type: NTFS
Drive F: | 201.21 Gb Total Space | 120.26 Gb Free Space | 59.77% Space Free | Partition Type: NTFS
Drive G: | 419.46 Gb Total Space | 306.83 Gb Free Space | 73.15% Space Free | Partition Type: NTFS
Drive H: | 123.88 Gb Total Space | 118.63 Gb Free Space | 95.76% Space Free | Partition Type: NTFS

Computer Name: GIGABYTE | User Name: Bruce | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Bruce\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
PRC - c:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (McAfee, Inc.)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - F:\Program Files (x86)\MSI\Live Update 5\LU5.exe (Micro-Star International)
PRC - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe (Ray Adams)
PRC - F:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
PRC - F:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
PRC - F:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (Splashtop Inc.)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe (Splashtop Inc.)
PRC - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (AMD)
PRC - C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe (Splashtop Inc.)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe (Splashtop Inc.)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe (Gigabyte Technology CO., LTD.)
PRC - C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
PRC - C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (Realtek)
PRC - C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe (Gigabyte Technology CO., LTD.)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\ppgooglenaclpluginchrome.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\pdf.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\avutil-51.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\avformat-53.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\avcodec-53.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\gcswf32.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\raphook.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - F:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_intelcpu.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_amdcore.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_cpuload.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\support.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\kbdhook.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_xvlt.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_hdddtemp.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mongraphsexample.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\hddtemp.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\pciset.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (McODS) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (mfevtp) – C:\Windows\SysNative\mfevtps.exe (McAfee, Inc.)
SRV:64bit: - (mfefire) – C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe ()
SRV:64bit: - (McShield) – C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (McProxy) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McNASvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McNaiAnn) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (mcmscsvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McMPFSvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McAfee SiteAdvisor Service) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (SNMP) – C:\Windows\SysNative\snmp.exe (Microsoft Corporation)
SRV:64bit: - (AppleChargerSrv) – C:\Windows\SysNative\AppleChargerSrv.exe ()
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (BingDesktopUpdate) – C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (cphs) Intel® – C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (PnkBstrA) – C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Microsoft SharePoint Workspace Audit Service) – F:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (WCUService_STC_FF) – C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (Splashtop Inc.)
SRV - (WCUService_STC_IE) – C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe (Splashtop Inc.)
SRV - (SNMP) – C:\Windows\SysWOW64\snmp.exe (Microsoft Corporation)
SRV - (SCBackService) – C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe (Splashtop Inc.)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Realtek87B) – C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (Realtek)
SRV - (Smart TimeLock) – C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe (Gigabyte Technology CO., LTD.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (VirtuWDDM) – C:\Windows\SysNative\drivers\VirtuWDDM.sys (Lucidlogix Inc.)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (tap0901) – C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) – C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (mfehidk) – C:\Windows\SysNative\drivers\mfehidk.sys (McAfee, Inc.)
DRV:64bit: - (mfefirek) – C:\Windows\SysNative\drivers\mfefirek.sys (McAfee, Inc.)
DRV:64bit: - (mfewfpk) – C:\Windows\SysNative\drivers\mfewfpk.sys (McAfee, Inc.)
DRV:64bit: - (mfeavfk) – C:\Windows\SysNative\drivers\mfeavfk.sys (McAfee, Inc.)
DRV:64bit: - (mfeapfk) – C:\Windows\SysNative\drivers\mfeapfk.sys (McAfee, Inc.)
DRV:64bit: - (mferkdet) – C:\Windows\SysNative\drivers\mferkdet.sys (McAfee, Inc.)
DRV:64bit: - (mfenlfk) – C:\Windows\SysNative\drivers\mfenlfk.sys (McAfee, Inc.)
DRV:64bit: - (cfwids) – C:\Windows\SysNative\drivers\cfwids.sys (McAfee, Inc.)
DRV:64bit: - (VBoxNetAdp) – C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Oracle Corporation)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LEqdUsb) – C:\Windows\SysNative\drivers\LEqdUsb.sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidEqd) – C:\Windows\SysNative\drivers\LHidEqd.sys (Logitech, Inc.)
DRV:64bit: - (EtronXHCI) – C:\Windows\SysNative\drivers\EtronXHCI.sys (Etron Technology Inc)
DRV:64bit: - (EtronHub3) – C:\Windows\SysNative\drivers\EtronHub3.sys (Etron Technology Inc)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (AppleCharger) – C:\Windows\SysNative\drivers\AppleCharger.sys ()
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) – C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) – C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (MEIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (IntcDAud) Intel® – C:\Windows\SysNative\drivers\IntcDAud.sys (Intel® Corporation)
DRV:64bit: - (HRMPORTS) – C:\Windows\SysNative\drivers\hrmports.sys (Microsoft Corporation)
DRV:64bit: - (HRMCFGSPC) – C:\Windows\SysNative\drivers\hrmcfgspc.sys (Microsoft Corporation)
DRV:64bit: - (HRMINTS) – C:\Windows\SysNative\drivers\hrmints.sys (Microsoft Corporation)
DRV:64bit: - (DSFKSVCS) – C:\Windows\SysNative\drivers\dsfksvcs.sys (Microsoft Corporation)
DRV:64bit: - (dsfroot) – C:\Windows\SysNative\drivers\dsfroot.sys (Microsoft Corporation)
DRV:64bit: - (usbehci_dsf) Microsoft DSF-enabled USB 2.0 Enhanced Host Controller Interface (EHCI) – C:\Windows\SysNative\drivers\usbehci_dsf.sys (Microsoft Corporation)
DRV:64bit: - (SOFTUSBK) – C:\Windows\SysNative\drivers\softusbk.sys (Microsoft Corporation)
DRV:64bit: - (softehci) Microsoft USB 2.0 Enhanced Host Controller Interface (EHCI) – C:\Windows\SysNative\drivers\softehci.sys (Microsoft Corporation)
DRV:64bit: - (SOFTHIDUSBK) – C:\Windows\SysNative\drivers\softhidusbk.sys (Microsoft Corporation)
DRV:64bit: - (RTL8187) – C:\Windows\SysNative\drivers\RTL8187.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (TEAM) Realtek Virtual Miniport Driver for Teaming (NDIS 6.0) – C:\Windows\SysNative\drivers\RtTeam60.sys (Realtek Corporation)
DRV:64bit: - (RTTEAMPT) Realtek Teaming Protocol Driver (NDIS 6.0) – C:\Windows\SysNative\drivers\RtTeam60.sys (Realtek Corporation)
DRV:64bit: - (RtNdPt60) – C:\Windows\SysNative\drivers\RtNdPt60.sys (Realtek )
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (VLAN) Realtek Virtual Miniport Driver for VLAN (NDIS 6.2) – C:\Windows\SysNative\drivers\RtVlan60.sys (Windows ® Codename Longhorn DDK provider)
DRV:64bit: - (RTVLANPT) Realtek Vlan Protocol Driver (NDIS 6.2) – C:\Windows\SysNative\drivers\RtVlan60.sys (Windows ® Codename Longhorn DDK provider)
DRV:64bit: - (RimUsb) – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys (Research In Motion Limited)
DRV - (gdrv) – C:\Windows\gdrv.sys (Windows ® Server 2003 DDK provider)
DRV - (GVTDrv64) – C:\Windows\GVTDrv64.sys ()
DRV - (etdrv) – C:\Windows\etdrv.sys (Windows ® Server 2003 DDK provider)
DRV - (atitray) – F:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray64.sys ()
DRV - (NTIOLib_1_0_4) – F:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys (MSI)
DRV - (RTCore64) – F:\Program Files (x86)\MSI Afterburner\RTCore64.sys ()
DRV - (MSI_MSIBIOS_010507) – f:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys (Your Corporation)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid;=CT3131886
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?rd=1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0A 9A 0F 27 F6 C7 CC 01 [binary data]
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\..\URLSearchHook: {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll (Splashtop Inc.)
IE - HKCU\..\URLSearchHook: {656461ef-40f6-4115-9ff1-bced9812ccbb} - No CLSID value found
IE - HKCU\..\URLSearchHook: {f9bbf004-6e40-4019-8214-c43a37e1d058} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {EEE10EEE-1406-4bae-B120-B785B699A695}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{EA77910C-503C-4D7F-9452-971B58DCFEF9}: "URL" = http://www.bing.com/search?FORM=BDKTDF&…rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{EEE10EEE-1406-4bae-B120-B785B699A695}: "URL" = http://www.google.com/cse?cx=partner-pub-3…q={searchTerms}
IE - HKCU\..\SearchScopes\{FDCFA99F-B3AB-4fa0-9315-87F3353DFC5B}: "URL" = http://search.yahoo.com/search?p={searchTe…amp;type=IEBDSV
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 12.174.113.200:80

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "Vgrabber1 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3131886&SearchSource;=3&q;={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Vgrabber1 Customized Web Search"
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT3131886&SearchSource;=13"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3131886&SearchSource;=2&q;="
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: F:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: F:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1} [2011/12/31 15:37:45 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0} [2011/12/31 15:37:45 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{d9284e50-81fc-11da-a72b-0800200c9a66}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66} [2011/12/31 15:37:45 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2012/02/25 00:31:53 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2012/04/29 09:00:31 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: F:\Program Files (x86)\Mozilla Firefox\components [2012/05/16 12:02:30 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: F:\Program Files (x86)\Mozilla Firefox\plugins

[2012/01/17 02:08:47 | 000,000,000 | —D | M] (No name found) – C:\Users\Bruce\AppData\Roaming\Mozilla\Extensions
[2012/06/17 01:37:36 | 000,000,000 | —D | M] (No name found) – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions
[2012/05/04 19:14:06 | 000,000,000 | —D | M] (BitTorrentBar2 Community Toolbar) – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions\{656461ef-40f6-4115-9ff1-bced9812ccbb}
[2012/06/17 01:05:23 | 000,000,000 | —D | M] (Vgrabber1 Community Toolbar) – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions\{f9bbf004-6e40-4019-8214-c43a37e1d058}
[2012/05/04 19:14:00 | 000,000,000 | —D | M] ("Vid-Saver") – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions\[removed]
[2012/06/17 01:37:36 | 000,000,000 | —D | M] (No name found) – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions\staged
[2012/05/30 08:58:00 | 000,000,921 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\searchplugins\conduit.xml
[2012/05/02 13:54:07 | 000,000,000 | —D | M] (Java Console) – F:\PROGRAM FILES (X86)\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}

========== Chrome ==========

CHR - default_search_provider: Conduit (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={…;ctid=CT3131886
CHR - default_search_provider: suggest_url = http://search.conduit.com/
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\17.0.963.56\pdf.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\McChPlg.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll
CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Java™ Platform SE 6 U32 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.320.5 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = F:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = F:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
CHR - plugin: VLC Web Plugin (Enabled) = F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: McAfee SecurityCenter (Enabled) = c:\progra~2\mcafee\msc\npmcsn~1.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: SiteAdvisor = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\
CHR - Extension: Vgrabber1 = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.10.3_0\
CHR - Extension: Vid-Saver = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgmfkblbflahhponhjmkcnpjinenhlnc\1.17.19_0\

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120429041317.dll (McAfee, Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Splashtop Connect VisualBookmark) - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (Splashtop Inc.)
O2 - BHO: (Vid-Saver) - {11111111-1111-1111-1111-110011341191} - C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll (215 Apps)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - F:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120429041317.dll (McAfee, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - F:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - F:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {656461EF-40F6-4115-9FF1-BCED9812CCBB} - No CLSID value found.
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [VIRTU] F:\Program Files\Lucidlogix Technologies\VIRTU\VirtuControlPanel.Exe ()
O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BCSSync] F:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe (Microsoft Corp.)
O4 - HKLM..\Run: [Live Update 5] f:\Program Files (x86)\MSI\Live Update 5\LU5.exe (Micro-Star International)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [StartCCC] f:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [STCAgent] C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe (Splashtop Inc.)
O4 - HKLM..\Run: [ZyngaGamesAgent] C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe (Splashtop Inc.)
O4 - HKCU..\Run: [AtiTrayTools] f:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe (Ray Adams)
O4 - HKCU..\Run: [B84D89BF5D438687D0AF71155C80DD42082D9033._service_run] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKCU..\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (AMD)
O4 - HKCU..\Run: [OfficeSyncProcess] F:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [Speech Recognition] C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation)
O4:64bit: - HKLM..\RunOnce: [RPMKickstart] C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe (Gigabyte Technology CO., LTD.)
O4 - HKLM..\RunOnce: [GBTUpd] C:\Program Files (x86)\GIGABYTE\UpdManager\PreRun.exe (PreRun)
O4 - Startup: C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft SharePoint Workspace.lnk = F:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
O4 - Startup: C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk = F:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: E&xport; to Microsoft Excel - F:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: Se&nd; to OneNote - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport; to Microsoft Excel - F:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd; to OneNote - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - F:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - F:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} http://download.gigabyte.com.tw/object/Dldrv.ocx (Dldrv2 Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E152AAF-4B39-48B3-AD93-31DBE61CD140}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E6165E7-32D5-4325-82C1-49B0840A1F9E}: DhcpNameServer = [removed] [removed] 4.2.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{78750F0B-F5EF-4F48-A7E7-0D6741109AE4}: NameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - F:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\appinit_dll.dll) - C:\Windows\SysNative\appinit_dll.dll (Lucidlogix Inc.)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\appinit_dll.dll) - C:\Windows\SysWOW64\appinit_dll.dll (Lucidlogix Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - F:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{d82485fe-33fd-11e1-98d1-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d82485fe-33fd-11e1-98d1-806e6f6e6963}\Shell\AutoRun\command - "" = E:\DVDSetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.RTV1 - rtvcvfw32.dll File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/06/17 16:17:41 | 000,000,000 | —D | C] – C:\ProgramData\Sophos
[2012/06/17 16:17:36 | 000,000,000 | —D | C] – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
[2012/06/17 16:14:40 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2012/06/17 01:05:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\v-Grabber
[2012/06/14 03:00:26 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/06/14 03:00:26 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/06/14 03:00:26 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/06/14 03:00:26 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/06/14 03:00:25 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/06/14 03:00:25 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/06/14 03:00:25 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/06/14 03:00:25 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/06/14 03:00:25 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/06/14 03:00:25 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/06/14 03:00:24 | 002,311,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/06/14 03:00:24 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/06/14 03:00:24 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/06/13 13:39:20 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2012/06/13 13:39:20 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2012/06/13 13:39:20 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdrmemptylst.exe
[2012/06/13 13:39:14 | 005,559,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2012/06/13 13:39:13 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2012/06/13 13:39:12 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2012/06/13 13:39:10 | 003,216,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2012/06/13 13:39:06 | 001,462,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2012/06/13 13:39:05 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2012/06/09 12:42:01 | 000,000,000 | —D | C] – C:\Users\Bruce\Tracing
[2012/05/31 13:45:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK RTL8187 Wireless LAN Utility
[2012/05/31 13:44:48 | 000,000,000 | —D | C] – C:\Windows\SysNative\RtlGina
[2012/05/31 13:41:45 | 000,000,000 | —D | C] – C:\Users\Bruce\Desktop\Windows7wifi
[2012/05/31 13:37:46 | 000,448,512 | —- | C] (Realtek Semiconductor Corporation ) – C:\Windows\SysNative\drivers\RTL8187.sys
[2012/05/26 13:03:23 | 000,000,000 | —D | C] – C:\AMD
[2012/05/21 02:47:25 | 000,000,000 | —D | C] – C:\Users\Bruce\.kde
[2012/05/21 02:47:22 | 000,000,000 | —D | C] – C:\Users\Bruce\.local
[2012/05/21 02:47:22 | 000,000,000 | —D | C] – C:\Users\Bruce\.config
[2012/05/21 02:46:16 | 000,000,000 | —D | C] – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release

========== Files - Modified Within 30 Days ==========

[2012/06/17 16:50:00 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/06/17 16:20:00 | 000,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/06/17 16:17:36 | 000,003,205 | —- | M] () – C:\Users\Bruce\Desktop\Sophos Virus Removal Tool.lnk
[2012/06/17 16:16:48 | 000,022,096 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/06/17 16:16:48 | 000,022,096 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/06/17 16:14:40 | 000,001,828 | —- | M] () – C:\Users\Public\Desktop\McAfee AntiVirus Plus.lnk
[2012/06/17 16:14:14 | 000,782,922 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/06/17 16:14:14 | 000,663,010 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/06/17 16:14:14 | 000,121,878 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/06/17 16:10:42 | 000,005,606 | —- | M] () – C:\Windows\SysWow64\Utility.xml
[2012/06/17 16:09:54 | 000,025,640 | —- | M] (Windows ® Server 2003 DDK provider) – C:\Windows\gdrv.sys
[2012/06/17 16:09:54 | 000,000,892 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/06/17 16:09:40 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/06/17 16:09:37 | 4229,779,454 | -HS- | M] () – C:\hiberfil.sys
[2012/06/17 00:49:30 | 000,426,184 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/06/17 00:49:30 | 000,070,344 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/06/16 22:35:15 | 000,283,304 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.xtr
[2012/06/16 22:35:15 | 000,283,304 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.exe
[2012/06/16 22:35:05 | 000,280,904 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.ex0
[2012/06/14 03:21:06 | 000,414,656 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/06/06 02:02:24 | 000,000,938 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
[2012/06/02 15:37:10 | 000,000,437 | —- | M] () – C:\Windows\SysNative\drivers\etc\hosts.ics
[2012/05/31 13:45:22 | 000,002,286 | —- | M] () – C:\Users\Public\Desktop\REALTEK RTL8187 Wireless LAN Utility.lnk
[2012/05/29 23:52:03 | 000,000,897 | —- | M] () – C:\Users\Bruce\Desktop\dlink old.rtf
[2012/05/21 02:28:59 | 000,000,781 | —- | M] () – C:\Users\Bruce\Desktop\digikam - Shortcut.lnk

========== Files Created - No Company Name ==========

[2012/06/17 16:17:36 | 000,003,205 | —- | C] () – C:\Users\Bruce\Desktop\Sophos Virus Removal Tool.lnk
[2012/05/31 13:45:22 | 000,002,286 | —- | C] () – C:\Users\Public\Desktop\REALTEK RTL8187 Wireless LAN Utility.lnk
[2012/05/31 13:44:55 | 000,451,072 | —- | C] () – C:\Windows\SysWow64\ISSRemoveSP.exe
[2012/05/29 23:52:03 | 000,000,897 | —- | C] () – C:\Users\Bruce\Desktop\dlink old.rtf
[2012/05/21 02:29:25 | 000,000,781 | —- | C] () – C:\Users\Bruce\Desktop\digikam - Shortcut.lnk
[2012/03/19 23:31:16 | 000,963,912 | —- | C] () – C:\Windows\SysWow64\igkrng600.bin
[2012/03/19 23:31:16 | 000,261,208 | —- | C] () – C:\Windows\SysWow64\igfcg600m.bin
[2012/03/19 23:25:58 | 000,058,880 | —- | C] () – C:\Windows\SysWow64\igdde32.dll
[2012/03/19 22:21:14 | 013,212,672 | —- | C] () – C:\Windows\SysWow64\ig4icd32.dll
[2012/03/09 14:06:14 | 000,024,576 | —- | C] () – C:\Windows\SysWow64\kdbsdk32.dll
[2012/02/21 18:59:38 | 000,000,079 | —- | C] () – C:\Users\Bruce\AppData\Local\CrystalDiskMark30.ini
[2012/02/14 22:36:36 | 000,204,952 | —- | C] () – C:\Windows\SysWow64\ativvsvl.dat
[2012/02/14 22:36:36 | 000,157,144 | —- | C] () – C:\Windows\SysWow64\ativvsva.dat
[2012/01/07 10:50:38 | 000,776,646 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2012/01/02 00:44:28 | 000,007,613 | —- | C] () – C:\Users\Bruce\AppData\Local\Resmon.ResmonCfg
[2012/01/01 23:38:44 | 000,283,304 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2012/01/01 23:38:13 | 000,076,888 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2012/01/01 10:59:02 | 000,030,528 | —- | C] () – C:\Windows\GVTDrv64.sys
[2011/12/31 15:45:12 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2011/12/31 15:41:12 | 000,008,192 | —- | C] () – C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
[2011/12/31 15:38:41 | 000,145,804 | —- | C] () – C:\Windows\SysWow64\igcompkrng600.bin
[2011/12/31 15:36:19 | 000,000,010 | —- | C] () – C:\Windows\GSetup.ini
[2011/09/28 17:44:14 | 000,179,271 | —- | C] () – C:\Windows\SysWow64\xlive.dll.cat
[2011/09/12 19:06:16 | 000,003,917 | —- | C] () – C:\Windows\SysWow64\atipblag.dat

========== LOP Check ==========

[2012/05/21 02:47:23 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\.kde
[2012/06/16 19:36:01 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\.spotflux
[2012/05/21 09:23:10 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\AIWI
[2012/01/08 19:39:29 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\AnvSoft
[2012/06/11 18:59:46 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\BitTorrent
[2012/01/10 10:27:53 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/04/03 20:52:42 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\gtk-2.0
[2012/02/11 15:07:27 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\KDE
[2012/01/14 23:31:19 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\Leadertech
[2012/01/27 03:00:57 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\Need for Speed World
[2012/01/01 23:00:31 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\Origin
[2012/02/21 12:51:48 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\Philipp Winterberg
[2012/04/02 00:45:25 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\RIFT
[2011/12/31 15:37:25 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\Splashtop
[2012/05/17 03:31:08 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\TS3Client
[2012/05/17 03:28:24 | 000,000,000 | —D | M] – C:\Users\Bruce\AppData\Roaming\ts3overlay
[2009/07/14 01:08:49 | 000,031,076 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2012/01/01 19:46:25 | 000,000,174 | —- | M] () – C:\csb.log
[2012/06/17 16:09:37 | 4229,779,454 | -HS- | M] () – C:\hiberfil.sys
[2011/12/31 15:40:06 | 000,000,189 | —- | M] () – C:\Install.log
[2012/01/12 11:46:20 | 000,016,528 | —- | M] () – C:\LU4.log
[2012/04/20 00:26:59 | 000,000,472 | —- | M] () – C:\lucid.log
[2011/12/31 15:39:46 | 000,002,150 | —- | M] () – C:\RHDSetup.log
[2012/02/14 04:18:00 | 000,187,832 | —- | M] () – C:\shared.log

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2012/01/06 18:54:53 | 000,000,221 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< %appdata%\Microsoft\Windows\Start Menu\*.* /s >
[2012/02/16 10:45:53 | 000,000,174 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
[2012/03/05 19:35:32 | 000,001,412 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Install Windows.lnk
[2012/02/16 10:45:53 | 000,000,696 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
[2012/01/06 18:54:53 | 000,001,413 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012/01/06 18:54:53 | 000,001,447 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011/12/31 15:37:44 | 000,001,422 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Social Games.lnk
[2009/07/14 00:54:27 | 000,001,280 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk
[2009/07/14 00:54:32 | 000,000,678 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini
[2009/07/14 00:54:32 | 000,001,304 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk
[2009/07/14 00:49:38 | 000,000,262 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk
[2009/07/14 00:49:38 | 000,001,228 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk
[2009/07/14 00:54:02 | 000,000,704 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini
[2009/07/14 00:54:01 | 000,001,358 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk
[2009/07/14 00:54:00 | 000,001,258 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk
[2009/07/14 00:54:02 | 000,001,262 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
[2009/07/14 00:54:00 | 000,001,250 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
[2009/07/14 00:49:38 | 000,000,262 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk
[2009/07/14 00:49:38 | 000,000,262 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk
[2012/01/06 18:54:53 | 000,000,738 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini
[2012/01/06 18:54:53 | 000,001,497 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
[2009/07/14 00:54:59 | 000,001,306 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk
[2012/02/16 10:45:53 | 000,000,174 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini
[2012/01/24 19:46:17 | 000,000,986 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\ATI Tray Tools.lnk
[2012/01/24 19:46:17 | 000,000,998 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\ATI XCoder.lnk
[2012/01/24 19:46:17 | 000,000,986 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\Download plugins.lnk
[2012/01/24 19:46:17 | 000,000,986 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\Low Level Driver Installation.lnk
[2012/01/24 19:46:17 | 000,000,981 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\Read me first.lnk
[2012/01/24 19:46:17 | 000,000,998 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\Uninstall ATI Tray.lnk
[2012/01/24 19:46:17 | 000,000,981 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\WEB Support English.lnk
[2012/01/24 19:46:17 | 000,000,981 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\WEB Support Russian.lnk
[2012/01/24 19:46:17 | 000,000,950 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\Shell Integration\Integrate into Windows Shell.lnk
[2012/01/24 19:46:17 | 000,000,956 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATI Tray Tools\Shell Integration\Remove Windows Shell Integration.lnk
[2012/04/02 22:54:06 | 000,000,186 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\RIFT.lnk
[2012/04/21 17:50:06 | 000,001,062 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JBidwatcher\JBidwatcher 2.5.lnk
[2012/04/21 17:50:06 | 000,000,904 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JBidwatcher\Uninstall.lnk
[2012/05/21 02:46:17 | 000,000,597 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Help.lnk
[2012/05/21 02:46:17 | 000,000,689 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\KDE Shutdown.lnk
[2012/05/21 02:46:17 | 000,000,689 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Development\Akonadi Console.lnk
[2012/05/21 02:46:17 | 000,000,579 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Find Files\Folders.lnk
[2012/05/21 02:46:17 | 000,000,677 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Graphics\AcquireImages (Acquire Images).lnk
[2012/05/21 02:46:17 | 000,000,733 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Graphics\digiKam (Photo Management Program).lnk
[2012/05/21 02:46:17 | 000,000,699 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Graphics\DNGConverter (DNG Image Converter).lnk
[2012/05/21 02:46:17 | 000,000,667 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Graphics\ExpoBlending (Exposure Blending).lnk
[2012/05/21 02:46:17 | 000,000,677 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Graphics\Panorama.lnk
[2012/05/21 02:46:17 | 000,000,749 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Graphics\Photo Layouts Editor (Photo layouts management program).lnk
[2012/05/21 02:46:17 | 000,000,737 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Graphics\showFoto (Photo Viewer and Editor).lnk
[2012/05/21 02:46:17 | 000,000,637 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Internet\Akregator (Feed Reader).lnk
[2012/05/21 02:46:17 | 000,000,585 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Internet\Blogilo (A KDE Blogging Client).lnk
[2012/05/21 02:46:17 | 000,000,579 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Internet\KMail (Mail Client).lnk
[2012/05/21 02:46:17 | 000,000,595 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Internet\KNetAttach (Network Folder Wizard).lnk
[2012/05/21 02:46:17 | 000,000,579 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Internet\KNode (News Reader).lnk
[2012/05/21 02:46:17 | 000,000,639 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Internet\Konqueror (Web Browser).lnk
[2012/05/21 02:46:17 | 000,000,601 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Internet\Mail.lnk
[2012/05/21 02:46:17 | 000,000,615 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\Calendar.lnk
[2012/05/21 02:46:17 | 000,000,621 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\Contacts.lnk
[2012/05/21 02:46:17 | 000,000,601 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\KAddressBook (Contact Manager).lnk
[2012/05/21 02:46:17 | 000,000,639 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\KMyMoney (Personal Finance Manager).lnk
[2012/05/21 02:46:17 | 000,000,585 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\Kontact (Personal Information Manager).lnk
[2012/05/21 02:46:17 | 000,000,659 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\KOrganizer (Personal Organizer).lnk
[2012/05/21 02:46:17 | 000,000,585 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\skrooge (Manage your money).lnk
[2012/05/21 02:46:17 | 000,000,601 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Office\Tasks.lnk
[2012/05/21 02:46:17 | 000,000,585 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\System\Dolphin (File Manager).lnk
[2012/05/21 02:46:17 | 000,000,607 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\System\KWalletManager (Wallet Management Tool).lnk
[2012/05/21 02:46:17 | 000,000,603 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\System\Nepomuk Backup.lnk
[2012/05/21 02:46:17 | 000,000,755 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\System\Nepomuk File Indexing Controller.lnk
[2012/05/21 02:46:17 | 000,000,597 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\Akonaditray (Akonadi Tray Utility).lnk
[2012/05/21 02:46:17 | 000,000,573 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\Ark (Archiving Tool).lnk
[2012/05/21 02:46:17 | 000,000,653 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\Filelight (Disk Usage Statistics).lnk
[2012/05/21 02:46:17 | 000,000,583 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KAlarm (Personal Alarm Scheduler).lnk
[2012/05/21 02:46:17 | 000,000,579 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KCalc (Scientific Calculator).lnk
[2012/05/21 02:46:17 | 000,000,597 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KCharSelect (Character Selector).lnk
[2012/05/21 02:46:17 | 000,000,611 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KGpg (Encryption Tool).lnk
[2012/05/21 02:46:17 | 000,000,579 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KJots (Note Taker).lnk
[2012/05/21 02:46:17 | 000,000,591 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\Kleopatra (Certificate Manager and Unified Crypto GUI).lnk
[2012/05/21 02:46:17 | 000,000,583 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KNotes (Popup Notes).lnk
[2012/05/21 02:46:17 | 000,000,589 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KTeaTime (Tea Cooker).lnk
[2012/05/21 02:46:17 | 000,000,583 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\KTimer (Countdown Launcher).lnk
[2012/05/21 02:46:17 | 000,000,601 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\Notes.lnk
[2012/05/21 02:46:17 | 000,000,585 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\Sweeper (System Cleaner).lnk
[2012/05/21 02:46:17 | 000,000,585 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\Zanshin (TODO Management Application).lnk
[2012/05/21 02:46:17 | 000,000,631 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release\Utilities\More Applications\Krecipes (Cooking Book).lnk
[2009/07/14 00:49:38 | 000,000,318 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini
[2009/07/14 00:49:38 | 000,000,262 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk
[2012/03/03 12:57:40 | 000,001,057 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\MSI Afterburner On-Screen Display Server.lnk
[2012/03/03 12:57:40 | 000,000,776 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\MSI Afterburner.lnk
[2012/03/03 12:57:40 | 000,000,824 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\ReadMe.lnk
[2012/03/03 12:57:40 | 000,000,761 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\Uninstall.lnk
[2012/03/03 12:57:40 | 000,000,948 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\SDK\MSI Afterburner localization reference.lnk
[2012/03/03 12:57:40 | 000,000,957 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\SDK\MSI Afterburner skin format reference.lnk
[2012/03/03 12:57:40 | 000,000,811 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner\SDK\Samples.lnk
[2012/03/09 14:44:46 | 000,000,049 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBD-II Software\ScanTool.net\Website.url
[2012/03/24 11:52:34 | 000,001,101 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\proXPN\proXPN.lnk
[2012/06/17 16:17:36 | 000,003,171 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Virus Removal Tool\Sophos Virus Removal Tool.lnk
[2012/03/25 02:47:38 | 000,000,843 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotflux\Start spotflux.lnk
[2012/02/16 10:45:53 | 000,000,174 | -HS- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2012/03/21 13:12:32 | 000,000,790 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft SharePoint Workspace.lnk
[2012/06/06 02:02:24 | 000,000,938 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
[2012/01/07 13:39:11 | 000,000,691 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk
[2012/01/07 13:39:11 | 000,000,218 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Team Fortress Classic.url

< %programdata%\Microsoft\Windows\Start Menu\*.* /s >
[2012/05/04 19:13:55 | 000,000,671 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\BitTorrent.lnk
[2009/07/14 01:01:14 | 000,001,282 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
[2009/07/14 01:01:14 | 000,000,442 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini
[2012/01/01 10:38:43 | 000,002,068 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Program Updates.lnk
[2009/07/14 00:49:40 | 000,001,266 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
[2012/01/03 13:08:31 | 000,001,009 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
[2012/04/11 14:56:13 | 000,002,441 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012/02/24 10:41:15 | 000,002,519 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011/12/31 18:22:53 | 000,001,130 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
[2011/12/31 18:22:53 | 000,001,345 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012/01/08 10:06:38 | 000,002,607 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Communicator 2007.lnk
[2012/01/17 02:08:44 | 000,000,814 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2009/07/14 00:57:08 | 000,001,330 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
[2009/07/14 00:57:09 | 000,001,352 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
[2011/12/31 18:22:53 | 000,001,326 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2009/07/14 00:54:59 | 000,001,210 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
[2012/04/05 18:07:34 | 000,001,338 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
[2010/11/20 23:40:30 | 000,001,547 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2009/07/14 00:57:08 | 000,001,246 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
[2009/07/14 00:55:00 | 000,001,230 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk
[2011/12/31 18:22:53 | 000,001,854 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini
[2009/07/14 00:54:23 | 000,001,266 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk
[2011/12/31 18:22:53 | 000,001,364 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk
[2011/12/31 18:22:52 | 000,001,238 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk
[2011/12/31 18:22:52 | 000,001,242 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\NetworkProjection.lnk
[2009/07/14 00:54:32 | 000,001,242 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk
[2009/07/14 00:53:55 | 000,001,367 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk
[2011/12/31 18:22:53 | 000,001,272 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk
[2009/07/14 00:57:08 | 000,001,330 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk
[2011/12/31 18:22:52 | 000,001,351 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk
[2009/07/14 00:54:58 | 000,001,254 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk
[2009/07/14 00:57:09 | 000,001,579 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk
[2009/07/14 00:54:58 | 000,001,322 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk
[2009/07/14 00:57:07 | 000,000,370 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini
[2009/07/14 00:57:07 | 000,001,388 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk
[2009/07/14 00:55:00 | 000,001,248 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk
[2009/07/14 00:57:09 | 000,001,338 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini
[2009/07/14 00:54:25 | 000,001,290 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk
[2009/07/14 00:54:58 | 000,001,252 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk
[2009/07/14 00:53:50 | 000,001,242 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk
[2009/07/14 00:53:33 | 000,001,250 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk
[2009/07/14 00:54:57 | 000,001,246 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk
[2009/07/14 00:54:29 | 000,001,268 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk
[2009/07/14 00:57:09 | 000,001,320 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
[2009/07/14 00:57:09 | 000,001,316 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk
[2011/12/31 18:22:52 | 000,000,343 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini
[2011/12/31 18:22:52 | 000,001,436 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk
[2011/12/31 18:22:52 | 000,001,386 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk
[2011/12/31 18:22:52 | 000,001,316 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk
[2009/07/14 00:57:13 | 000,000,216 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini
[2009/07/14 01:32:31 | 000,001,989 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
[2009/07/14 00:57:13 | 000,001,468 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk
[2009/07/14 00:57:13 | 000,001,468 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
[2009/07/14 01:32:31 | 000,001,899 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
[2009/07/14 00:57:13 | 000,001,242 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk
[2009/07/14 00:54:21 | 000,001,294 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk
[2009/07/14 00:53:52 | 000,001,270 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk
[2011/12/31 18:22:53 | 000,001,958 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini
[2009/07/14 00:54:29 | 000,001,298 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk
[2009/07/14 00:54:22 | 000,001,274 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk
[2009/07/14 00:53:33 | 000,001,268 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
[2009/07/14 00:53:50 | 000,001,232 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk
[2011/12/31 18:22:52 | 000,001,262 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk
[2011/12/31 18:22:53 | 000,001,248 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk
[2009/07/14 00:54:05 | 000,001,288 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 00:53:33 | 000,001,246 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk
[2009/07/14 00:54:29 | 000,001,262 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk
[2009/07/14 00:53:58 | 000,001,274 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
[2009/07/14 01:32:31 | 000,002,741 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk
[2012/03/03 10:18:22 | 000,002,623 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD\System Monitor\System Monitor.lnk
[2012/01/08 19:38:39 | 000,000,705 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft\Any Video Converter\Any Video Converter on the Web.lnk
[2012/01/08 19:38:39 | 000,000,902 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft\Any Video Converter\Any Video Converter.lnk
[2012/01/08 19:38:39 | 000,000,884 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft\Any Video Converter\Uninstall Any Video Converter.lnk
[2012/02/15 01:04:36 | 000,000,860 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3\Battlefield 3.lnk
[2012/02/15 01:04:36 | 000,001,082 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3\EA EULA.lnk
[2012/02/15 01:04:36 | 000,001,080 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3\Read Me.lnk
[2012/02/15 01:04:36 | 000,001,170 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3\Technical Support.lnk
[2012/05/01 16:41:58 | 000,001,155 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bing Desktop\Bing Desktop.lnk
[2012/05/09 23:27:29 | 000,000,966 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center\Catalyst Control Center.lnk
[2012/05/09 23:27:29 | 000,001,000 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center\Help.lnk
[2012/05/07 13:05:00 | 000,000,082 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url
[2012/05/07 13:05:00 | 000,000,840 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk
[2012/05/07 13:05:00 | 000,000,603 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk
[2012/02/21 18:46:52 | 000,000,803 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo\CrystalDiskInfo Help.lnk
[2012/02/21 18:46:52 | 000,000,058 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo\CrystalDiskInfo on the Web.url
[2012/02/21 18:46:52 | 000,000,894 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo\CrystalDiskInfo.lnk
[2012/02/21 18:46:52 | 000,000,810 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo\Uninstall CrystalDiskInfo.lnk
[2012/02/21 18:59:35 | 000,000,828 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark\CrystalDiskMark (32bit).lnk
[2012/02/21 18:59:35 | 000,000,843 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark\CrystalDiskMark (64bit).lnk
[2012/02/21 18:59:35 | 000,000,773 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark\CrystalDiskMark Help.lnk
[2012/02/21 18:59:35 | 000,000,058 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark\CrystalDiskMark on the Web.url
[2012/02/21 18:59:35 | 000,000,780 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark\Uninstall CrystalDiskMark.lnk
[2012/03/15 18:14:11 | 000,000,739 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA\BioWare\Star Wars - The Old Republic\Star Wars - The Old Republic.lnk
[2012/03/15 18:14:11 | 000,000,781 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA\BioWare\Star Wars - The Old Republic\SWTOR Customer Support.lnk
[2012/03/15 18:14:11 | 000,001,341 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA\BioWare\Star Wars - The Old Republic\Uninstall Star Wars - The Old Republic.lnk
[2012/03/15 18:14:11 | 000,000,826 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA\BioWare\Star Wars - The Old Republic\View License.lnk
[2012/03/15 18:14:11 | 000,000,832 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA\BioWare\Star Wars - The Old Republic\View Readme.lnk
[2012/02/21 12:51:46 | 000,000,400 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free RAR Extract Frog\Donate.lnk
[2012/02/21 12:51:46 | 000,000,940 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free RAR Extract Frog\Free RAR Extract Frog Help.lnk
[2012/02/21 12:51:46 | 000,000,456 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free RAR Extract Frog\Free RAR Extract Frog Updates.lnk
[2012/02/21 12:51:46 | 000,000,878 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free RAR Extract Frog\Free RAR Extract Frog.lnk
[2012/02/21 12:51:46 | 000,000,851 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free RAR Extract Frog\Uninstall Free RAR Extract Frog.lnk
[2012/02/11 17:07:47 | 000,000,868 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJIFILM\MyFinePix Studio.lnk
[2012/02/11 17:07:47 | 000,000,778 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJIFILM\Uninstall MyFinePix Studio.lnk
[2012/04/05 18:20:08 | 000,000,646 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Batman Arkham City™.lnk
[2012/01/01 23:38:51 | 000,000,206 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Battlefield 3™.lnk
[2011/04/12 04:28:09 | 000,000,520 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\desktop.ini
[2009/07/14 00:54:59 | 000,000,258 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk
[2012/04/05 18:07:38 | 000,000,236 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Games for Windows Marketplace.lnk
[2012/02/18 02:47:28 | 000,000,216 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Mass Effect™ 3 Demo.lnk
[2012/01/27 02:44:27 | 000,000,220 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Need For Speed™ World.lnk
[2012/03/15 18:14:12 | 000,000,236 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\STAR WARS™ The Old Republic™.lnk
[2012/01/07 11:53:34 | 000,000,974 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D\Benchmarks\FurMark_1.9.2\FurMark.lnk
[2012/01/07 11:53:34 | 000,000,082 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D\Benchmarks\FurMark_1.9.2\Geeks3D.com.url
[2012/01/07 11:53:34 | 000,000,064 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D\Benchmarks\FurMark_1.9.2\Homepage.url
[2012/01/07 11:53:34 | 000,000,064 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D\Benchmarks\FurMark_1.9.2\Scores webpage FurMark 1.9.2+.url
[2012/01/07 11:53:34 | 000,000,064 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D\Benchmarks\FurMark_1.9.2\SLI and CrossFire support.url
[2012/01/07 11:53:34 | 000,000,979 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D\Benchmarks\FurMark_1.9.2\Uninstall FurMark.lnk
[2012/01/01 10:39:21 | 000,000,914 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\@BIOS.lnk
[2012/01/03 15:44:46 | 000,000,812 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\EZ Smart Response.lnk
[2012/01/03 15:49:24 | 000,000,860 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\Face_Wizard.lnk
[2012/01/03 15:49:57 | 000,000,840 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\Q-Share.exe.lnk
[2012/01/01 19:46:25 | 000,002,743 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\AutoGreen\AutoGreen.lnk
[2012/01/03 15:56:31 | 000,001,682 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\Cloud OC\Cloud OC.lnk
[2012/01/03 15:56:31 | 000,001,405 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\Cloud OC\Uninstall.lnk
[2012/01/01 10:38:43 | 000,000,942 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\DMIView\DMIInfo.lnk
[2012/01/01 10:37:41 | 000,002,725 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\ET6\ET6.lnk
[2012/01/01 10:37:41 | 000,000,970 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\ET6\Help.lnk
[2012/01/01 10:37:41 | 000,001,419 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\ET6\UnInstall.lnk
[2012/01/01 19:44:45 | 000,000,838 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\Smart 6\smart6.lnk
[2012/01/01 19:44:46 | 000,001,381 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\Smart 6\Uninstall.lnk
[2012/01/03 15:42:10 | 000,000,856 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\TouchBIOS\TouchBIOS.lnk
[2012/01/03 15:42:10 | 000,002,281 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\TouchBIOS\Uninstall.lnk
[2012/01/03 15:50:17 | 000,000,980 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\UpdManager\Launch UpdSettingDlg.lnk
[2012/01/03 15:50:17 | 000,001,381 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\UpdManager\Uninstall.lnk
[2012/03/10 03:18:36 | 000,000,803 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP\GIMP 2.lnk
[2012/03/10 03:18:36 | 000,000,817 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP\Uninstall.lnk
[2012/02/16 06:20:33 | 000,002,362 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
[2012/02/16 06:20:33 | 000,002,391 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Uninstall Google Chrome.lnk
[2012/01/12 19:09:58 | 000,002,228 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Google Earth.lnk
[2012/01/12 19:09:58 | 000,002,144 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Start Google Earth in DirectX mode.lnk
[2012/01/12 19:09:58 | 000,002,148 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Start Google Earth in OpenGL mode.lnk
[2012/01/12 19:09:58 | 000,001,884 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Uninstall Google Earth .lnk
[2011/12/31 15:41:12 | 000,000,103 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\desktop.ini
[2011/12/31 15:41:12 | 000,001,431 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel Control Center.lnk
[2012/02/22 02:20:02 | 000,000,976 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel® Solid-State Drive Toolbox\Intel SSD Toolbox.lnk
[2012/01/14 23:31:03 | 000,001,798 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech\G9x, G500 and G700 Gaming Mice\Device Settings.lnk
[2012/01/14 23:31:03 | 000,001,805 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech\G9x, G500 and G700 Gaming Mice\Macro Editor.lnk
[2012/02/14 03:59:17 | 000,002,023 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech\Mouse and Keyboard\Mouse and Keyboard Settings.lnk
[2012/01/14 23:31:15 | 000,001,126 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech\Unifying\Logitech Unifying Software.lnk
[2009/07/14 00:57:07 | 000,001,304 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk
[2009/07/14 00:57:07 | 000,001,248 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk
[2009/07/14 00:57:09 | 000,000,606 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini
[2009/07/14 00:57:09 | 000,001,212 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk
[2012/06/17 16:14:40 | 000,001,846 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee\McAfee AntiVirus Plus.lnk
[2012/04/05 18:07:38 | 000,001,245 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace\Games for Windows Marketplace.lnk
[2012/02/01 03:17:52 | 000,002,919 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Access 2010.lnk
[2012/02/01 03:17:52 | 000,002,951 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Excel 2010.lnk
[2012/02/01 03:17:52 | 000,003,042 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft InfoPath Designer 2010.lnk
[2012/02/01 03:17:52 | 000,003,026 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft InfoPath Filler 2010.lnk
[2012/02/01 03:17:52 | 000,002,879 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft OneNote 2010.lnk
[2012/02/01 03:17:52 | 000,003,029 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Outlook 2010.lnk
[2012/02/01 03:17:53 | 000,002,937 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft PowerPoint 2010.lnk
[2012/02/01 03:17:53 | 000,003,041 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Publisher 2010.lnk
[2012/02/01 03:17:52 | 000,003,055 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk
[2012/02/01 03:17:53 | 000,003,021 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Word 2010.lnk
[2012/03/21 15:41:45 | 000,002,977 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Digital Certificate for VBA Projects.lnk
[2012/03/21 15:41:45 | 000,002,917 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Clip Organizer.lnk
[2012/03/21 15:41:45 | 000,002,751 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Language Preferences.lnk
[2012/03/21 15:41:45 | 000,002,837 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Upload Center.lnk
[2012/03/21 15:41:45 | 000,002,875 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office Picture Manager.lnk
[2012/05/10 03:01:02 | 000,002,265 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk
[2012/01/03 13:26:16 | 000,000,891 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\DirectX Install.lnk
[2012/01/03 13:26:16 | 000,000,072 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\Forum.url
[2012/01/03 13:26:16 | 000,000,062 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\Homepage.url
[2012/01/03 13:26:16 | 000,000,068 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\Latest news.url
[2012/01/03 13:26:16 | 000,000,772 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\MSI Kombustor(DX10).lnk
[2012/01/03 13:26:16 | 000,000,772 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\MSI Kombustor(DX11).lnk
[2012/01/03 13:26:16 | 000,000,769 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\MSI Kombustor(DX9).lnk
[2012/01/03 13:26:16 | 000,000,760 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\MSI Kombustor.lnk
[2012/01/03 13:26:16 | 000,000,068 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\Online scores.url
[2012/01/03 13:26:16 | 000,000,748 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor\Uninstall MSI Kombustor.lnk
[2012/01/12 12:03:35 | 000,000,927 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI\Live Update 5\Live Update 5.lnk
[2012/01/12 12:03:35 | 000,000,136 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI\Live Update 5\MSI Website.url
[2012/01/12 12:03:35 | 000,000,948 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI\Live Update 5\Uninstall Live Update 5.lnk
[2012/03/09 14:44:46 | 000,000,759 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBD-II Software\ScanTool.net\ScanTool.net for Windows v1.13 Read Me.lnk
[2012/03/09 14:44:46 | 000,000,757 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBD-II Software\ScanTool.net\ScanTool.net for Windows v1.13 Source Code.lnk
[2012/03/09 14:44:46 | 000,000,767 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBD-II Software\ScanTool.net\ScanTool.net for Windows v1.13.lnk
[2012/03/09 14:44:46 | 000,000,583 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBD-II Software\ScanTool.net\Uninstall ScanTool.net for Windows v1.13.lnk
[2012/03/11 11:49:38 | 000,000,837 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\License (English).lnk
[2012/03/11 11:49:38 | 000,000,854 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\Oracle VM VirtualBox.lnk
[2012/03/11 11:49:38 | 000,000,649 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\User manual (CHM, English).lnk
[2012/03/11 11:49:38 | 000,000,719 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\User manual (PDF, English).lnk
[2012/02/18 02:15:03 | 000,000,703 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk
[2012/02/18 02:15:03 | 000,000,732 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Uninstall Origin.lnk
[2012/05/16 12:02:21 | 000,002,441 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\About QuickTime.lnk
[2012/05/16 12:02:21 | 000,002,471 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\PictureViewer.lnk
[2012/05/16 12:02:21 | 000,002,441 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\QuickTime Player.lnk
[2012/05/16 12:02:21 | 000,001,816 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\Uninstall QuickTime.lnk
[2012/05/31 13:45:23 | 000,002,304 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK RTL8187 Wireless LAN Utility\REALTEK RTL8187 Wireless LAN Utility.lnk
[2012/05/31 13:45:23 | 000,002,613 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK RTL8187 Wireless LAN Utility\Uninstall.lnk
[2012/01/02 03:37:37 | 000,001,002 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek\Diagnostic Utility\Realtek Ethernet Diagnostic Utility.lnk
[2012/02/16 01:41:04 | 000,000,601 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Regnum Online\Readme.lnk
[2012/02/16 01:41:04 | 000,000,808 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Regnum Online\Regnum Online.lnk
[2012/02/16 01:41:04 | 000,000,802 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Regnum Online\Uninstall Regnum Online.lnk
[2012/02/16 01:41:04 | 000,000,058 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Regnum Online\Website.url
[2012/04/02 00:43:17 | 000,001,838 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RIFT\Play RIFT.lnk
[2012/04/02 00:43:17 | 000,001,774 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RIFT\RIFT Game Website.lnk
[2012/04/02 00:43:17 | 000,002,116 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RIFT\Uninstall RIFT.lnk
[2012/03/21 15:41:45 | 000,003,027 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint\Microsoft SharePoint Designer 2010.lnk
[2012/02/01 03:17:52 | 000,003,055 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint\Microsoft SharePoint Workspace 2010.lnk
[2012/01/01 22:19:04 | 000,002,533 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2012/01/07 12:40:29 | 000,002,573 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.lnk
[2012/01/07 12:40:29 | 000,000,717 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk
[2012/05/17 03:12:24 | 000,000,794 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\TeamSpeak 3 Client.lnk
[2012/05/17 03:12:24 | 000,000,587 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\Uninstall.lnk
[2012/04/11 17:58:39 | 000,000,820 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk
[2012/04/11 17:58:39 | 000,000,789 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk
[2012/04/11 17:58:39 | 000,000,880 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk
[2012/04/11 17:58:39 | 000,000,829 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk
[2012/04/11 17:58:39 | 000,000,800 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk
[2012/04/11 17:58:39 | 000,000,784 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk
[2012/05/01 16:47:59 | 000,000,917 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIRTU\VIRTU Control Panel.lnk
[2012/05/01 16:47:59 | 000,000,882 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIRTU\VIRTU Uninstall.lnk
[2012/04/05 18:47:40 | 000,002,029 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WB Games\Batman Arkham City™\Batman Arkham City™.lnk
[2012/04/05 18:47:40 | 000,000,889 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WB Games\Batman Arkham City™\Launcher.lnk

< End of report >
———————————————next

OTL Extras logfile created on: 6/17/2012 4:59:59 PM - Run 1
OTL by OldTimer - Version 3.2.49.0 Folder = C:\Users\Bruce\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.92 Gb Total Physical Memory | 13.63 Gb Available Physical Memory | 85.64% Memory free
31.84 Gb Paging File | 28.92 Gb Available in Paging File | 90.83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 56.24 Gb Total Space | 14.13 Gb Free Space | 25.12% Space Free | Partition Type: NTFS
Drive D: | 55.45 Gb Total Space | 39.43 Gb Free Space | 71.12% Space Free | Partition Type: NTFS
Drive F: | 201.21 Gb Total Space | 120.26 Gb Free Space | 59.77% Space Free | Partition Type: NTFS
Drive G: | 419.46 Gb Total Space | 306.83 Gb Free Space | 73.15% Space Free | Partition Type: NTFS
Drive H: | 123.88 Gb Total Space | 118.63 Gb Free Space | 95.76% Space Free | Partition Type: NTFS

Computer Name: GIGABYTE | User Name: Bruce | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html[@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03BCB967-DBFC-4F01-9CEE-8A22A3ED7C05}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1B37F5C6-3476-47C7-9293-78DFAFDD7D4B}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{21E67713-EEC3-4B45-A53B-5EA920EA82D9}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{3A4F0286-F43E-49E2-8125-4BB2055727AC}" = rport=137 | protocol=17 | dir=out | app=system |
"{3AF98B6A-5A74-4311-ABD1-58646C1997D5}" = lport=139 | protocol=6 | dir=in | app=system |
"{3FD8B587-8363-4805-8FC6-2CBB07740D48}" = rport=445 | protocol=6 | dir=out | app=system |
"{3FFF42FA-BE26-49DA-AF8D-2019D8F217A3}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{45A4FC7E-AE85-4276-B0D9-5C27E6E92053}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{473C8F50-E0EE-4FBA-B989-49569F03878A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{4CA9A578-D966-45E6-8C80-0322BD69B65D}" = lport=10243 | protocol=6 | dir=in | app=system |
"{4F5C077B-AF82-4742-8E88-4ED5679E7510}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{619812FA-9022-4CAC-9BBB-2B9D1C054C96}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6E9E843E-8372-41E6-A12C-C572C00151BF}" = lport=138 | protocol=17 | dir=in | app=system |
"{71B8C14F-4DB8-4C28-91FB-EF23EDD4FE1F}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{76BD8A72-347C-4282-A3EB-A0D650A95E8B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7AB98186-E556-402B-9BF1-8B69B22CAB0F}" = rport=139 | protocol=6 | dir=out | app=system |
"{7ADB7DCA-F101-43E0-BD60-C831CDB21A8D}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{7B154B86-64D1-4A1B-B688-0090B80064D7}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{7C97127F-85D5-4D57-855F-EDD8898FA289}" = lport=6004 | protocol=17 | dir=in | app=f:\program files (x86)\microsoft office\office14\outlook.exe |
"{A9581CAC-EC07-4E54-A751-5953201ABA08}" = rport=10243 | protocol=6 | dir=out | app=system |
"{B2AA24CD-A768-4B94-8EF2-FD8C32FE35D3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B3768B3E-3B5B-4676-B215-A8933C28E969}" = lport=1542 | protocol=17 | dir=in | name=realtek wps udp prot |
"{C7E6405B-3F74-4DCF-A085-AA08901B7D9C}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{D07001FA-CF4E-4D6E-9686-E8CD709C2A19}" = lport=445 | protocol=6 | dir=in | app=system |
"{D14441AB-BBE6-4C22-AE9F-B53D57146AE0}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{D7B78D09-8B71-46D3-B326-79B62042105F}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{D946D7BB-6AC2-42D0-AD7A-FCBC4B3ED2DC}" = lport=137 | protocol=17 | dir=in | app=system |
"{E7EDDE62-DFBC-46AA-8B18-6F5E1985E85D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{EECF35B1-7556-46EB-ACAA-DA5D3C810C36}" = lport=1542 | protocol=6 | dir=in | name=realtek wps tcp prot |
"{F14F7416-C3F9-4765-AFBB-664B55880724}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{F68B32DE-E2AA-49C9-B9B0-F54337CFEA62}" = lport=53 | protocol=17 | dir=in | name=realtek ap udp prot |
"{FA2618D2-13BD-4E6F-83D8-96ABBE3B4EC1}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FB2080F0-D02D-4ADD-B948-C51B103A67C3}" = rport=138 | protocol=17 | dir=out | app=system |
"{FFF20FC6-38BD-4116-821B-17D1DD60D6AA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{070B41D9-A1C7-4A7C-930D-975E4BF5F3F3}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{084E58B9-1F69-4CD7-B18F-6C2544172EAC}" = protocol=17 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\team fortress classic\hl.exe |
"{08CA155C-8FA0-429E-B20E-5125E5720619}" = protocol=6 | dir=in | app=f:\program files (x86)\microsoft office\office14\groove.exe |
"{1550DB32-A30E-4838-806B-A2C3F65FA271}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{1680284C-4223-4B85-BA33-AF681ED0D16D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{190016C3-8751-4810-A5E3-25E7EA12A7A7}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{1A9BA49C-2EC8-45C6-83F6-3A5C441A01F4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{1AE1710C-2E13-4856-9E5D-0538AECDC3EF}" = protocol=58 | dir=in | app=system |
"{212BA8A0-1D81-48A4-B166-62CDE1D1EA4E}" = protocol=6 | dir=out | app=system |
"{227078A7-9C5B-419D-B006-027BCB090023}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{32610001-8903-4E76-A1F8-9B7BFA7E42F7}" = protocol=6 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{32FB0060-36CE-486F-A6BE-295A48248C9F}" = protocol=6 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{34036D4D-986C-4F52-9BB4-B5433AD4BFD7}" = protocol=6 | dir=in | app=c:\program files (x86)\realtek\wireless lan utility\rtwlan.exe |
"{39B113FB-B370-420C-BC61-ED75A9800B8F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3D9FB724-C4CE-4BB5-B410-F3C0C9FE3FCA}" = protocol=17 | dir=in | app=f:\program files (x86)\microsoft office\office14\groove.exe |
"{46E97FF8-D35C-467B-B529-01E2B69A1B38}" = protocol=6 | dir=in | app=f:\program files (x86)\microsoft office\office14\onenote.exe |
"{493AEA33-94A5-422B-B12C-633F47E610E6}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{4FB30C5A-2703-474A-A052-972C7C839A5C}" = protocol=17 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{4FF981B5-8888-4305-AF0B-002CFA746BC6}" = protocol=17 | dir=in | app=c:\program files (x86)\realtek\wireless lan utility\rtwlan.exe |
"{502AA691-A0FA-4904-83A1-271D840CE3F9}" = protocol=6 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\half-life\hl.exe |
"{52405C07-75B6-4D8B-821C-0336EFB78331}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{55D25EC3-453A-4708-A4BE-89051B13A93C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5BA1A962-E6D8-48D5-A33B-89CB51F418A8}" = protocol=6 | dir=in | app=f:\program files (x86)\aibelive\aiwi\aiwi.exe |
"{6000F8AE-CCA4-4630-8121-1604CEDA497F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{60B9DB5C-8183-42C8-802E-79F2D5C8B714}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{61E58775-9D67-4CC9-B039-81A7648EDFF0}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{6ED666F8-1F19-4EEE-8FA1-BDBC62FD62B1}" = protocol=6 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\team fortress classic\hl.exe |
"{735EB594-3C2F-4AED-9B85-5E04F6244833}" = protocol=6 | dir=in | app=f:\program files (x86)\bittorrent\bittorrent.exe |
"{74296A41-8D9C-4BF6-89C0-901641ED8CD3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{76BE78EC-71CA-4786-947B-A77F360426E1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{78BB34DD-7E26-4DE4-8F4C-BA2F70F94C53}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{7DE9672D-5A7C-4510-B7F4-8611F3985B48}" = protocol=17 | dir=in | app=f:\program files (x86)\aibelive\aiwi\aiwi.exe |
"{839FE347-0C1D-4C7F-AE33-96ECA918DF70}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8661BBAA-29C9-4AD9-8B86-343E7F20DB6B}" = protocol=6 | dir=in | app=f:\program files (x86)\wb games\batman arkham city\binaries\win32\batmanac.exe |
"{8AA7C8E1-0FFE-4CE8-908B-C8BC31676BC6}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{8EBF36C3-FC05-4003-B18F-7A130B4172D3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{917087B8-6CD3-4B15-8A57-AA39C914FDB9}" = protocol=17 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\half-life\hl.exe |
"{9B181EAB-0556-4FE4-ADA6-AFDB6833D5AC}" = protocol=6 | dir=in | app=f:\program files (x86)\steam\steam.exe |
"{A1CD75D2-22F7-42CD-A1A9-805E2616EAD4}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A9D9DD6C-F8A2-4413-8847-15A06671A7D8}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{AABA9F00-F999-4240-85D1-4B6824C1A5B2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AC1D28A3-DEC7-4614-97A6-98D2185D577E}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{BF9E8525-9CFE-4077-84B9-129698A57D21}" = protocol=17 | dir=in | app=f:\program files (x86)\wb games\batman arkham city\binaries\win32\batmanac.exe |
"{C4162CB5-EC3B-487B-8A93-D83516A4F5B8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C41C093D-4D8E-4D0F-8F99-12CCF6141911}" = protocol=17 | dir=in | app=f:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{C7BC298E-40FD-4E09-8430-AD7A719F309D}" = protocol=17 | dir=in | app=f:\program files (x86)\steam\steam.exe |
"{CB723083-3CA0-41C7-88F7-D7C5688CF6BD}" = protocol=6 | dir=in | app=c:\program files (x86)\realtek\rtl8187 wireless lan utility\rtwlan.exe |
"{CFD7DFE7-2700-41BC-ACC5-FFF4438146B4}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{D22D2A58-F023-44AF-91E0-A12F8E8B7BF9}" = protocol=17 | dir=in | app=f:\program files (x86)\bittorrent\bittorrent.exe |
"{E3157709-ADE2-487C-8787-A6AED75BE37E}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{E35B5BBE-7049-4448-B189-F9ABBC469A89}" = protocol=17 | dir=in | app=c:\program files (x86)\realtek\rtl8187 wireless lan utility\rtwlan.exe |
"{EA839800-DA45-48FD-BB83-BCFAADA65064}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{EEA41EB7-50F1-48EC-A1C4-D23F98470F7B}" = protocol=17 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{EF0E604A-93EA-4F67-9FC0-A54E581E8409}" = protocol=6 | dir=in | app=f:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{EFAE7AEF-3DA3-4DEC-9F33-9512BD1904C5}" = protocol=17 | dir=in | app=f:\program files (x86)\microsoft office\office14\onenote.exe |
"{F57F0B99-25D5-4A24-B1B3-07A1C623222D}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{F95790DB-9461-426B-86E3-BD5FF7C849D5}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{F974BD23-B70C-4F47-A820-106E958DE094}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{FA17DD84-D850-4E7A-92BE-F72A96096060}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{FAD76A1C-81E6-41EC-A0B7-12CA6EBC1733}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{119B2F5A-2A06-DB96-FF28-992EC2A10BDF}" = AMD Accelerated Video Transcoding
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2E8D6204-D656-8355-1ED3-2988AC52EB0F}" = ccc-utility64
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5831C6D6-309D-DBB5-14F7-FEE57086CEE7}" = AMD Catalyst Install Manager
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{63CE6C32-1EB3-4C51-89FC-9FD96A661A9C}" = AMD Media Foundation Decoders
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{9B2C4509-2B9F-4303-BA74-E2F9BB773F03}" = Oracle VM VirtualBox 4.1.8
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A01AF425-8AF4-821B-3981-F608519CB1D2}" = AMD Drag and Drop Transcoding
"{B2F6D87D-69E1-9FD2-4DD0-FB36124AA0E3}" = ATI AVIVO64 Codecs
"{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{C7966AB3-A8D9-48D5-B7DF-922674C40098}" = Device Simulation Framework 1.0.1
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"CCleaner" = CCleaner
"CrystalDiskMark_is1" = CrystalDiskMark 3.0.1c
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"sp6" = Logitech SetPoint 6.32
"VIRTU_is1" = VIRTU 1.2.114

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1" = Live Update 5
"{03D4C700-2BFE-43E0-A0B4-9512B43C5B9F}" = Catalyst Control Center - Branding
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1" = MSI Kombustor 2.0.0
"{0CA72D12-F6C6-4D43-A2A0-41F5AA17E2B6}" = Netflix in Windows Media Center
"{0DF70CB6-553A-4C57-8E6D-87635EECFB78}" = REALTEK Wireless LAN Driver and Utility
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}" = Windows Media Center Add-in for Silverlight
"{19D614EB-D62A-AEE7-2391-E74126601D59}" = CCC Help Italian
"{1C373820-B9C8-0F7F-8F84-FC1B76A85F27}" = CCC Help Portuguese
"{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1" = Geeks3D.com FurMark 1.9.2
"{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java™ 6 Update 32
"{2913C8E7-612B-47DA-B18D-A23E1A1B16E3}" = Update Manager B10.0728.1
"{2D35BC33-7D08-D529-DF91-8A15FBF2600E}" = CCC Help Polish
"{337788D1-43D1-9A0F-9787-DD00DB512D41}" = Catalyst Control Center Localization All
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3B35725F-C623-4A1E-B5CC-99C0868679E3}" = Smart 6 B11.0512.1
"{3B983EFD-6E37-4AD9-9A7D-8C83E61674F7}" = Splashtop Connect IE
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.0110.1
"{3EE1008C-11A1-4F4F-8DB7-27573924DE78}" = DMIView B8.0717.01
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0630.1
"{45D49CA7-D7D8-4659-B35A-EBD98C30AF28}" = Splashtop Connect for Firefox
"{4725833D-4325-5C34-57D4-1FE23E5AE578}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B271648-43CB-DD31-FF24-E7B06D3EE72A}" = Catalyst Control Center InstallProxy
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4DC37F33-7AEC-A4CB-56B1-69A402828763}" = CCC Help Japanese
"{5710DAC2-8F2A-503C-CFC2-A973ADE0EA4C}" = CCC Help Czech
"{57520FA0-A73E-4165-BCA2-D71000038301}" = Batman: Arkham City™
"{57520FA0-AC56-469B-9983-FF1000008300}" = Batman: Arkham City™
"{578E6013-2432-403E-B964-28E02542B4FB}" = EZ Smart Response B11.0627.02
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5C763682-4C40-86DA-9C46-31924D7D2C34}" = CCC Help Thai
"{60E5022D-FA4B-C6A2-1E80-B46EC39096F3}" = CCC Help Chinese Traditional
"{60F34FDF-267C-408F-290E-EC90D841C8CB}" = CCC Help German
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65B8A697-C77C-473E-8CE5-1FC5D4917C14}" = Cloud OC
"{66B79AE1-C6E2-B958-689C-D0812DE86BAB}" = CCC Help Greek
"{686695ED-BB3F-415D-B0DB-18CF535F7B50}" = Driver Manager
"{6B39BE0F-0F5E-A8FA-33E4-8481AE39D96C}" = CCC Help Russian
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{718B4425-80EA-4F64-A05C-48285CE63F73}" = AMD System Monitor
"{7236672F-6430-439E-9B27-27EDEAF1D676}" = Diagnostic Utility
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}" = Bing Desktop
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8E19F2AF-7145-51DE-E395-7729A9374973}" = Catalyst Control Center Graphics Previews Common
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0017-0000-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer 2010
"{90140000-0017-0000-0000-0000000FF1CE}_Office14.SharePointDesigner_{A8C80871-125D-4667-BC0A-E3EEE62597E8}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0017-0409-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (English) 2010
"{90140000-0017-0409-0000-0000000FF1CE}_Office14.SharePointDesigner_{E1BDB3A3-E0ED-4347-A84D-5D4A747259CA}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUSR_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SharePointDesigner_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91CB5B8B-4EC8-DBA1-A88D-99FD480567B0}" = CCC Help English
"{924FBAC4-60D2-7981-3C3E-979DF9CBB346}" = CCC Help Finnish
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D318C86-AF4C-409F-A6AC-7183FF4CF424}" = Internet TV for Windows Media Center
"{9DC939DC-B7A4-D0E2-C582-A442DF1B3EBE}" = CCC Help Spanish
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A1683CA7-4850-4A21-982B-C6D853C79AF7}" = Mass Effect™ 3 Demo
"{A1BD938B-F006-6E6D-70B2-47E1DD56F7DE}" = CCC Help Swedish
"{A2EBACDD-09BB-4894-AE25-7168DB3BFA7F}" = TouchBIOS B11.0623.1
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B829E117-D072-41EA-9606-9826A38D34C1}" = Sophos Virus Removal Tool
"{BABF7852-C2DD-6A8A-9956-101720C715C7}" = CCC Help Turkish
"{BB7C2A56-9706-43B8-5A8C-210AF5816106}" = CCC Help French
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"{CA4A06DE-33A9-B191-D115-8CF214945154}" = HydraVision
"{CFC2CB60-5654-05A7-4D30-C661800A3A92}" = CCC Help Korean
"{D04CE005-D1D2-80F3-84C8-B3524FCD39C3}" = CCC Help Norwegian
"{D544AE4C-4152-225B-A897-6756C8986B14}" = Catalyst Control Center
"{D7A0A22A-C132-4B6F-8D68-67B95117DE93}" = RIFT
"{D81E9069-3CCC-4405-3751-71E4AFEACC52}" = CCC Help Hungarian
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E2D09AC2-4153-4817-AAEB-24F92A8BCE88}" = Windows Media Center Add-in for Flash
"{E5BA0430-919F-46DD-B656-0796F8A5ADFF}" = Microsoft Office Communicator 2007
"{E6B43401-E818-4961-AFED-118DD8E87642}" = RAF
"{E76FCE6B-9999-4250-8C75-B2DA4AD41268}" = Face_Wizard B10.1230.01
"{E93FF166-DF14-2537-8FB4-96BB5810A96C}" = CCC Help Danish
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EFDA6485-85BF-4CCA-B062-CD254D7E2CBC}_is1" = Regnum Online version 1.9.0
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F308B531-AB20-4A79-8F5E-83071FE5BE60}" = Q-Share Ver.1.2
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FA9827E1-8A8E-C176-4923-0840A67ED4DE}" = CCC Help Dutch
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Afterburner" = MSI Afterburner 2.1.0
"Any Video Converter_is1" = Any Video Converter 3.3.2
"Battlelog Web Plugins" = Battlelog Web Plugins
"BitTorrent" = BitTorrent
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"CrystalDiskInfo_is1" = CrystalDiskInfo 4.2.0a
"ESN Sonar-0.70.4" = ESN Sonar
"FinePix Genie_is1" = FUJIFILM MyFinePix Studio 2.0
"Free RAR Extract Frog" = Free RAR Extract Frog
"GFWL_{57520FA0-AC56-469B-9983-FF1000008300}" = Batman: Arkham City™
"Google Chrome" = Google Chrome
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0630.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"InstallShield_{D7A0A22A-C132-4B6F-8D68-67B95117DE93}" = RIFT
"Intel® Solid-State Drive Toolbox" = Intel® Solid-State Drive Toolbox
"JBidwatcher_0" = JBidwatcher 2.5
"Mozilla Firefox 10.0.2 (x86 en-US)" = Mozilla Firefox 10.0.2 (x86 en-US)
"MSC" = McAfee AntiVirus Plus
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Office14.SharePointDesigner" = Microsoft SharePoint Designer 2010
"Origin" = Origin
"proXPN" = proXPN 2.4.11
"PunkBusterSvc" = PunkBuster Services
"rayatitray" = Ray Adams ATI Tray Tools
"ScanTool.net for Windows" = ScanTool.net for Windows v1.13
"spotflux" = spotflux client
"Steam App 20" = Team Fortress Classic
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"vGrabber" = vGrabber
"Vid-Saver" = Vid-Saver
"VLC media player" = VLC media player 2.0.1
"WinGimp-2.0_is1" = GIMP 2.6.12-2

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 6/16/2012 3:42:16 PM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/16/2012 3:42:16 PM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6147

Error - 6/16/2012 3:42:16 PM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6147

Error - 6/16/2012 3:42:17 PM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/16/2012 3:42:17 PM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 7161

Error - 6/16/2012 3:42:17 PM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 7161

Error - 6/17/2012 12:49:03 AM | Computer Name = Gigabyte | Source = WinMgmt | ID = 10
Description =

Error - 6/17/2012 12:49:17 AM | Computer Name = Gigabyte | Source = Microsoft Office 14 | ID = 2001
Description = Microsoft SharePoint Workspace: Rejected Safe Mode action : SharePoint
Workspace failed to start correctly last time. Starting SharePoint Workspace in
safe mode will help you correct or isolate a startup problem in order to successfully
start the program. Some functionality may be disabled in this mode. Do you want
to start SharePoint Workspace in safe mode?.

Error - 6/17/2012 1:33:41 AM | Computer Name = Gigabyte | Source = WinMgmt | ID = 10
Description =

Error - 6/17/2012 4:10:38 PM | Computer Name = Gigabyte | Source = WinMgmt | ID = 10
Description =

[ Media Center Events ]
Error - 5/22/2012 3:21:01 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:20:59 AM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/22/2012 3:38:26 PM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:38:26 PM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/23/2012 3:37:11 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:37:10 AM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/23/2012 3:47:24 PM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:47:24 PM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/26/2012 3:44:41 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:44:39 AM - Failed to retrieve SportsSchedule.enc (Error: HTTP status
404: The requested URL does not exist on the server. )

Error - 5/26/2012 4:45:00 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 4:45:00 AM - Failed to retrieve SportsSchedule.enc (Error: HTTP status
404: The requested URL does not exist on the server. )

Error - 6/13/2012 3:58:35 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:58:33 AM - Error connecting to the internet. 3:58:33 AM - Unable
to contact server..

Error - 6/13/2012 4:58:54 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 4:58:51 AM - Error connecting to the internet. 4:58:51 AM - Unable
to contact server..

Error - 6/13/2012 5:59:40 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 5:59:38 AM - Error connecting to the internet. 5:59:38 AM - Unable
to contact server..

Error - 6/13/2012 7:00:26 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 7:00:24 AM - Error connecting to the internet. 7:00:24 AM - Unable
to contact server..

[ System Events ]
Error - 5/22/2012 6:00:29 PM | Computer Name = Gigabyte | Source = DCOM | ID = 10010
Description =

Error - 5/23/2012 7:05:31 PM | Computer Name = Gigabyte | Source = DCOM | ID = 10010
Description =

Error - 5/23/2012 7:06:41 PM | Computer Name = Gigabyte | Source = SNMP | ID = 16713180
Description = The SNMP Service encountered an error while accessing the registry
key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Error - 5/23/2012 7:06:43 PM | Computer Name = Gigabyte | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
atitray

Error - 5/26/2012 7:08:43 AM | Computer Name = Gigabyte | Source = EventLog | ID = 6008
Description = The previous system shutdown at 7:07:02 AM on ?5/?26/?2012 was unexpected.

Error - 5/26/2012 7:08:44 AM | Computer Name = Gigabyte | Source = SNMP | ID = 16713180
Description = The SNMP Service encountered an error while accessing the registry
key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Error - 5/26/2012 7:08:47 AM | Computer Name = Gigabyte | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
atitray

Error - 5/26/2012 12:40:54 PM | Computer Name = Gigabyte | Source = DCOM | ID = 10010
Description =

Error - 5/27/2012 10:47:29 PM | Computer Name = Gigabyte | Source = SNMP | ID = 16713180
Description = The SNMP Service encountered an error while accessing the registry
key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Error - 5/27/2012 10:47:32 PM | Computer Name = Gigabyte | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
atitray


< End of report >
———–next


aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-06-17 17:48:53
—————————–
17:48:53.421 OS Version: Windows x64 6.1.7601 Service Pack 1
17:48:53.421 Number of processors: 4 586 0x2A07
17:48:53.422 ComputerName: GIGABYTE UserName: Bruce
17:48:53.795 Initialize success
17:50:28.542 AVAST engine download error: 0
17:51:00.392 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-3
17:51:00.393 Disk 0 Vendor: Hitachi_HDS5C1010CLA382 JC4OA3MA Size: 953869MB BusType: 11
17:51:00.395 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP1T0L0-1
17:51:00.396 Disk 1 Vendor: OCZ-SOLID3 2.15 Size: 114473MB BusType: 11
17:51:00.398 Disk 1 MBR read successfully
17:51:00.400 Disk 1 MBR scan
17:51:00.401 Disk 1 unknown MBR code
17:51:00.403 Disk 1 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
17:51:00.405 Disk 1 Partition 2 00 07 HPFS/NTFS NTFS 57592 MB offset 206848
17:51:00.408 Disk 1 Partition 3 00 07 HPFS/NTFS NTFS 56779 MB offset 118157312
17:51:00.411 Disk 1 scanning C:\Windows\system32\drivers
17:51:01.800 Service scanning
17:51:03.330 Service MSICDSetup E:\CDriver64.sys **LOCKED** 21
17:51:04.913 Modules scanning
17:51:04.913 Disk 1 trace - called modules:
17:51:04.928 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
17:51:04.928 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0xfffffa800d33e060]
17:51:04.944 3 CLASSPNP.SYS[fffff880017a443f] -> nt!IofCallDriver -> [0xfffffa800cae3ad0]
17:51:04.944 5 ACPI.sys[fffff880011997a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-1[0xfffffa800d0dc060]
17:51:04.944 Scan finished successfully
17:56:13.418 Disk 1 MBR has been saved successfully to "C:\Users\Bruce\Downloads\MBR.dat"
17:56:13.423 The log file has been saved successfully to "C:\Users\Bruce\Downloads\aswMBR.txt"

Thanks Nina… looks like the vGrabber in Google Chrome was a local setting that was brought in by Google on Chrome install. Chrome asks you to log into your Google account to pick up your profile. I had to reset the home page, browser, and also went to "Tools - Extensions" where vGrabber was enabled as a "legitimate" extension - it was disabled and sent to the trashcan.
Here is the non-custom OTL file, Extra file and Malwarebytes log.

Thanks again for all your help.

Let em know if anything persists!

Quid in Canada

OTL logfile created on: 6/19/2012 8:17:36 AM - Run 5
OTL by OldTimer - Version 3.2.49.0 Folder = C:\Users\Bruce\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.92 Gb Total Physical Memory | 14.05 Gb Available Physical Memory | 88.28% Memory free
31.84 Gb Paging File | 28.93 Gb Available in Paging File | 90.86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 56.24 Gb Total Space | 14.93 Gb Free Space | 26.55% Space Free | Partition Type: NTFS
Drive D: | 55.45 Gb Total Space | 39.43 Gb Free Space | 71.12% Space Free | Partition Type: NTFS
Drive F: | 201.21 Gb Total Space | 120.30 Gb Free Space | 59.79% Space Free | Partition Type: NTFS
Drive G: | 419.46 Gb Total Space | 306.83 Gb Free Space | 73.15% Space Free | Partition Type: NTFS
Drive H: | 123.88 Gb Total Space | 118.63 Gb Free Space | 95.76% Space Free | Partition Type: NTFS

Computer Name: GIGABYTE | User Name: Bruce | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Bruce\Downloads\OTL.exe (OldTimer Tools)
PRC - F:\Program Files (x86)\spotflux\spotflux.exe ()
PRC - C:\Program Files (x86)\Java\jre6\bin\javaw.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - F:\Program Files (x86)\MSI\Live Update 5\LU5.exe (Micro-Star International)
PRC - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe (Ray Adams)
PRC - F:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
PRC - F:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
PRC - F:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (Splashtop Inc.)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe (Splashtop Inc.)
PRC - C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe (Splashtop Inc.)
PRC - C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe (Splashtop Inc.)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe (Gigabyte Technology CO., LTD.)
PRC - C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
PRC - C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (Realtek)
PRC - C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe (Gigabyte Technology CO., LTD.)


========== Modules (No Company Name) ==========

MOD - F:\Program Files (x86)\spotflux\spotflux.exe ()
MOD - F:\Program Files (x86)\spotflux\lib\libniface.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\raphook.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - F:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_intelcpu.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_amdcore.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_cpuload.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\support.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\kbdhook.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_xvlt.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_hdddtemp.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mongraphsexample.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\hddtemp.dll ()
MOD - F:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\pciset.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (McODS) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (mfevtp) – C:\Windows\SysNative\mfevtps.exe (McAfee, Inc.)
SRV:64bit: - (mfefire) – C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe ()
SRV:64bit: - (McShield) – C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (McProxy) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McNASvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McNaiAnn) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (mcmscsvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McMPFSvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McAfee SiteAdvisor Service) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (SNMP) – C:\Windows\SysNative\snmp.exe (Microsoft Corporation)
SRV:64bit: - (AppleChargerSrv) – C:\Windows\SysNative\AppleChargerSrv.exe ()
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (BingDesktopUpdate) – C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (cphs) Intel® – C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (PnkBstrA) – C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Microsoft SharePoint Workspace Audit Service) – F:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (WCUService_STC_FF) – C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (Splashtop Inc.)
SRV - (WCUService_STC_IE) – C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe (Splashtop Inc.)
SRV - (SNMP) – C:\Windows\SysWOW64\snmp.exe (Microsoft Corporation)
SRV - (WinHttpAutoProxySvc) – winhttp.dll (Microsoft Corporation)
SRV - (SCBackService) – C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe (Splashtop Inc.)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Realtek87B) – C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (Realtek)
SRV - (Smart TimeLock) – C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe (Gigabyte Technology CO., LTD.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (VirtuWDDM) – C:\Windows\SysNative\drivers\VirtuWDDM.sys (Lucidlogix Inc.)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (tap0901) – C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) – C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (mfehidk) – C:\Windows\SysNative\drivers\mfehidk.sys (McAfee, Inc.)
DRV:64bit: - (mfefirek) – C:\Windows\SysNative\drivers\mfefirek.sys (McAfee, Inc.)
DRV:64bit: - (mfewfpk) – C:\Windows\SysNative\drivers\mfewfpk.sys (McAfee, Inc.)
DRV:64bit: - (mfeavfk) – C:\Windows\SysNative\drivers\mfeavfk.sys (McAfee, Inc.)
DRV:64bit: - (mfeapfk) – C:\Windows\SysNative\drivers\mfeapfk.sys (McAfee, Inc.)
DRV:64bit: - (mferkdet) – C:\Windows\SysNative\drivers\mferkdet.sys (McAfee, Inc.)
DRV:64bit: - (mfenlfk) – C:\Windows\SysNative\drivers\mfenlfk.sys (McAfee, Inc.)
DRV:64bit: - (cfwids) – C:\Windows\SysNative\drivers\cfwids.sys (McAfee, Inc.)
DRV:64bit: - (VBoxNetAdp) – C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Oracle Corporation)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LEqdUsb) – C:\Windows\SysNative\drivers\LEqdUsb.sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidEqd) – C:\Windows\SysNative\drivers\LHidEqd.sys (Logitech, Inc.)
DRV:64bit: - (EtronXHCI) – C:\Windows\SysNative\drivers\EtronXHCI.sys (Etron Technology Inc)
DRV:64bit: - (EtronHub3) – C:\Windows\SysNative\drivers\EtronHub3.sys (Etron Technology Inc)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (AppleCharger) – C:\Windows\SysNative\drivers\AppleCharger.sys ()
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) – C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) – C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (MEIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (IntcDAud) Intel® – C:\Windows\SysNative\drivers\IntcDAud.sys (Intel® Corporation)
DRV:64bit: - (HRMPORTS) – C:\Windows\SysNative\drivers\hrmports.sys (Microsoft Corporation)
DRV:64bit: - (HRMCFGSPC) – C:\Windows\SysNative\drivers\hrmcfgspc.sys (Microsoft Corporation)
DRV:64bit: - (HRMINTS) – C:\Windows\SysNative\drivers\hrmints.sys (Microsoft Corporation)
DRV:64bit: - (DSFKSVCS) – C:\Windows\SysNative\drivers\dsfksvcs.sys (Microsoft Corporation)
DRV:64bit: - (dsfroot) – C:\Windows\SysNative\drivers\dsfroot.sys (Microsoft Corporation)
DRV:64bit: - (usbehci_dsf) Microsoft DSF-enabled USB 2.0 Enhanced Host Controller Interface (EHCI) – C:\Windows\SysNative\drivers\usbehci_dsf.sys (Microsoft Corporation)
DRV:64bit: - (SOFTUSBK) – C:\Windows\SysNative\drivers\softusbk.sys (Microsoft Corporation)
DRV:64bit: - (softehci) Microsoft USB 2.0 Enhanced Host Controller Interface (EHCI) – C:\Windows\SysNative\drivers\softehci.sys (Microsoft Corporation)
DRV:64bit: - (SOFTHIDUSBK) – C:\Windows\SysNative\drivers\softhidusbk.sys (Microsoft Corporation)
DRV:64bit: - (RTL8187) – C:\Windows\SysNative\drivers\RTL8187.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (TEAM) Realtek Virtual Miniport Driver for Teaming (NDIS 6.0) – C:\Windows\SysNative\drivers\RtTeam60.sys (Realtek Corporation)
DRV:64bit: - (RTTEAMPT) Realtek Teaming Protocol Driver (NDIS 6.0) – C:\Windows\SysNative\drivers\RtTeam60.sys (Realtek Corporation)
DRV:64bit: - (RtNdPt60) – C:\Windows\SysNative\drivers\RtNdPt60.sys (Realtek )
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (VLAN) Realtek Virtual Miniport Driver for VLAN (NDIS 6.2) – C:\Windows\SysNative\drivers\RtVlan60.sys (Windows ® Codename Longhorn DDK provider)
DRV:64bit: - (RTVLANPT) Realtek Vlan Protocol Driver (NDIS 6.2) – C:\Windows\SysNative\drivers\RtVlan60.sys (Windows ® Codename Longhorn DDK provider)
DRV:64bit: - (RimUsb) – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys (Research In Motion Limited)
DRV - (gdrv) – C:\Windows\gdrv.sys (Windows ® Server 2003 DDK provider)
DRV - (GVTDrv64) – C:\Windows\GVTDrv64.sys ()
DRV - (etdrv) – C:\Windows\etdrv.sys (Windows ® Server 2003 DDK provider)
DRV - (atitray) – F:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray64.sys ()
DRV - (NTIOLib_1_0_4) – F:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys (MSI)
DRV - (RTCore64) – F:\Program Files (x86)\MSI Afterburner\RTCore64.sys ()
DRV - (MSI_MSIBIOS_010507) – f:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys (Your Corporation)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 47 BA A9 4E 7A 4D CD 01 [binary data]
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\..\URLSearchHook: {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll (Splashtop Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 12.174.113.200:80

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: F:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: F:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Bruce\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Bruce\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1} [2011/12/31 15:37:45 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0} [2011/12/31 15:37:45 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{d9284e50-81fc-11da-a72b-0800200c9a66}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66} [2011/12/31 15:37:45 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2012/02/25 00:31:53 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2012/04/29 09:00:31 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: F:\Program Files (x86)\Mozilla Firefox\components [2012/05/16 12:02:30 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: F:\Program Files (x86)\Mozilla Firefox\plugins

[2012/01/17 02:08:47 | 000,000,000 | —D | M] (No name found) – C:\Users\Bruce\AppData\Roaming\Mozilla\Extensions
[2012/06/19 00:03:20 | 000,000,000 | —D | M] (No name found) – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions
[2012/06/19 00:03:20 | 000,000,000 | —D | M] (BitTorrentBar2 Community Toolbar) – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions\{656461ef-40f6-4115-9ff1-bced9812ccbb}
[2012/06/19 00:03:20 | 000,000,000 | —D | M] ("Vid-Saver") – C:\Users\Bruce\AppData\Roaming\Mozilla\Firefox\Profiles\n5i9rr3o.default\extensions\[removed]
[2012/05/02 13:54:07 | 000,000,000 | —D | M] (Java Console) – F:\PROGRAM FILES (X86)\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms},
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Bruce\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Bruce\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Bruce\AppData\Local\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\McChPlg.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = F:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll
CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Java™ Platform SE 6 U32 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.320.5 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Bruce\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = F:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = F:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
CHR - plugin: VLC Web Plugin (Enabled) = F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: McAfee SecurityCenter (Enabled) = c:\progra~2\mcafee\msc\npmcsn~1.dll
CHR - Extension: YouTube = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: SiteAdvisor = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\
CHR - Extension: Vid-Saver = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgmfkblbflahhponhjmkcnpjinenhlnc\1.17.19_0\
CHR - Extension: Gmail = C:\Users\Bruce\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (GBHO.BHO) - {45d30484-7ded-43d9-957a-d2fd1f046511} - mscoree.dll (Microsoft Corporation)
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120429041317.dll (McAfee, Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Splashtop Connect VisualBookmark) - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (Splashtop Inc.)
O2 - BHO: (Vid-Saver) - {11111111-1111-1111-1111-110011341191} - C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll (215 Apps)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - F:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120429041317.dll (McAfee, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - F:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - F:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (Smart Recovery 2) - {1d09c093-f71e-43c3-b948-19316cbd695e} - mscoree.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [VIRTU] F:\Program Files\Lucidlogix Technologies\VIRTU\VirtuControlPanel.Exe ()
O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BCSSync] F:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe (Microsoft Corp.)
O4 - HKLM..\Run: [Live Update 5] f:\Program Files (x86)\MSI\Live Update 5\LU5.exe (Micro-Star International)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [StartCCC] f:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [STCAgent] C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe (Splashtop Inc.)
O4 - HKLM..\Run: [ZyngaGamesAgent] C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe (Splashtop Inc.)
O4 - HKCU..\Run: [AtiTrayTools] f:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe (Ray Adams)
O4 - HKCU..\Run: [OfficeSyncProcess] F:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [Speech Recognition] C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation)
O4:64bit: - HKLM..\RunOnce: [RPMKickstart] C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe (Gigabyte Technology CO., LTD.)
O4 - HKLM..\RunOnce: [GBTUpd] C:\Program Files (x86)\GIGABYTE\UpdManager\PreRun.exe (PreRun)
O4 - Startup: C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft SharePoint Workspace.lnk = F:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
O4 - Startup: C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk = F:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: E&xport; to Microsoft Excel - F:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: Se&nd; to OneNote - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport; to Microsoft Excel - F:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd; to OneNote - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - F:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - F:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - F:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} http://download.gigabyte.com.tw/object/Dldrv.ocx (Dldrv2 Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E152AAF-4B39-48B3-AD93-31DBE61CD140}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{78750F0B-F5EF-4F48-A7E7-0D6741109AE4}: NameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\appinit_dll.dll) - C:\Windows\SysNative\appinit_dll.dll (Lucidlogix Inc.)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\appinit_dll.dll) - C:\Windows\SysWOW64\appinit_dll.dll (Lucidlogix Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - F:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{d82485fe-33fd-11e1-98d1-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d82485fe-33fd-11e1-98d1-806e6f6e6963}\Shell\AutoRun\command - "" = E:\DVDSetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/06/19 07:54:54 | 002,622,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2012/06/19 07:54:54 | 000,057,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2012/06/19 07:54:54 | 000,044,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2012/06/19 07:54:52 | 000,186,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2012/06/19 07:54:52 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2012/06/19 00:19:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2012/06/18 23:11:07 | 000,000,000 | —D | C] – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012/06/18 13:36:35 | 000,000,000 | —D | C] – C:\_OTL
[2012/06/17 18:46:53 | 000,000,000 | -HSD | C] – C:\Windows\SysWow64\AI_RecycleBin
[2012/06/17 18:46:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotflux
[2012/06/17 16:17:41 | 000,000,000 | —D | C] – C:\ProgramData\Sophos
[2012/06/17 16:17:36 | 000,000,000 | —D | C] – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
[2012/06/14 03:00:26 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/06/14 03:00:26 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/06/14 03:00:26 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/06/14 03:00:26 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/06/14 03:00:25 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/06/14 03:00:25 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/06/14 03:00:25 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/06/14 03:00:25 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/06/14 03:00:25 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/06/14 03:00:25 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/06/14 03:00:24 | 002,311,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/06/14 03:00:24 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/06/14 03:00:24 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/06/13 13:39:20 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2012/06/13 13:39:20 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2012/06/13 13:39:20 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdrmemptylst.exe
[2012/06/13 13:39:14 | 005,559,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2012/06/13 13:39:13 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2012/06/13 13:39:12 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2012/06/13 13:39:10 | 003,216,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2012/06/13 13:39:06 | 001,462,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2012/06/13 13:39:05 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2012/06/09 12:42:01 | 000,000,000 | —D | C] – C:\Users\Bruce\Tracing
[2012/05/31 13:45:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK RTL8187 Wireless LAN Utility
[2012/05/31 13:44:48 | 000,000,000 | —D | C] – C:\Windows\SysNative\RtlGina
[2012/05/31 13:41:45 | 000,000,000 | —D | C] – C:\Users\Bruce\Desktop\Windows7wifi
[2012/05/31 13:37:46 | 000,448,512 | —- | C] (Realtek Semiconductor Corporation ) – C:\Windows\SysNative\drivers\RTL8187.sys
[2012/05/26 13:03:23 | 000,000,000 | —D | C] – C:\AMD
[2012/05/21 02:47:25 | 000,000,000 | —D | C] – C:\Users\Bruce\.kde
[2012/05/21 02:47:22 | 000,000,000 | —D | C] – C:\Users\Bruce\.local
[2012/05/21 02:47:22 | 000,000,000 | —D | C] – C:\Users\Bruce\.config
[2012/05/21 02:46:16 | 000,000,000 | —D | C] – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KDE Release

========== Files - Modified Within 30 Days ==========

[2012/06/19 08:20:00 | 000,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/06/19 08:15:00 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1781453745-3606246545-2711576242-1000UA.job
[2012/06/19 07:50:00 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/06/19 07:44:37 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/06/19 00:19:23 | 000,001,828 | —- | M] () – C:\Users\Public\Desktop\McAfee AntiVirus Plus.lnk
[2012/06/18 23:15:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1781453745-3606246545-2711576242-1000Core.job
[2012/06/18 17:20:00 | 000,000,892 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/06/18 13:45:18 | 000,022,096 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/06/18 13:45:18 | 000,022,096 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/06/18 13:43:31 | 000,782,922 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/06/18 13:43:31 | 000,663,010 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/06/18 13:43:31 | 000,121,878 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/06/18 13:39:58 | 000,005,606 | —- | M] () – C:\Windows\SysWow64\Utility.xml
[2012/06/18 13:39:01 | 000,025,640 | —- | M] (Windows ® Server 2003 DDK provider) – C:\Windows\gdrv.sys
[2012/06/18 13:38:05 | 4229,779,454 | -HS- | M] () – C:\hiberfil.sys
[2012/06/17 20:48:45 | 000,283,304 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.xtr
[2012/06/17 20:48:45 | 000,283,304 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.exe
[2012/06/17 20:48:27 | 000,280,904 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.ex0
[2012/06/17 18:46:53 | 000,001,659 | —- | M] () – C:\Users\Public\Desktop\Spotflux.lnk
[2012/06/17 16:17:36 | 000,003,205 | —- | M] () – C:\Users\Bruce\Desktop\Sophos Virus Removal Tool.lnk
[2012/06/17 00:49:30 | 000,426,184 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/06/17 00:49:30 | 000,070,344 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/06/14 03:21:06 | 000,414,656 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/06/06 02:02:24 | 000,000,938 | —- | M] () – C:\Users\Bruce\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
[2012/06/02 18:19:42 | 000,057,880 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2012/06/02 18:19:42 | 000,044,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2012/06/02 18:15:31 | 002,622,464 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2012/06/02 15:37:10 | 000,000,437 | —- | M] () – C:\Windows\SysNative\drivers\etc\hosts.ics
[2012/06/02 15:19:42 | 000,186,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2012/06/02 15:15:12 | 000,036,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2012/05/31 13:45:22 | 000,002,286 | —- | M] () – C:\Users\Public\Desktop\REALTEK RTL8187 Wireless LAN Utility.lnk
[2012/05/29 23:52:03 | 000,000,897 | —- | M] () – C:\Users\Bruce\Desktop\dlink old.rtf
[2012/05/21 02:28:59 | 000,000,781 | —- | M] () – C:\Users\Bruce\Desktop\digikam - Shortcut.lnk

========== Files Created - No Company Name ==========

[2012/06/18 23:10:37 | 000,000,908 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1781453745-3606246545-2711576242-1000UA.job
[2012/06/18 23:10:37 | 000,000,856 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1781453745-3606246545-2711576242-1000Core.job
[2012/06/17 18:46:53 | 000,001,659 | —- | C] () – C:\Users\Public\Desktop\Spotflux.lnk
[2012/06/17 16:17:36 | 000,003,205 | —- | C] () – C:\Users\Bruce\Desktop\Sophos Virus Removal Tool.lnk
[2012/05/31 13:45:22 | 000,002,286 | —- | C] () – C:\Users\Public\Desktop\REALTEK RTL8187 Wireless LAN Utility.lnk
[2012/05/31 13:44:55 | 000,451,072 | —- | C] () – C:\Windows\SysWow64\ISSRemoveSP.exe
[2012/05/29 23:52:03 | 000,000,897 | —- | C] () – C:\Users\Bruce\Desktop\dlink old.rtf
[2012/05/21 02:29:25 | 000,000,781 | —- | C] () – C:\Users\Bruce\Desktop\digikam - Shortcut.lnk
[2012/03/19 23:31:16 | 000,963,912 | —- | C] () – C:\Windows\SysWow64\igkrng600.bin
[2012/03/19 23:31:16 | 000,261,208 | —- | C] () – C:\Windows\SysWow64\igfcg600m.bin
[2012/03/19 23:25:58 | 000,058,880 | —- | C] () – C:\Windows\SysWow64\igdde32.dll
[2012/03/19 22:21:14 | 013,212,672 | —- | C] () – C:\Windows\SysWow64\ig4icd32.dll
[2012/03/09 14:06:14 | 000,024,576 | —- | C] () – C:\Windows\SysWow64\kdbsdk32.dll
[2012/02/21 18:59:38 | 000,000,079 | —- | C] () – C:\Users\Bruce\AppData\Local\CrystalDiskMark30.ini
[2012/02/14 22:36:36 | 000,204,952 | —- | C] () – C:\Windows\SysWow64\ativvsvl.dat
[2012/02/14 22:36:36 | 000,157,144 | —- | C] () – C:\Windows\SysWow64\ativvsva.dat
[2012/01/07 10:50:38 | 000,776,646 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2012/01/02 00:44:28 | 000,007,613 | —- | C] () – C:\Users\Bruce\AppData\Local\Resmon.ResmonCfg
[2012/01/01 23:38:44 | 000,283,304 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2012/01/01 23:38:13 | 000,076,888 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2012/01/01 10:59:02 | 000,030,528 | —- | C] () – C:\Windows\GVTDrv64.sys
[2011/12/31 15:45:12 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2011/12/31 15:41:12 | 000,008,192 | —- | C] () – C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
[2011/12/31 15:38:41 | 000,145,804 | —- | C] () – C:\Windows\SysWow64\igcompkrng600.bin
[2011/12/31 15:36:19 | 000,000,010 | —- | C] () – C:\Windows\GSetup.ini
[2011/09/28 17:44:14 | 000,179,271 | —- | C] () – C:\Windows\SysWow64\xlive.dll.cat
[2011/09/12 19:06:16 | 000,003,917 | —- | C] () – C:\Windows\SysWow64\atipblag.dat

< End of report >
OTL Extras logfile created on: 6/19/2012 8:17:36 AM - Run 5
OTL by OldTimer - Version 3.2.49.0 Folder = C:\Users\Bruce\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.92 Gb Total Physical Memory | 14.05 Gb Available Physical Memory | 88.28% Memory free
31.84 Gb Paging File | 28.93 Gb Available in Paging File | 90.86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 56.24 Gb Total Space | 14.93 Gb Free Space | 26.55% Space Free | Partition Type: NTFS
Drive D: | 55.45 Gb Total Space | 39.43 Gb Free Space | 71.12% Space Free | Partition Type: NTFS
Drive F: | 201.21 Gb Total Space | 120.30 Gb Free Space | 59.79% Space Free | Partition Type: NTFS
Drive G: | 419.46 Gb Total Space | 306.83 Gb Free Space | 73.15% Space Free | Partition Type: NTFS
Drive H: | 123.88 Gb Total Space | 118.63 Gb Free Space | 95.76% Space Free | Partition Type: NTFS

Computer Name: GIGABYTE | User Name: Bruce | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] – Reg Error: Key error.
https [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] – Reg Error: Key error.
https [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "F:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03BCB967-DBFC-4F01-9CEE-8A22A3ED7C05}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1B37F5C6-3476-47C7-9293-78DFAFDD7D4B}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{21E67713-EEC3-4B45-A53B-5EA920EA82D9}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{3A4F0286-F43E-49E2-8125-4BB2055727AC}" = rport=137 | protocol=17 | dir=out | app=system |
"{3AF98B6A-5A74-4311-ABD1-58646C1997D5}" = lport=139 | protocol=6 | dir=in | app=system |
"{3FD8B587-8363-4805-8FC6-2CBB07740D48}" = rport=445 | protocol=6 | dir=out | app=system |
"{3FFF42FA-BE26-49DA-AF8D-2019D8F217A3}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{45A4FC7E-AE85-4276-B0D9-5C27E6E92053}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{473C8F50-E0EE-4FBA-B989-49569F03878A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{4CA9A578-D966-45E6-8C80-0322BD69B65D}" = lport=10243 | protocol=6 | dir=in | app=system |
"{4F5C077B-AF82-4742-8E88-4ED5679E7510}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{619812FA-9022-4CAC-9BBB-2B9D1C054C96}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6E9E843E-8372-41E6-A12C-C572C00151BF}" = lport=138 | protocol=17 | dir=in | app=system |
"{71B8C14F-4DB8-4C28-91FB-EF23EDD4FE1F}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{76BD8A72-347C-4282-A3EB-A0D650A95E8B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7AB98186-E556-402B-9BF1-8B69B22CAB0F}" = rport=139 | protocol=6 | dir=out | app=system |
"{7ADB7DCA-F101-43E0-BD60-C831CDB21A8D}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{7B154B86-64D1-4A1B-B688-0090B80064D7}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{7C97127F-85D5-4D57-855F-EDD8898FA289}" = lport=6004 | protocol=17 | dir=in | app=f:\program files (x86)\microsoft office\office14\outlook.exe |
"{A9581CAC-EC07-4E54-A751-5953201ABA08}" = rport=10243 | protocol=6 | dir=out | app=system |
"{B2AA24CD-A768-4B94-8EF2-FD8C32FE35D3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B3768B3E-3B5B-4676-B215-A8933C28E969}" = lport=1542 | protocol=17 | dir=in | name=realtek wps udp prot |
"{C7E6405B-3F74-4DCF-A085-AA08901B7D9C}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{D07001FA-CF4E-4D6E-9686-E8CD709C2A19}" = lport=445 | protocol=6 | dir=in | app=system |
"{D14441AB-BBE6-4C22-AE9F-B53D57146AE0}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{D7B78D09-8B71-46D3-B326-79B62042105F}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{D946D7BB-6AC2-42D0-AD7A-FCBC4B3ED2DC}" = lport=137 | protocol=17 | dir=in | app=system |
"{E7EDDE62-DFBC-46AA-8B18-6F5E1985E85D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{EECF35B1-7556-46EB-ACAA-DA5D3C810C36}" = lport=1542 | protocol=6 | dir=in | name=realtek wps tcp prot |
"{F14F7416-C3F9-4765-AFBB-664B55880724}" = lport=80 | protocol=6 | dir=in | name=cloudocsh |
"{F68B32DE-E2AA-49C9-B9B0-F54337CFEA62}" = lport=53 | protocol=17 | dir=in | name=realtek ap udp prot |
"{FA2618D2-13BD-4E6F-83D8-96ABBE3B4EC1}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FB2080F0-D02D-4ADD-B948-C51B103A67C3}" = rport=138 | protocol=17 | dir=out | app=system |
"{FFF20FC6-38BD-4116-821B-17D1DD60D6AA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{070B41D9-A1C7-4A7C-930D-975E4BF5F3F3}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{084E58B9-1F69-4CD7-B18F-6C2544172EAC}" = protocol=17 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\team fortress classic\hl.exe |
"{08CA155C-8FA0-429E-B20E-5125E5720619}" = protocol=6 | dir=in | app=f:\program files (x86)\microsoft office\office14\groove.exe |
"{1550DB32-A30E-4838-806B-A2C3F65FA271}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{1680284C-4223-4B85-BA33-AF681ED0D16D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{190016C3-8751-4810-A5E3-25E7EA12A7A7}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{1A9BA49C-2EC8-45C6-83F6-3A5C441A01F4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{1AE1710C-2E13-4856-9E5D-0538AECDC3EF}" = protocol=58 | dir=in | app=system |
"{212BA8A0-1D81-48A4-B166-62CDE1D1EA4E}" = protocol=6 | dir=out | app=system |
"{227078A7-9C5B-419D-B006-027BCB090023}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{32610001-8903-4E76-A1F8-9B7BFA7E42F7}" = protocol=6 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{32FB0060-36CE-486F-A6BE-295A48248C9F}" = protocol=6 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{34036D4D-986C-4F52-9BB4-B5433AD4BFD7}" = protocol=6 | dir=in | app=c:\program files (x86)\realtek\wireless lan utility\rtwlan.exe |
"{39B113FB-B370-420C-BC61-ED75A9800B8F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3D9FB724-C4CE-4BB5-B410-F3C0C9FE3FCA}" = protocol=17 | dir=in | app=f:\program files (x86)\microsoft office\office14\groove.exe |
"{46E97FF8-D35C-467B-B529-01E2B69A1B38}" = protocol=6 | dir=in | app=f:\program files (x86)\microsoft office\office14\onenote.exe |
"{493AEA33-94A5-422B-B12C-633F47E610E6}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{4FB30C5A-2703-474A-A052-972C7C839A5C}" = protocol=17 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{4FF981B5-8888-4305-AF0B-002CFA746BC6}" = protocol=17 | dir=in | app=c:\program files (x86)\realtek\wireless lan utility\rtwlan.exe |
"{502AA691-A0FA-4904-83A1-271D840CE3F9}" = protocol=6 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\half-life\hl.exe |
"{52405C07-75B6-4D8B-821C-0336EFB78331}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{55D25EC3-453A-4708-A4BE-89051B13A93C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5BA1A962-E6D8-48D5-A33B-89CB51F418A8}" = protocol=6 | dir=in | app=f:\program files (x86)\aibelive\aiwi\aiwi.exe |
"{6000F8AE-CCA4-4630-8121-1604CEDA497F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{60B9DB5C-8183-42C8-802E-79F2D5C8B714}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{61E58775-9D67-4CC9-B039-81A7648EDFF0}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{6ED666F8-1F19-4EEE-8FA1-BDBC62FD62B1}" = protocol=6 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\team fortress classic\hl.exe |
"{74296A41-8D9C-4BF6-89C0-901641ED8CD3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{76BE78EC-71CA-4786-947B-A77F360426E1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{78BB34DD-7E26-4DE4-8F4C-BA2F70F94C53}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{7DE9672D-5A7C-4510-B7F4-8611F3985B48}" = protocol=17 | dir=in | app=f:\program files (x86)\aibelive\aiwi\aiwi.exe |
"{839FE347-0C1D-4C7F-AE33-96ECA918DF70}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8661BBAA-29C9-4AD9-8B86-343E7F20DB6B}" = protocol=6 | dir=in | app=f:\program files (x86)\wb games\batman arkham city\binaries\win32\batmanac.exe |
"{8AA7C8E1-0FFE-4CE8-908B-C8BC31676BC6}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{8EBF36C3-FC05-4003-B18F-7A130B4172D3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{917087B8-6CD3-4B15-8A57-AA39C914FDB9}" = protocol=17 | dir=in | app=f:\program files (x86)\steam\steamapps\bgrayson\half-life\hl.exe |
"{9B181EAB-0556-4FE4-ADA6-AFDB6833D5AC}" = protocol=6 | dir=in | app=f:\program files (x86)\steam\steam.exe |
"{A1CD75D2-22F7-42CD-A1A9-805E2616EAD4}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A9D9DD6C-F8A2-4413-8847-15A06671A7D8}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{AABA9F00-F999-4240-85D1-4B6824C1A5B2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AC1D28A3-DEC7-4614-97A6-98D2185D577E}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{BF9E8525-9CFE-4077-84B9-129698A57D21}" = protocol=17 | dir=in | app=f:\program files (x86)\wb games\batman arkham city\binaries\win32\batmanac.exe |
"{C4162CB5-EC3B-487B-8A93-D83516A4F5B8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C41C093D-4D8E-4D0F-8F99-12CCF6141911}" = protocol=17 | dir=in | app=f:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{C7BC298E-40FD-4E09-8430-AD7A719F309D}" = protocol=17 | dir=in | app=f:\program files (x86)\steam\steam.exe |
"{CB723083-3CA0-41C7-88F7-D7C5688CF6BD}" = protocol=6 | dir=in | app=c:\program files (x86)\realtek\rtl8187 wireless lan utility\rtwlan.exe |
"{CFD7DFE7-2700-41BC-ACC5-FFF4438146B4}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{E3157709-ADE2-487C-8787-A6AED75BE37E}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{E35B5BBE-7049-4448-B189-F9ABBC469A89}" = protocol=17 | dir=in | app=c:\program files (x86)\realtek\rtl8187 wireless lan utility\rtwlan.exe |
"{EA839800-DA45-48FD-BB83-BCFAADA65064}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{EEA41EB7-50F1-48EC-A1C4-D23F98470F7B}" = protocol=17 | dir=in | app=f:\games\star wars-the old republic\launcher.exe |
"{EF0E604A-93EA-4F67-9FC0-A54E581E8409}" = protocol=6 | dir=in | app=f:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{EFAE7AEF-3DA3-4DEC-9F33-9512BD1904C5}" = protocol=17 | dir=in | app=f:\program files (x86)\microsoft office\office14\onenote.exe |
"{F57F0B99-25D5-4A24-B1B3-07A1C623222D}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{F95790DB-9461-426B-86E3-BD5FF7C849D5}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{F974BD23-B70C-4F47-A820-106E958DE094}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{FA17DD84-D850-4E7A-92BE-F72A96096060}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{FAD76A1C-81E6-41EC-A0B7-12CA6EBC1733}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{119B2F5A-2A06-DB96-FF28-992EC2A10BDF}" = AMD Accelerated Video Transcoding
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2E8D6204-D656-8355-1ED3-2988AC52EB0F}" = ccc-utility64
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5831C6D6-309D-DBB5-14F7-FEE57086CEE7}" = AMD Catalyst Install Manager
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{63CE6C32-1EB3-4C51-89FC-9FD96A661A9C}" = AMD Media Foundation Decoders
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{9B2C4509-2B9F-4303-BA74-E2F9BB773F03}" = Oracle VM VirtualBox 4.1.8
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A01AF425-8AF4-821B-3981-F608519CB1D2}" = AMD Drag and Drop Transcoding
"{B2F6D87D-69E1-9FD2-4DD0-FB36124AA0E3}" = ATI AVIVO64 Codecs
"{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{C7966AB3-A8D9-48D5-B7DF-922674C40098}" = Device Simulation Framework 1.0.1
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"CCleaner" = CCleaner
"CrystalDiskMark_is1" = CrystalDiskMark 3.0.1c
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"sp6" = Logitech SetPoint 6.32
"VIRTU_is1" = VIRTU 1.2.114

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1" = Live Update 5
"{03D4C700-2BFE-43E0-A0B4-9512B43C5B9F}" = Catalyst Control Center - Branding
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1" = MSI Kombustor 2.0.0
"{0CA72D12-F6C6-4D43-A2A0-41F5AA17E2B6}" = Netflix in Windows Media Center
"{0DF70CB6-553A-4C57-8E6D-87635EECFB78}" = REALTEK Wireless LAN Driver and Utility
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}" = Windows Media Center Add-in for Silverlight
"{17F59997-02CA-452A-8126-2DCC8EF6C7DF}" = Spotflux Client
"{19D614EB-D62A-AEE7-2391-E74126601D59}" = CCC Help Italian
"{1C373820-B9C8-0F7F-8F84-FC1B76A85F27}" = CCC Help Portuguese
"{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1" = Geeks3D.com FurMark 1.9.2
"{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java™ 6 Update 32
"{2913C8E7-612B-47DA-B18D-A23E1A1B16E3}" = Update Manager B10.0728.1
"{2D35BC33-7D08-D529-DF91-8A15FBF2600E}" = CCC Help Polish
"{337788D1-43D1-9A0F-9787-DD00DB512D41}" = Catalyst Control Center Localization All
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3B35725F-C623-4A1E-B5CC-99C0868679E3}" = Smart 6 B11.0512.1
"{3B983EFD-6E37-4AD9-9A7D-8C83E61674F7}" = Splashtop Connect IE
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.0110.1
"{3EE1008C-11A1-4F4F-8DB7-27573924DE78}" = DMIView B8.0717.01
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0630.1
"{45D49CA7-D7D8-4659-B35A-EBD98C30AF28}" = Splashtop Connect for Firefox
"{4725833D-4325-5C34-57D4-1FE23E5AE578}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B271648-43CB-DD31-FF24-E7B06D3EE72A}" = Catalyst Control Center InstallProxy
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4DC37F33-7AEC-A4CB-56B1-69A402828763}" = CCC Help Japanese
"{5710DAC2-8F2A-503C-CFC2-A973ADE0EA4C}" = CCC Help Czech
"{57520FA0-A73E-4165-BCA2-D71000038301}" = Batman: Arkham City™
"{57520FA0-AC56-469B-9983-FF1000008300}" = Batman: Arkham City™
"{578E6013-2432-403E-B964-28E02542B4FB}" = EZ Smart Response B11.0627.02
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5C763682-4C40-86DA-9C46-31924D7D2C34}" = CCC Help Thai
"{60E5022D-FA4B-C6A2-1E80-B46EC39096F3}" = CCC Help Chinese Traditional
"{60F34FDF-267C-408F-290E-EC90D841C8CB}" = CCC Help German
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65B8A697-C77C-473E-8CE5-1FC5D4917C14}" = Cloud OC
"{66B79AE1-C6E2-B958-689C-D0812DE86BAB}" = CCC Help Greek
"{686695ED-BB3F-415D-B0DB-18CF535F7B50}" = Driver Manager
"{6B39BE0F-0F5E-A8FA-33E4-8481AE39D96C}" = CCC Help Russian
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{718B4425-80EA-4F64-A05C-48285CE63F73}" = AMD System Monitor
"{7236672F-6430-439E-9B27-27EDEAF1D676}" = Diagnostic Utility
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}" = Bing Desktop
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8E19F2AF-7145-51DE-E395-7729A9374973}" = Catalyst Control Center Graphics Previews Common
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0017-0000-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer 2010
"{90140000-0017-0000-0000-0000000FF1CE}_Office14.SharePointDesigner_{A8C80871-125D-4667-BC0A-E3EEE62597E8}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0017-0409-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (English) 2010
"{90140000-0017-0409-0000-0000000FF1CE}_Office14.SharePointDesigner_{E1BDB3A3-E0ED-4347-A84D-5D4A747259CA}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUSR_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SharePointDesigner_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91CB5B8B-4EC8-DBA1-A88D-99FD480567B0}" = CCC Help English
"{924FBAC4-60D2-7981-3C3E-979DF9CBB346}" = CCC Help Finnish
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D318C86-AF4C-409F-A6AC-7183FF4CF424}" = Internet TV for Windows Media Center
"{9DC939DC-B7A4-D0E2-C582-A442DF1B3EBE}" = CCC Help Spanish
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A1683CA7-4850-4A21-982B-C6D853C79AF7}" = Mass Effect™ 3 Demo
"{A1BD938B-F006-6E6D-70B2-47E1DD56F7DE}" = CCC Help Swedish
"{A2EBACDD-09BB-4894-AE25-7168DB3BFA7F}" = TouchBIOS B11.0623.1
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B829E117-D072-41EA-9606-9826A38D34C1}" = Sophos Virus Removal Tool
"{BABF7852-C2DD-6A8A-9956-101720C715C7}" = CCC Help Turkish
"{BB7C2A56-9706-43B8-5A8C-210AF5816106}" = CCC Help French
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"{CA4A06DE-33A9-B191-D115-8CF214945154}" = HydraVision
"{CFC2CB60-5654-05A7-4D30-C661800A3A92}" = CCC Help Korean
"{D04CE005-D1D2-80F3-84C8-B3524FCD39C3}" = CCC Help Norwegian
"{D544AE4C-4152-225B-A897-6756C8986B14}" = Catalyst Control Center
"{D7A0A22A-C132-4B6F-8D68-67B95117DE93}" = RIFT
"{D81E9069-3CCC-4405-3751-71E4AFEACC52}" = CCC Help Hungarian
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E2D09AC2-4153-4817-AAEB-24F92A8BCE88}" = Windows Media Center Add-in for Flash
"{E5BA0430-919F-46DD-B656-0796F8A5ADFF}" = Microsoft Office Communicator 2007
"{E6B43401-E818-4961-AFED-118DD8E87642}" = RAF
"{E76FCE6B-9999-4250-8C75-B2DA4AD41268}" = Face_Wizard B10.1230.01
"{E93FF166-DF14-2537-8FB4-96BB5810A96C}" = CCC Help Danish
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EFDA6485-85BF-4CCA-B062-CD254D7E2CBC}_is1" = Regnum Online version 1.9.0
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F308B531-AB20-4A79-8F5E-83071FE5BE60}" = Q-Share Ver.1.2
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FA9827E1-8A8E-C176-4923-0840A67ED4DE}" = CCC Help Dutch
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Afterburner" = MSI Afterburner 2.1.0
"Any Video Converter_is1" = Any Video Converter 3.3.2
"Battlelog Web Plugins" = Battlelog Web Plugins
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"CrystalDiskInfo_is1" = CrystalDiskInfo 4.2.0a
"ESN Sonar-0.70.4" = ESN Sonar
"FinePix Genie_is1" = FUJIFILM MyFinePix Studio 2.0
"Free RAR Extract Frog" = Free RAR Extract Frog
"GFWL_{57520FA0-AC56-469B-9983-FF1000008300}" = Batman: Arkham City™
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0630.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"InstallShield_{D7A0A22A-C132-4B6F-8D68-67B95117DE93}" = RIFT
"Intel® Solid-State Drive Toolbox" = Intel® Solid-State Drive Toolbox
"JBidwatcher_0" = JBidwatcher 2.5
"Mozilla Firefox 10.0.2 (x86 en-US)" = Mozilla Firefox 10.0.2 (x86 en-US)
"MSC" = McAfee AntiVirus Plus
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Office14.SharePointDesigner" = Microsoft SharePoint Designer 2010
"Origin" = Origin
"proXPN" = proXPN 2.4.11
"PunkBusterSvc" = PunkBuster Services
"rayatitray" = Ray Adams ATI Tray Tools
"ScanTool.net for Windows" = ScanTool.net for Windows v1.13
"Steam App 20" = Team Fortress Classic
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Vid-Saver" = Vid-Saver
"VLC media player" = VLC media player 2.0.1
"WinGimp-2.0_is1" = GIMP 2.6.12-2

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 6/18/2012 1:24:55 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2964

Error - 6/18/2012 1:24:55 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2964

Error - 6/18/2012 11:02:08 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/18/2012 11:02:08 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1170

Error - 6/18/2012 11:02:08 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1170

Error - 6/18/2012 11:02:09 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/18/2012 11:02:09 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2200

Error - 6/18/2012 11:02:09 AM | Computer Name = Gigabyte | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2200

Error - 6/18/2012 1:39:55 PM | Computer Name = Gigabyte | Source = WinMgmt | ID = 10
Description =

Error - 6/19/2012 12:31:35 AM | Computer Name = Gigabyte | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "C:\Program Files (x86)\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program
Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute
"version" in element "assemblyIdentity" is invalid.

[ Media Center Events ]
Error - 5/22/2012 3:21:01 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:20:59 AM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/22/2012 3:38:26 PM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:38:26 PM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/23/2012 3:37:11 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:37:10 AM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/23/2012 3:47:24 PM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:47:24 PM - Failed to retrieve SportsSchedule-2.enc (Error: HTTP
status 404: The requested URL does not exist on the server. )

Error - 5/26/2012 3:44:41 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:44:39 AM - Failed to retrieve SportsSchedule.enc (Error: HTTP status
404: The requested URL does not exist on the server. )

Error - 5/26/2012 4:45:00 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 4:45:00 AM - Failed to retrieve SportsSchedule.enc (Error: HTTP status
404: The requested URL does not exist on the server. )

Error - 6/13/2012 3:58:35 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 3:58:33 AM - Error connecting to the internet. 3:58:33 AM - Unable
to contact server..

Error - 6/13/2012 4:58:54 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 4:58:51 AM - Error connecting to the internet. 4:58:51 AM - Unable
to contact server..

Error - 6/13/2012 5:59:40 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 5:59:38 AM - Error connecting to the internet. 5:59:38 AM - Unable
to contact server..

Error - 6/13/2012 7:00:26 AM | Computer Name = Gigabyte | Source = MCUpdate | ID = 0
Description = 7:00:24 AM - Error connecting to the internet. 7:00:24 AM - Unable
to contact server..

[ System Events ]
Error - 5/22/2012 6:00:29 PM | Computer Name = Gigabyte | Source = DCOM | ID = 10010
Description =

Error - 5/23/2012 7:05:31 PM | Computer Name = Gigabyte | Source = DCOM | ID = 10010
Description =

Error - 5/23/2012 7:06:41 PM | Computer Name = Gigabyte | Source = SNMP | ID = 16713180
Description = The SNMP Service encountered an error while accessing the registry
key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Error - 5/23/2012 7:06:43 PM | Computer Name = Gigabyte | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
atitray

Error - 5/26/2012 7:08:43 AM | Computer Name = Gigabyte | Source = EventLog | ID = 6008
Description = The previous system shutdown at 7:07:02 AM on ?5/?26/?2012 was unexpected.

Error - 5/26/2012 7:08:44 AM | Computer Name = Gigabyte | Source = SNMP | ID = 16713180
Description = The SNMP Service encountered an error while accessing the registry
key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Error - 5/26/2012 7:08:47 AM | Computer Name = Gigabyte | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
atitray

Error - 5/26/2012 12:40:54 PM | Computer Name = Gigabyte | Source = DCOM | ID = 10010
Description =

Error - 5/27/2012 10:47:29 PM | Computer Name = Gigabyte | Source = SNMP | ID = 16713180
Description = The SNMP Service encountered an error while accessing the registry
key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

Error - 5/27/2012 10:47:32 PM | Computer Name = Gigabyte | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
atitray


< End of report >
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.19.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Bruce :: GIGABYTE [administrator]

6/19/2012 8:47:35 AM
mbam-log-2012-06-19 (08-47-35).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 233746
Time elapsed: 1 minute(s), 51 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 1
C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll (PUP.GamePlayLab) -> Delete on reboot.

Registry Keys Detected: 14
HKCR\CLSID\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\TypeLib\{44444444-4444-4444-4444-440044344491} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\Interface\{55555555-5555-5555-5555-550055345591} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0003491.BHO.1 (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0003491.BHO (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0003491.FBApi (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0003491.FBApi.1 (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0003491.Sandbox (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0003491.Sandbox.1 (PUP.CrossFire.Gen) -> Quarantined and deleted successfully.
HKCU\Software\Cr_Installer\3491 (Adware.GamePlayLab) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 1
C:\Recycle.Bin (Trojan.Spyeyes) -> Quarantined and deleted successfully.

Files Detected: 1
C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll (PUP.GamePlayLab) -> Delete on reboot.

(end)