Also, here is a copy of the OTL log.
OTL logfile created on: 1/9/2013 6:58:02 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jeanette\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.80 Gb Total Physical Memory | 1.51 Gb Available Physical Memory | 39.74% Memory free
7.60 Gb Paging File | 5.25 Gb Available in Paging File | 69.10% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 281.48 Gb Total Space | 165.14 Gb Free Space | 58.67% Space Free | Partition Type: NTFS
Drive D: | 16.32 Gb Total Space | 2.36 Gb Free Space | 14.44% Space Free | Partition Type: NTFS
Drive G: | 99.34 Mb Total Space | 93.54 Mb Free Space | 94.16% Space Free | Partition Type: FAT32
Computer Name: JEANETTE-HP | User Name: Jeanette | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/01/09 18:57:11 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Jeanette\Downloads\OTL.exe
PRC - [2012/12/13 14:26:20 | 003,290,896 | —- | M] (Skype Technologies S.A.) – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012/12/04 17:15:17 | 001,242,728 | —- | M] (Google Inc.) – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2012/11/12 05:34:40 | 002,869,824 | —- | M] (Sophos Limited) – C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
PRC - [2012/11/12 05:34:10 | 000,216,640 | —- | M] (Sophos Limited) – C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe
PRC - [2012/09/14 12:56:12 | 004,982,304 | —- | M] () – C:\Users\Jeanette\AppData\Local\DirectDownloader\DirectDownloader.exe
PRC - [2012/07/26 15:53:18 | 004,792,768 | —- | M] (IBM Corp.) – C:\Program Files (x86)\BigFix Enterprise\BES Client\BESClient.exe
PRC - [2012/07/26 15:53:18 | 001,472,448 | —- | M] (IBM Corp.) – C:\Program Files (x86)\BigFix Enterprise\BES Client\BESClientUI.exe
PRC - [2012/07/06 10:16:00 | 000,900,160 | —- | M] (Sophos Limited) – C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe
PRC - [2012/07/06 10:15:54 | 000,232,512 | —- | M] (Sophos Limited) – C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe
PRC - [2012/06/15 03:00:37 | 000,139,840 | —- | M] (Sophos Limited) – C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
PRC - [2012/05/20 07:50:28 | 000,296,056 | —- | M] (RealNetworks, Inc.) – C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2012/02/14 11:09:36 | 000,038,408 | —- | M] (MyWebSearch.com) – C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE
PRC - [2012/01/31 23:37:06 | 000,013,824 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Linkury.exe
PRC - [2011/10/26 15:45:40 | 000,787,640 | —- | M] () – C:\Program Files (x86)\FUJIFILM\MyFinePix Studio\dd.exe
PRC - [2010/11/09 15:20:36 | 000,586,296 | —- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2010/11/09 15:20:34 | 000,026,680 | —- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2010/04/09 16:54:38 | 001,441,544 | —- | M] (Motorola, Inc.) – C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
PRC - [2010/02/18 10:43:20 | 000,490,728 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
PRC - [2009/09/30 20:01:32 | 002,320,920 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2009/09/30 20:01:30 | 000,268,824 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2008/11/09 12:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
========== Modules (No Company Name) ==========
MOD - [2012/12/04 17:15:15 | 012,456,040 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll
MOD - [2012/12/04 17:15:15 | 000,460,904 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\ppgooglenaclpluginchrome.dll
MOD - [2012/12/04 17:15:14 | 004,008,040 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\pdf.dll
MOD - [2012/12/04 17:14:29 | 000,587,880 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\libglesv2.dll
MOD - [2012/12/04 17:14:28 | 000,124,520 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\libegl.dll
MOD - [2012/12/04 17:14:21 | 000,157,304 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\avutil-51.dll
MOD - [2012/12/04 17:14:20 | 000,275,576 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\avformat-54.dll
MOD - [2012/12/04 17:14:19 | 002,168,952 | —- | M] () – C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\avcodec-54.dll
MOD - [2012/11/17 23:40:48 | 000,220,672 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c07aa49ffd41a39bffaf653289f44038\CustomMarshalers.ni.dll
MOD - [2012/11/14 22:37:35 | 001,840,640 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\cf840dca36a7b949696ce331d0532d3e\System.Web.Services.ni.dll
MOD - [2012/11/14 22:37:27 | 011,833,344 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\03cfab5534482e8fc313ead6edc19100\System.Web.ni.dll
MOD - [2012/11/14 22:29:47 | 012,436,480 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll
MOD - [2012/11/14 22:29:26 | 001,591,808 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll
MOD - [2012/11/14 22:28:17 | 005,452,800 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll
MOD - [2012/11/14 22:28:04 | 000,971,264 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll
MOD - [2012/11/14 22:27:59 | 007,988,736 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll
MOD - [2012/11/14 22:27:30 | 011,493,376 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll
MOD - [2012/09/14 12:56:12 | 004,982,304 | —- | M] () – C:\Users\Jeanette\AppData\Local\DirectDownloader\DirectDownloader.exe
MOD - [2012/02/23 20:13:13 | 000,139,264 | —- | M] () – C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll
MOD - [2012/02/23 20:13:13 | 000,118,784 | —- | M] () – C:\Windows\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll
MOD - [2012/02/20 20:29:04 | 000,087,912 | —- | M] () – C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/02/20 20:28:42 | 001,242,472 | —- | M] () – C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012/01/31 23:37:06 | 000,018,432 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Infrastructure.Core.dll
MOD - [2012/01/31 23:37:06 | 000,013,824 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Linkury.exe
MOD - [2012/01/31 23:37:04 | 000,027,648 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Resources.AutomaticUpdates.dll
MOD - [2012/01/31 23:37:02 | 001,044,992 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.GUI.MainClient.dll
MOD - [2012/01/31 23:36:50 | 000,535,552 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.GUI.Controls.dll
MOD - [2012/01/31 23:36:50 | 000,007,168 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.GUI.Multimedia.Loader.dll
MOD - [2012/01/31 23:36:44 | 000,071,680 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Personalization.BusinessLogic.dll
MOD - [2012/01/31 23:36:42 | 000,047,104 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
MOD - [2012/01/31 23:36:38 | 000,061,440 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
MOD - [2012/01/31 23:36:38 | 000,018,944 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Resources.SocialNetsSharer.dll
MOD - [2012/01/31 23:36:38 | 000,013,312 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Resources.SideBySide.dll
MOD - [2012/01/31 23:36:36 | 000,325,632 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Resources.FilesManager.dll
MOD - [2012/01/31 23:36:36 | 000,012,288 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Infrastructure.Utilities.dll
MOD - [2012/01/31 23:36:36 | 000,010,240 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Resources.Utilities.dll
MOD - [2012/01/31 23:36:36 | 000,007,168 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Resources.ProcessDownMonitor.dll
MOD - [2012/01/31 23:36:34 | 000,074,240 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.GUI.Docking.dll
MOD - [2012/01/31 23:36:34 | 000,040,960 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\MACTrackBarLib.dll
MOD - [2012/01/31 23:36:34 | 000,009,728 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Personalization.Common.dll
MOD - [2012/01/31 23:36:34 | 000,006,144 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Infrastructure.EventManager.dll
MOD - [2012/01/31 23:36:34 | 000,006,144 | —- | M] () – C:\Users\Jeanette\AppData\Local\Linkury\Application\Smartbar.Infrastructure.BusinessEntities.dll
MOD - [2011/10/26 15:45:40 | 000,787,640 | —- | M] () – C:\Program Files (x86)\FUJIFILM\MyFinePix Studio\dd.exe
MOD - [2011/10/11 12:32:30 | 008,007,680 | —- | M] () – C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
MOD - [2010/11/04 17:57:39 | 000,069,120 | —- | M] () – C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
========== Services (SafeList) ==========
SRV:
64bit: - [2012/10/08 16:39:16 | 000,230,416 | —- | M] (Nitro PDF Software) [Auto | Running] – C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe – (NitroReaderDriverReadSpool3)
SRV:
64bit: - [2010/11/20 00:37:45 | 001,028,096 | —- | M] (Macrovision Europe Ltd.) [On_Demand | Running] – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe – (FLEXnet Licensing Service 64)
SRV:
64bit: - [2010/06/29 11:52:12 | 004,181,256 | —- | M] (Motorola, Inc.) [On_Demand | Running] – C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe – (Bluetooth Device Manager)
SRV:
64bit: - [2010/06/24 15:24:12 | 000,315,392 | —- | M] (Realtek Semiconductor Corp.) [Auto | Running] – C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe – (RtVOsdService)
SRV:
64bit: - [2010/06/18 15:26:18 | 000,103,992 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe – (HP Wireless Assistant Service)
SRV:
64bit: - [2010/05/20 13:28:14 | 000,677,128 | —- | M] (Motorola, Inc.) [Auto | Running] – C:\Program Files\Motorola\Bluetooth\obexsrv.exe – (Bluetooth OBEX Service)
SRV:
64bit: - [2010/05/20 13:28:12 | 001,096,968 | —- | M] (Motorola, Inc.) [On_Demand | Running] – C:\Program Files\Motorola\Bluetooth\audiosrv.exe – (Bluetooth Media Service)
SRV:
64bit: - [2009/11/17 18:14:26 | 000,098,208 | —- | M] (Andrea Electronics Corporation) [Auto | Running] – C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe – (AERTFilters)
SRV:
64bit: - [2009/07/13 17:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2013/01/09 18:10:51 | 000,251,400 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2012/12/13 14:26:20 | 003,290,896 | —- | M] (Skype Technologies S.A.) [Auto | Running] – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe – (Skype C2C Service)
SRV - [2012/11/12 05:34:40 | 002,869,824 | —- | M] (Sophos Limited) [Auto | Running] – C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe – (swi_service)
SRV - [2012/11/12 05:34:37 | 001,998,400 | —- | M] (Sophos Limited) [Auto | Stopped] – C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe – (swi_update_64)
SRV - [2012/11/12 05:34:10 | 000,216,640 | —- | M] (Sophos Limited) [Auto | Running] – C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe – (SAVAdminService)
SRV - [2012/11/09 11:21:24 | 000,160,944 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files (x86)\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2012/09/27 11:55:16 | 000,086,528 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe – (HP Support Assistant Service)
SRV - [2012/07/26 15:53:18 | 004,792,768 | —- | M] (IBM Corp.) [Auto | Running] – C:\Program Files (x86)\BigFix Enterprise\BES Client\BESClient.exe – (BESClient)
SRV - [2012/07/06 10:15:54 | 000,232,512 | —- | M] (Sophos Limited) [Auto | Running] – C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe – (Sophos AutoUpdate Service)
SRV - [2012/06/15 03:00:37 | 000,139,840 | —- | M] (Sophos Limited) [Auto | Running] – C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe – (SAVService)
SRV - [2012/04/30 13:19:43 | 000,129,976 | —- | M] (Mozilla Foundation) [On_Demand | Stopped] – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe – (MozillaMaintenance)
SRV - [2010/11/20 00:37:44 | 000,647,680 | —- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe – (FLEXnet Licensing Service)
SRV - [2010/11/09 15:20:34 | 000,026,680 | —- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe – (HPWMISVC)
SRV - [2010/04/03 15:01:24 | 000,246,520 | —- | M] (WildTangent, Inc.) [On_Demand | Stopped] – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe – (GameConsoleService)
SRV - [2010/03/18 12:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2009/09/30 20:01:32 | 002,320,920 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe – (UNS)
SRV - [2009/09/30 20:01:30 | 000,268,824 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe – (LMS)
SRV - [2009/06/10 13:23:09 | 000,066,384 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2008/11/09 12:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)
========== Driver Services (SafeList) ==========
DRV:
64bit: - [2012/06/15 03:00:32 | 000,144,672 | —- | M] (Sophos Limited) [File_System | System | Running] – C:\Windows\SysNative\drivers\savonaccess.sys – (SAVOnAccess)
DRV:
64bit: - [2012/02/29 22:46:16 | 000,023,408 | —- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] – C:\Windows\SysNative\drivers\fs_rec.sys – (Fs_Rec)
DRV:
64bit: - [2012/02/15 11:06:39 | 001,390,640 | —- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\SynTP.sys – (SynTP)
DRV:
64bit: - [2012/02/15 10:01:50 | 000,052,736 | —- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\usbaapl64.sys – (USBAAPL64)
DRV:
64bit: - [2011/11/15 14:44:49 | 000,158,976 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Impcd.sys – (Impcd)
DRV:
64bit: - [2011/10/23 07:01:40 | 000,036,640 | —- | M] (Sophos Limited) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\sdcfilter.sys – (sdcfilter)
DRV:
64bit: - [2011/10/23 07:01:28 | 000,025,608 | —- | M] (Sophos Plc) [Kernel | Disabled | Stopped] – C:\Windows\SysNative\drivers\SophosBootDriver.sys – (SophosBootDriver)
DRV:
64bit: - [2011/10/11 12:00:44 | 000,271,424 | —- | M] (DT Soft Ltd) [Kernel | System | Running] – C:\Windows\SysNative\drivers\dtsoftbus01.sys – (dtsoftbus01)
DRV:
64bit: - [2011/03/10 22:41:12 | 000,107,904 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata)
DRV:
64bit: - [2011/03/10 22:41:12 | 000,027,008 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata)
DRV:
64bit: - [2010/11/20 05:33:35 | 000,078,720 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD)
DRV:
64bit: - [2010/11/20 03:07:05 | 000,059,392 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\TsUsbFlt.sys – (TsUsbFlt)
DRV:
64bit: - [2010/11/20 01:37:42 | 000,109,056 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\sdbus.sys – (sdbus)
DRV:
64bit: - [2010/11/04 20:57:54 | 001,041,760 | —- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\netr28x.sys – (netr28x)
DRV:
64bit: - [2010/06/29 10:12:26 | 003,232,768 | —- | M] (Motorola, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btmusb.sys – (BTMUSB)
DRV:
64bit: - [2010/05/07 11:19:58 | 000,245,792 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\RtsUStor.sys – (RSUSBSTOR)
DRV:
64bit: - [2010/04/13 09:44:22 | 000,540,696 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iaStor.sys – (iaStor)
DRV:
64bit: - [2010/04/09 16:53:04 | 000,052,736 | —- | M] (Motorola, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\btmcom.sys – (BTMCOM)
DRV:
64bit: - [2010/03/22 17:57:20 | 000,347,680 | —- | M] (Realtek ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Rt64win7.sys – (RTL8167)
DRV:
64bit: - [2010/03/05 11:57:18 | 000,271,872 | —- | M] (Intel® Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\IntcDAud.sys – (IntcDAud)
DRV:
64bit: - [2010/03/05 11:57:00 | 010,300,800 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\igdkmd64.sys – (igfx)
DRV:
64bit: - [2010/02/08 07:32:00 | 000,014,992 | —- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\CVirtA64.sys – (CVirtA)
DRV:
64bit: - [2009/09/17 12:54:54 | 000,056,344 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\HECIx64.sys – (HECIx64)
DRV:
64bit: - [2009/07/13 17:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs)
DRV:
64bit: - [2009/07/13 17:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2)
DRV:
64bit: - [2009/07/13 17:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor)
DRV:
64bit: - [2009/06/10 13:01:11 | 001,485,312 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTDPV6.SYS – (SrvHsfV92)
DRV:
64bit: - [2009/06/10 13:01:11 | 000,740,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTCNXT6.SYS – (SrvHsfWinac)
DRV:
64bit: - [2009/06/10 13:01:11 | 000,292,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTAZL6.SYS – (SrvHsfHDA)
DRV:
64bit: - [2009/06/10 12:35:33 | 000,389,120 | —- | M] (Marvell) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\yk62x64.sys – (yukonw7)
DRV:
64bit: - [2009/06/10 12:35:28 | 005,434,368 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\netw5v64.sys – (netw5v64)
DRV:
64bit: - [2009/06/10 12:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv)
DRV:
64bit: - [2009/06/10 12:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv)
DRV:
64bit: - [2009/06/10 12:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a)
DRV:
64bit: - [2009/06/10 12:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir)
DRV:
64bit: - [2009/05/18 12:17:08 | 000,034,152 | —- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\GEARAspiWDM.sys – (GEARAspiWDM)
DRV:
64bit: - [2008/11/16 17:39:44 | 000,157,968 | —- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] – C:\Windows\SysNative\drivers\dne64x.sys – (DNE)
DRV:
64bit: - [2008/04/16 14:49:34 | 000,028,416 | —- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys – (RimUsb)
DRV - [2009/07/13 17:19:10 | 000,019,008 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysWOW64\drivers\wimmount.sys – (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE:
64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE:
64bit: - HKLM\..\SearchScopes\{1C0B7A16-1BAD-41E7-BD52-9797E492D841}: "URL" = http://www.ask.com/web?q={searchterms}&l;=dis&o;=ushpl
IE:
64bit: - HKLM\..\SearchScopes\{595CE31E-C5D1-41D5-AF76-DA1A315E9AB7}: "URL" = http://en.wikipedia.org/wiki/Special:Searc…h={searchTerms}
IE:
64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&a;…q={searchTerms}
IE:
64bit: - HKLM\..\SearchScopes\{9C981203-0FC1-4340-855A-1F0DEE3E7159}: "URL" = http://search.yahoo.com/search?p={searchTe…amp;type=HPNTDF
IE:
64bit: - HKLM\..\SearchScopes\{D5030B4B-2840-4AAD-BAF3-03A972BB32E2}: "URL" =
http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{1C0B7A16-1BAD-41E7-BD52-9797E492D841}: "URL" = http://www.ask.com/web?q={searchterms}&l;=dis&o;=ushpl
IE - HKLM\..\SearchScopes\{595CE31E-C5D1-41D5-AF76-DA1A315E9AB7}: "URL" = http://en.wikipedia.org/wiki/Special:Searc…h={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&a;…q={searchTerms}
IE - HKLM\..\SearchScopes\{9C981203-0FC1-4340-855A-1F0DEE3E7159}: "URL" = http://search.yahoo.com/search?p={searchTe…amp;type=HPNTDF
IE - HKLM\..\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf}: "URL" =
http://search.mywebsearch.com/mywebsearch/…r={searchTerms}
IE - HKLM\..\SearchScopes\{D5030B4B-2840-4AAD-BAF3-03A972BB32E2}: "URL" =
http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages =
http://webmail.stanford.edu/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" =
http://search.babylon.com/?q={searchTerms}…000e02a821eeda5
IE - HKCU\..\SearchScopes\{24EC05D0-D5B1-44E8-8E5B-1F51795B090D}: "URL" =
http://search.yahoo.com/search?p={searchte…11,17118,0,18,0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.startup.homepage: "http://www.searchqu.com/406"
FF - prefs.js..extensions.enabledAddons: [removed]:1.0
FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid;=113&systemid;=406&sr;=0&q;="
FF - prefs.js..network.proxy.type: 0
FF:
64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found
FF:
64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF:
64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.669: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/01/09 16:33:32 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/01/09 16:33:32 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/11/02 09:27:30 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2012/04/30 18:45:25 | 000,000,000 | —D | M] (No name found) – C:\Users\Jeanette\AppData\Roaming\Mozilla\Extensions
[2012/12/05 10:13:20 | 000,000,000 | —D | M] (No name found) – C:\Users\Jeanette\AppData\Roaming\Mozilla\Firefox\Profiles\cx2mh8cc.default\extensions
[2012/03/30 06:08:58 | 000,000,000 | —D | M] ("Babylon Toolbar") – C:\Users\Jeanette\AppData\Roaming\Mozilla\Firefox\Profiles\cx2mh8cc.default\extensions\[removed]
[2013/01/09 17:12:04 | 000,000,000 | —D | M] (No name found) – C:\Users\Jeanette\AppData\Roaming\Mozilla\Firefox\Profiles\cx2mh8cc.default\extensions\wecarereminder@bryan
[2012/11/30 09:46:00 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/12/14 21:07:18 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/04/30 13:19:43 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/04/30 18:45:26 | 000,002,313 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012/03/12 20:38:32 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/03/12 20:38:32 | 000,002,040 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
========== Chrome ==========
CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{g
oogle:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie;={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl;={language}&q;={searchTerms}&sugkey;={google:suggestAPIKeyParameter},
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.97\pdf.dll
CHR - plugin: Skype Click to Call (Enabled) = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.5.0.11422_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U20 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: My Web Search Plugin Stub (Enabled) = C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll
CHR - plugin: Nitro PDF plugin for Firefox and Chrome (Enabled) = C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: RealNetworks™ Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll
CHR - plugin: TVU Web Player for FireFox (Enabled) = C:\Windows\system32\TVUAx\npTVUAx.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll
CHR - Extension: Google Drive = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: General Crawler = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel\2.5_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: Skype Click to Call = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.5.0.11422_0\
CHR - Extension: Gmail = C:\Users\Jeanette\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2009/06/10 13:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:
64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2:
64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:
64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - No CLSID value found.
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3:
64bit: - HKLM\..\Toolbar: (no name) - !{07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3:
64bit: - HKLM\..\Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.
O3:
64bit: - HKLM\..\Toolbar: (no name) - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3:
64bit: - HKLM\..\Toolbar: (no name) - !{ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3:
64bit: - HKLM\..\Toolbar: (no name) - !{EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O3:
64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4:
64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola, Inc.)
O4:
64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe ()
O4:
64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [Sophos AutoUpdate Monitor] C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Sophos Limited)
O4 - HKLM..\Run: [TkBellExe] c:\program files (x86)\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Device Detection] C:\Program Files (x86)\FUJIFILM\MyFinePix Studio\dd.exe ()
O4 - HKCU..\Run: [Linkury Chrome Smartbar] C:\Users\Jeanette\AppData\Local\Linkury\Application\Linkury.exe ()
O4 - HKCU..\Run: [Media Finder] "C:\Program Files (x86)\Media Finder\MF.exe" /opentotray File not found
O4 - HKLM..\RunOnce: [MyWebSearch bar Uninstall] C:\Program Files (x86)\Uninstall Fun Web Products.dll (MyWebSearch.com)
O4 - HKLM..\RunOnce: [removeSearchqudatamngr] cmd.exe /c RD /S /Q "C:\Program Files (x86)\Windows iLivid Toolbar" File not found
O4 - HKLM..\RunOnce: [removeSearchqutoolbar] cmd.exe /c RD /S /Q "C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar" File not found
O4 - Startup: C:\Users\Jeanette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Direct Downloader.lnk = C:\Users\Jeanette\AppData\Local\DirectDownloader\DirectDownloader.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9:
64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9:
64bit: - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm ()
O9:
64bit: - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm ()
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm ()
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10:
64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)
O13
64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:
64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16:
64bit: - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16:
64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.15.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B1798265-C47A-43C3-80FD-E2874EFB3A75}: DhcpNameServer = 192.168.15.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D8EC507C-08E5-4F26-891F-323A4C761BDB}: DhcpNameServer = 192.168.2.1
O18:
64bit: - Protocol\Handler\livecall - No CLSID value found
O18:
64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:
64bit: - Protocol\Handler\msnim - No CLSID value found
O18:
64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:
64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:
64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:
64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:
64bit: - AppInit_DLLs: (C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL) - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll (Sophos Limited)
O20 - AppInit_DLLs: (C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL) - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll (Sophos Limited)
O20:
64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:
64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:
64bit: - HKLM\..comfile [open] – "%1" %*
O35:
64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:
64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:
64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013/01/09 17:52:27 | 000,833,032 | —- | C] (MyWebSearch.com) – C:\Program Files (x86)\Uninstall Fun Web Products.dll
[2013/01/09 17:13:09 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013/01/09 16:37:57 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{9AAF75D6-C2CA-42BF-A454-68A4A6E14E33}
[2013/01/09 10:32:45 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{FBC5647B-427F-436F-9945-44C38626960C}
[2013/01/08 22:17:52 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{3DDA1B85-7FA9-4EE0-9F5E-ED029371EAFB}
[2013/01/08 10:17:21 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{3179341A-CB79-4B13-9B77-E66D6358AC94}
[2013/01/05 15:27:43 | 000,000,000 | —D | C] – C:\Users\Jeanette\Desktop\Oxford Encyclopedia 2012 Update
[2013/01/05 11:43:07 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{C47484D7-A588-4113-A87F-5A172DAD3CAF}
[2013/01/03 10:37:39 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{189CA010-67B6-4F59-B719-59EE6CFC6A87}
[2013/01/01 16:08:48 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{D6C5086E-71CF-4B73-BAE6-5EAC9BCFE36C}
[2012/12/30 18:51:17 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{957F9E29-9732-46C1-94BA-8D7E222115CF}
[2012/12/29 12:54:19 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{E928F01B-7F59-4FFB-8510-97CC3E2A5985}
[2012/12/27 11:58:18 | 000,000,000 | —D | C] – C:\Users\Jeanette\Desktop\Dissertation
[2012/12/27 11:44:29 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{72A5913D-2C3A-4A97-970F-45A9707B4568}
[2012/12/26 12:45:27 | 000,000,000 | —D | C] – C:\Users\Jeanette\Desktop\chads work stuff
[2012/12/26 10:22:55 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{A283BFC6-17AD-407B-9665-2702D100D76A}
[2012/12/25 21:25:19 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{99A43A28-3E32-4E86-B783-A3E6F5B08435}
[2012/12/25 01:35:12 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{4E4AF951-7AEC-45C7-838B-6071D73295F7}
[2012/12/23 22:17:43 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{7D07E029-2AF7-4EA6-A82B-EC64C1D859BA}
[2012/12/22 08:59:23 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{C4BDE294-7B48-417E-B00A-5B59A1E76D2C}
[2012/12/21 12:06:24 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2012/12/21 12:06:24 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2012/12/21 12:06:23 | 000,367,616 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2012/12/21 12:06:22 | 000,295,424 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2012/12/21 12:01:50 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{FAB071E1-AC57-4491-A1CD-780C017FE39F}
[2012/12/21 09:53:19 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{694E50AE-CF65-4599-B97B-0521EF63E788}
[2012/12/20 13:32:28 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{91D1A885-9005-4449-91BB-3A67C1C87A72}
[2012/12/18 20:07:44 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{D0F35F40-951B-486B-997A-EFA13C1A15DC}
[2012/12/18 20:02:34 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{28ACD799-09EA-4E70-8A6E-C8F0D7F34389}
[2012/12/18 15:32:03 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{3AEEB99C-185E-4F1A-8A93-323D11D482D6}
[2012/12/18 10:38:43 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{ED377000-0124-41BA-9BD7-AB8FA9289011}
[2012/12/18 10:33:30 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{0F9C5072-3461-4249-8FD2-BDCA62AD2A4F}
[2012/12/17 11:26:57 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{8B83E043-2984-453A-886D-B09DC928511E}
[2012/12/16 19:56:15 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{6D72E4BC-F61C-45FA-A8D4-84C450CC527E}
[2012/12/15 12:26:38 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{B2E9308A-19BE-4002-BBEE-5FC338E1AAE4}
[2012/12/14 23:23:14 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{FCADC93B-CB14-4A03-B3CC-B10A469BCEB8}
[2012/12/14 10:44:23 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{3F6AFC7E-0014-4D6B-B5D9-EC0F87BBF8A5}
[2012/12/13 09:29:35 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{6B5EE1B7-87FA-4431-B65B-A2DB8454B1B4}
[2012/12/13 09:03:43 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/12/13 09:03:43 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/12/13 09:03:42 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/12/13 09:03:41 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/12/13 09:03:41 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/12/13 09:03:41 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/12/13 09:03:41 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/12/13 09:03:41 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/12/13 09:03:39 | 002,312,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/12/13 09:03:39 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/12/13 09:03:39 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/12/13 09:03:39 | 000,729,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2012/12/13 09:03:36 | 000,816,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/12/13 09:03:36 | 000,717,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/12/13 09:03:36 | 000,599,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2012/12/12 19:57:42 | 001,161,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2012/12/12 19:57:42 | 000,424,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2012/12/12 19:57:41 | 000,338,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2012/12/12 19:57:41 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2012/12/12 19:57:39 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2012/12/12 19:57:39 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2012/12/12 19:57:39 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2012/12/12 19:57:39 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2012/12/12 19:57:39 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2012/12/12 19:57:39 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2012/12/12 19:57:39 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2012/12/12 19:57:38 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2012/12/12 19:57:38 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2012/12/12 19:57:38 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2012/12/12 19:57:38 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2012/12/12 19:57:38 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2012/12/12 19:57:38 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2012/12/12 19:57:38 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2012/12/12 19:57:38 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2012/12/12 19:57:37 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2012/12/12 19:57:37 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2012/12/12 19:57:37 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2012/12/12 19:57:36 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2012/12/12 19:57:36 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2012/12/12 19:57:36 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2012/12/12 19:57:36 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2012/12/12 19:57:36 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2012/12/12 19:57:36 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2012/12/12 19:57:36 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2012/12/12 19:55:53 | 000,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnet.dll
[2012/12/12 19:55:52 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnet.dll
[2012/12/12 19:40:08 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{B8659254-D5FE-41ED-BE25-3D9627B525C8}
[2012/12/12 13:40:42 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{F920759D-7193-4007-8A4B-8E06D9D2CD99}
[2012/12/11 03:40:25 | 000,000,000 | —D | C] – C:\Users\Jeanette\AppData\Local\{B195641B-BC46-43D9-9952-0F06E91B9F38}
[2011/06/06 01:26:06 | 000,430,136 | —- | C] (Hewlett-Packard) – C:\Users\Jeanette\Install.exe
[2011/06/06 00:49:58 | 000,133,632 | —- | C] (Hewlett-Packard) – C:\Users\Jeanette\hpmco115.dll
[2011/06/06 00:49:22 | 003,077,632 | —- | C] (Hewlett-Packard) – C:\Users\Jeanette\Install.dll
[2011/05/24 04:28:20 | 000,551,424 | —- | C] (Hewlett-Packard) – C:\Users\Jeanette\hpmprein.dll
[2009/02/25 18:59:08 | 000,234,496 | —- | C] (Hewlett Packard) – C:\Users\Jeanette\hpmews02.dll
[2009/02/25 18:58:58 | 000,031,768 | —- | C] (Hewlett Packard) – C:\Users\Jeanette\hppdgenio.sys
[2009/02/25 18:58:58 | 000,031,256 | —- | C] (Hewlett Packard) – C:\Users\Jeanette\hpfx64gen.sys
[2009/02/25 18:58:58 | 000,022,040 | —- | C] (Hewlett Packard) – C:\Users\Jeanette\hppdbulkio.sys
[2009/02/25 18:58:58 | 000,020,504 | —- | C] (Hewlett Packard) – C:\Users\Jeanette\hpfx64bulk.sys
[2009/02/09 15:49:46 | 000,235,008 | —- | C] (Hewlett Packard) – C:\Users\Jeanette\hpmldm02.dll
[1 C:\Users\Jeanette\*.tmp files -> C:\Users\Jeanette\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/01/09 19:08:11 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/01/09 19:07:28 | 000,014,894 | —- | M] () – C:\Users\Jeanette\Desktop\HiJackThis.exe - Shortcut.lnk
[2013/01/09 18:13:01 | 000,000,902 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/01/09 18:10:47 | 000,697,864 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/01/09 18:10:47 | 000,074,248 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/01/09 17:21:54 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/01/09 17:05:50 | 000,000,344 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForJeanette.job
[2013/01/09 16:58:58 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/01/09 16:58:58 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/01/09 16:48:37 | 000,000,416 | —- | M] () – C:\Windows\tasks\PC Optimizer Pro64 startups.job
[2013/01/09 16:46:04 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/01/09 16:45:45 | 3062,255,616 | -HS- | M] () – C:\hiberfil.sys
[2013/01/08 10:26:14 | 000,104,188 | —- | M] () – C:\Users\Jeanette\Desktop\Pantoja, Segura 2003.PDF
[2013/01/08 10:24:54 | 002,377,179 | —- | M] () – C:\Users\Jeanette\Desktop\Political Research Quarterly-2001-Pantoja-729-50.pdf
[2012/12/25 05:24:18 | 000,006,144 | —- | M] () – C:\Users\Jeanette\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/12/22 08:57:42 | 000,322,024 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/12/16 09:11:22 | 000,046,080 | —- | M] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2012/12/16 06:45:03 | 000,367,616 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2012/12/16 06:13:28 | 000,295,424 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2012/12/16 06:13:20 | 000,034,304 | —- | M] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[1 C:\Users\Jeanette\*.tmp files -> C:\Users\Jeanette\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/01/08 11:11:27 | 002,377,179 | —- | C] () – C:\Users\Jeanette\Desktop\Political Research Quarterly-2001-Pantoja-729-50.pdf
[2013/01/08 10:45:55 | 000,104,188 | —- | C] () – C:\Users\Jeanette\Desktop\Pantoja, Segura 2003.PDF
[2012/12/25 05:24:18 | 000,006,144 | —- | C] () – C:\Users\Jeanette\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/08 20:44:16 | 000,098,304 | —- | C] () – C:\Windows\SysWow64\redmonnt.dll
[2011/10/17 12:41:33 | 000,000,000 | —- | C] () – C:\Windows\HPMProp.INI
[2011/10/11 05:56:56 | 000,731,106 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/06/24 16:46:50 | 000,235,700 | —- | C] () – C:\Users\Jeanette\hpcu115v.cat
[2011/06/24 16:46:50 | 000,180,327 | —- | C] () – C:\Users\Jeanette\hpzius23.cat
[2011/06/24 16:46:50 | 000,179,886 | —- | C] () – C:\Users\Jeanette\hpmldm02.cat
[2011/06/24 16:46:50 | 000,179,886 | —- | C] () – C:\Users\Jeanette\hpmews02.cat
[2011/06/24 16:46:50 | 000,179,878 | —- | C] () – C:\Users\Jeanette\hpzipa23.cat
[2011/06/24 16:46:50 | 000,179,429 | —- | C] () – C:\Users\Jeanette\hpzid4v4.cat
[2011/06/24 16:46:50 | 000,178,982 | —- | C] () – C:\Users\Jeanette\hpzipr23.cat
[2011/06/24 16:46:50 | 000,178,535 | —- | C] () – C:\Users\Jeanette\hpbuio20l.cat
[2011/06/24 16:46:50 | 000,178,533 | —- | C] () – C:\Users\Jeanette\hppfaxnd.cat
[2011/06/24 16:46:50 | 000,178,531 | —- | C] () – C:\Users\Jeanette\hppscnd.cat
[2011/06/24 16:46:50 | 000,178,531 | —- | C] () – C:\Users\Jeanette\hppewnd.cat
[2011/06/06 01:30:38 | 000,039,125 | —- | C] () – C:\Users\Jeanette\psa4ukww.cab
[2011/06/06 01:30:38 | 000,038,469 | —- | C] () – C:\Users\Jeanette\psa4viww.cab
[2011/06/06 01:30:36 | 000,038,461 | —- | C] () – C:\Users\Jeanette\psa4srww.cab
[2011/06/06 01:30:36 | 000,038,457 | —- | C] () – C:\Users\Jeanette\psa4slww.cab
[2011/06/06 01:30:36 | 000,038,291 | —- | C] () – C:\Users\Jeanette\psa4roww.cab
[2011/06/06 01:30:34 | 000,039,299 | —- | C] () – C:\Users\Jeanette\psa4kkww.cab
[2011/06/06 01:30:34 | 000,038,619 | —- | C] () – C:\Users\Jeanette\psa4lvww.cab
[2011/06/06 01:30:34 | 000,038,487 | —- | C] () – C:\Users\Jeanette\psa4ltww.cab
[2011/06/06 01:30:34 | 000,038,087 | —- | C] () – C:\Users\Jeanette\psa4idww.cab
[2011/06/06 01:30:32 | 000,039,011 | —- | C] () – C:\Users\Jeanette\psa4trww.cab
[2011/06/06 01:30:32 | 000,038,991 | —- | C] () – C:\Users\Jeanette\psa4bgww.cab
[2011/06/06 01:30:32 | 000,038,637 | —- | C] () – C:\Users\Jeanette\psa4thww.cab
[2011/06/06 01:30:32 | 000,038,531 | —- | C] () – C:\Users\Jeanette\psa4hrww.cab
[2011/06/06 01:30:32 | 000,038,509 | —- | C] () – C:\Users\Jeanette\psa4etww.cab
[2011/06/06 01:30:30 | 000,037,885 | —- | C] () – C:\Users\Jeanette\psa4svww.cab
[2011/06/06 01:30:28 | 000,039,977 | —- | C] () – C:\Users\Jeanette\psa4plww.cab
[2011/06/06 01:30:28 | 000,039,205 | —- | C] () – C:\Users\Jeanette\psa4ruww.cab
[2011/06/06 01:30:28 | 000,038,947 | —- | C] () – C:\Users\Jeanette\psa4ptww.cab
[2011/06/06 01:30:28 | 000,038,825 | —- | C] () – C:\Users\Jeanette\psa4skww.cab
[2011/06/06 01:30:28 | 000,038,369 | —- | C] () – C:\Users\Jeanette\psa4nlww.cab
[2011/06/06 01:30:28 | 000,038,223 | —- | C] () – C:\Users\Jeanette\psa4noww.cab
[2011/06/06 01:30:26 | 000,039,739 | —- | C] () – C:\Users\Jeanette\psa4huww.cab
[2011/06/06 01:30:26 | 000,039,239 | —- | C] () – C:\Users\Jeanette\psa4frww.cab
[2011/06/06 01:30:26 | 000,038,427 | —- | C] () – C:\Users\Jeanette\psa4heww.cab
[2011/06/06 01:30:26 | 000,038,205 | —- | C] () – C:\Users\Jeanette\psa4itww.cab
[2011/06/06 01:30:26 | 000,038,001 | —- | C] () – C:\Users\Jeanette\psa4jaww.cab
[2011/06/06 01:30:26 | 000,037,559 | —- | C] () – C:\Users\Jeanette\psa4koww.cab
[2011/06/06 01:30:24 | 000,039,431 | —- | C] () – C:\Users\Jeanette\psa4deww.cab
[2011/06/06 01:30:24 | 000,039,189 | —- | C] () – C:\Users\Jeanette\psa4elww.cab
[2011/06/06 01:30:24 | 000,038,343 | —- | C] () – C:\Users\Jeanette\psa4fiww.cab
[2011/06/06 01:30:24 | 000,038,115 | —- | C] () – C:\Users\Jeanette\psa4esww.cab
[2011/06/06 01:30:24 | 000,037,547 | —- | C] () – C:\Users\Jeanette\psa4enww.cab
[2011/06/06 01:30:22 | 000,039,441 | —- | C] () – C:\Users\Jeanette\psa4csww.cab
[2011/06/06 01:30:22 | 000,038,151 | —- | C] () – C:\Users\Jeanette\psa4daww.cab
[2011/06/06 01:30:22 | 000,038,131 | —- | C] () – C:\Users\Jeanette\psa4caww.cab
[2011/06/06 01:30:22 | 000,036,893 | —- | C] () – C:\Users\Jeanette\psa4zhcn.cab
[2011/06/06 01:30:22 | 000,036,057 | —- | C] () – C:\Users\Jeanette\psa4zhtw.cab
[2011/06/06 01:30:20 | 013,958,690 | —- | C] () – C:\Users\Jeanette\hpcu115v.cab
[2011/06/06 01:30:20 | 000,038,709 | —- | C] () – C:\Users\Jeanette\psa4arww.cab
[2011/06/06 00:27:32 | 000,090,898 | —- | C] () – C:\Users\Jeanette\hpcu115v.inf
[2011/06/02 04:05:24 | 000,001,203 | —- | C] () – C:\Users\Jeanette\hpbuio20l.inf
[2011/06/02 04:04:02 | 000,221,391 | —- | C] () – C:\Users\Jeanette\hpcpu115.cfg
[2011/06/01 11:48:58 | 003,314,688 | —- | C] () – C:\Users\Jeanette\hpbcfgre.dll
[2011/05/24 09:47:04 | 000,001,165 | —- | C] () – C:\Users\Jeanette\hpmprein.config
[2011/05/24 09:47:02 | 000,005,740 | —- | C] () – C:\Users\Jeanette\hppldcoi.config
[2011/05/02 13:45:36 | 000,003,888 | —- | C] () – C:\Users\Jeanette\hppscnd.inf
[2011/04/16 16:02:30 | 000,068,062 | —- | C] () – C:\Users\Jeanette\hpzid4vp.inf
[2011/04/16 16:01:58 | 000,189,098 | —- | C] () – C:\Users\Jeanette\hpzius23.inf
[2011/04/16 16:01:46 | 000,051,648 | —- | C] () – C:\Users\Jeanette\hpzipr23.inf
[2011/04/16 16:01:36 | 000,101,018 | —- | C] () – C:\Users\Jeanette\hpzipa23.inf
[2010/10/29 13:44:04 | 000,002,583 | —- | C] () – C:\Users\Jeanette\hppfaxnd.inf
[2010/10/29 13:43:50 | 000,001,542 | —- | C] () – C:\Users\Jeanette\hppewnd.inf
[2010/09/10 12:38:02 | 000,003,633 | —- | C] () – C:\Users\Jeanette\hpmldm02.inf
[2009/09/10 10:13:10 | 000,007,950 | —- | C] () – C:\Users\Jeanette\hpmews02.inf
[2009/02/25 18:59:08 | 000,000,665 | —- | C] () – C:\Users\Jeanette\hpmldm02.dat
[2009/02/25 18:59:08 | 000,000,648 | —- | C] () – C:\Users\Jeanette\hpmews02.dat
========== ZeroAccess Check ==========
[2009/07/13 20:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2012/06/08 21:43:10 | 014,172,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2012/06/08 20:41:00 | 012,873,728 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/13 17:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 04:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/13 17:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
< End of report >
