What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Start Menu ALL Programs [Solved]

10 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I recently installed Office 2013 64 bit
and when I go to start, all programs and click on Microsoft 2013 it says empty.
Then noticed the same thing for a few other programs.
Not sure if a virus caused this or not.
see below log

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:53:23 PM, on 7/21/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal

Running processes:
C:\Windows\twain_32\Motion Tracking Camera\Motor_Tracking_Tool.exe
C:\Windows\SQ931STI.exe
C:\Program Files (x86)\Olympus\ib\olycamdetect.exe
C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
C:\Users\Mark Burton\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\MSI\Live Update 5\LU5.exe
C:\Program Files (x86)\lg_fwupdate\fwupdate.exe
C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe
C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe
C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\Mark Burton\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\Mark Burton\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.sweetpacks.com/?src=10&st…7-8C89A56405B6}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, enhanced for Bing and MSN
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: (no name) - {2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3} - (no file)
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Intuit SyncManager] c:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
O4 - HKLM\..\Run: [Olympus ib] "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup
O4 - HKLM\..\Run: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ShopAtHomeWatcher] C:\Users\Mark Burton\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Live Update 5] C:\Program Files (x86)\MSI\Live Update 5\BootStartLiveupdate.exe /reminder
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files (x86)\lg_fwupdate\lgfw.exe" blrun
O4 - HKCU\..\Run: [cdloader] "C:\Users\Mark Burton\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [Google Update] "C:\Users\Mark Burton\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Olympus ib] "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [ConduitFloatingPlugin_njljkdinboobkmkihgcohanchjnjpgjk] "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Conduit\CT3291326\plugins\TBVerifier.dll",RunConduitFloatingPlugin njljkdinboobkmkihgcohanchjnjpgjk
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6003.0710\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6003.0710\amd64"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MIF5BA~1\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.6.2.cab
O18 - Protocol: intu-help-qb3 - {C5E479EA-0A65-4B05-8C6C-2FC8CC682EB4} - c:\Program Files (x86)\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - (no file)
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - (no file)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dkab_device - - C:\Windows\system32\DKabcoms.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QBCFMonitorService - Intuit - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - c:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SetupARService - Realtek Semiconductor. - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

–
End of file - 17239 bytes
Post #2
Hi there,
my name is Marius and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully.
  • First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
  • My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.



Scan with DDS

Download DDS and save it to your desktop from here or here or
here.

Disable any script blocker, and then double click dds.scr to run the tool.

When done, DDS will open two (2) logs
DDS.txt
Attach.txt
Save both reports to your desktop.




Scan with Gmer rootkit scanner

Please download Gmer from here by clicking on the "Download EXE" Button.
  • Double click on the randomly named GMER.exe. If asked to allow gmer.sys driver to load, please consent.
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • Sections
    • IAT/EAT
    • Show All ( should be unchecked by default )
  • Leave everything else as it is.
  • Close all other running programs as well as your Browser.
  • Click the Scan button & wait for it to finish.
  • Once done click on the Save.. button, and in the File name area, type in "ark.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop.
  • Please post the content of the ark.txt here.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Post #3
Ark.txt posted as instructed

GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2013-07-22 20:14:27
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST2000DL003-9VT166 rev.CC3C 1863.02GB
Running: 29sc7uyp.exe; Driver: C:\Users\MARKBU~1\AppData\Local\Temp\uwdcypow.sys


—- Threads - GMER 2.1 —-

Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [4964:4692] 000007fefb822a7c
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [4964:4656] 000007fee0acd618

—- EOF - GMER 2.1 —-
Post #5
I was just following directions and forgive me but nothing said to post the dds.txt and the attach.tx DDS (Ver_2012-11-20.01) - NTFS_AMD64 Internet Explorer: 10.0.9200.16635 BrowserJavaVersion: 10.25.2 Run by [removed] at 19:43:30 on 2013-07-22 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.15871.13977 [GMT -4:00] . AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} . ============== Running Processes =============== . C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\atieclxx.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\DKabcoms.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\wbem\wmiprvse.exe c:\Program Files\Microsoft Security Client\NisSrv.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\twain_32\Motion Tracking Camera\Motor_Tracking_Tool.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Windows\SQ931STI.exe C:\Program Files (x86)\Olympus\ib\olycamdetect.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe C:\Users\Mark Burton\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files (x86)\Internet Explorer\IELowutil.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE15\CSISYN~1.EXE C:\Program Files (x86)\MSI\Live Update 5\LU5.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\lg_fwupdate\fwupdate.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Program Files\Microsoft Office\Office15\MsoSync.exe C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe C:\Windows\System32\cscript.exe . ============== Pseudo HJT Report =============== . uWindow Title = Internet Explorer, enhanced for Bing and MSN mStart Page = hxxp://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={6FF55940-EB62-11E2-A1C7-8C89A56405B6} mWinlogon: Userinit = userinit.exe, BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll BHO: {2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3} - BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll BHO: DivX Plus Web Player HTML5 : {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL BHO: Microsoft SkyDrive Pro Browser Helper: {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll uRun: [cdloader] "C:\Users\Mark Burton\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK uRun: [Google Update] "C:\Users\Mark Burton\AppData\Local\Google\Update\GoogleUpdate.exe" /c uRun: [Olympus ib] "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun uRun: [SkyDrive] "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background uRun: [ConduitFloatingPlugin_njljkdinboobkmkihgcohanchjnjpgjk] "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Conduit\CT3291326\plugins\TBVerifier.dll",RunConduitFloatingPlugin njljkdinboobkmkihgcohanchjnjpgjk uRunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] C:\Windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64" uRunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64" uRunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64" uRunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64" uRunOnce: [Uninstall C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6003.0710\amd64] C:\Windows\System32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Burton\AppData\Local\Microsoft\SkyDrive\16.4.6003.0710\amd64" mRun: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" mRun: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" mRun: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" mRun: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0" mRun: [UpdatePSTShortCut] "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [Intuit SyncManager] c:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup mRun: [MDS_Menu] "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0" mRun: [Olympus ib] "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup mRun: [BingDesktop] C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey mRun: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW mRun: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [ShopAtHomeWatcher] C:\Users\Mark Burton\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exe mRun: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [Live Update 5] C:\Program Files (x86)\MSI\Live Update 5\BootStartLiveupdate.exe /reminder mRun: [LGODDFU] "C:\Program Files (x86)\lg_fwupdate\lgfw.exe" blrun StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\QUICKB~1.LNK - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Explorer: NoActiveDesktop = dword:1 mPolicies-Explorer: NoActiveDesktopChanges = dword:1 mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: E&xport to Microsoft Excel - C:\PROGRA~1\MIF5BA~1\Office15\EXCEL.EXE/3000 IE: Se&nd to OneNote - C:\PROGRA~1\MIF5BA~1\Office15\ONBttnIE.dll/105 IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab TCP: NameServer = 192.168.1.1 TCP: Interfaces\{0C7590E1-1009-4361-89F5-523F4C87F18F} : DHCPNameServer = 192.168.1.1 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - Handler: intu-help-qb3 - {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - c:\Program Files (x86)\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll SSODL: WebCheck - mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe" x64-BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL x64-BHO: Microsoft SkyDrive Pro Browser Helper: {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL x64-Run: [Motor_Tracking_Tool] C:\Windows\Twain_32\Motion Tracking Camera\Motor_Tracking_Tool.exe x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey x64-Run: [SQ931STI] C:\Windows\SQ931STI.EXE x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll x64-IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab x64-Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL x64-Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - x64-Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - x64-Handler: intu-help-qb3 - {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - x64-Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL x64-Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - x64-SSODL: WebCheck - . ============= SERVICES / DRIVERS =============== . R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-6-18 247216] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-2-14 235520] R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-9-28 361984] R2 AODDriver4.01;AODDriver4.01;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-4-9 57472] R2 BingDesktopUpdate;Bing Desktop Update service;C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [2013-6-27 173192] R2 dkab_device;dkab_device;C:\Windows\System32\DKabcoms.exe -service –> C:\Windows\System32\DKabcoms.exe -service [?] R2 MSI_SuperCharger;MSI_SuperCharger;C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2013-2-2 161264] R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-3-20 139616] R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2012-11-10 1153368] R2 SetupARService;SetupARService;C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2013-4-29 24576] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2012-5-14 96896] R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-6-20 366600] R3 NTIOLib_1_0_3;NTIOLib_1_0_3;C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2013-2-2 13368] R3 NTIOLib_1_0_4;NTIOLib_1_0_4;C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [2013-7-21 14136] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2011-2-10 82432] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2011-2-10 181760] R3 ReallusionVirtualAudio;Reallusion Virtual Audio;C:\Windows\System32\drivers\RLVrtAuCbl.sys [2012-3-22 49664] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-11-10 676968] R3 SQ931;Motion Tracking Camera;C:\Windows\System32\drivers\Capt931A.SYS [2012-3-22 606272] R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2012-3-25 44672] S2 AODDriver4.2;AODDriver4.2;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-4-9 57472] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2012-3-25 46136] S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168] S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2013-1-7 57856] S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-9-12 1512448] S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-1 178824] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-11-18 19456] S3 StMp3Recx64;Player Recovery Device Control Driver;C:\Windows\System32\drivers\StMp3Recx64.sys [2007-1-12 26112] S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136] S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-11-18 57856] S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2012-11-18 30208] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-3-21 1255736] . =============== File Associations =============== . FileExt: .txt: Applications\Winword.exe="C:\Program Files\Microsoft Office\Office15\WINWORD.EXE" /n "%1" [UserChoice] [default=edit - 'Open' doesn't exist] . =============== Created Last 30 ================ . 2013-07-22 23:42:49 964552 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E6F66015-3C34-7BC2-7AF1-72F21C5E7F2D}\GapaEngine.dll 2013-07-22 23:16:16 76232 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A21DE8D7-2FFB-454C-9B41-0DD743FDF658}\offreg.dll 2013-07-22 23:15:29 9460976 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A21DE8D7-2FFB-454C-9B41-0DD743FDF658}\mpengine.dll 2013-07-21 23:01:16 9460976 ——w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-07-21 19:34:49 ——– d—–w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-07-21 19:02:11 3584 —-a-r- C:\Users\Mark Burton\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe 2013-07-21 19:02:10 ——– d—–w- C:\Program Files (x86)\Windows Installer Clean Up 2013-07-21 17:39:31 ——– d—–w- C:\Program Files\iTunes 2013-07-21 17:39:31 ——– d—–w- C:\Program Files\iPod 2013-07-21 17:39:31 ——– d—–w- C:\Program Files (x86)\iTunes 2013-07-20 18:21:41 ——– d—–w- C:\ProgramData\Microsoft Toolkit 2013-07-20 18:04:56 ——– d—–w- C:\Users\Mark Burton\AppData\Local\CRE 2013-07-20 18:04:04 ——– d—–w- C:\ProgramData\Tarma Installer 2013-07-20 18:03:50 ——– d—–w- C:\Program Files (x86)\TornTV.com 2013-07-20 15:33:55 ——– d—–w- C:\Program Files (x86)\Microsoft SQL Server 2013-07-20 15:33:43 ——– d—–w- C:\ProgramData\regid.1991-06.com.microsoft 2013-07-20 15:33:10 ——– d—–w- C:\Windows\PCHEALTH 2013-07-20 15:33:10 ——– d—–w- C:\Program Files\Microsoft SQL Server 2013-07-20 15:30:28 ——– d—–w- C:\Program Files\Microsoft Analysis Services 2013-07-20 15:30:28 ——– d—–w- C:\Program Files (x86)\Microsoft Analysis Services 2013-07-20 15:23:03 125376 —-a-w- C:\Windows\System32\drivers\scdemu.sys 2013-07-20 15:23:03 ——– d—–w- C:\Program Files (x86)\PowerISO 2013-07-20 15:20:33 ——– d—–w- C:\Users\Mark Burton\AppData\Roaming\DownLite 2013-07-20 13:49:55 ——– d–h–w- C:\SkyDriveTemp 2013-07-20 02:05:43 96168 —-a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll 2013-07-20 00:56:34 ——– d—–w- C:\Users\Mark Burton\AppData\Local\JollyWallet 2013-07-20 00:56:15 ——– d—–w- C:\Users\Mark Burton\AppData\Local\SwvUpdater 2013-07-17 22:45:49 941720 ——w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{49DE5B10-0784-48C3-A2DA-FCBAE7A15CE3}\gapaengine.dll 2013-07-13 02:23:35 ——– d—–w- C:\Users\Mark Burton\AppData\Roaming\eIntaller 2013-07-13 02:17:06 ——– d—–w- C:\Users\Mark Burton\AppData\Local\VisualBeeExe 2013-07-13 02:16:54 ——– d—–w- C:\ProgramData\VisualBee 2013-07-13 02:16:40 ——– d—–w- C:\Users\Mark Burton\AppData\Local\emaze 2013-07-13 00:18:25 ——– d—–w- C:\Users\Mark Burton\AppData\Roaming\Open Download Manager 2013-07-12 04:26:36 461464 ——w- C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe 2013-07-12 04:24:37 ——– d—–w- C:\Program Files\Microsoft Office 15 2013-07-11 04:49:32 ——– d—–w- C:\Windows\System32\MRT 2013-07-10 22:53:19 ——– d—–w- C:\Windows\SysWow64\Adobe 2013-07-10 03:32:34 ——– d—–w- C:\Windows\TempF8C223E2-7E10-FE50-5273-10E2337CCDF5-Signatures 2013-07-04 19:27:00 71048 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2013-07-04 19:27:00 692104 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2013-07-01 23:34:52 ——– d—–w- C:\Program Files\Microsoft Synchronization Services 2013-07-01 23:34:52 ——– d—–w- C:\Program Files\Microsoft SQL Server Compact Edition 2013-07-01 23:34:27 ——– d—–w- C:\Program Files (x86)\Microsoft Synchronization Services 2013-06-27 16:25:56 9793536 —-a-w- C:\ProgramData\Microsoft\BingDesktop\Updater\BingDesktop.msi 2013-06-24 01:03:04 ——– d—–w- C:\Users\Mark Burton\AppData\Local\ElevatedDiagnostics . ==================== Find3M ==================== . 2013-07-20 02:05:36 867240 —-a-w- C:\Windows\SysWow64\npdeployJava1.dll 2013-07-20 02:05:36 789416 —-a-w- C:\Windows\SysWow64\deployJava1.dll 2013-06-19 01:50:08 247216 —-a-w- C:\Windows\System32\drivers\MpFilter.sys 2013-06-19 01:50:08 139616 —-a-w- C:\Windows\System32\drivers\NisDrvWFP.sys 2013-06-11 23:43:37 1767936 —-a-w- C:\Windows\SysWow64\wininet.dll 2013-06-11 23:43:00 2877440 —-a-w- C:\Windows\SysWow64\jscript9.dll 2013-06-11 23:42:58 61440 —-a-w- C:\Windows\SysWow64\iesetup.dll 2013-06-11 23:42:58 109056 —-a-w- C:\Windows\SysWow64\iesysprep.dll 2013-06-11 23:26:20 2241024 —-a-w- C:\Windows\System32\wininet.dll 2013-06-11 23:25:16 3958784 —-a-w- C:\Windows\System32\jscript9.dll 2013-06-11 23:25:13 67072 —-a-w- C:\Windows\System32\iesetup.dll 2013-06-11 23:25:13 136704 —-a-w- C:\Windows\System32\iesysprep.dll 2013-06-11 22:51:45 71680 —-a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe 2013-06-11 22:50:58 89600 —-a-w- C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-07 03:22:18 2706432 —-a-w- C:\Windows\System32\mshtml.tlb 2013-06-07 02:37:52 2706432 —-a-w- C:\Windows\SysWow64\mshtml.tlb 2013-06-05 03:34:27 3153920 —-a-w- C:\Windows\System32\win32k.sys 2013-06-04 06:00:13 624128 —-a-w- C:\Windows\System32\qedit.dll 2013-06-04 04:53:07 509440 —-a-w- C:\Windows\SysWow64\qedit.dll 2013-05-13 05:51:01 184320 —-a-w- C:\Windows\System32\cryptsvc.dll 2013-05-13 05:51:00 1464320 —-a-w- C:\Windows\System32\crypt32.dll 2013-05-13 05:51:00 139776 —-a-w- C:\Windows\System32\cryptnet.dll 2013-05-13 05:50:40 52224 —-a-w- C:\Windows\System32\certenc.dll 2013-05-13 04:45:55 140288 —-a-w- C:\Windows\SysWow64\cryptsvc.dll 2013-05-13 04:45:55 1160192 —-a-w- C:\Windows\SysWow64\crypt32.dll 2013-05-13 04:45:55 103936 —-a-w- C:\Windows\SysWow64\cryptnet.dll 2013-05-13 03:43:55 1192448 —-a-w- C:\Windows\System32\certutil.exe 2013-05-13 03:08:10 903168 —-a-w- C:\Windows\SysWow64\certutil.exe 2013-05-13 03:08:06 43008 —-a-w- C:\Windows\SysWow64\certenc.dll 2013-05-10 16:05:03 971680 —-a-w- C:\Windows\System32\deployJava1.dll 2013-05-10 16:05:03 1092512 —-a-w- C:\Windows\System32\npDeployJava1.dll 2013-05-10 05:49:27 30720 —-a-w- C:\Windows\System32\cryptdlg.dll 2013-05-10 03:20:54 24576 —-a-w- C:\Windows\SysWow64\cryptdlg.dll 2013-05-08 06:39:01 1910632 —-a-w- C:\Windows\System32\drivers\tcpip.sys 2013-05-08 06:10:12 421200 —-a-w- C:\Windows\SysWow64\msvcp100.dll 2013-05-06 06:03:49 1887744 —-a-w- C:\Windows\System32\WMVDECOD.DLL 2013-05-06 04:56:35 1620480 —-a-w- C:\Windows\SysWow64\WMVDECOD.DLL 2013-05-02 15:29:56 278800 ——w- C:\Windows\System32\MpSigStub.exe 2013-05-02 02:43:06 99384 —-a-w- C:\Users\Mark Burton\AppData\Roaming\inst.exe 2013-05-02 02:43:06 82816 —-a-w- C:\Users\Mark Burton\AppData\Roaming\pcouffin.sys 2013-05-01 07:59:12 94208 —-a-w- C:\Windows\SysWow64\QuickTimeVR.qtx 2013-05-01 07:59:12 69632 —-a-w- C:\Windows\SysWow64\QuickTime.qts 2013-04-26 05:51:36 751104 —-a-w- C:\Windows\System32\win32spl.dll 2013-04-26 04:55:21 492544 —-a-w- C:\Windows\SysWow64\win32spl.dll 2013-04-25 23:30:32 1505280 —-a-w- C:\Windows\SysWow64\d3d11.dll . ============= FINISH: 19:44:46.81 ===============
Post #6
attach log UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2012-11-20.01) . Microsoft Windows 7 Professional Boot Device: \Device\HarddiskVolume1 Install Date: 3/20/2012 11:31:29 PM System Uptime: 7/22/2013 7:41:02 PM (0 hours ago) . Motherboard: MSI | | 890GXM-G65 (MS-7642) Processor: AMD Athlon™ II X2 255 Processor | CPU1 | 3100/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 1863 GiB total, 1696.085 GiB free. D: is CDROM () E: is CDROM () F: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP297: 7/15/2013 2:22:46 PM - Scheduled Checkpoint RP298: 7/17/2013 6:44:54 PM - Windows Update RP299: 7/19/2013 10:04:43 PM - Installed Java 7 Update 25 RP300: 7/19/2013 11:19:13 PM - Installed Microsoft Word MUI (English) 2013 RP301: 7/20/2013 11:28:22 AM - Installed Microsoft Office Professional Plus 2013 RP302: 7/20/2013 11:28:45 AM - PROPLUSR RP303: 7/20/2013 11:40:42 AM - Configured Microsoft Office Professional Plus 2013 Trial RP304: 7/20/2013 11:40:53 AM - PROPLUSR RP305: 7/20/2013 12:20:26 PM - Windows Update RP306: 7/20/2013 2:29:05 PM - Removed Smart Cam Plus RP307: 7/20/2013 2:48:23 PM - Configured Microsoft Office Professional Plus 2013 RP308: 7/20/2013 2:48:33 PM - PROPLUSR RP309: 7/21/2013 1:38:49 PM - Installed iTunes RP310: 7/21/2013 2:03:48 PM - MSI Intel Extreme Tuning Utility RP311: 7/21/2013 3:01:57 PM - Installed Windows Installer Clean Up RP312: 7/21/2013 3:33:40 PM - Installed iTunes . ==== Installed Programs ====================== . AC3Filter 2.5b Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Reader X (10.1.7) Adobe Shockwave Player 12.0 AMD APP SDK Runtime AMD Catalyst Install Manager AMD Fuel AMD VISION Engine Control Center Apple Application Support Apple Software Update Bing Desktop Bonjour Catalina Savings Printer Catalyst Control Center - Branding Catalyst Control Center Graphics Previews Common Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-utility64 CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish CCleaner CrazyTalk Avatar Creator CrazyTalk Cam Suite D3DX10 Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition Dell Printer Software Uninstall DivX Setup DVD Flick 1.3.0.7 e-Sword EasyViewer EZ Label Xpress Lite ffdshow v1.1.4369 [2012-03-03] FrostWire 5.6.2 Google Chrome Google Update Helper Java 7 Update 25 Java Auto Updater Junk Mail filter update LG CyberLink LabelPrint LG CyberLink Power2Go LG CyberLink PowerBackup LG CyberLink YouCam LG ODD Auto Firmware Update LG Power Tools LightScribe System Software Live Update 5 Logitech Flow Scroll 4.0 magicJack Malwarebytes Anti-Malware version 1.75.0.1300 Microsoft .NET Framework 1.1 Microsoft .NET Framework 4 Client Profile Microsoft Access MUI (English) 2013 Microsoft Access Setup Metadata MUI (English) 2013 Microsoft Application Error Reporting Microsoft DCF MUI (English) 2013 Microsoft Excel MUI (English) 2013 Microsoft Groove MUI (English) 2013 Microsoft InfoPath MUI (English) 2013 Microsoft Lync MUI (English) 2013 Microsoft Office 32-bit Components 2013 Microsoft Office OSM MUI (English) 2013 Microsoft Office OSM UX MUI (English) 2013 Microsoft Office Professional Plus 2013 Microsoft Office Proofing (English) 2013 Microsoft Office Proofing Tools 2013 - English Microsoft Office Proofing Tools 2013 - Español Microsoft Office Shared 32-bit MUI (English) 2013 Microsoft Office Shared MUI (English) 2013 Microsoft Office Shared Setup Metadata MUI (English) 2013 Microsoft OneNote MUI (English) 2013 Microsoft Outlook MUI (English) 2013 Microsoft PowerPoint MUI (English) 2013 Microsoft Publisher MUI (English) 2013 Microsoft Security Client Microsoft Security Essentials Microsoft Silverlight Microsoft SkyDrive Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft SQL Server Compact 3.5 SP2 x64 ENU Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 Microsoft Word MUI (English) 2013 Motion Tracking Camera Movie Maker MSVCRT MSVCRT_amd64 MSVCRT110 MSVCRT110_amd64 MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP2 Parser and SDK Octoshape add-in for Adobe Flash Player OLYMPUS ib Optical Disc Doctor Photo Common Photo Gallery PowerISO QuickBooks QuickBooks Simple Start 2010 Free Edition QuickTime Realtek Ethernet Controller Driver Renesas Electronics USB 3.0 Host Controller Driver Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576) Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393) Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628) Security Update for Microsoft Lync 2013 (KB2817465) 64-Bit Edition ShopAtHome.com Helper Spybot - Search & Destroy Super-Charger swMSM Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) Update for Microsoft Access 2013 (KB2760350) 64-Bit Edition Update for Microsoft Excel 2013 (KB2760339) 64-Bit Edition Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition Update for Microsoft Office 2013 (KB2737954) 64-Bit Edition Update for Microsoft Office 2013 (KB2752025) 64-Bit Edition Update for Microsoft Office 2013 (KB2752094) 64-Bit Edition Update for Microsoft Office 2013 (KB2752101) 64-Bit Edition Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition Update for Microsoft Office 2013 (KB2760538) 64-Bit Edition Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition Update for Microsoft Office 2013 (KB2767851) 64-Bit Edition Update for Microsoft Office 2013 (KB2767860) 64-Bit Edition Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition Update for Microsoft Office 2013 (KB2817320) 64-Bit Edition Update for Microsoft Office 2013 (KB2817482) 64-Bit Edition Update for Microsoft Office 2013 (KB2817489) 64-Bit Edition Update for Microsoft Office 2013 (KB2817491) 64-Bit Edition Update for Microsoft Office 2013 (KB2817492) 64-Bit Edition Update for Microsoft OneNote 2013 (KB2817467) 64-Bit Edition Update for Microsoft Outlook 2013 (KB2817468) 64-Bit Edition Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition Update for Microsoft PowerPoint 2013 (KB2810006) 64-Bit Edition Update for Microsoft SkyDrive Pro (KB2817469) 64-Bit Edition Update for Microsoft Visio 2013 (KB2810008) 64-Bit Edition Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition Update for Microsoft Word 2013 (KB2767863) 64-Bit Edition Update for Microsoft Word 2013 (KB2810086) 64-Bit Edition VC80CRTRedist - 8.0.50727.6195 Visual Studio 2008 x64 Redistributables Windows Installer Clean Up Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Mail Windows Live Messenger Windows Live MIME IFilter Windows Live Photo Common Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources Windows Media Player Firefox Plugin WinZip 16.5 Yahoo! Messenger Yahoo! Software Update Yahoo! Toolbar . ==== Event Viewer Messages From Past Week ======== . 7/22/2013 8:36:53 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR3. 7/22/2013 7:41:45 PM, Error: Service Control Manager [7000] - The AODDriver4.2 service failed to start due to the following error: The system cannot find the file specified. 7/21/2013 3:38:21 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 7/21/2013 3:33:16 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 7/20/2013 2:04:26 PM, Error: Service Control Manager [7030] - The DefaultTabSearch service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. 7/20/2013 10:57:00 AM, Error: Service Control Manager [7034] - The FastFreeConverterUpdt service terminated unexpectedly. It has done this 1 time(s). 7/19/2013 8:56:36 PM, Error: Service Control Manager [7030] - The FastFreeConverterUpdt service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. 7/19/2013 8:56:15 PM, Error: Service Control Manager [7034] - The Bing Desktop Update service service terminated unexpectedly. It has done this 1 time(s). 7/19/2013 10:17:52 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} and APPID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} to the user MOREPHEUS\Mark Burton SID (S-1-5-21-1896309071-3642566990-3197574915-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. 7/17/2013 11:36:34 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D3DCB472-7261-43CE-924B-0704BD730D5F} and APPID {D3DCB472-7261-43CE-924B-0704BD730D5F} to the user MOREPHEUS\Mark Burton SID (S-1-5-21-1896309071-3642566990-3197574915-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. 7/17/2013 11:36:34 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {145B4335-FE2A-4927-A040-7C35AD3180EF} and APPID {145B4335-FE2A-4927-A040-7C35AD3180EF} to the user MOREPHEUS\Mark Burton SID (S-1-5-21-1896309071-3642566990-3197574915-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool. 7/15/2013 11:40:36 AM, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. . ==== End Of File ===========================
Post #7
You´re completely right, nothing says to upload them. I´ve corrected my instructions and am currently reviewing the log.
Post #8
Add-/remove programms

Click on start–>control panel.

Vista/7: Open Programs and Features
XP: Open add/remove programs

Search for and remove the following programs

swMSM
ShopAtHome.com Helper


Close the window.



Combofix

Combofix should only be run when adviced by a team member!

Link


Important - Save the file to your desktop!


  • Deactivate any and all of your antivirus programs /spyware scanners - they can prevent CF from doing its work.
  • Run Combofix.exe

When finished, Combofix creates a log file named C:\Combofix.txt. Please post its content in your next reply.

Note: When receiving an error message containing ""Illegal operation attempted on a registry key that has been marked for deletion" simply restart your computer to fix this.
Post #9
I could not find the swMSM to remove it. Also did not want to run the combofix until I let you know that I could not find the swMSM moving forward now that you know..go ahead and run the combofix? Mark
Post #11
here is the combofix log ComboFix 13-07-25.02 - Mark Burton 07/25/2013 19:23:22.1.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.15871.13852 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\Microsoft\Windows\DRM\10B6.tmp c:\programdata\Microsoft\Windows\DRM\10D6.tmp c:\programdata\Microsoft\Windows\DRM\210.tmp c:\programdata\Microsoft\Windows\DRM\221.tmp c:\programdata\Microsoft\Windows\DRM\39D0.tmp c:\programdata\Microsoft\Windows\DRM\39D1.tmp c:\programdata\Microsoft\Windows\DRM\3BD6.tmp c:\programdata\Microsoft\Windows\DRM\3BD7.tmp c:\programdata\Microsoft\Windows\DRM\4ADA.tmp c:\programdata\Microsoft\Windows\DRM\4ADB.tmp c:\programdata\Microsoft\Windows\DRM\5478.tmp c:\programdata\Microsoft\Windows\DRM\5479.tmp c:\programdata\Microsoft\Windows\DRM\7543.tmp c:\programdata\Microsoft\Windows\DRM\7592.tmp c:\programdata\Microsoft\Windows\DRM\E1EE.tmp c:\programdata\Microsoft\Windows\DRM\E24C.tmp c:\programdata\Microsoft\Windows\DRM\E810.tmp c:\programdata\Microsoft\Windows\DRM\E811.tmp c:\users\Mark Burton\AppData\Roaming\inst.exe c:\windows\assembly\tmp\U c:\windows\SysWow64\settings.ini c:\windows\wininit.ini . . ((((((((((((((((((((((((( Files Created from 2013-06-25 to 2013-07-25 ))))))))))))))))))))))))))))))) . . 2013-07-25 23:30 . 2013-07-25 23:30 ——– d—–w- c:\users\QBDataServiceUser21\AppData\Local\temp 2013-07-25 23:30 . 2013-07-25 23:30 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-07-25 22:36 . 2013-07-02 08:34 9460976 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A998017C-1320-4907-8339-29E68946A384}\mpengine.dll 2013-07-24 22:33 . 2013-07-02 08:34 9460976 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-07-21 19:34 . 2013-07-21 19:34 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-07-21 19:02 . 2013-07-21 19:02 3584 —-a-r- c:\users\Mark Burton\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe 2013-07-21 19:02 . 2013-07-21 19:02 ——– d—–w- c:\program files (x86)\Windows Installer Clean Up 2013-07-21 17:39 . 2013-07-21 17:39 ——– d—–w- c:\program files\iTunes 2013-07-21 17:39 . 2013-07-21 17:39 ——– d—–w- c:\program files (x86)\iTunes 2013-07-21 17:39 . 2013-07-21 17:39 ——– d—–w- c:\program files\iPod 2013-07-20 18:21 . 2013-07-20 18:21 ——– d—–w- c:\programdata\Microsoft Toolkit 2013-07-20 18:04 . 2013-07-20 18:04 ——– d—–w- c:\users\Mark Burton\AppData\Local\CRE 2013-07-20 18:04 . 2013-07-20 18:39 ——– d—–w- c:\programdata\Tarma Installer 2013-07-20 18:03 . 2013-07-20 18:36 ——– d—–w- c:\program files (x86)\TornTV.com 2013-07-20 15:34 . 2013-07-20 15:34 ——– d—–w- c:\program files\Common Files\DESIGNER 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\program files\Microsoft.NET 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\program files (x86)\Microsoft SQL Server 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\programdata\regid.1991-06.com.microsoft 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\program files\Microsoft SQL Server 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\windows\PCHEALTH 2013-07-20 15:30 . 2013-07-20 15:30 ——– d—–w- c:\program files\Microsoft Analysis Services 2013-07-20 15:30 . 2013-07-20 15:30 ——– d—–w- c:\program files (x86)\Microsoft Analysis Services 2013-07-20 15:30 . 2013-07-20 15:33 ——– d—–w- c:\program files\Microsoft Office 2013-07-20 15:28 . 2013-07-20 15:28 ——– d—–r- C:\MSOCache 2013-07-20 15:23 . 2013-07-20 15:23 ——– d—–w- c:\program files (x86)\PowerISO 2013-07-20 15:23 . 2011-11-15 03:50 125376 —-a-w- c:\windows\system32\drivers\scdemu.sys 2013-07-20 15:20 . 2013-07-20 15:20 ——– d—–w- c:\users\Mark Burton\AppData\Roaming\DownLite 2013-07-20 13:49 . 2013-07-20 13:49 ——– d—–w- C:\SkyDriveTemp 2013-07-20 02:07 . 2013-07-20 02:07 ——– d—–w- c:\users\Mark Burton\AppData\Roaming\Oracle 2013-07-20 02:05 . 2013-07-20 02:05 96168 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-07-20 00:56 . 2013-07-20 14:57 ——– d—–w- c:\users\Mark Burton\AppData\Local\JollyWallet 2013-07-20 00:56 . 2013-07-20 18:28 ——– d—–w- c:\users\Mark Burton\AppData\Local\SwvUpdater 2013-07-17 22:45 . 2013-07-17 22:45 941720 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{49DE5B10-0784-48C3-A2DA-FCBAE7A15CE3}\gapaengine.dll 2013-07-13 03:13 . 2013-07-13 03:13 ——– d—–w- c:\programdata\Yahoo! Companion 2013-07-13 02:23 . 2013-07-13 02:25 ——– d—–w- c:\users\Mark Burton\AppData\Roaming\eIntaller 2013-07-13 02:17 . 2013-07-13 02:51 ——– d—–w- c:\users\Mark Burton\AppData\Local\VisualBeeExe 2013-07-13 02:16 . 2013-07-13 02:17 ——– d—–w- c:\programdata\VisualBee 2013-07-13 02:16 . 2013-07-13 02:16 ——– d—–w- c:\users\Mark Burton\AppData\Local\emaze 2013-07-13 00:18 . 2013-07-13 02:08 ——– d—–w- c:\users\Mark Burton\AppData\Roaming\Open Download Manager 2013-07-12 04:26 . 2013-07-12 04:26 461464 ——w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe 2013-07-12 04:24 . 2013-07-13 02:02 ——– d—–w- c:\program files\Microsoft Office 15 2013-07-11 04:49 . 2013-07-11 04:51 ——– d—–w- c:\windows\system32\MRT 2013-07-10 22:53 . 2013-07-10 22:53 ——– d—–w- c:\windows\SysWow64\Adobe 2013-07-10 03:32 . 2013-07-10 03:32 ——– d—–w- c:\windows\TempF8C223E2-7E10-FE50-5273-10E2337CCDF5-Signatures 2013-07-07 16:07 . 2013-02-17 05:40 28672 —-a-w- c:\windows\system32\IEUDINIT.EXE 2013-07-04 19:27 . 2013-07-25 18:41 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-07-04 19:27 . 2013-07-25 18:41 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-07-02 13:35 . 2013-07-14 13:00 ——– d—–w- c:\program files\Google 2013-07-02 13:35 . 2013-07-14 13:00 ——– d—–w- c:\program files (x86)\Google 2013-07-01 23:34 . 2013-07-01 23:34 ——– d—–w- c:\program files\Microsoft Synchronization Services 2013-07-01 23:34 . 2013-07-01 23:34 ——– d—–w- c:\program files\Microsoft SQL Server Compact Edition 2013-07-01 23:34 . 2013-07-01 23:34 ——– d—–w- c:\program files (x86)\Microsoft Synchronization Services 2013-06-27 16:25 . 2013-06-27 16:25 9793536 —-a-w- c:\programdata\Microsoft\BingDesktop\Updater\BingDesktop.msi . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-07-20 02:05 . 2012-07-07 17:07 867240 —-a-w- c:\windows\SysWow64\npdeployJava1.dll 2013-07-20 02:05 . 2012-03-21 20:47 789416 —-a-w- c:\windows\SysWow64\deployJava1.dll 2013-06-24 04:57 . 2012-03-21 04:56 78277128 —-a-w- c:\windows\system32\MRT.exe 2013-06-23 23:12 . 2012-06-13 15:38 964552 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll 2013-06-19 01:50 . 2013-06-19 01:50 247216 —-a-w- c:\windows\system32\drivers\MpFilter.sys 2013-06-19 01:50 . 2012-03-21 00:44 139616 —-a-w- c:\windows\system32\drivers\NisDrvWFP.sys 2013-06-05 17:40 . 2012-12-18 06:04 94344 —-a-w- c:\programdata\Microsoft\BingDesktop\Updater\BingDesktopRestarter.exe 2013-05-14 14:13 . 2011-03-28 22:36 22240 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-05-13 05:51 . 2013-06-12 18:55 184320 —-a-w- c:\windows\system32\cryptsvc.dll 2013-05-13 05:51 . 2013-06-12 18:55 1464320 —-a-w- c:\windows\system32\crypt32.dll 2013-05-13 05:51 . 2013-06-12 18:55 139776 —-a-w- c:\windows\system32\cryptnet.dll 2013-05-13 05:50 . 2013-06-12 18:55 52224 —-a-w- c:\windows\system32\certenc.dll 2013-05-13 04:45 . 2013-06-12 18:55 140288 —-a-w- c:\windows\SysWow64\cryptsvc.dll 2013-05-13 04:45 . 2013-06-12 18:55 1160192 —-a-w- c:\windows\SysWow64\crypt32.dll 2013-05-13 04:45 . 2013-06-12 18:55 103936 —-a-w- c:\windows\SysWow64\cryptnet.dll 2013-05-13 03:43 . 2013-06-12 18:55 1192448 —-a-w- c:\windows\system32\certutil.exe 2013-05-13 03:08 . 2013-06-12 18:55 903168 —-a-w- c:\windows\SysWow64\certutil.exe 2013-05-13 03:08 . 2013-06-12 18:55 43008 —-a-w- c:\windows\SysWow64\certenc.dll 2013-05-10 16:05 . 2012-09-03 21:56 971680 —-a-w- c:\windows\system32\deployJava1.dll 2013-05-10 16:05 . 2012-09-03 21:56 1092512 —-a-w- c:\windows\system32\npDeployJava1.dll 2013-05-10 05:49 . 2013-06-12 18:55 30720 —-a-w- c:\windows\system32\cryptdlg.dll 2013-05-10 03:20 . 2013-06-12 18:55 24576 —-a-w- c:\windows\SysWow64\cryptdlg.dll 2013-05-09 01:59 . 2013-05-09 01:59 45056 —-a-r- c:\users\Mark Burton\AppData\Roaming\Microsoft\Installer\{21C069A6-6934-4EF1-92C9-CC6CFF1416A0}\UNINST_Uninstall_C_3092B28107024B6FBDD5F5EA366D9DDB.exe 2013-05-09 01:59 . 2013-05-09 01:59 45056 —-a-r- c:\users\Mark Burton\AppData\Roaming\Microsoft\Installer\{21C069A6-6934-4EF1-92C9-CC6CFF1416A0}\ARPPRODUCTICON.exe 2013-05-08 06:39 . 2013-06-12 18:55 1910632 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-05-08 06:10 . 2011-06-11 05:58 421200 —-a-w- c:\windows\SysWow64\msvcp100.dll 2013-05-02 15:29 . 2010-11-21 03:27 278800 ——w- c:\windows\system32\MpSigStub.exe 2013-05-02 02:43 . 2013-01-06 20:58 82816 —-a-w- c:\users\Mark Burton\AppData\Roaming\pcouffin.sys 2013-05-01 07:59 . 2013-05-01 07:59 94208 —-a-w- c:\windows\SysWow64\QuickTimeVR.qtx 2013-05-01 07:59 . 2013-05-01 07:59 69632 —-a-w- c:\windows\SysWow64\QuickTime.qts . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2013-07-20 00:28 222832 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2013-07-20 00:28 222832 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2013-07-20 00:28 222832 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2013-06-03 11:35 1725128 —-a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2013-06-03 11:35 1725128 —-a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2013-06-03 11:35 1725128 —-a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "cdloader"="c:\users\Mark Burton\AppData\Roaming\mjusbsp\cdloader2.exe" [2012-02-01 50592] "Olympus ib"="c:\program files (x86)\Olympus\ib\olycamdetect.exe" [2012-02-02 96128] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] "SkyDrive"="c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" [2013-07-20 257136] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-12-15 103720] "UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "UCam_Menu"="c:\program files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-02-18 218408] "UpdatePSTShortCut"="c:\program files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2010-04-20 222504] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2009-08-31 996616] "MDS_Menu"="c:\program files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2011-08-30 223104] "Olympus ib"="c:\program files (x86)\Olympus\ib\olycamdetect.exe" [2012-02-02 96128] "BingDesktop"="c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe" [2013-06-27 2249352] "DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-05-20 450560] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-09-28 642728] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952] "Super-Charger"="c:\program files (x86)\MSI\Super-Charger\Super-Charger.exe" [2013-03-08 506864] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888] "PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2011-11-15 312376] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392] "Live Update 5"="c:\program files (x86)\MSI\Live Update 5\BootStartLiveupdate.exe" [2012-01-30 315392] "LGODDFU"="c:\program files (x86)\lg_fwupdate\lgfw.exe" [2012-07-16 27760] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ QuickBooks Update Agent.lnk - c:\program files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2009-9-3 1153824] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R1 ejhzpkjo;ejhzpkjo;c:\windows\system32\drivers\ejhzpkjo.sys;c:\windows\SYSNATIVE\drivers\ejhzpkjo.sys [x] R1 hsldepby;hsldepby;c:\windows\system32\drivers\hsldepby.sys;c:\windows\SYSNATIVE\drivers\hsldepby.sys [x] R1 hxjjvpie;hxjjvpie;c:\windows\system32\drivers\hxjjvpie.sys;c:\windows\SYSNATIVE\drivers\hxjjvpie.sys [x] R1 olnbwuzq;olnbwuzq;c:\windows\system32\drivers\olnbwuzq.sys;c:\windows\SYSNATIVE\drivers\olnbwuzq.sys [x] R2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys [x] R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x] R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x] R3 NTIOLib_1_0_2;NTIOLib_1_0_2;c:\program files (x86)\MSI\BIOS Code Unlocked Technology\NTIOLib_X64.sys;c:\program files (x86)\MSI\BIOS Code Unlocked Technology\NTIOLib_X64.sys [x] R3 NTIOLib_1_0_C;NTIOLib_1_0_C;c:\msi\MSI SUITE\NTIOLib_X64.sys;c:\msi\MSI SUITE\NTIOLib_X64.sys [x] R3 NTIOLib_1_0_D;NTIOLib_1_0_D;c:\msi\MSI SUITE\ControlCenter\NTIOLib_X64.sys;c:\msi\MSI SUITE\ControlCenter\NTIOLib_X64.sys [x] R3 NTIOLib_1_1_S;NTIOLib_1_1_S;c:\msi\MSI SUITE\Super-Charger\NTIOLib_X64.sys;c:\msi\MSI SUITE\Super-Charger\NTIOLib_X64.sys [x] R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 StMp3Recx64;Player Recovery Device Control Driver;c:\windows\system32\Drivers\StMp3Recx64.sys;c:\windows\SYSNATIVE\Drivers\StMp3Recx64.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x] S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x] S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x] S2 dkab_device;dkab_device;c:\windows\system32\DKabcoms.exe;c:\windows\SYSNATIVE\DKabcoms.exe [x] S2 MSI_SuperCharger;MSI_SuperCharger;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe [x] S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [x] S2 SetupARService;SetupARService;c:\program files (x86)\Realtek\Audio\SetupAfterRebootService.exe;c:\program files (x86)\Realtek\Audio\SetupAfterRebootService.exe [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 NTIOLib_1_0_3;NTIOLib_1_0_3;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [x] S3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] S3 ReallusionVirtualAudio;Reallusion Virtual Audio;c:\windows\system32\DRIVERS\RLVrtAuCbl.sys;c:\windows\SYSNATIVE\DRIVERS\RLVrtAuCbl.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 SQ931;Motion Tracking Camera;c:\windows\system32\Drivers\Capt931a.sys;c:\windows\SYSNATIVE\Drivers\Capt931a.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] . . — Other Services/Drivers In Memory — . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2010-08-16 17:43 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Contents of the 'Scheduled Tasks' folder . 2013-07-25 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-04 18:41] . 2013-07-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 13:35] . 2013-07-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 13:35] . 2013-07-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1896309071-3642566990-3197574915-1001Core.job - c:\users\Mark Burton\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-22 00:20] . 2013-07-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1896309071-3642566990-3197574915-1001UA.job - c:\users\Mark Burton\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-22 00:20] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2013-07-20 00:29 261744 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2013-07-20 00:29 261744 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2013-07-20 00:29 261744 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2013-06-03 11:33 2328264 —-a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2013-06-03 11:33 2328264 —-a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2013-06-03 11:33 2328264 —-a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Motor_Tracking_Tool"="c:\windows\Twain_32\Motion Tracking Camera\Motor_Tracking_Tool.exe" [2008-10-31 565248] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-21 1356240] "SQ931STI"="c:\windows\SQ931STI.EXE" [2008-11-13 163840] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={6FF55940-EB62-11E2-A1C7-8C89A56405B6} mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~1\MIF5BA~1\Office15\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\MIF5BA~1\Office15\ONBttnIE.dll/105 TCP: DhcpNameServer = 192.168.1.1 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL . - - - - ORPHANS REMOVED - - - - . BHO-{2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3} - (no file) ShellIconOverlayIdentifiers-{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} - (no file) Wow6432Node-HKLM-Run-ShopAtHomeWatcher - c:\users\Mark Burton\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exe HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start WebBrowser-{1FD54AB6-705A-47AA-A59D-6CB0D18320D8} - (no file) ShellIconOverlayIdentifiers-{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} - (no file) . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0150C7ED3493FD117909CAED558D5939\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="plutil.exe" "ComponentVersion"="1.830.11.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\01645EC155160E11B8C54616FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AirTrafficHost.dll" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\02211845F2D3FD11D8299996658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncPlanObserver_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0260FF25A69ED4544860AEB96BFE79F3\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="MSHY2_EN.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10003" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0442009C5FC112947959B7D6F610F7CA\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreFoundation.dll" "ComponentVersion"="1.630.18.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\06190399AFA6DD11EABFDFA7558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="usbaaplrc.dll" "ComponentVersion"="1.64.0.0" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\063A857434EDED11A893800002C0A966\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="iSyncConduit.dll" "ComponentVersion"="17.15.0.137" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\06EEB549F2D3FD11389D23B6658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="upgradedb_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\06F66C67F2D3FD11B95BF2A6658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServer_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\077ACF0A73A5FD116A225F120E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.IE.client.exe" "ComponentVersion"="17.64.0.54" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\08A47672A59119E4A84570973D211F4E\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreGraphics.dll" "ComponentVersion"="1.88.0.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\08D5207A83A5FD1159157F420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsMail.client.exe" "ComponentVersion"="17.55.0.184" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\09069C1883A5FD116B7809420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Outlook.client_main.dll" "ComponentVersion"="17.98.0.63" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0B2AA52E389EE5C40A8A8FCCD9FE6D18\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.IE_com.apple.IE.isRegistered.dll" "ComponentVersion"="17.64.0.54" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0D1214EE2C5EED119B90A15F558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncPlanObserver.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0EF11B6F6AB50E1198ABBCA9FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ATH_main.dll" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1508B1D599F5544488D93C0B55C7D592\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="JavaScriptCore.dll" "ComponentVersion"="7536.30.0.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1A6FF756E713D09409D722481189E968\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SQLite3.dll" "ComponentVersion"="3.7.5.111" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1D12EB7A7B76B5B40B49B4B995D48B27\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Contacts.syncschema_Contents_Windows_Contacts.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\20C413682EA121B4F863279E82C27652\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="netaapl64.sys" "ComponentVersion"="1.8.4.1" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\25D696ADF35C1E11C9964420268807B9\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreText.dll" "ComponentVersion"="220.10.14.5" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\26ED0C1E7877B3148A5D3F68BC61F2C9\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.WindowsMail_com.apple.WindowsMail.isRegister ed.dll" "ComponentVersion"="17.55.0.184" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\27658AF509F6E7B47B822F5ABFF100F3\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="icuuc40.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2AD9C85683A5FD113A9144420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.IE.client_main.dll" "ComponentVersion"="17.64.0.54" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2BA7856341551984FADE6553A14D0278\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="CSS7CM.DUB_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10000" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2DE3D1D08D236A846AE7429F35C9D636\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServicesUI.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2F63FF5983A5FD11DA58FC420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsContacts.client.exe" "ComponentVersion"="17.17.0.106" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2FA601FC3EDD3D64EA868B1CF166AE0D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="defaults.exe" "ComponentVersion"="1.830.11.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\323E574B85F26FD4286C33D8DC33F556\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_fi.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\32A7D634EB632D11CABB00087CCFBB48\30F0FF67707B23345B1D5AC6383015E4] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Global_VC_ATLUnicode_f1.7EBEDD68_AA66_11D2_B980_006097C4DE24" "ComponentVersion"="3.0.8449.0" "ProductVersion"="11.0.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\32CB09AEE028F1448A991ABCBA7D14A3\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreAudioToolbox.dll" "ComponentVersion"="7.9.8.3" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\366F1942F57318C478179BF2D52C2E41\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="syncli.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\39A542412113E0C4CB44E87F58816A75\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_de.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3B3AD5360ACCF3D44898988A2A7DD11C\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Mingler.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3E34BB9E45879D14B83A0FD7C9286DCD\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_fr.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\41019FDFF5361864CBD59AE9977DEC9B\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Foundation.dll" "ComponentVersion"="1.830.11.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\43437BEB7A97E384D872D0FC371829FA\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_sv.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\44B339859ED2215409EFA7F1F1709820\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="pthreadVC2.dll" "ComponentVersion"="2.7.0.11200" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\44BDC17A0EF6F334694F8CB5B64E8A0D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileBackup.exe" "ComponentVersion"="17.1140.5.5" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\45FF62E9258FBD11E8FFF6B6558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="usbaapl64.sys" "ComponentVersion"="1.64.0.0" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\47F09A8168A110F48A77712A12CFA135\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="QuartzCore.dll" "ComponentVersion"="1.0.227.39" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\4CE506E3FDE00E11F9355F810E7D0258\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libcache.dll" "ComponentVersion"="1.0.0.39" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\4D84A6DB0FAC9004B93B4AAAC34A8B93\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="upgradedb.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\50498A81CF749BA4FB7298B9FBB53338\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="MSSP3EN.LEX_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10004" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5343CC5D1391518488A17F0D1D0EB26D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_es.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5546A6980100BD140B9495EB0AD3783A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_pl.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5772377DF9B329E4699C642B450B67DF\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MDCrashReportTool.exe" "ComponentVersion"="17.818.1.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5B84A08FF6FA1A847837BA2F5D4404AB\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="QTMovieWin.dll" "ComponentVersion"="7536.30.2.1" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\602823D683A5FD1188DD06420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileSync.exe" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\660DA0FA83A5FD11DB9D70520E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.google.ContactSync.client.exe" "ComponentVersion"="17.79.0.149" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\66EF9FE5AB773F34A982871D567E9FE8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_nl.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\69413F169B198734FA40BC8B73511DB0\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CFNetwork.dll" "ComponentVersion"="1.520.3.4" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\69889C7D121878D49878F6B1029DEE02\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUIHandler.exe" "ComponentVersion"="17.17.16.138" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6A4CD52AFD64C604DB85C56749300678\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libxslt.dll" "ComponentVersion"="1.0.9.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6B66BCB6358FBD117A3280D6558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceService.exe" "ComponentVersion"="17.96.2.2" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6B7079AA83A5FD11CACEFF420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsMail.client_main.dll" "ComponentVersion"="17.55.0.184" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6D8DE14FE2D3FD11EB8C9B76658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Mingler_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6EAEE8A0BCFDED11D9EFDFB9658D5939\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleVersions.dll" "ComponentVersion"="1.0.2.1" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\721237A2FF9593642A463D2F29C8E09D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ASL.dll" "ComponentVersion"="36.0.0.15" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\000021599B0090400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.42" "ProductVersion"="12.0.6015" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\8E58E8E6B4EC5FF4197F4099C9F9EAA6] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.42" "ProductVersion"="8.0.50727" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\DA93DA4DE19033D4BBB2956FCF8BDA3C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.762" "ProductVersion"="3.5.8080" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7B12A9825885F4541A0BB3F28606CB91\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libeay32.dll" "ComponentVersion"="0.9.9.1" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7B20D45AB4C6E38429E9B02D0AA288F5\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WebKit.dll" "ComponentVersion"="7536.30.1.5" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7B867AFE8E0CE4443B62E4894108A192\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_ko.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7CAE5AB828A8A8B42B1B6FFFBC8DF632\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.Outlook_com.apple.Outlook.isRegistered.dll" "ComponentVersion"="17.98.0.63" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7E988BA0BA1896748BDE85AC83EABDB2\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libtidy.dll" "ComponentVersion"="15.8.0.15" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7F473B131EF40A9419CB6A8E3B70FFE4\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="VideoToolbox.dll" "ComponentVersion"="1.926.89.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\82D7C853F2D3FD11A8192E86658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="syncli_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\82E29318ED5203248871DE35DB52B3DE\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libxml2.dll" "ComponentVersion"="2.1.13.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\834DEEC19715FD114A2A8175FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="OutlookChangeNotifierAddIn_x64.dll" "ComponentVersion"="17.28.0.56" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\86F2413B83A5FD114971C1520E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.google.ContactSync.client_main.dll" "ComponentVersion"="17.79.0.149" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\87D2B1D3388C32141ADA021144952108\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libicuuc.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\88B4CAD983A5FD11095C3E420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsContacts.client_main.dll" "ComponentVersion"="17.17.0.106" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\896ECD5883A5FD1139FC79420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Safari.client.exe" "ComponentVersion"="17.52.0.51" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\89DC76E804F0F0E4AB06A8B8AE0EA4E6\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Calendars.syncschema_Contents_Windows_Calendars.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8D721A09F23F1AD4E84440DB0809CD6E\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_ru.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8D7EB7C0DEDB6B344A0760EB3FCAC30A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceService_main.dll" "ComponentVersion"="17.96.2.2" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\93E3AE938F8E06243BBA761A9C1FA1B4\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_en.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.216" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\948589E96C194AA4E8702261F334488D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WebKit2WebProcess.exe" "ComponentVersion"="7536.30.1.5" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9550FBC23CA39824B86929DB95B088B6\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_zh_CN.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9724285A43747D444A72C8ACE50478D8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_da.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\97E20904756EEF54396E52528A1A52D2\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreVideo.dll" "ComponentVersion"="75.7.0.9" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9C8C374D2C76BF146B94DB7D6F7301FF\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Bookmarks.syncschema_Contents_Windows_Bookmarks.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9F0AC208D500BF0488729FE172C1FFA1\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceHelper.exe" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A1A8A32486B75CC4C85CC710DD5E7A72\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libicuin.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A42E1412F2D3FD1168F3D886658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncDiagnostics_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A454EDB764820C34F97622B781ECB0CB\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUIHandlerDLL.dll" "ComponentVersion"="17.17.16.138" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A5E7ED8ECFD0E41419A1B32B70429AD6\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="MSTHES3.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10006" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A67A6D3E2C5EED112A041F4F558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncDiagnostics.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A7FDBED877967A2468857578F73E3134\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Notes.syncschema_Contents_Windows_Notes.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AB55ACF7F6F45134C8F0BC9E8097492E\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.dll" "ComponentVersion"="17.1.7.216" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AD08D1C356282814AA6143D4917A8AF4\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AD2EAA541A27A5243A96EEBF3D1E2976\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.Safari_com.apple.Safari.isRegistered.dll" "ComponentVersion"="17.52.0.51" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AF0C9133D9B0B0C419E9E7A456D5E5A9\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleSyncMapiInterface.dll" "ComponentVersion"="17.30.0.162" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AFB6B7ADABAC777488413E5C8AF4E776\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileBackup_main.dll" "ComponentVersion"="17.1140.5.5" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\BB2416F70FCE12244BB77F711802D828\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.WindowsContacts_com.apple.WindowsContacts.is Registered.dll" "ComponentVersion"="17.17.0.106" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C08050A185399F74B936F60CA8865A9B\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="zlib1.dll" "ComponentVersion"="1.2.5.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C144BF1783A5FD113B47E6420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileSync_main.dll" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1D00B095802E1E43B588BAC99360C2D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_ja.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1E3C31072766EA4D99F098091658B71\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libcurl.dll" "ComponentVersion"="10.2.0.64" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1F0C6C783A5FD11C98D28420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Outlook.client.exe" "ComponentVersion"="17.98.0.63" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C43B695C15EFB2F4F816EC14C28490D2\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libdispatch.dll" "ComponentVersion"="1.109.8.19" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C4694819C6F40E11890A8DADED7D0258\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="YSCrashDump.dll" "ComponentVersion"="17.0.0.111" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C474A052ABA0CA84791FB8377A9E7BE7\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_pt_PT.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C5AAD464C516AF84BB8BD8FA5BDC808E\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ssleay32.dll" "ComponentVersion"="0.9.9.1" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C6BA0416C284FD110987905E558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUIHandler_main.dll" "ComponentVersion"="17.17.16.138" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C8F2C2DE6AB50E11CADCFBA9FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ATH.exe" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C99197C7FDCAF35498A0E5DD033B7A55\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="CSS7DATA.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10001" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CAAE37BC716B0AF48AD7557FB8D3D101\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="icudt46.dll" "ComponentVersion"="4.6.1.1200" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CAF15B86426BFD1159835BD2FD7D0258\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AVFoundationCF.dll" "ComponentVersion"="1.99.10.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CB11C92F6AB50E11E80A1CA9FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ATH.dll" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CDC50ED3E72D6864AB98E7D6C95EBE8F\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WdfCoInstaller01009.dll" "ComponentVersion"="1.9.7600.16385" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\D12416D34952D3F4D99393BE0C43B66C\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.google.ContactSync_com.google.ContactSync.isRegist ered.dll" "ComponentVersion"="17.79.0.149" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\036E9A606ABD29D4D97E2A53AA46697C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="20.0.4001" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.6195" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\3e43b73803c7c394f8a6b2f0402e19c2] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="8.0.59193" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\5104B339816461748A822598CF3061F5] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.6195" "ProductVersion"="1.2.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\D30CF9A3586C138449FCE4FD3D474979] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.762" "ProductVersion"="3.5.8080" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\E936B507FAAF7D04DA854C5423C1C7F3] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="1.18.18" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA460AABE1441E5458CCC7A09C955DCE\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_zh_TW.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DAF6CE2EF0C2A1747B32AA15F2576672\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="objc.dll" "ComponentVersion"="1.435.16.14" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DDDD62D6C744941428F1413D339D0025\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MDCrashReportTool_main.dll" "ComponentVersion"="17.818.1.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E13513ADFF97AE44E841064EF969B218\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WebKitQuartzCoreAdditions.dll" "ComponentVersion"="7536.30.0.1" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E32AAFCB748473643BF3926FE1375CA4\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="OutlookChangeNotifierAddIn.dll" "ComponentVersion"="17.28.0.57" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E4217812104BD5544B35E173578DE3CA\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceHelper_main.dll" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E49C80BE328FBD1118FA34C6658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="iTunesMobileDevice.dll" "ComponentVersion"="555.43.0.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\EB08E51B133B59147842268CB042547A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="DeviceLink.dll" "ComponentVersion"="17.261.0.61" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\EBE70AE2B9482B84595D73D47D3869F8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_nb.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ED8C7C0983A5FD11EA360C420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Safari.client_main.dll" "ComponentVersion"="17.52.0.51" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F0BC6D45D245DF34CB0FADB76B918841\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MediaToolbox.dll" "ComponentVersion"="1.926.89.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F1C8A60BD8BBA3042B021321D3DF044C\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="distnoted.exe" "ComponentVersion"="1.630.18.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F2112C565E6C26743974BFF0DDB75DEC\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="YSUtilities.dll" "ComponentVersion"="17.0.0.111" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F28390312066865458B41FD8A948BF10\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="APSDaemon_main.dll" "ComponentVersion"="2.2.9.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F48FE33246B48F54287714D4E3D7418C\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="NL7MODEL.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10007" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F5566E1AEB04480428BEB5BECAFFD004\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="APSDaemon.exe" "ComponentVersion"="2.2.9.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F615E2FBCAB327849B496652CB20E94D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ApplePushService.dll" "ComponentVersion"="2.2.9.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F63E2ACFAE0214F42BB99DB8239E2E2E\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="icuin40.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F71DE57A01E128A4C85A9E72018D301A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleSyncMapiInterfaceHelper_x64.exe" "ComponentVersion"="17.30.0.162" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F7DBDF288415D1D4083AD692DC7902F8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MobileDevice.dll" "ComponentVersion"="555.43.0.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F7E7A7F951EA64E418D80E1DA87A6975\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServer.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\FDD2B49289C9FCE409D2464D527F0F2D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_it.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\FEA1C4DF5301F0245B51F4BEE29F33A3\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreMedia.dll" "ComponentVersion"="1.926.89.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-07-25 19:34:09 ComboFix-quarantined-files.txt 2013-07-25 23:34 . Pre-Run: 1,817,767,051,264 bytes free Post-Run: 1,817,856,610,304 bytes free . - - End Of File - - 580B364BA18FBCD55B10CCBB21F19F0E A36C5E4F47E84449FF07ED3517B43A31
Post #12
Combofix scripting

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Download the attached CFScript.txt and save it to the location where Combofix is.


[external image: Posted Image]


Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

Attachments:

Post #13
Here is the log ComboFix 13-07-25.02 - Mark Burton 07/26/2013 18:41:09.2.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.15871.14049 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe Command switches used :: c:\users\Mark Burton\Desktop\CFScript.txt AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\windows\system32\drivers\ejhzpkjo.sys" "c:\windows\system32\drivers\hsldepby.sys" "c:\windows\system32\drivers\hxjjvpie.sys" "c:\windows\system32\drivers\olnbwuzq.sys" "c:\windows\system32\drivers\ejhzpkjo.sys" "c:\windows\system32\drivers\hsldepby.sys" "c:\windows\system32\drivers\hxjjvpie.sys" "c:\windows\system32\drivers\olnbwuzq.sys" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\TornTV.com c:\program files (x86)\TornTV.com\Torrents\download.php c:\programdata\Tarma Installer c:\users\Mark Burton\AppData\Local\CRE c:\users\Mark Burton\AppData\Local\CRE\njljkdinboobkmkihgcohanchjnjpgjk.crx c:\users\Mark Burton\AppData\Local\JollyWallet c:\users\Mark Burton\AppData\Local\SwvUpdater c:\users\Mark Burton\AppData\Local\SwvUpdater\status.cfg c:\users\Mark Burton\AppData\Roaming\eIntaller c:\users\Mark Burton\AppData\Roaming\eIntaller\3C439912686548838A61B058F72E78D9\Config.ini c:\users\Mark Burton\AppData\Roaming\eIntaller\3C439912686548838A61B058F72E78D9\eXQ.exe c:\users\Mark Burton\AppData\Roaming\eIntaller\7A414119B0E74cbcAB5BFFD7267A5A75\Config.ini c:\users\Mark Burton\AppData\Roaming\eIntaller\7A414119B0E74cbcAB5BFFD7267A5A75\eXQ.exe . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . ——-\Service_ejhzpkjo ——-\Service_hsldepby ——-\Service_hxjjvpie ——-\Service_olnbwuzq . . ((((((((((((((((((((((((( Files Created from 2013-06-26 to 2013-07-26 ))))))))))))))))))))))))))))))) . . 2013-07-26 22:49 . 2013-07-26 22:49 ——– d—–w- c:\users\QBDataServiceUser21\AppData\Local\temp 2013-07-26 22:49 . 2013-07-26 22:49 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-07-25 23:47 . 2013-07-02 08:34 9460976 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{60DC40B9-B47F-4BEA-AEBF-B402CB4B46A4}\mpengine.dll 2013-07-24 22:33 . 2013-07-02 08:34 9460976 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-07-21 19:34 . 2013-07-21 19:34 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-07-21 19:02 . 2013-07-21 19:02 3584 —-a-r- c:\users\Mark Burton\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe 2013-07-21 19:02 . 2013-07-21 19:02 ——– d—–w- c:\program files (x86)\Windows Installer Clean Up 2013-07-21 17:39 . 2013-07-21 17:39 ——– d—–w- c:\program files\iTunes 2013-07-21 17:39 . 2013-07-21 17:39 ——– d—–w- c:\program files (x86)\iTunes 2013-07-21 17:39 . 2013-07-21 17:39 ——– d—–w- c:\program files\iPod 2013-07-20 18:21 . 2013-07-20 18:21 ——– d—–w- c:\programdata\Microsoft Toolkit 2013-07-20 15:34 . 2013-07-20 15:34 ——– d—–w- c:\program files\Common Files\DESIGNER 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\program files\Microsoft.NET 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\program files (x86)\Microsoft SQL Server 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\programdata\regid.1991-06.com.microsoft 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\program files\Microsoft SQL Server 2013-07-20 15:33 . 2013-07-20 15:33 ——– d—–w- c:\windows\PCHEALTH 2013-07-20 15:30 . 2013-07-20 15:30 ——– d—–w- c:\program files\Microsoft Analysis Services 2013-07-20 15:30 . 2013-07-20 15:30 ——– d—–w- c:\program files (x86)\Microsoft Analysis Services 2013-07-20 15:30 . 2013-07-20 15:33 ——– d—–w- c:\program files\Microsoft Office 2013-07-20 15:28 . 2013-07-20 15:28 ——– d—–r- C:\MSOCache 2013-07-20 15:23 . 2013-07-20 15:23 ——– d—–w- c:\program files (x86)\PowerISO 2013-07-20 15:23 . 2011-11-15 03:50 125376 —-a-w- c:\windows\system32\drivers\scdemu.sys 2013-07-20 15:20 . 2013-07-20 15:20 ——– d—–w- c:\users\Mark Burton\AppData\Roaming\DownLite 2013-07-20 13:49 . 2013-07-20 13:49 ——– d—–w- C:\SkyDriveTemp 2013-07-20 02:07 . 2013-07-20 02:07 ——– d—–w- c:\users\Mark Burton\AppData\Roaming\Oracle 2013-07-20 02:05 . 2013-07-20 02:05 96168 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-07-17 22:45 . 2013-07-17 22:45 941720 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{49DE5B10-0784-48C3-A2DA-FCBAE7A15CE3}\gapaengine.dll 2013-07-13 03:13 . 2013-07-13 03:13 ——– d—–w- c:\programdata\Yahoo! Companion 2013-07-13 02:17 . 2013-07-13 02:51 ——– d—–w- c:\users\Mark Burton\AppData\Local\VisualBeeExe 2013-07-13 02:16 . 2013-07-13 02:17 ——– d—–w- c:\programdata\VisualBee 2013-07-13 02:16 . 2013-07-13 02:16 ——– d—–w- c:\users\Mark Burton\AppData\Local\emaze 2013-07-13 00:18 . 2013-07-13 02:08 ——– d—–w- c:\users\Mark Burton\AppData\Roaming\Open Download Manager 2013-07-12 04:26 . 2013-07-12 04:26 461464 ——w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe 2013-07-12 04:24 . 2013-07-13 02:02 ——– d—–w- c:\program files\Microsoft Office 15 2013-07-11 04:49 . 2013-07-11 04:51 ——– d—–w- c:\windows\system32\MRT 2013-07-10 22:53 . 2013-07-10 22:53 ——– d—–w- c:\windows\SysWow64\Adobe 2013-07-10 03:32 . 2013-07-10 03:32 ——– d—–w- c:\windows\TempF8C223E2-7E10-FE50-5273-10E2337CCDF5-Signatures 2013-07-07 16:07 . 2013-02-17 05:40 28672 —-a-w- c:\windows\system32\IEUDINIT.EXE 2013-07-04 19:27 . 2013-07-26 15:57 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-07-04 19:27 . 2013-07-26 15:57 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-07-02 13:35 . 2013-07-14 13:00 ——– d—–w- c:\program files\Google 2013-07-02 13:35 . 2013-07-14 13:00 ——– d—–w- c:\program files (x86)\Google 2013-07-01 23:34 . 2013-07-01 23:34 ——– d—–w- c:\program files\Microsoft Synchronization Services 2013-07-01 23:34 . 2013-07-01 23:34 ——– d—–w- c:\program files\Microsoft SQL Server Compact Edition 2013-07-01 23:34 . 2013-07-01 23:34 ——– d—–w- c:\program files (x86)\Microsoft Synchronization Services 2013-06-27 16:25 . 2013-06-27 16:25 9793536 —-a-w- c:\programdata\Microsoft\BingDesktop\Updater\BingDesktop.msi . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-07-20 02:05 . 2012-07-07 17:07 867240 —-a-w- c:\windows\SysWow64\npdeployJava1.dll 2013-07-20 02:05 . 2012-03-21 20:47 789416 —-a-w- c:\windows\SysWow64\deployJava1.dll 2013-06-24 04:57 . 2012-03-21 04:56 78277128 —-a-w- c:\windows\system32\MRT.exe 2013-06-23 23:12 . 2012-06-13 15:38 964552 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll 2013-06-19 01:50 . 2013-06-19 01:50 247216 —-a-w- c:\windows\system32\drivers\MpFilter.sys 2013-06-19 01:50 . 2012-03-21 00:44 139616 —-a-w- c:\windows\system32\drivers\NisDrvWFP.sys 2013-06-05 17:40 . 2012-12-18 06:04 94344 —-a-w- c:\programdata\Microsoft\BingDesktop\Updater\BingDesktopRestarter.exe 2013-05-14 14:13 . 2011-03-28 22:36 22240 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-05-13 05:51 . 2013-06-12 18:55 184320 —-a-w- c:\windows\system32\cryptsvc.dll 2013-05-13 05:51 . 2013-06-12 18:55 1464320 —-a-w- c:\windows\system32\crypt32.dll 2013-05-13 05:51 . 2013-06-12 18:55 139776 —-a-w- c:\windows\system32\cryptnet.dll 2013-05-13 05:50 . 2013-06-12 18:55 52224 —-a-w- c:\windows\system32\certenc.dll 2013-05-13 04:45 . 2013-06-12 18:55 140288 —-a-w- c:\windows\SysWow64\cryptsvc.dll 2013-05-13 04:45 . 2013-06-12 18:55 1160192 —-a-w- c:\windows\SysWow64\crypt32.dll 2013-05-13 04:45 . 2013-06-12 18:55 103936 —-a-w- c:\windows\SysWow64\cryptnet.dll 2013-05-13 03:43 . 2013-06-12 18:55 1192448 —-a-w- c:\windows\system32\certutil.exe 2013-05-13 03:08 . 2013-06-12 18:55 903168 —-a-w- c:\windows\SysWow64\certutil.exe 2013-05-13 03:08 . 2013-06-12 18:55 43008 —-a-w- c:\windows\SysWow64\certenc.dll 2013-05-10 16:05 . 2012-09-03 21:56 971680 —-a-w- c:\windows\system32\deployJava1.dll 2013-05-10 16:05 . 2012-09-03 21:56 1092512 —-a-w- c:\windows\system32\npDeployJava1.dll 2013-05-10 05:49 . 2013-06-12 18:55 30720 —-a-w- c:\windows\system32\cryptdlg.dll 2013-05-10 03:20 . 2013-06-12 18:55 24576 —-a-w- c:\windows\SysWow64\cryptdlg.dll 2013-05-09 01:59 . 2013-05-09 01:59 45056 —-a-r- c:\users\Mark Burton\AppData\Roaming\Microsoft\Installer\{21C069A6-6934-4EF1-92C9-CC6CFF1416A0}\UNINST_Uninstall_C_3092B28107024B6FBDD5F5EA366D9DDB.exe 2013-05-09 01:59 . 2013-05-09 01:59 45056 —-a-r- c:\users\Mark Burton\AppData\Roaming\Microsoft\Installer\{21C069A6-6934-4EF1-92C9-CC6CFF1416A0}\ARPPRODUCTICON.exe 2013-05-08 06:39 . 2013-06-12 18:55 1910632 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-05-08 06:10 . 2011-06-11 05:58 421200 —-a-w- c:\windows\SysWow64\msvcp100.dll 2013-05-02 15:29 . 2010-11-21 03:27 278800 ——w- c:\windows\system32\MpSigStub.exe 2013-05-02 02:43 . 2013-01-06 20:58 82816 —-a-w- c:\users\Mark Burton\AppData\Roaming\pcouffin.sys 2013-05-01 07:59 . 2013-05-01 07:59 94208 —-a-w- c:\windows\SysWow64\QuickTimeVR.qtx 2013-05-01 07:59 . 2013-05-01 07:59 69632 —-a-w- c:\windows\SysWow64\QuickTime.qts . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2013-07-20 00:28 222832 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2013-07-20 00:28 222832 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2013-07-20 00:28 222832 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2013-06-03 11:35 1725128 —-a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2013-06-03 11:35 1725128 —-a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2013-06-03 11:35 1725128 —-a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "cdloader"="c:\users\Mark Burton\AppData\Roaming\mjusbsp\cdloader2.exe" [2012-02-01 50592] "Olympus ib"="c:\program files (x86)\Olympus\ib\olycamdetect.exe" [2012-02-02 96128] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] "SkyDrive"="c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" [2013-07-20 257136] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2009-12-15 103720] "UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504] "UCam_Menu"="c:\program files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-02-18 218408] "UpdatePSTShortCut"="c:\program files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2010-04-20 222504] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2009-08-31 996616] "MDS_Menu"="c:\program files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2011-08-30 223104] "Olympus ib"="c:\program files (x86)\Olympus\ib\olycamdetect.exe" [2012-02-02 96128] "BingDesktop"="c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe" [2013-06-27 2249352] "DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-05-20 450560] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-09-28 642728] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952] "Super-Charger"="c:\program files (x86)\MSI\Super-Charger\Super-Charger.exe" [2013-03-08 506864] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888] "PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2011-11-15 312376] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392] "Live Update 5"="c:\program files (x86)\MSI\Live Update 5\BootStartLiveupdate.exe" [2012-01-30 315392] "LGODDFU"="c:\program files (x86)\lg_fwupdate\lgfw.exe" [2012-07-16 27760] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ QuickBooks Update Agent.lnk - c:\program files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2009-9-3 1153824] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys [x] R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x] R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x] R3 NTIOLib_1_0_2;NTIOLib_1_0_2;c:\program files (x86)\MSI\BIOS Code Unlocked Technology\NTIOLib_X64.sys;c:\program files (x86)\MSI\BIOS Code Unlocked Technology\NTIOLib_X64.sys [x] R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x] R3 NTIOLib_1_0_C;NTIOLib_1_0_C;c:\msi\MSI SUITE\NTIOLib_X64.sys;c:\msi\MSI SUITE\NTIOLib_X64.sys [x] R3 NTIOLib_1_0_D;NTIOLib_1_0_D;c:\msi\MSI SUITE\ControlCenter\NTIOLib_X64.sys;c:\msi\MSI SUITE\ControlCenter\NTIOLib_X64.sys [x] R3 NTIOLib_1_1_S;NTIOLib_1_1_S;c:\msi\MSI SUITE\Super-Charger\NTIOLib_X64.sys;c:\msi\MSI SUITE\Super-Charger\NTIOLib_X64.sys [x] R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 StMp3Recx64;Player Recovery Device Control Driver;c:\windows\system32\Drivers\StMp3Recx64.sys;c:\windows\SYSNATIVE\Drivers\StMp3Recx64.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x] S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x] S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x] S2 dkab_device;dkab_device;c:\windows\system32\DKabcoms.exe;c:\windows\SYSNATIVE\DKabcoms.exe [x] S2 MSI_SuperCharger;MSI_SuperCharger;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe;c:\program files (x86)\MSI\Super-Charger\ChargeService.exe [x] S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [x] S2 SetupARService;SetupARService;c:\program files (x86)\Realtek\Audio\SetupAfterRebootService.exe;c:\program files (x86)\Realtek\Audio\SetupAfterRebootService.exe [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 NTIOLib_1_0_3;NTIOLib_1_0_3;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys;c:\program files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] S3 ReallusionVirtualAudio;Reallusion Virtual Audio;c:\windows\system32\DRIVERS\RLVrtAuCbl.sys;c:\windows\SYSNATIVE\DRIVERS\RLVrtAuCbl.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 SQ931;Motion Tracking Camera;c:\windows\system32\Drivers\Capt931a.sys;c:\windows\SYSNATIVE\Drivers\Capt931a.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] . . — Other Services/Drivers In Memory — . *NewlyCreated* - NTIOLIB_1_0_3 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2010-08-16 17:43 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Contents of the 'Scheduled Tasks' folder . 2013-07-26 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-04 15:57] . 2013-07-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 13:35] . 2013-07-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 13:35] . 2013-07-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1896309071-3642566990-3197574915-1001Core.job - c:\users\Mark Burton\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-22 00:20] . 2013-07-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1896309071-3642566990-3197574915-1001UA.job - c:\users\Mark Burton\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-22 00:20] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2013-07-20 00:29 261744 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2013-07-20 00:29 261744 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2013-07-20 00:29 261744 —-a-w- c:\users\Mark Burton\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2013-06-03 11:33 2328264 —-a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2013-06-03 11:33 2328264 —-a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2013-06-03 11:33 2328264 —-a-w- c:\progra~1\MIF5BA~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Motor_Tracking_Tool"="c:\windows\Twain_32\Motion Tracking Camera\Motor_Tracking_Tool.exe" [2008-10-31 565248] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-21 1356240] "SQ931STI"="c:\windows\SQ931STI.EXE" [2008-11-13 163840] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={6FF55940-EB62-11E2-A1C7-8C89A56405B6} mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~1\MIF5BA~1\Office15\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\MIF5BA~1\Office15\ONBttnIE.dll/105 TCP: DhcpNameServer = 192.168.1.1 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL . - - - - ORPHANS REMOVED - - - - . BHO-{2C4BA31C-0C15-11E2-90C7-9BFCBEB168B3} - (no file) WebBrowser-{1FD54AB6-705A-47AA-A59D-6CB0D18320D8} - (no file) ShellIconOverlayIdentifiers-{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d} - (no file) . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0150C7ED3493FD117909CAED558D5939\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="plutil.exe" "ComponentVersion"="1.830.11.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\01645EC155160E11B8C54616FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AirTrafficHost.dll" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\02211845F2D3FD11D8299996658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncPlanObserver_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0260FF25A69ED4544860AEB96BFE79F3\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="MSHY2_EN.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10003" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0442009C5FC112947959B7D6F610F7CA\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreFoundation.dll" "ComponentVersion"="1.630.18.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\06190399AFA6DD11EABFDFA7558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="usbaaplrc.dll" "ComponentVersion"="1.64.0.0" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\063A857434EDED11A893800002C0A966\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="iSyncConduit.dll" "ComponentVersion"="17.15.0.137" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\06EEB549F2D3FD11389D23B6658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="upgradedb_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\06F66C67F2D3FD11B95BF2A6658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServer_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\077ACF0A73A5FD116A225F120E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.IE.client.exe" "ComponentVersion"="17.64.0.54" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\08A47672A59119E4A84570973D211F4E\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreGraphics.dll" "ComponentVersion"="1.88.0.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\08D5207A83A5FD1159157F420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsMail.client.exe" "ComponentVersion"="17.55.0.184" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\09069C1883A5FD116B7809420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Outlook.client_main.dll" "ComponentVersion"="17.98.0.63" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0B2AA52E389EE5C40A8A8FCCD9FE6D18\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.IE_com.apple.IE.isRegistered.dll" "ComponentVersion"="17.64.0.54" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0D1214EE2C5EED119B90A15F558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncPlanObserver.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\0EF11B6F6AB50E1198ABBCA9FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ATH_main.dll" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1508B1D599F5544488D93C0B55C7D592\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="JavaScriptCore.dll" "ComponentVersion"="7536.30.0.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1A6FF756E713D09409D722481189E968\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SQLite3.dll" "ComponentVersion"="3.7.5.111" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\1D12EB7A7B76B5B40B49B4B995D48B27\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Contacts.syncschema_Contents_Windows_Contacts.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\20C413682EA121B4F863279E82C27652\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="netaapl64.sys" "ComponentVersion"="1.8.4.1" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\25D696ADF35C1E11C9964420268807B9\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreText.dll" "ComponentVersion"="220.10.14.5" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\26ED0C1E7877B3148A5D3F68BC61F2C9\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.WindowsMail_com.apple.WindowsMail.isRegister ed.dll" "ComponentVersion"="17.55.0.184" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\27658AF509F6E7B47B822F5ABFF100F3\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="icuuc40.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2AD9C85683A5FD113A9144420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.IE.client_main.dll" "ComponentVersion"="17.64.0.54" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2BA7856341551984FADE6553A14D0278\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="CSS7CM.DUB_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10000" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2DE3D1D08D236A846AE7429F35C9D636\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServicesUI.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2F63FF5983A5FD11DA58FC420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsContacts.client.exe" "ComponentVersion"="17.17.0.106" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\2FA601FC3EDD3D64EA868B1CF166AE0D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="defaults.exe" "ComponentVersion"="1.830.11.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\323E574B85F26FD4286C33D8DC33F556\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_fi.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\32A7D634EB632D11CABB00087CCFBB48\30F0FF67707B23345B1D5AC6383015E4] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Global_VC_ATLUnicode_f1.7EBEDD68_AA66_11D2_B980_006097C4DE24" "ComponentVersion"="3.0.8449.0" "ProductVersion"="11.0.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\32CB09AEE028F1448A991ABCBA7D14A3\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreAudioToolbox.dll" "ComponentVersion"="7.9.8.3" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\366F1942F57318C478179BF2D52C2E41\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="syncli.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\39A542412113E0C4CB44E87F58816A75\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_de.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3B3AD5360ACCF3D44898988A2A7DD11C\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Mingler.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\3E34BB9E45879D14B83A0FD7C9286DCD\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_fr.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\41019FDFF5361864CBD59AE9977DEC9B\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Foundation.dll" "ComponentVersion"="1.830.11.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\43437BEB7A97E384D872D0FC371829FA\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_sv.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\44B339859ED2215409EFA7F1F1709820\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="pthreadVC2.dll" "ComponentVersion"="2.7.0.11200" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\44BDC17A0EF6F334694F8CB5B64E8A0D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileBackup.exe" "ComponentVersion"="17.1140.5.5" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\45FF62E9258FBD11E8FFF6B6558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="usbaapl64.sys" "ComponentVersion"="1.64.0.0" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\47F09A8168A110F48A77712A12CFA135\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="QuartzCore.dll" "ComponentVersion"="1.0.227.39" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\4CE506E3FDE00E11F9355F810E7D0258\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libcache.dll" "ComponentVersion"="1.0.0.39" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\4D84A6DB0FAC9004B93B4AAAC34A8B93\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="upgradedb.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\50498A81CF749BA4FB7298B9FBB53338\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="MSSP3EN.LEX_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10004" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5343CC5D1391518488A17F0D1D0EB26D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_es.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5546A6980100BD140B9495EB0AD3783A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_pl.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5772377DF9B329E4699C642B450B67DF\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MDCrashReportTool.exe" "ComponentVersion"="17.818.1.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\5B84A08FF6FA1A847837BA2F5D4404AB\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="QTMovieWin.dll" "ComponentVersion"="7536.30.2.1" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\602823D683A5FD1188DD06420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileSync.exe" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\660DA0FA83A5FD11DB9D70520E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.google.ContactSync.client.exe" "ComponentVersion"="17.79.0.149" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\66EF9FE5AB773F34A982871D567E9FE8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_nl.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\69413F169B198734FA40BC8B73511DB0\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CFNetwork.dll" "ComponentVersion"="1.520.3.4" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\69889C7D121878D49878F6B1029DEE02\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUIHandler.exe" "ComponentVersion"="17.17.16.138" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6A4CD52AFD64C604DB85C56749300678\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libxslt.dll" "ComponentVersion"="1.0.9.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6B66BCB6358FBD117A3280D6558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceService.exe" "ComponentVersion"="17.96.2.2" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6B7079AA83A5FD11CACEFF420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsMail.client_main.dll" "ComponentVersion"="17.55.0.184" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6D8DE14FE2D3FD11EB8C9B76658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="Mingler_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\6EAEE8A0BCFDED11D9EFDFB9658D5939\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleVersions.dll" "ComponentVersion"="1.0.2.1" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\721237A2FF9593642A463D2F29C8E09D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ASL.dll" "ComponentVersion"="36.0.0.15" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\000021599B0090400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.42" "ProductVersion"="12.0.6015" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\8E58E8E6B4EC5FF4197F4099C9F9EAA6] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.42" "ProductVersion"="8.0.50727" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7ABFE44842C12B390AF18C3B9B1A1EE8\DA93DA4DE19033D4BBB2956FCF8BDA3C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.844EFBA7_1C24_93B2_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.762" "ProductVersion"="3.5.8080" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7B12A9825885F4541A0BB3F28606CB91\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libeay32.dll" "ComponentVersion"="0.9.9.1" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7B20D45AB4C6E38429E9B02D0AA288F5\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WebKit.dll" "ComponentVersion"="7536.30.1.5" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7B867AFE8E0CE4443B62E4894108A192\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_ko.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7CAE5AB828A8A8B42B1B6FFFBC8DF632\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.Outlook_com.apple.Outlook.isRegistered.dll" "ComponentVersion"="17.98.0.63" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7E988BA0BA1896748BDE85AC83EABDB2\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libtidy.dll" "ComponentVersion"="15.8.0.15" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\7F473B131EF40A9419CB6A8E3B70FFE4\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="VideoToolbox.dll" "ComponentVersion"="1.926.89.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\82D7C853F2D3FD11A8192E86658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="syncli_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\82E29318ED5203248871DE35DB52B3DE\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libxml2.dll" "ComponentVersion"="2.1.13.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\834DEEC19715FD114A2A8175FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="OutlookChangeNotifierAddIn_x64.dll" "ComponentVersion"="17.28.0.56" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\86F2413B83A5FD114971C1520E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.google.ContactSync.client_main.dll" "ComponentVersion"="17.79.0.149" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\87D2B1D3388C32141ADA021144952108\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libicuuc.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\88B4CAD983A5FD11095C3E420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.WindowsContacts.client_main.dll" "ComponentVersion"="17.17.0.106" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\896ECD5883A5FD1139FC79420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Safari.client.exe" "ComponentVersion"="17.52.0.51" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\89DC76E804F0F0E4AB06A8B8AE0EA4E6\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Calendars.syncschema_Contents_Windows_Calendars.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8D721A09F23F1AD4E84440DB0809CD6E\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_ru.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\8D7EB7C0DEDB6B344A0760EB3FCAC30A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceService_main.dll" "ComponentVersion"="17.96.2.2" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\93E3AE938F8E06243BBA761A9C1FA1B4\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_en.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.216" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\948589E96C194AA4E8702261F334488D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WebKit2WebProcess.exe" "ComponentVersion"="7536.30.1.5" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9550FBC23CA39824B86929DB95B088B6\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_zh_CN.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9724285A43747D444A72C8ACE50478D8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_da.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\97E20904756EEF54396E52528A1A52D2\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreVideo.dll" "ComponentVersion"="75.7.0.9" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9C8C374D2C76BF146B94DB7D6F7301FF\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Bookmarks.syncschema_Contents_Windows_Bookmarks.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\9F0AC208D500BF0488729FE172C1FFA1\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceHelper.exe" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A1A8A32486B75CC4C85CC710DD5E7A72\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libicuin.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A42E1412F2D3FD1168F3D886658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncDiagnostics_main.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A454EDB764820C34F97622B781ECB0CB\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUIHandlerDLL.dll" "ComponentVersion"="17.17.16.138" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A5E7ED8ECFD0E41419A1B32B70429AD6\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="MSTHES3.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10006" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A67A6D3E2C5EED112A041F4F558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncDiagnostics.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\A7FDBED877967A2468857578F73E3134\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Schemas_Notes.syncschema_Contents_Windows_Notes.dll" "ComponentVersion"="17.232.1.66" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AB55ACF7F6F45134C8F0BC9E8097492E\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.dll" "ComponentVersion"="17.1.7.216" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AD08D1C356282814AA6143D4917A8AF4\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices.dll" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AD2EAA541A27A5243A96EEBF3D1E2976\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.Safari_com.apple.Safari.isRegistered.dll" "ComponentVersion"="17.52.0.51" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AF0C9133D9B0B0C419E9E7A456D5E5A9\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleSyncMapiInterface.dll" "ComponentVersion"="17.30.0.162" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\AFB6B7ADABAC777488413E5C8AF4E776\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileBackup_main.dll" "ComponentVersion"="17.1140.5.5" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\BB2416F70FCE12244BB77F711802D828\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.apple.WindowsContacts_com.apple.WindowsContacts.is Registered.dll" "ComponentVersion"="17.17.0.106" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C08050A185399F74B936F60CA8865A9B\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="zlib1.dll" "ComponentVersion"="1.2.5.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C144BF1783A5FD113B47E6420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileSync_main.dll" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1D00B095802E1E43B588BAC99360C2D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_ja.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1E3C31072766EA4D99F098091658B71\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libcurl.dll" "ComponentVersion"="10.2.0.64" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C1F0C6C783A5FD11C98D28420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Outlook.client.exe" "ComponentVersion"="17.98.0.63" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C43B695C15EFB2F4F816EC14C28490D2\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="libdispatch.dll" "ComponentVersion"="1.109.8.19" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C4694819C6F40E11890A8DADED7D0258\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="YSCrashDump.dll" "ComponentVersion"="17.0.0.111" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C474A052ABA0CA84791FB8377A9E7BE7\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_pt_PT.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C5AAD464C516AF84BB8BD8FA5BDC808E\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ssleay32.dll" "ComponentVersion"="0.9.9.1" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C6BA0416C284FD110987905E558D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUIHandler_main.dll" "ComponentVersion"="17.17.16.138" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C8F2C2DE6AB50E11CADCFBA9FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ATH.exe" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\C99197C7FDCAF35498A0E5DD033B7A55\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="CSS7DATA.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10001" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CAAE37BC716B0AF48AD7557FB8D3D101\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="icudt46.dll" "ComponentVersion"="4.6.1.1200" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CAF15B86426BFD1159835BD2FD7D0258\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AVFoundationCF.dll" "ComponentVersion"="1.99.10.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CB11C92F6AB50E11E80A1CA9FD7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ATH.dll" "ComponentVersion"="17.287.0.14" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\CDC50ED3E72D6864AB98E7D6C95EBE8F\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WdfCoInstaller01009.dll" "ComponentVersion"="1.9.7600.16385" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\D12416D34952D3F4D99393BE0C43B66C\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServices_Clients_com.google.ContactSync_com.google.ContactSync.isRegist ered.dll" "ComponentVersion"="17.79.0.149" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\036E9A606ABD29D4D97E2A53AA46697C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="20.0.4001" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.6195" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\3e43b73803c7c394f8a6b2f0402e19c2] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="8.0.59193" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\5104B339816461748A822598CF3061F5] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.6195" "ProductVersion"="1.2.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\D30CF9A3586C138449FCE4FD3D474979] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.762" "ProductVersion"="3.5.8080" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8\E936B507FAAF7D04DA854C5423C1C7F3] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ul_msvcr80.dll.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E" "ComponentVersion"="8.0.50727.4053" "ProductVersion"="1.18.18" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DA460AABE1441E5458CCC7A09C955DCE\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_zh_TW.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DAF6CE2EF0C2A1747B32AA15F2576672\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="objc.dll" "ComponentVersion"="1.435.16.14" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\DDDD62D6C744941428F1413D339D0025\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MDCrashReportTool_main.dll" "ComponentVersion"="17.818.1.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E13513ADFF97AE44E841064EF969B218\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="WebKitQuartzCoreAdditions.dll" "ComponentVersion"="7536.30.0.1" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E32AAFCB748473643BF3926FE1375CA4\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="OutlookChangeNotifierAddIn.dll" "ComponentVersion"="17.28.0.57" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E4217812104BD5544B35E173578DE3CA\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleMobileDeviceHelper_main.dll" "ComponentVersion"="17.894.1.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\E49C80BE328FBD1118FA34C6658D5939\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="iTunesMobileDevice.dll" "ComponentVersion"="555.43.0.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\EB08E51B133B59147842268CB042547A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="DeviceLink.dll" "ComponentVersion"="17.261.0.61" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\EBE70AE2B9482B84595D73D47D3869F8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_nb.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ED8C7C0983A5FD11EA360C420E7D0258\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="com.apple.Safari.client_main.dll" "ComponentVersion"="17.52.0.51" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F0BC6D45D245DF34CB0FADB76B918841\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MediaToolbox.dll" "ComponentVersion"="1.926.89.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F1C8A60BD8BBA3042B021321D3DF044C\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="distnoted.exe" "ComponentVersion"="1.630.18.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F2112C565E6C26743974BFF0DDB75DEC\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="YSUtilities.dll" "ComponentVersion"="17.0.0.111" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F28390312066865458B41FD8A948BF10\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="APSDaemon_main.dll" "ComponentVersion"="2.2.9.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F48FE33246B48F54287714D4E3D7418C\00005109F100C0400100000000F01FEC] @DACL=(02 0000) "PatchGUID"="{CA55F6DA-492F-434B-9B65-9A42C35F3FDC}" "MediaCabinet"="PATCH_CAB" "File"="NL7MODEL.DLL_1036" "ComponentVersion"="15.0.4481.1000" "ProductVersion"="15.0.4420" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="10007" "SharedComponent"="0" "IsFullFile"="1" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F5566E1AEB04480428BEB5BECAFFD004\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="APSDaemon.exe" "ComponentVersion"="2.2.9.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F615E2FBCAB327849B496652CB20E94D\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="ApplePushService.dll" "ComponentVersion"="2.2.9.2" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F63E2ACFAE0214F42BB99DB8239E2E2E\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="icuin40.dll" "ComponentVersion"="4.6.1.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F71DE57A01E128A4C85A9E72018D301A\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="AppleSyncMapiInterfaceHelper_x64.exe" "ComponentVersion"="17.30.0.162" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F7DBDF288415D1D4083AD692DC7902F8\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="MobileDevice.dll" "ComponentVersion"="555.43.0.3" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\F7E7A7F951EA64E418D80E1DA87A6975\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncServer.exe" "ComponentVersion"="17.669.6.7" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\FDD2B49289C9FCE409D2464D527F0F2D\045F27F206F16624596059B2126D46D0] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="SyncUICore.resources_it.lproj_SyncUICoreLocalized.dll" "ComponentVersion"="17.1.7.164" "ProductVersion"="6.1.0" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\FEA1C4DF5301F0245B51F4BEE29F33A3\277C90D53BCEB244C96C4B43C187DF2C] @DACL=(02 0000) "PatchGUID"="" "MediaCabinet"="" "File"="CoreMedia.dll" "ComponentVersion"="1.926.89.0" "ProductVersion"="2.3.4" "PatchSize"="0" "PatchAttributes"="0" "PatchSequence"="0" "SharedComponent"="0" "IsFullFile"="0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe c:\program files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe . ************************************************************************** . Completion time: 2013-07-26 18:54:10 - machine was rebooted ComboFix-quarantined-files.txt 2013-07-26 22:54 ComboFix2.txt 2013-07-25 23:34 . Pre-Run: 1,817,625,321,472 bytes free Post-Run: 1,817,022,881,792 bytes free . - - End Of File - - 1F84BA97FFC18E06488B00B5E24A368E A36C5E4F47E84449FF07ED3517B43A31
Post #14
Full System Scan with Malwarebytes Antimalware

  • If not existing, please download Malwarebytes' Anti-Malware to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

If the program is already installed:
  • Run Malwarebytes Antimalware
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform fullscan, place a checkmark on all hard drives, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location.
  • The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
  • Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
  • Post that log back here.
Post #15
Malware Byte Log Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.07.27.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16635 Mark Burton :: MOREPHEUS [administrator] 7/27/2013 10:41:58 PM mbam-log-2013-07-27 (22-41-58).txt Scan type: Full scan (C:\|D:\|E:\|F:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 424856 Time elapsed: 48 minute(s), 36 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI