Computer Freezing Up [Closed]

I turned my computer on the other day and neither my antivirus (AVIRA) or Window's Defender were working. I had to actually uninstall and then reinstall AVIRA to get it to work again. Window's Defender is still not working correctly. I ran a computer scan with Avira and found nothing. Then I tried MalWareBytes but it freezes up every time I try it. This all seems kind of suspicious.

OTL logfile created on: 03/09/2013 9:01:20 AM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Karri\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

7.93 Gb Total Physical Memory | 4.32 Gb Available Physical Memory | 54.45% Memory free
16.06 Gb Paging File | 10.70 Gb Available in Paging File | 66.63% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 232.59 Gb Total Space | 55.03 Gb Free Space | 23.66% Space Free | Partition Type: NTFS
Drive D: | 348.93 Gb Total Space | 90.22 Gb Free Space | 25.86% Space Free | Partition Type: NTFS
Drive J: | 295.02 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF
Drive N: | 3.79 Gb Total Space | 3.79 Gb Free Space | 100.00% Space Free | Partition Type: FAT32
Drive O: | 930.95 Gb Total Space | 813.57 Gb Free Space | 87.39% Space Free | Partition Type: FAT32

Computer Name: KARRI-PC | User Name: Karri | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Karri\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Users\Karri\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe (Google)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
PRC - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
PRC - C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Capture.exe ()
PRC - C:\Users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe (SanDisk Corporation)
PRC - C:\Users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe ()
PRC - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
PRC - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdateService.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdate.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaMonitorService.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaService.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe (Egis inc.)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\Intel\AMT\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)


========== Modules (No Company Name) ==========

MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppgooglenaclpluginchrome.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\libglesv2.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\libegl.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\ffmpegsumo.dll ()
MOD - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll ()
MOD - C:\Users\Karri\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Users\Karri\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\authplay.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\Common Files\LogiShrd\SharedBin\LvApi11.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTXml4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTGui4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTCore4.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\vpxmd.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\SDL.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtNetwork4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtCore4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qico4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qgif4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtWebKit4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtXml4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtSql4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtOpenGL4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtGui4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\phonon4.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
MOD - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTrayLOC.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQDEVCL.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMDLL.DLL ()


========== Services (SafeList) ==========

SRV:64bit: - (CrmSqlStartupSvc) – C:\Program Files\Microsoft Dynamics CRM\Client\bin\CrmSqlStartupSvc.exe (Microsoft Corporation)
SRV:64bit: - (c2wts) – C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe (Microsoft Corporation)
SRV:64bit: - (ME Services Manager) – C:\Program Files\Intel\inteldh\msm\MSM.exe (Intel® Corporation)
SRV:64bit: - (Software Services Manager) – C:\Program Files\Intel\inteldh\common\IntelDHSvcMgr.exe (Intel® Corporation)
SRV:64bit: - (LMS) – C:\Program Files\Intel\AMT\LMS.exe (Intel Corporation)
SRV:64bit: - (ETService) – C:\Program Files\Acer\Empowering Technology\Service\ETService.exe ()
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AntiVirSchedulerService) – C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (Skype C2C Service) – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (APNMCP) – C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (M4-Service) – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe ()
SRV - (UMVPFSrv) – C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Nero BackItUp Scheduler 4.0) – C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (CyberLink Live Push Update Service) – C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdateService.exe (CyberLink)
SRV - (CyberLink Live Monitor Service) – C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaMonitorService.exe (CyberLink)
SRV - (CyberLink Live Service) – C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaService.exe (CyberLink Corp.)
SRV - (eDataSecurity Service) – C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
SRV - (IAANTMON) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (Acer HomeMedia Connect Service) – C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)


========== Driver Services (SafeList) ==========

DRV:64bit: - (avipbb) – C:\Windows\SysNative\DRIVERS\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avgntflt) – C:\Windows\SysNative\DRIVERS\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avkmgr) – C:\Windows\SysNative\DRIVERS\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (cbfs3) – C:\Windows\SysNative\drivers\cbfs3.sys (EldoS Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (LVUVC64) – C:\Windows\SysNative\DRIVERS\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) – C:\Windows\SysNative\DRIVERS\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (tap0901) – C:\Windows\SysNative\DRIVERS\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (WpdUsb) – C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (sptd) – C:\Windows\SysNative\Drivers\sptd.sys ()
DRV:64bit: - (NuidFltr) – C:\Windows\SysNative\DRIVERS\NuidFltr.sys (Microsoft Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\DRIVERS\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (psdvdisk) – C:\Windows\SysNative\DRIVERS\PSDVdisk.sys (Egis Incorporated)
DRV:64bit: - (PSDNServ) – C:\Windows\SysNative\DRIVERS\PSDNServ.sys (Egis Incorporated)
DRV:64bit: - (PSDFilter) – C:\Windows\SysNative\DRIVERS\psdfilter.sys (Egis Incorporated)
DRV:64bit: - (e1yexpress) – C:\Windows\SysNative\DRIVERS\e1y60x64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\DRIVERS\iaStor.sys (Intel Corporation)
DRV:64bit: - (IntcHdmiAddService) – C:\Windows\SysNative\drivers\IntcHdmi.sys (Intel® Corporation)
DRV:64bit: - (HECIx64) – C:\Windows\SysNative\DRIVERS\HECIx64.sys (Intel Corporation)
DRV:64bit: - (NTIDrvr) – C:\Windows\SysNative\Drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV:64bit: - (UBHelper) – C:\Windows\SysNative\drivers\UBHelper.sys (NewTech Infosystems Corporation)
DRV - (int15) – C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?…p={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7ACAW
IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms}
IE - HKCU\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?…p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.theweathernetwork.com/weather/caon0532"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll (Oberon-Media )
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Karri\AppData\Local\Citrix\Plugins\79\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Karri\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Karri\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/06/27 12:28:38 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/08/04 16:11:46 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/06/27 12:28:38 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/08/04 16:11:46 | 000,000,000 | —D | M]

[2009/10/29 13:03:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Extensions
[2009/10/29 13:03:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Extensions\[removed]
[2013/09/02 19:42:54 | 000,000,000 | —D | M] (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions
[2011/10/15 14:35:37 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2013/07/26 16:31:20 | 000,713,729 | —- | M] () (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\[removed]
[2013/09/01 20:04:08 | 000,824,302 | —- | M] () (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2009/08/06 12:56:41 | 000,002,399 | —- | M] () – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\searchplugins\daemon-search.xml
[2013/08/20 08:37:10 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/08/20 08:37:46 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/06/27 12:28:38 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013/06/27 12:28:39 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013/06/27 12:28:39 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013/06/27 12:28:39 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}
[2013/08/20 08:37:10 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/08/20 08:37:46 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/06/27 12:28:47 | 000,000,000 | —D | M] (Default) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/10/19 19:18:49 | 000,248,192 | —- | M] (Coupons, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll
[2012/10/19 19:18:57 | 000,248,192 | —- | M] (Coupons, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncodin
g}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter}
CHR - homepage: http://www.theweathernetwork.com/weather/caon0532
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npCouponPrinter.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: Microsoft Lync 2010 Meeting Join Plug-in (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npMozCouponPrinter.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npo1d.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Oberon com adapter (Enabled) = C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Citrix Online Web Deployment Plugin 1.0.0.79 (Enabled) = C:\Users\Karri\AppData\Local\Citrix\Plugins\79\npappdetector.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Karri\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: Avira SearchFree Toolbar plus Web Protection = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\
CHR - Extension: Entanglement = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\2.7.9_0\
CHR - Extension: AT_JamesWhite = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkeidgmehkdjmpjodpjkepolokanalkm\3\
CHR - Extension: AdBlock = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.6_0\
CHR - Extension: Skype Click to Call = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.11.0.13348_0\
CHR - Extension: Poppit = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\2.2_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0\

O1 HOSTS File: ([2013/09/03 08:25:34 | 000,000,027 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\ActiveToolBand.dll (Egis)
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG8\avgssie.dll File not found
O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O3:64bit: - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O4:64bit: - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe ()
O4:64bit: - HKLM..\Run: [eDataSecurity Loader] C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe (Egis Incorporated)
O4:64bit: - HKLM..\Run: [EmpoweringTechnology] C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot File not found
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelSWUpdateClient] C:\Program Files\Intel\inteldh\common\SWUpdateClient.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Acer Assist Launcher] C:\Program Files (x86)\Acer\Acer Assist\launcher.exe ()
O4 - HKLM..\Run: [Acer Product Registration] C:\Program Files (x86)\Acer\Acer Registration\ACE1.exe (Leader Technologies)
O4 - HKLM..\Run: [ACQTMOUSE] C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
O4 - HKLM..\Run: [ApnTBMon] C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CLPushUpdate] C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdate.exe (CyberLink)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [PCMMediaSharing] C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [SansaDispatch] C:\Users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe (SanDisk Corporation)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O4 - Startup: C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver; - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver; - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: aboriginallink.ca ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: aboriginallink.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: dynamics.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: live.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoftonline.com ([portal] https in Trusted sites)
O15 - HKCU\..Trusted Domains: outlook.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: sharepoint.com ([responsetrac] https in Trusted sites)
O15 - HKCU\..Trusted Domains: sharepoint.com ([responsetrac-admin] https in Trusted sites)
O15 - HKCU\..Trusted Domains: sharepoint.com ([responsetrac-my] https in Trusted sites)
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} http://www.shockwave.com/content/trijinx/s…nx.1.0.0.86.cab (CPlayFirstTriJinxControl Object)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3DF7249C-DC40-4434-8123-8375B94A51F0}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\intu-qt2008 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-qt2009 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-tt2010 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-tt2011 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-tt2012 - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\intu-qt2008 {05E53CE9-66C8-4a9e-A99F-FDB7A8E7B596} - C:\Program Files (x86)\QuickTax 2008\ic2008pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files (x86)\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-tt2010 {97A0575E-2309-4e75-8509-B1F9390C4DE7} - C:\Program Files (x86)\TurboTax 2010\ic2010pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-tt2011 {B3B5DAD9-E96D-45b4-B636-B6CF2F773DE1} - C:\Program Files (x86)\TurboTax 2011\ic2011pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-tt2012 {02F985EF-502B-4597-993F-6BF9E004C138} - C:\Program Files (x86)\TurboTax 2012\ic2012pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)
O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
O22:64bit: - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)
O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img16.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img16.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/24 11:26:00 | 000,000,740 | R— | M] () - J:\autorun.inf – [ UDF ]
O32 - Unable to obtain root file information for disk N:\
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mkdmp3enc - C:\PROGRA~2\ACERAR~1\ACERVI~1\Kernel\Burner\MKDMP3Enc.ACM File not found
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/09/03 08:59:35 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Users\Karri\Desktop\OTL.exe
[2013/09/02 19:47:14 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Roaming\Avira
[2013/09/02 19:42:54 | 000,000,000 | —D | C] – C:\ProgramData\AskPartnerNetwork
[2013/09/02 19:42:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\AskPartnerNetwork
[2013/09/02 19:42:27 | 000,000,000 | —D | C] – C:\ProgramData\APN
[2013/09/02 19:41:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013/09/02 19:41:46 | 000,130,016 | —- | C] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avipbb.sys
[2013/09/02 19:41:46 | 000,100,712 | —- | C] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avgntflt.sys
[2013/09/02 19:41:46 | 000,028,600 | —- | C] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avkmgr.sys
[2013/09/02 19:41:45 | 000,000,000 | —D | C] – C:\ProgramData\Avira
[2013/09/02 19:41:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Avira
[2013/09/02 17:19:15 | 000,000,000 | -HSD | C] – C:\AI_RecycleBin
[2013/08/28 10:49:01 | 001,706,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2013/08/28 10:49:01 | 001,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2013/08/22 23:06:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/08/22 23:06:10 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2013/08/22 23:06:08 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2013/08/22 23:06:08 | 000,000,000 | —D | C] – C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/08/18 19:39:18 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Roaming\Rainbow
[2013/08/18 19:37:21 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rush for Gold - Alaska
[2013/08/18 19:37:21 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rush for Gold - Alaska
[2013/08/18 19:37:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Rush for Gold - Alaska
[2013/08/18 19:30:41 | 000,000,000 | —D | C] – C:\ProgramData\Big Fish
[2013/08/18 19:29:08 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Local\Big Fish
[2013/08/18 19:29:07 | 000,000,000 | —D | C] – C:\BigFishCache
[2013/08/14 23:19:10 | 000,000,000 | —D | C] – C:\Windows\SysNative\MRT
[2013/08/14 23:16:50 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2013/08/14 23:16:50 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2013/08/14 23:16:50 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2013/08/14 23:16:50 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2013/08/14 23:16:49 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2013/08/14 23:16:49 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2013/08/14 23:16:49 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2013/08/14 23:16:49 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2013/08/14 23:16:48 | 002,312,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2013/08/14 23:16:48 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2013/08/14 23:16:48 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2013/08/14 23:16:48 | 000,729,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2013/08/14 23:16:47 | 000,816,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2013/08/14 23:16:47 | 000,717,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2013/08/14 23:16:47 | 000,599,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2013/08/14 18:33:28 | 004,691,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2013/08/14 18:33:28 | 001,585,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2013/08/14 18:33:28 | 000,234,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2013/08/14 18:33:28 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2013/08/14 18:33:28 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2013/08/14 18:33:28 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2013/08/14 18:33:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2013/08/14 18:33:28 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2013/08/14 18:33:28 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2013/08/14 18:33:27 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icaapi.dll
[2013/08/14 18:33:26 | 001,303,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2013/08/14 18:33:21 | 001,276,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2013/08/14 18:33:21 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2013/08/14 18:33:21 | 000,132,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2013/08/09 15:18:22 | 000,000,000 | —D | C] – C:\Users\Karri\Desktop\PHONE DUMP

========== Files - Modified Within 30 Days ==========

[2013/09/03 09:06:04 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA.job
[2013/09/03 08:59:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Karri\Desktop\OTL.exe
[2013/09/03 08:28:15 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/09/03 08:25:34 | 000,000,027 | —- | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2013/09/03 08:25:33 | 000,065,536 | —- | M] () – C:\Windows\SysNative\Ikeext.etl
[2013/09/03 08:25:16 | 000,003,344 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/03 08:25:16 | 000,003,344 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/03 08:25:12 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/09/02 19:45:14 | 000,000,952 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/02 19:41:51 | 000,001,905 | —- | M] () – C:\Users\Public\Desktop\Avira Control Center.lnk
[2013/09/02 19:41:17 | 000,130,016 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avipbb.sys
[2013/09/02 19:41:17 | 000,100,712 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avgntflt.sys
[2013/09/02 19:41:17 | 000,028,600 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avkmgr.sys
[2013/09/02 17:41:15 | 000,393,832 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013/09/02 17:28:49 | 002,092,792 | —- | M] () – C:\Users\Karri\Desktop\avira_free_antivirus.exe
[2013/09/01 16:31:36 | 006,436,153 | —- | M] () – C:\Users\Karri\Desktop\Toni Braxton - You re Makin Me High - 14300 - p1.mp3
[2013/09/01 16:25:39 | 004,296,246 | —- | M] () – C:\Users\Karri\Desktop\Toni_Braxton_You_re_Makin_Me_High_14300.mp3
[2013/09/01 14:06:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core.job
[2013/09/01 09:58:22 | 000,002,048 | —- | M] () – C:\Users\Karri\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/09/01 09:58:22 | 000,002,046 | —- | M] () – C:\Users\Karri\Desktop\Google Chrome.lnk
[2013/08/30 21:54:38 | 008,350,032 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Stormy_Monday_69929.mp3
[2013/08/30 21:54:27 | 007,590,809 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_God_Bless_The_Child_81769.mp3
[2013/08/30 21:54:26 | 004,946,381 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Ain_t_No_Sunshine_49129.mp3
[2013/08/30 21:54:17 | 006,822,809 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Fields_Of_Gold_20046.mp3
[2013/08/30 21:53:41 | 006,456,676 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Wayfaring_Stranger_72482.mp3
[2013/08/29 20:28:23 | 000,034,175 | —- | M] () – C:\Users\Karri\Desktop\1256532_10151812894926049_1404234258_n.jpg
[2013/08/29 11:35:02 | 000,000,680 | —- | M] () – C:\Users\Karri\AppData\Local\d3d9caps.dat
[2013/08/27 19:08:17 | 000,291,492 | —- | M] () – C:\Users\Karri\Desktop\Video call snapshot 76.png
[2013/08/25 19:49:42 | 008,340,514 | —- | M] () – C:\Users\Karri\Desktop\Echo and the Bunnymen - The Killing Moon.mp3
[2013/08/25 19:49:30 | 000,009,373 | -HS- | M] () – C:\Users\Karri\Desktop\Folder.jpg
[2013/08/25 19:49:30 | 000,009,373 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Large.jpg
[2013/08/25 19:49:30 | 000,002,304 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArtSmall.jpg
[2013/08/25 19:49:30 | 000,002,304 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Small.jpg
[2013/08/23 19:18:19 | 000,040,448 | —- | M] () – C:\Users\Karri\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/08/22 23:06:34 | 000,001,698 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2013/08/21 10:28:54 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/08/21 10:28:54 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/08/20 12:23:47 | 000,999,707 | —- | M] () – C:\Users\Karri\Desktop\scan0002.jpg
[2013/08/18 19:34:38 | 000,000,683 | —- | M] () – C:\Users\Karri\Application Data\Microsoft\Internet Explorer\Quick Launch\rush-for-gold-alaska_s1_l1_gF6467T1L1_d2141755934 - Shortcut.lnk
[2013/08/14 23:30:19 | 000,772,756 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/08/14 23:30:19 | 000,639,142 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/08/14 23:30:19 | 000,121,106 | —- | M] () – C:\Windows\SysNative\perfc009.dat

========== Files Created - No Company Name ==========

[2013/09/02 19:41:51 | 000,001,905 | —- | C] () – C:\Users\Public\Desktop\Avira Control Center.lnk
[2013/09/02 17:27:47 | 002,092,792 | —- | C] () – C:\Users\Karri\Desktop\avira_free_antivirus.exe
[2013/09/01 16:31:21 | 006,436,153 | —- | C] () – C:\Users\Karri\Desktop\Toni Braxton - You re Makin Me High - 14300 - p1.mp3
[2013/09/01 16:25:29 | 004,296,246 | —- | C] () – C:\Users\Karri\Desktop\Toni_Braxton_You_re_Makin_Me_High_14300.mp3
[2013/08/30 21:53:55 | 008,350,032 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Stormy_Monday_69929.mp3
[2013/08/30 21:53:49 | 004,946,381 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Ain_t_No_Sunshine_49129.mp3
[2013/08/30 21:53:46 | 006,822,809 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Fields_Of_Gold_20046.mp3
[2013/08/30 21:53:42 | 007,590,809 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_God_Bless_The_Child_81769.mp3
[2013/08/30 21:53:27 | 006,456,676 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Wayfaring_Stranger_72482.mp3
[2013/08/29 20:28:22 | 000,034,175 | —- | C] () – C:\Users\Karri\Desktop\1256532_10151812894926049_1404234258_n.jpg
[2013/08/27 19:08:00 | 000,291,492 | —- | C] () – C:\Users\Karri\Desktop\Video call snapshot 76.png
[2013/08/25 19:49:31 | 000,009,373 | -HS- | C] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Large.jpg
[2013/08/25 19:49:31 | 000,002,304 | -HS- | C] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Small.jpg
[2013/08/25 19:19:34 | 008,340,514 | —- | C] () – C:\Users\Karri\Desktop\Echo and the Bunnymen - The Killing Moon.mp3
[2013/08/20 12:24:37 | 000,999,707 | —- | C] () – C:\Users\Karri\Desktop\scan0002.jpg
[2013/08/18 19:34:38 | 000,000,683 | —- | C] () – C:\Users\Karri\Application Data\Microsoft\Internet Explorer\Quick Launch\rush-for-gold-alaska_s1_l1_gF6467T1L1_d2141755934 - Shortcut.lnk
[2012/07/22 18:32:00 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2012/02/01 18:18:15 | 000,000,552 | —- | C] () – C:\Users\Karri\AppData\Local\d3d8caps.dat
[2012/01/18 06:44:00 | 010,920,984 | —- | C] () – C:\Windows\SysWow64\LogiDPP.dll
[2012/01/18 06:44:00 | 000,336,408 | —- | C] () – C:\Windows\SysWow64\DevManagerCore.dll
[2012/01/18 06:44:00 | 000,104,472 | —- | C] () – C:\Windows\SysWow64\LogiDPPApp.exe
[2011/12/30 22:49:42 | 000,000,680 | —- | C] () – C:\Users\Karri\AppData\Local\d3d9caps.dat
[2011/10/10 18:52:43 | 000,752,602 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/09/02 14:28:57 | 000,040,448 | —- | C] () – C:\Users\Karri\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/12 22:00:58 | 000,000,760 | —- | C] () – C:\Users\Karri\AppData\Roaming\setup_ldm.iss
[2009/09/21 12:30:38 | 000,000,029 | —- | C] () – C:\Users\Karri\AppData\Roaming\default.rss
[2009/09/15 12:40:54 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2009/06/28 11:50:52 | 000,048,127 | —- | C] () – C:\ProgramData\nvModes.dat
[2009/06/28 11:50:52 | 000,048,127 | —- | C] () – C:\ProgramData\nvModes.001
[2008/10/28 08:57:39 | 000,000,052 | —- | C] () – C:\ProgramData\CLSDefine.ini

========== ZeroAccess Check ==========

[2006/11/02 11:30:40 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2012/06/08 13:59:03 | 012,899,840 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2012/06/08 13:47:00 | 011,586,048 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/04/11 03:11:14 | 000,891,392 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\SysWow64\wbem\fastprox.dll – [2009/04/11 02:28:19 | 000,614,912 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2008/01/20 22:50:58 | 000,513,024 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\SysWow64\wbem\wbemess.dll

========== LOP Check ==========

[2010/12/18 12:49:09 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\.minecraft
[2012/11/19 12:51:06 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\1morebee
[2012/07/07 22:02:22 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\8floor
[2009/03/29 20:30:38 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Acer
[2008/10/28 09:17:30 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Acer GameZone Console
[2011/12/03 14:12:53 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\AlawarSouthpoint
[2011/04/16 21:08:14 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\aliasworlds
[2012/07/14 16:40:16 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Anino Games
[2010/09/25 20:05:35 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Atlus
[2009/04/07 07:53:51 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Big Fish Games
[2011/12/12 22:07:00 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\blg
[2009/08/06 13:12:47 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\DAEMON Tools Lite
[2012/09/17 20:00:26 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\DivoGames
[2013/09/03 08:27:34 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Dropbox
[2009/03/30 20:40:22 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\eSobi
[2009/04/06 07:42:54 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\FloodLightGames
[2012/11/20 08:53:50 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\GamesCafe
[2012/08/10 20:09:27 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\HipSoft
[2013/08/20 12:23:59 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Image Zone Express
[2012/01/03 20:40:28 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Islands2
[2009/04/03 22:38:36 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\iWin
[2012/07/22 18:32:17 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Jumb-O-Fun Games
[2009/03/29 20:30:38 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Leadertech
[2012/12/14 09:14:34 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\LimeWire
[2011/03/04 12:36:00 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\MumboJumbo
[2012/11/19 09:47:11 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\northern_tale_bfg_en
[2011/02/13 21:55:28 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Oberon Media
[2013/01/02 16:50:23 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\ooVoo Details
[2013/01/28 09:36:20 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Origin
[2012/01/20 20:35:58 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\PetRush
[2011/11/27 14:02:08 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Ph03nixNewMedia
[2012/04/07 16:11:40 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\PlayFirst
[2011/12/21 19:50:08 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Playrix Entertainment
[2012/09/13 19:58:22 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Princess Isabella CE
[2009/10/28 15:05:06 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Printer Info Cache
[2013/08/18 19:39:18 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Rainbow
[2010/06/04 22:03:13 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\runic games
[2012/07/17 18:45:03 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\SanDisk
[2013/06/18 08:36:08 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\TeamViewer
[2013/08/26 22:55:53 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\uTorrent
[2011/12/18 19:18:25 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\ValuSoft
[2012/09/12 19:41:41 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\VC 2 Paradise Resort
[2012/09/16 19:51:24 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\ViquaSoft
[2012/01/02 13:34:19 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\WendigoStudios
[2012/07/14 16:18:47 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\YoudaGames

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.EXE >
[2008/10/29 02:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14\explorer.exe
[2008/10/29 02:29:41 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19\explorer.exe
[2008/10/29 02:15:50 | 003,087,360 | —- | M] (Microsoft Corporation) MD5=50514057C28A74BAC2BD04B7B990D615 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer.exe
[2008/10/29 23:59:17 | 002,927,616 | —- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\erdnt\cache86\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41\explorer.exe
[2008/10/27 22:30:12 | 003,086,848 | —- | M] (Microsoft Corporation) MD5=72B9990E45C25AA3C75C4FB50A9D6CE0 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer.exe
[2008/10/29 02:49:22 | 003,080,704 | —- | M] (Microsoft Corporation) MD5=BBD8E74F23D7605CB0CDB57A1B25D826 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer.exe
[2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\SysWOW64\explorer.exe
[2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_ba1365f4639c6d3c\explorer.exe
[2008/10/30 01:30:07 | 003,081,216 | —- | M] (Microsoft Corporation) MD5=E404A65EF890140410E9F3D405841C95 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer.exe
[2008/10/27 22:15:02 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c\explorer.exe
[2008/01/20 22:48:44 | 003,080,704 | —- | M] (Microsoft Corporation) MD5=F6D765FB6B457542D954682F50C26E4F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer.exe
[2008/01/20 22:49:23 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2006/11/02 11:13:38 | 000,036,864 | —- | M] (Microsoft Corporation) MD5=192DD053B43250E264383CDC3D564A18 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2006/11/02 11:13:38 | 000,036,864 | —- | M] (Microsoft Corporation) MD5=192DD053B43250E264383CDC3D564A18 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_6a2f0af76374ed51\explorer.exe.mui
[2006/11/02 11:13:32 | 000,027,136 | —- | M] (Microsoft Corporation) MD5=872D519975CA4D7CC596FC93470D49E0 – C:\Windows\en-US\explorer.exe.mui
[2006/11/02 11:13:32 | 000,027,136 | —- | M] (Microsoft Corporation) MD5=872D519975CA4D7CC596FC93470D49E0 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_5fda60a52f142b56\explorer.exe.mui

< MD5 for: EXPLORER.EXE-A80E4F97.PF >
[2013/09/03 08:26:15 | 000,269,476 | —- | M] () MD5=D2EE6466F4DCAB8E23AEC40D67E7ADFE – C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf

< MD5 for: EXPLORER.PNG >
[2011/01/13 20:42:44 | 000,034,797 | —- | M] () MD5=8026B912B7BBA0B33FD5D94F50E5D91D – C:\Program Files (x86)\Island Tribe 2\data\quest\ExplorerRequest\Explorer.png

< MD5 for: EXPLORER.ZIP >
[2009/06/03 22:15:06 | 000,020,394 | —- | M] () MD5=B469409C2B2A33C542190B720E11BD79 – C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip

< MD5 for: IEXPLORE.EXE >
[2012/06/02 07:47:54 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=004640AB259C1572EBD5FB0A32F63686 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20553_none_b5336068bd3ba567\iexplore.exe
[2013/01/08 21:53:45 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=0100BCF23941C83462E4A70F94C3392E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16464_none_b49ff3fba4253ae5\iexplore.exe
[2012/05/17 19:21:54 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=0129BB16161C2FD9A6B19111AB047198 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16446_none_bf0c3eb9d873f7ac\iexplore.exe
[2008/04/25 00:22:36 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=07ED775D6DB4BFA96D7CFB09EB228418 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16681_none_9399882309d61be8\iexplore.exe
[2009/01/15 00:14:36 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=0844F5B9CB3BB85A917D347EF1565B6C – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16809_none_93f80d9f098e0166\iexplore.exe
[2012/10/03 22:07:39 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=0B09588808D3865287BE65CF62D792B2 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20562_none_b5279032bd44a801\iexplore.exe
[2012/11/13 22:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:\Windows\erdnt\cache86\iexplore.exe
[2012/11/13 22:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16457_none_bf026f17d87b2cf4\iexplore.exe
[2013/07/24 22:48:45 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=139C8953AC56A9E559C7DEF07BC45ED7 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20613_none_bfb34c50f17bf4c5\iexplore.exe
[2013/05/17 00:10:41 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=1423FF1BFD2ECD9CFC8C17EA4F98B20F – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16490_none_b47b830fa441295c\iexplore.exe
[2008/02/21 22:44:11 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=182CAF7403705ACCB51211A761080B8F – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20777_none_9433f69622e637cb\iexplore.exe
[2012/06/27 22:23:58 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=1A8A5634E778B0466BE0932B460ACCB3 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20554_none_b53460b2bd3abebe\iexplore.exe
[2008/04/24 22:16:24 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=1ACD856D345FA54F89335C793B2B0874 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20823_none_8a115c9dee6081e6\iexplore.exe
[2009/11/21 11:04:19 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=1B5572B8B9CD678E814F57B245400F64 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22956_none_6ec34e240169f05e\iexplore.exe
[2009/11/21 02:42:38 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=1B6362BB14FCEB9E76BCF9A953B04788 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18865_none_78828b751cb61529\iexplore.exe
[2009/04/24 12:25:27 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=1F44940EF1D07D0BDAF80E55853DFBD0 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16851_none_93b9fbb309bdc263\iexplore.exe
[2012/08/24 03:34:41 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=22CC6CDBA678790046693654C3B212E4 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16450_none_befb6d11d8817b93\iexplore.exe
[2013/02/22 03:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16476_none_b49724a3a42b8984\iexplore.exe
[2010/02/23 11:06:13 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=25DB705A7DC85C208B3CF2D20F118AA7 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22995_none_78ebb87c35ec08c6\iexplore.exe
[2012/05/17 18:59:46 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=268982F1FD671A077C6A2AF41E351436 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20551_none_bf860a26f19e34b4\iexplore.exe
[2012/06/28 00:16:03 | 000,754,784 | —- | M] (Microsoft Corporation) MD5=2BF1D4CA1D2DFDCA52421730CA46E851 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16448_none_b4b994fba411685f\iexplore.exe
[2009/04/11 02:27:44 | 000,636,080 | —- | M] (Microsoft Corporation) MD5=2C5168C856455CC43C4B4E1CC1920001 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_97c0beeb03de7f46\iexplore.exe
[2012/08/24 07:23:44 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=2D53C5F71653EF94E7829846405D4ED2 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16450_none_b4a6c2bfa420b998\iexplore.exe
[2009/08/27 01:23:17 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=2E48756F12C21F46895036AC089AAD97 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18828_none_78b0cc031c92f16a\iexplore.exe
[2011/02/22 02:50:19 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=2E70FE17239DFCA6209FD698D0F18C61 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19048_none_6e465be0e84297ba\iexplore.exe
[2008/02/21 22:54:54 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=2EEE7F65B04F759FE7D238AD6EAB90B7 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20777_none_89df4c43ee8575d0\iexplore.exe
[2008/02/21 00:45:17 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=31705413C889C5503F564C642D83C282 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16643_none_89721e14d5531cd7\iexplore.exe
[2013/02/22 00:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16476_none_beebcef5d88c4b7f\iexplore.exe
[2012/06/27 21:08:59 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=32F1A71CC1943BD537DA1516E0CB6AF3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16448_none_bf0e3f4dd8722a5a\iexplore.exe
[2009/04/24 12:07:30 | 000,711,432 | —- | M] (Microsoft Corporation) MD5=3319AE709DEAA8539AB3B4110C3C675D – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22418_none_8c07706deb7a6fe7\iexplore.exe
[2013/05/28 23:32:47 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=33E62E4EFC2ACA8EC63A8926F26D3889 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20606_none_bfc11d1af17124d9\iexplore.exe
[2012/06/02 05:08:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=34B01BBD8F00B6B9C9248DC4F1E3CD01 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16447_none_bf0d3f03d8731103\iexplore.exe
[2012/10/03 23:12:11 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=367045AF10C4875707E0864E352EF3F1 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16455_none_b4abc431a41c384b\iexplore.exe
[2010/11/02 02:29:04 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=37302FCB9B7D54B0DBB43624E7A21B3C – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18999_none_6e11746ce86a0984\iexplore.exe
[2010/01/02 10:58:26 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=3D8DA00B028DEA9517066F1CECBFC4A2 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22973_none_78ff57c035dd9e36\iexplore.exe
[2013/04/04 18:47:49 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=3F00BE80B9CEA20B7FE7363D15EDDB94 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16483_none_beddfe2bd8971b6b\iexplore.exe
[2013/02/22 00:10:31 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=4145E2B5663F6FACC08EFDB17B658BB2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20586_none_bf6a9bd4f1b2073a\iexplore.exe
[2010/05/04 02:32:18 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=48A6109E8DF0365195298CC527B7426A – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_7946112635a7c1dc\iexplore.exe
[2010/09/08 02:26:34 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=4A719476A6393B1DCACFEB4F3AC6599C – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23067_none_790e00f635d21ae3\iexplore.exe
[2009/07/22 02:04:09 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=4B5AEA50CE77FBA4C2D169622DC9B489 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22903_none_794b073435a4da9f\iexplore.exe
[2012/06/27 19:36:32 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=4B649ED3CDC17707898E4948AAB72528 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20554_none_bf890b04f19b80b9\iexplore.exe
[2012/05/17 22:51:05 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=4E99F42504A99D5024C2EFA015001937 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16446_none_b4b79467a41335b1\iexplore.exe
[2009/08/27 01:52:49 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=51BDD4A648CD937BC7111D09930114C3 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18828_none_6e5c21b0e8322f6f\iexplore.exe
[2013/07/25 00:00:18 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=536B5973A34DDAA6E16AC8248B726BD0 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20613_none_b55ea1febd1b32ca\iexplore.exe
[2013/07/24 22:42:37 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=57EC630DBD5F0713E77CB3540AB80A8E – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2013/07/24 22:42:37 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=57EC630DBD5F0713E77CB3540AB80A8E – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16502_none_bf337f27d8571fb3\iexplore.exe
[2009/04/11 03:11:08 | 000,712,864 | —- | M] (Microsoft Corporation) MD5=58136AB5A3DF2D44BBB483629188584A – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_8d6c1498cf7dbd4b\iexplore.exe
[2012/08/24 06:49:07 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=5A150AFABB25BEA50CEDC8650A7B8A9E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20557_none_b5376190bd380ac3\iexplore.exe
[2010/11/02 02:03:13 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=5AB037B17F8A87D052F5A88E0D29A3C8 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18999_none_78661ebf1ccacb7f\iexplore.exe
[2008/01/20 22:48:06 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=5B92133D3E7FB2644677686305E29E81 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_95d545df06bcb3fa\iexplore.exe
[2010/05/04 02:00:35 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=5C9B1062EA7A44E8F6BFDE994B68C7AA – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_78b0cde91c92ee91\iexplore.exe
[2012/06/02 08:52:21 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=610F6596921C4BAA8834ADBB9BE272EE – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16447_none_b4b894b1a4124f08\iexplore.exe
[2012/08/24 03:49:25 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=62188720CE27B982B4285C03163C9FB3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20557_none_bf8c0be2f198ccbe\iexplore.exe
[2013/05/16 19:34:33 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=67EE46FD4D3B56531C5DD1BDC149275A – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16490_none_bed02d61d8a1eb57\iexplore.exe
[2013/01/08 18:42:06 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=698EB1E5F8C66344D97C00B5699E871D – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16464_none_bef49e4dd885fce0\iexplore.exe
[2008/04/25 00:28:44 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=699D1D2EAF5C80E7361809B0ED8AE773 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16681_none_8944ddd0d57559ed\iexplore.exe
[2009/04/24 12:27:28 | 000,711,432 | —- | M] (Microsoft Corporation) MD5=6B9F780596A6FA37909A1E17B13DB8F3 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21046_none_89fe97abee6e3636\iexplore.exe
[2010/05/04 02:57:44 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=6E4A7132FE953AFFAE00B15835404564 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_6e5c2396e8322c96\iexplore.exe
[2009/01/15 00:59:48 | 000,709,800 | —- | M] (Microsoft Corporation) MD5=724BC813643C688280F353EC23128A66 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20996_none_89c8afedee968ea9\iexplore.exe
[2010/06/26 02:06:48 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=7420BE0E7D3D1320054F7ACA0594953D – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18943_none_78962c9f1ca7a7c0\iexplore.exe
[2010/12/18 03:19:44 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=7852371DA9EFBC17B645558E23780EAC – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23111_none_793e10bc35aef44b\iexplore.exe
[2009/03/08 17:09:11 | 000,661,344 | —- | M] (Microsoft Corporation) MD5=7A81E0CECAE7B98459A073981F0124D5 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18702_none_6e6bbde6e827625c\iexplore.exe
[2013/02/02 04:09:12 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=7C2923004FFC497E54F38E835F108EE8 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20580_none_b50fefc6bd56ad35\iexplore.exe
[2009/08/27 09:31:08 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=7DD482E4A2E3CBB0A72F718C342F5B75 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22918_none_794538ba35a87543\iexplore.exe
[2012/10/03 18:53:29 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=7FC9E840B32E9DFBFBBA92BA5E9B97C2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20562_none_bf7c3a84f1a569fc\iexplore.exe
[2010/02/23 03:03:07 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=81AF4A1549710310E56B43C4D3F3657C – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18904_none_6e6dc246e8258f58\iexplore.exe
[2010/09/08 02:49:26 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=827BE3F3C80787B00F19E36B19531197 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18975_none_6e23131ce85d6c46\iexplore.exe
[2009/04/24 12:32:29 | 000,711,432 | —- | M] (Microsoft Corporation) MD5=8679C8CD9690758AF0984290A1843E72 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16851_none_89655160d55d0068\iexplore.exe
[2010/01/02 02:40:20 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=88BD42DAE7CFFEB256CA7145A15E4843 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18882_none_7869eabf1cc90106\iexplore.exe
[2012/11/14 01:19:40 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=8ACFFA754B6ED028B8689CAD00FC2BCB – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20565_none_b52a9110bd41f406\iexplore.exe
[2009/11/21 02:53:25 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=8ADB04E86E8A38307D0663CD002BFFD1 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18865_none_6e2de122e855532e\iexplore.exe
[2010/12/18 02:56:48 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=8F69AE4F1AC2E1D2C34348D519007A2C – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19019_none_6e67cbeee8295d3e\iexplore.exe
[2011/05/30 20:52:50 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16421_none_bf1cdd1fd8684117\iexplore.exe
[2010/11/02 03:13:47 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=92A17B0A89D14815AACC62CD190B6CE3 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23091_none_78e78f7635efd6ac\iexplore.exe
[2008/02/21 00:43:03 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=9437CA21CD48C9B6BFD6F5AC0143D251 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16643_none_93c6c86709b3ded2\iexplore.exe
[2012/10/03 19:08:28 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=96A360002311ECE53952AF2F5B4CD64E – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16455_none_bf006e83d87cfa46\iexplore.exe
[2011/02/22 03:18:28 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=9CE5543464432CA73134F170FA2BF823 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23143_none_791fa18c35c57acc\iexplore.exe
[2010/05/04 02:59:11 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=9D0512508DBDD31DA29BC05941417101 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_6ef166d40146ffe1\iexplore.exe
[2008/04/24 22:04:08 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=9F1427F203CA078005C9943800929640 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20823_none_946606f022c143e1\iexplore.exe
[2010/02/23 02:39:16 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=9F52FBE99C749E3F32C75124F09F1B03 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18904_none_78c26c991c865153\iexplore.exe
[2013/05/16 21:46:47 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=A1397D2A4924C390E55D146FB45FDF7C – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20600_none_b566710cbd15cad4\iexplore.exe
[2013/04/04 21:55:57 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=A1B0DEC3BB845C6369F97BC1A3542A07 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16483_none_b48953d9a4365970\iexplore.exe
[2013/02/02 00:19:03 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=A285E1965C115031DA02B777EE9D7689 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20580_none_bf649a18f1b76f30\iexplore.exe
[2013/05/16 18:27:11 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=A8732CEDB2C0EE7AFC08F867A47BB3EC – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20600_none_bfbb1b5ef1768ccf\iexplore.exe
[2013/02/02 03:37:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=A8EBEBCD9F5C49475194099FCD276992 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16470_none_b49122e7a430f17a\iexplore.exe
[2008/01/20 22:50:37 | 000,701,952 | —- | M] (Microsoft Corporation) MD5=AC2C3BAFD177B60C3B5E4DDBCC2C2DB3 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_8b809b8cd25bf1ff\iexplore.exe
[2013/05/29 02:24:18 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=AFF2C99AD2C599108B6BD9E77C24B463 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16496_none_b48184cba43bc166\iexplore.exe
[2013/02/22 03:17:45 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=B21A57AA4CB928059A0C0C58A9E77A02 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20586_none_b515f182bd51453f\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2009/03/08 17:09:24 | 000,638,816 | —- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18702_none_78c068391c882457\iexplore.exe
[2010/01/02 11:15:56 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=B7ECFA3A546360E2A39ADBE1D773F3DC – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22973_none_6eaaad6e017cdc3b\iexplore.exe
[2010/12/18 02:28:35 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=B988D7F127B94BD5BF8356FE81B985C4 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19019_none_78bc76411c8a1f39\iexplore.exe
[2012/06/02 04:51:58 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=BE967C74B89577B78FB57C061E12B04C – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20553_none_bf880abaf19c6762\iexplore.exe
[2013/04/04 17:55:02 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=C036AB1ED8BAC04FE4A349BA263077BB – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20593_none_bf5ccb0af1bcd726\iexplore.exe
[2011/02/22 02:21:12 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=C1D36A2CBE0CEC4DF593DB1288CF586E – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19048_none_789b06331ca359b5\iexplore.exe
[2009/07/21 17:53:43 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=C33BD196A0301F9B23D9A003D30ED8B0 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18813_none_78b69a7d1c8f56c6\iexplore.exe
[2009/07/21 18:12:12 | 000,660,744 | —- | M] (Microsoft Corporation) MD5=C45FA4DA458E0B3C9636B09488029BDD – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18813_none_6e61f02ae82e94cb\iexplore.exe
[2013/04/04 20:40:37 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=C4A4F4AD91677DA1659A9ADE63746B8B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20593_none_b50820b8bd5c152b\iexplore.exe
[2010/01/02 03:09:58 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=C9256212D298D96FE0F63D69ECD9CE97 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18882_none_6e15406ce8683f0b\iexplore.exe
[2013/05/29 01:56:53 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=C9C29508A433DAF0118D28C4F38CDDFC – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20606_none_b56c72c8bd1062de\iexplore.exe
[2009/08/27 10:04:11 | 000,660,744 | —- | M] (Microsoft Corporation) MD5=CBDEB65EDCC5E574F43F1EF79E54C8A1 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22918_none_6ef08e680147b348\iexplore.exe
[2010/02/23 12:03:02 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=D1978C9901DAA9A1C2EE78A707B1449A – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22995_none_6e970e2a018b46cb\iexplore.exe
[2009/04/24 12:03:18 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=D5271AC4A06AD9D1E2EA0151B79B2657 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21046_none_945341fe22cef831\iexplore.exe
[2010/09/08 02:02:42 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=D5A730DFDEAE005373E62BC2A866E3BB – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18975_none_7877bd6f1cbe2e41\iexplore.exe
[2009/04/24 12:01:36 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=D6157423C117F24D24695866A1D0A93F – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22418_none_965c1ac01fdb31e2\iexplore.exe
[2009/01/15 00:50:38 | 000,709,800 | —- | M] (Microsoft Corporation) MD5=D6F4816C6B7BE9A125E138B903C2B0EF – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16809_none_89a3634cd52d3f6b\iexplore.exe
[2010/09/08 03:28:01 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=D93AB1673986658EF1931FA751BCCF69 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23067_none_6eb956a4017158e8\iexplore.exe
[2013/02/02 00:19:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=DDE5A0DFAF7C6370FB36402D7A746ED3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16470_none_bee5cd39d891b375\iexplore.exe
[2011/02/22 03:54:38 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=E79C480F9DCD7512AAB9727A533CB152 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23143_none_6ecaf73a0164b8d1\iexplore.exe
[2009/11/21 11:05:17 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=E7F8DF50E483D165BB01F367D3519AA7 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22956_none_7917f87635cab259\iexplore.exe
[2010/06/26 02:31:23 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=E9D8A71AFDCA528A184C1498E22A8241 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18943_none_6e41824ce846e5c5\iexplore.exe
[2013/05/28 22:24:32 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=EE12BA876C4190532A4085994BA9B616 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16496_none_bed62f1dd89c8361\iexplore.exe
[2013/01/08 20:51:57 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=EF1F6F41FB2C9BBB484B21017F380201 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20573_none_b51dc090bd4bdd49\iexplore.exe
[2013/01/08 17:32:42 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F05982E56ABD835AA8DF260EEC873E5B – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20573_none_bf726ae2f1ac9f44\iexplore.exe
[2010/06/26 02:52:42 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=F05B3A2C6CB319DD1377AD566CF5ECE5 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23040_none_791c9ec835c831a0\iexplore.exe
[2009/01/15 00:18:47 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=F0B1CA517977BA2FF6DA33F1B966C488 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20996_none_941d5a4022f750a4\iexplore.exe
[2011/05/30 20:52:47 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16421_none_b4c832cda4077f1c\iexplore.exe
[2009/04/24 12:08:04 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=F294D8EEB05C835EC44A12CE0A1DFE7A – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18248_none_95b20c4b06d5e8c4\iexplore.exe
[2010/11/02 03:42:15 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=F686191623AC22EE2521C2D17157B199 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23091_none_6e92e524018f14b1\iexplore.exe
[2012/11/13 22:19:28 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F691418EE9A6344AEB5C1B0518FBF8AE – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20565_none_bf7f3b62f1a2b601\iexplore.exe
[2010/06/28 14:17:01 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=F896A6A9965B9C64061BE97F6D84B075 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23040_none_6ec7f47601676fa5\iexplore.exe
[2012/05/17 21:37:57 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=F8B2D47ED17C1D087D14EC747E5AC57A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20551_none_b5315fd4bd3d72b9\iexplore.exe
[2013/07/24 23:58:46 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=FA5B33E7BB143BCE846C303B528E8D62 – C:\Program Files\Internet Explorer\iexplore.exe
[2013/07/24 23:58:46 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=FA5B33E7BB143BCE846C303B528E8D62 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16502_none_b4ded4d5a3f65db8\iexplore.exe
[2010/12/18 03:54:56 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=FC6DC0E786A4D2E7DA6E9C012ED2E64F – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23111_none_6ee9666a014e3250\iexplore.exe
[2012/11/14 03:11:18 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=FD0D2E1FAEBAE5031BE2EB8000D973F1 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16457_none_b4adc4c5a41a6af9\iexplore.exe
[2009/04/24 12:23:20 | 000,711,448 | —- | M] (Microsoft Corporation) MD5=FD4E1EF226A34D093AAD475B94C5E36E – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18248_none_8b5d61f8d27526c9\iexplore.exe
[2009/07/22 02:30:13 | 000,660,744 | —- | M] (Microsoft Corporation) MD5=FDCF656D4B4E116D9C932AD2868FD811 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22903_none_6ef65ce2014418a4\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2009/03/08 18:15:57 | 000,004,608 | —- | M] (Microsoft Corporation) MD5=11E9431B29BD64A1FB13369BB8AD4116 – C:\Windows\winsxs\amd64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_8.0.6001.18702_en-us_7c9630f422ee47f7\iexplore.exe.mui
[2011/05/30 20:52:48 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2011/05/30 20:52:48 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.1.8112.16421_en-us_ae74c844dbb4c003\iexplore.exe.mui
[2006/11/02 11:13:34 | 000,016,384 | —- | M] (Microsoft Corporation) MD5=3CCDDDBC49DEACA370F39A9F0E146A1B – C:\Windows\winsxs\wow64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a1c8f6f0449888c1\iexplore.exe.mui
[2011/05/30 20:52:51 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2011/05/30 20:52:51 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.1.8112.16421_en-us_b8c97297101581fe\iexplore.exe.mui
[2009/03/08 17:27:11 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=943030B55FDB56FB8B8FCC086071E119 – C:\Windows\winsxs\wow64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_8.0.6001.18702_en-us_86eadb46574f09f2\iexplore.exe.mui
[2006/11/02 11:13:29 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=D421BD7B9646679254B0D855823C6F21 – C:\Windows\winsxs\amd64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_97744c9e1037c6c6\iexplore.exe.mui

< MD5 for: SERVICES >
[2006/09/18 17:37:24 | 000,017,244 | —- | M] () MD5=9F534244B7F8F55D5C0BB498D8D481E7 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\drivers\etc\services
[2006/09/18 17:37:24 | 000,017,244 | —- | M] () MD5=9F534244B7F8F55D5C0BB498D8D481E7 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_5e6cdbf5b2cd5bcb\services
[2006/09/18 17:37:24 | 000,017,244 | —- | M] () MD5=9F534244B7F8F55D5C0BB498D8D481E7 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6001.18000_none_60a39df1afb86c9f\services

< MD5 for: SERVICES.ASPX >
[2010/10/27 22:39:16 | 000,000,634 | R— | M] () MD5=40F511B512E96BAB627EA91E224DFA05 – C:\Windows\Installer\$PatchCache$\Managed\02D425C090410500A8E9C0C494E0E445\5.0.9690\services.aspx
[2013/01/13 12:35:14 | 000,000,677 | —- | M] () MD5=C5FCE7C144E4BF4F873421EBC0E5D7A2 – C:\Program Files\Microsoft Dynamics CRM\Client\res\web\ResourceCenter\services.aspx

< MD5 for: SERVICES.CFG >
[2013/05/10 03:57:30 | 000,558,879 | —- | M] () MD5=3679F8D3253DC110D1D8F2AE115EE00C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg
[2013/05/10 03:57:30 | 000,558,879 | —- | M] () MD5=3679F8D3253DC110D1D8F2AE115EE00C – C:\Users\Karri\AppData\Local\Temp\Services.cfg
[2011/06/06 12:55:30 | 000,584,045 | R— | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\services.cfg

< MD5 for: SERVICES.EXE >
[2006/11/02 07:16:09 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=0A87F57DFC2C0EB9BBA8BE1C87BAFE1A – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\services.exe
[2006/11/02 07:16:09 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=0A87F57DFC2C0EB9BBA8BE1C87BAFE1A – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_294799ef88bb616c\services.exe
[2008/01/20 22:50:34 | 000,279,040 | —- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
[2009/04/11 03:10:50 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=934E0B7D77FF78C18D9F8891221B6DE3 – C:\Windows\erdnt\cache64\services.exe
[2009/04/11 03:10:50 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=934E0B7D77FF78C18D9F8891221B6DE3 – C:\Windows\SysNative\services.exe
[2009/04/11 03:10:50 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=934E0B7D77FF78C18D9F8891221B6DE3 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_2d69d4f782c83d8c\services.exe
[2009/04/11 02:27:59 | 000,279,552 | —- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B – C:\Windows\SysWOW64\services.exe
[2009/04/11 02:27:59 | 000,279,552 | —- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe
[2008/01/20 22:49:44 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=DFAC660F0F139276CC9299812DE42719 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_2b7e5beb85a67240\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2006/11/02 11:13:31 | 000,017,920 | —- | M] (Microsoft Corporation) MD5=1626EACF0E7E59F85C59DDDD27C4169C – C:\Windows\SysWOW64\en-US\services.exe.mui
[2006/11/02 11:13:31 | 000,017,920 | —- | M] (Microsoft Corporation) MD5=1626EACF0E7E59F85C59DDDD27C4169C – C:\Windows\winsxs\x86_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_67c6851b290a1ced\services.exe.mui
[2006/11/02 07:26:35 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\en-US\services.exe.mui
[2006/11/02 07:26:35 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_c3e5209ee1678e23\services.exe.mui
[2006/11/02 11:13:56 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\Windows\SysNative\en-US\services.exe.mui
[2006/11/02 11:13:56 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_c3e5209ee1678e23\services.exe.mui

< MD5 for: SERVICES.JS >
[2010/10/27 22:38:52 | 000,001,636 | R— | M] () MD5=048B0F852A5BBB2A17B4DC2DD9E4A0B9 – C:\Windows\Installer\$PatchCache$\Managed\02D425C090410500A8E9C0C494E0E445\5.0.9690\services.js
[2013/01/13 12:33:18 | 000,002,251 | —- | M] () MD5=22E454857F4819C08D898E951A9ACEAB – C:\Program Files\Microsoft Dynamics CRM\Client\res\web\_static\SM\services\services.js

< MD5 for: SERVICES.LNK >
[2008/01/20 23:20:59 | 000,001,688 | —- | M] () MD5=EFDD08F4E5E26430885F26F0C35B8C62 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2008/01/20 23:20:59 | 000,001,688 | —- | M] () MD5=EFDD08F4E5E26430885F26F0C35B8C62 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\wbem\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_294799ef88bb616c\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2006/09/18 17:46:11 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysWOW64\wbem\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_2b7e5beb85a67240\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_2d69d4f782c83d8c\services.mof
[2006/09/18 17:46:11 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.mof
[2006/09/18 17:46:11 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.mof

< MD5 for: SERVICES.MSC >
[2006/11/02 11:13:51 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2006/09/18 17:29:41 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2006/11/02 11:14:00 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2006/09/18 17:29:40 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2006/11/02 11:13:51 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.0.6000.16386_en-us_fe26f08ab7d12816\services.msc
[2006/09/18 17:29:41 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6001.18000_none_2b827e27fe185619\services.msc
[2006/11/02 11:14:00 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a2085506ff73b6e0\services.msc
[2006/09/18 17:29:40 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6001.18000_none_cf63e2a445bae4e3\services.msc

< MD5 for: WINLOGON.EXE >
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\erdnt\cache64\winlogon.exe
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\SysNative\winlogon.exe
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_cdcd15a68a70b877\winlogon.exe
[2008/01/20 22:49:47 | 000,406,016 | —- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe
[2009/04/11 02:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\SysWOW64\winlogon.exe
[2009/04/11 02:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2006/11/02 07:16:20 | 000,397,312 | —- | M] (Microsoft Corporation) MD5=9642EED809219A2F914DD8E40A09C48B – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\winlogon.exe
[2006/11/02 07:16:20 | 000,397,312 | —- | M] (Microsoft Corporation) MD5=9642EED809219A2F914DD8E40A09C48B – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_c9aada9e9063dc57\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008/01/20 22:50:38 | 000,314,880 | —- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2008/01/20 22:52:39 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=1DB95B0920FA9783476AC46F187C06F6 – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2008/01/20 22:52:39 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=1DB95B0920FA9783476AC46F187C06F6 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6001.18000_en-us_27172d0ebc73e370\winlogon.exe.mui
[2008/01/20 22:52:28 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=26AC28BF50DC112BAA794A83E08588F0 – C:\Windows\SysWOW64\en-US\winlogon.exe.mui
[2008/01/20 22:52:28 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=26AC28BF50DC112BAA794A83E08588F0 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6001.18000_en-us_caf8918b0416723a\winlogon.exe.mui
[2006/11/02 07:25:07 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=2D30AB05DBA78517B34C0AAC71DF5299 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\en-US\winlogon.exe.mui
[2006/11/02 07:25:07 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=2D30AB05DBA78517B34C0AAC71DF5299 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6000.16386_en-us_24e06b12bf88d29c\winlogon.exe.mui
[2006/11/02 11:13:52 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=2D30AB05DBA78517B34C0AAC71DF5299 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6000.16386_en-us_24e06b12bf88d29c\winlogon.exe.mui
[2006/11/02 11:13:03 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=A1D2856F3EC3C86EBBF1442B0245A8B3 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6000.16386_en-us_c8c1cf8f072b6166\winlogon.exe.mui

< MD5 for: WINLOGON.MOF >
[2006/11/02 09:54:54 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\wbem\winlogon.mof
[2006/11/02 09:54:54 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.0.6000.16386_none_da20a358315a3dca\winlogon.mof
[2006/09/18 17:38:40 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\SysNative\wbem\winlogon.mof
[2006/09/18 17:41:56 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\SysWOW64\wbem\winlogon.mof
[2006/09/18 17:38:40 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.0.6000.16386_none_da20a358315a3dca\winlogon.mof
[2006/09/18 17:41:56 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\winsxs\x86_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.0.6000.16386_none_7e0207d478fccc94\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2008/10/28 12:09:45 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2013/01/03 21:43:22 | 000,051,675 | —- | M] () – C:\ComboFix.txt
[2013/09/03 08:25:08 | 244,588,542 | -HS- | M] () – C:\pagefile.sys
[2008/10/28 08:47:02 | 000,000,607 | —- | M] () – C:\RHDSetup.log
[2013/01/03 20:55:34 | 000,005,490 | —- | M] () – C:\TDSSKiller.2.8.15.0_03.01.2013_19.55.10_log.txt
[2013/01/03 20:57:36 | 000,133,486 | —- | M] () – C:\TDSSKiller.2.8.15.0_03.01.2013_19.55.51_log.txt
[2013/01/04 09:43:30 | 000,133,616 | —- | M] () – C:\TDSSKiller.2.8.15.0_04.01.2013_08.41.38_log.txt
[2013/01/04 12:31:59 | 000,135,422 | —- | M] () – C:\TDSSKiller.2.8.15.0_04.01.2013_11.28.46_log.txt
[2010/01/01 14:54:04 | 000,000,927 | —- | M] () – C:\updatedatfix.log

< %systemroot%\Fonts\*.com >
[2006/11/02 11:06:41 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 11:06:41 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 11:06:41 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/09/20 21:32:20 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 17:35:48 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2006/10/19 10:00:56 | 000,187,392 | —- | M] () – C:\Windows\Acer(Normal).scr
[2006/10/19 10:00:56 | 000,187,392 | —- | M] () – C:\Windows\Acer(Wide).scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 23:21:59 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C is ACER
Volume Serial Number is F2EA-6F6E
Directory of C:\
02/11/2006 11:42 AM Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\ACER\Preload\Acer\Recovery
30/03/2009 10:32 PM HPartition [\??\Volume{be54870c-1c9c-11de-84bd-806e6f6e6963}\]
0 File(s) 0 bytes
Directory of C:\ProgramData
02/11/2006 11:42 AM Application Data [C:\ProgramData]
02/11/2006 11:42 AM Desktop [C:\Users\Public\Desktop]
02/11/2006 11:42 AM Documents [C:\Users\Public\Documents]
02/11/2006 11:42 AM Favorites [C:\Users\Public\Favorites]
02/11/2006 11:42 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
02/11/2006 11:42 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users
02/11/2006 11:42 AM All Users [C:\ProgramData]
02/11/2006 11:42 AM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\All Users
02/11/2006 11:42 AM Application Data [C:\ProgramData]
02/11/2006 11:42 AM Desktop [C:\Users\Public\Desktop]
02/11/2006 11:42 AM Documents [C:\Users\Public\Documents]
02/11/2006 11:42 AM Favorites [C:\Users\Public\Favorites]
02/11/2006 11:42 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
02/11/2006 11:42 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default
02/11/2006 11:42 AM Application Data [C:\Users\Default\AppData\Roaming]
02/11/2006 11:42 AM Local Settings [C:\Users\Default\AppData\Local]
02/11/2006 11:42 AM My Documents [C:\Users\Default\Documents]
02/11/2006 11:42 AM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
02/11/2006 11:42 AM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
02/11/2006 11:42 AM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
02/11/2006 11:42 AM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
02/11/2006 11:42 AM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
02/11/2006 11:42 AM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
02/11/2006 11:42 AM Application Data [C:\Users\Default\AppData\Local]
02/11/2006 11:42 AM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
02/11/2006 11:42 AM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
02/11/2006 11:42 AM My Music [C:\Users\Default\Music]
02/11/2006 11:42 AM My Pictures [C:\Users\Default\Pictures]
02/11/2006 11:42 AM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Guest
12/11/2009 05:53 PM Application Data [C:\Users\Guest\AppData\Roaming]
12/11/2009 05:53 PM Cookies [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Cookies]
12/11/2009 05:53 PM Local Settings [C:\Users\Guest\AppData\Local]
12/11/2009 05:53 PM My Documents [C:\Users\Guest\Documents]
12/11/2009 05:53 PM NetHood [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
12/11/2009 05:53 PM PrintHood [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
12/11/2009 05:53 PM Recent [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Recent]
12/11/2009 05:53 PM SendTo [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\SendTo]
12/11/2009 05:53 PM Start Menu [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu]
12/11/2009 05:53 PM Templates [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Guest\AppData\Local
12/11/2009 05:53 PM Application Data [C:\Users\Guest\AppData\Local]
12/11/2009 05:53 PM History [C:\Users\Guest\AppData\Local\Microsoft\Windows\History]
12/11/2009 05:53 PM Temporary Internet Files [C:\Users\Guest\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Guest\Documents
12/11/2009 05:53 PM My Music [C:\Users\Guest\Music]
12/11/2009 05:53 PM My Pictures [C:\Users\Guest\Pictures]
12/11/2009 05:53 PM My Videos [C:\Users\Guest\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Karri
29/03/2009 08:28 PM Application Data [C:\Users\Karri\AppData\Roaming]
29/03/2009 08:28 PM Cookies [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Cookies]
29/03/2009 08:28 PM Local Settings [C:\Users\Karri\AppData\Local]
29/03/2009 08:28 PM My Documents [C:\Users\Karri\Documents]
29/03/2009 08:28 PM NetHood [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
29/03/2009 08:28 PM PrintHood [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
29/03/2009 08:28 PM Recent [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Recent]
29/03/2009 08:28 PM SendTo [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\SendTo]
29/03/2009 08:28 PM Start Menu [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu]
29/03/2009 08:28 PM Templates [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Karri\AppData\Local
29/03/2009 08:28 PM Application Data [C:\Users\Karri\AppData\Local]
29/03/2009 08:28 PM History [C:\Users\Karri\AppData\Local\Microsoft\Windows\History]
29/03/2009 08:28 PM Temporary Internet Files [C:\Users\Karri\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Karri\Documents
29/03/2009 08:28 PM My Music [C:\Users\Karri\Music]
29/03/2009 08:28 PM My Pictures [C:\Users\Karri\Pictures]
29/03/2009 08:28 PM My Videos [C:\Users\Karri\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Pat
09/04/2011 02:34 PM Application Data [C:\Users\Pat\AppData\Roaming]
09/04/2011 02:34 PM Cookies [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Cookies]
09/04/2011 02:34 PM Local Settings [C:\Users\Pat\AppData\Local]
09/04/2011 02:34 PM My Documents [C:\Users\Pat\Documents]
09/04/2011 02:34 PM NetHood [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/04/2011 02:34 PM PrintHood [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/04/2011 02:34 PM Recent [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Recent]
09/04/2011 02:34 PM SendTo [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\SendTo]
09/04/2011 02:34 PM Start Menu [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Start Menu]
09/04/2011 02:34 PM Templates [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Pat\AppData\Local
09/04/2011 02:34 PM Application Data [C:\Users\Pat\AppData\Local]
09/04/2011 02:34 PM History [C:\Users\Pat\AppData\Local\Microsoft\Windows\History]
09/04/2011 02:34 PM Temporary Internet Files [C:\Users\Pat\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Pat\Documents
09/04/2011 02:34 PM My Music [C:\Users\Pat\Music]
09/04/2011 02:34 PM My Pictures [C:\Users\Pat\Pictures]
09/04/2011 02:34 PM My Videos [C:\Users\Pat\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
02/11/2006 11:42 AM My Music [C:\Users\Public\Music]
02/11/2006 11:42 AM My Pictures [C:\Users\Public\Pictures]
02/11/2006 11:42 AM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser
18/11/2012 11:58 PM Application Data [C:\Users\UpdatusUser\AppData\Roaming]
18/11/2012 11:58 PM Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
18/11/2012 11:58 PM Local Settings [C:\Users\UpdatusUser\AppData\Local]
18/11/2012 11:58 PM My Documents [C:\Users\UpdatusUser\Documents]
18/11/2012 11:58 PM NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
18/11/2012 11:58 PM PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
18/11/2012 11:58 PM Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
18/11/2012 11:58 PM SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
18/11/2012 11:58 PM Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
18/11/2012 11:58 PM Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\AppData\Local
18/11/2012 11:58 PM Application Data [C:\Users\UpdatusUser\AppData\Local]
18/11/2012 11:58 PM History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
18/11/2012 11:58 PM Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\Documents
18/11/2012 11:58 PM My Music [C:\Users\UpdatusUser\Music]
18/11/2012 11:58 PM My Pictures [C:\Users\UpdatusUser\Pictures]
18/11/2012 11:58 PM My Videos [C:\Users\UpdatusUser\Videos]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
98 Dir(s) 58,846,158,848 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/05/31 21:14:29 | 000,000,286 | -HS- | M] () – C:\Users\Karri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2013/09/02 17:28:49 | 002,092,792 | —- | M] () – C:\Users\Karri\Desktop\avira_free_antivirus.exe
[2013/09/03 08:59:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Karri\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Files - Unicode (All) ==========
[2013/09/02 16:07:34 | 095,286,781 | —- | M] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ᷟ舶Ÿ
[2013/09/02 16:07:34 | 095,286,781 | —- | C] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ᷟ舶Ÿ
[2013/09/01 14:25:15 | 095,199,041 | —- | M] ()(C:\Windows\SysWow64\???L) – C:\Windows\SysWow64\득왲L
[2013/09/01 08:25:29 | 095,199,041 | —- | C] ()(C:\Windows\SysWow64\???L) – C:\Windows\SysWow64\득왲L

========== Alternate Data Streams ==========

@Alternate Data Stream - 94 bytes -> C:\ProgramData\Temp:D5AA39DD
@Alternate Data Stream - 257 bytes -> C:\ProgramData\Temp:36608448
@Alternate Data Stream - 252 bytes -> C:\ProgramData\Temp:1E288DA3
@Alternate Data Stream - 251 bytes -> C:\ProgramData\Temp:AE289451
@Alternate Data Stream - 247 bytes -> C:\ProgramData\Temp:7D288858
@Alternate Data Stream - 247 bytes -> C:\ProgramData\Temp:0E61938B
@Alternate Data Stream - 242 bytes -> C:\ProgramData\Temp:FEE00EB9
@Alternate Data Stream - 237 bytes -> C:\ProgramData\Temp:2EB79F01
@Alternate Data Stream - 236 bytes -> C:\ProgramData\Temp:F2327E82
@Alternate Data Stream - 236 bytes -> C:\ProgramData\Temp:DE6EED8B
@Alternate Data Stream - 235 bytes -> C:\ProgramData\Temp:35629AE6
@Alternate Data Stream - 233 bytes -> C:\ProgramData\Temp:CEE4A457
@Alternate Data Stream - 230 bytes -> C:\ProgramData\Temp:08DB8D99
@Alternate Data Stream - 229 bytes -> C:\ProgramData\Temp:3B07E6F4
@Alternate Data Stream - 229 bytes -> C:\ProgramData\Temp:349E5B74
@Alternate Data Stream - 225 bytes -> C:\ProgramData\Temp:10D45FC3
@Alternate Data Stream - 224 bytes -> C:\ProgramData\Temp:4B244549
@Alternate Data Stream - 223 bytes -> C:\ProgramData\Temp:38D2EA83
@Alternate Data Stream - 222 bytes -> C:\ProgramData\Temp:5AE33054
@Alternate Data Stream - 222 bytes -> C:\ProgramData\Temp:014BC3B4
@Alternate Data Stream - 221 bytes -> C:\ProgramData\Temp:3C0887BF
@Alternate Data Stream - 218 bytes -> C:\ProgramData\Temp:41884BBE
@Alternate Data Stream - 216 bytes -> C:\ProgramData\Temp:CB0FEE2B
@Alternate Data Stream - 216 bytes -> C:\ProgramData\Temp:169E7AC5
@Alternate Data Stream - 214 bytes -> C:\ProgramData\Temp:A9ABA3FF
@Alternate Data Stream - 210 bytes -> C:\ProgramData\Temp:ED9B661E
@Alternate Data Stream - 196 bytes -> C:\ProgramData\Temp:3D36932D
@Alternate Data Stream - 194 bytes -> C:\ProgramData\Temp:260575F1
@Alternate Data Stream - 162 bytes -> C:\Users\Karri\Desktop\DSCN1040.JPG:com.dropbox.attributes
@Alternate Data Stream - 161 bytes -> C:\Users\Karri\Desktop\DSCF4335.JPG:com.dropbox.attributes
@Alternate Data Stream - 161 bytes -> C:\Users\Karri\Desktop\DSC00973.JPG:com.dropbox.attributes
@Alternate Data Stream - 161 bytes -> C:\Users\Karri\Desktop\DSC00367.JPG:com.dropbox.attributes
@Alternate Data Stream - 160 bytes -> C:\Users\Karri\Desktop\HPIM1144.jpg:com.dropbox.attributes
@Alternate Data Stream - 160 bytes -> C:\Users\Karri\Desktop\_DSC0198.JPG:com.dropbox.attributes
@Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:6301CE40
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:2A8A3140
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:E9900C74
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:4B70A9FA
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:908A1B53
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:6E11933F
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:1B3549F2
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:7BB584AA
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:274516E7
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:131C0EE9
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:57173DB4
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:3AC0ED43
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:C9BC8592
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:793F316E
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:92DB4653
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:8AB6C1D7
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:CFF6B3FF
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:490BCC52
@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:DCA79AB3
@Alternate Data Stream - 111 bytes -> C:\ProgramData\Temp:2CED8825
@Alternate Data Stream - 108 bytes -> C:\ProgramData\Temp:FC60E0F8
@Alternate Data Stream - 108 bytes -> C:\ProgramData\Temp:861A898F
@Alternate Data Stream - 107 bytes -> C:\ProgramData\Temp:580E04D8
@Alternate Data Stream - 104 bytes -> C:\ProgramData\Temp:4F636E25

< End of report >

Hi and Welcome!! FreyjaGoddess

My name is Robybel.

I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

• I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
• The fixes are specific to your problem and should only be used for the issues on this machine.
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
• It's often worth reading through these instructions and printing them for ease of reference.
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
• Please reply to this thread. Do not start a new topic.

IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Vista and Windows 7 users:

These tools MUST be run from the executable. (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

Having said that….Let's get going!!

======================================

You miss Extras.txt Please post it in your next reply

Next

P2P Programs:

P2P programs are a major source of Malware infections.
From your log I see you have uTorrentand Limewire We do not pass judgment on file-sharing, however we must inform you that engaging in this activity and having this kind of software installed on your system will always make you more susceptible to Malware infections.
The use of P2P programs may be contributing to your current situation, and you would certainly be doing yourself a favour by removing them.
If you wish to keep the program(s), please do not use them until your computer is cleaned.

Information regarding the risk of using these programs can be found from here and here

Next

Download Security Check by screen317 from here or here.

• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Next

[external image: Posted Image] AdwCleaner

Double click on AdwCleaner.exe to run the tool again.

• Click on the Scan button.
• AdwCleaner will begin to scan your computer like it did before.
• After the scan has finished…
• This time, click on the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

Next

[external image: Posted Image] Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

Next

• Download RogueKiller and save it to your desktop.
• Quit all other programs
• Start RogueKiller.exe
• Wait until the Prescan has finished …
• Click on Scan
  [external image: Posted Image]
• Wait for the end of the scan
• A report will be created on your desktop.
• Click on the Delete button
  [external image: Posted Image]
• Next click on the ShortcutsFix
  [external image: Posted Image]
• another report will be created on your desktop.

Please post: All RKreport.txt text files located on your desktop.

On your next reply please post :

• Extras.txt
• checkup.txt
• AdwCleaner[S1].txt
• JRT.txt
• All RKreport.txt

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Ok. I had to do some stuff on my computer to (hopefully) get rid of that mess so I am going to start over. When I use OTL, I only get 1 log and this is it:

OTL logfile created on: 08/09/2013 9:19:54 AM - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Karri\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

7.93 Gb Total Physical Memory | 4.13 Gb Available Physical Memory | 52.06% Memory free
15.98 Gb Paging File | 10.46 Gb Available in Paging File | 65.42% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 232.59 Gb Total Space | 56.94 Gb Free Space | 24.48% Space Free | Partition Type: NTFS
Drive D: | 348.93 Gb Total Space | 90.22 Gb Free Space | 25.86% Space Free | Partition Type: NTFS
Drive J: | 295.02 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF
Drive N: | 3.79 Gb Total Space | 3.79 Gb Free Space | 100.00% Space Free | Partition Type: FAT32
Drive O: | 930.95 Gb Total Space | 813.57 Gb Free Space | 87.39% Space Free | Partition Type: FAT32

Computer Name: KARRI-PC | User Name: Karri | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Users\Karri\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
PRC - C:\Users\Karri\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe (Google)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
PRC - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
PRC - C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Capture.exe ()
PRC - C:\Users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe (SanDisk Corporation)
PRC - C:\Users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe ()
PRC - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
PRC - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdateService.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdate.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaMonitorService.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaService.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe (Egis inc.)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\Intel\AMT\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Steam\bin\chromehtml.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppgooglenaclpluginchrome.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\libglesv2.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\libegl.dll ()
MOD - C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\ffmpegsumo.dll ()
MOD - C:\Program Files (x86)\Steam\SDL2.dll ()
MOD - C:\Program Files (x86)\Steam\bin\libcef.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avcodec-53.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avformat-53.dll ()
MOD - C:\Program Files (x86)\Steam\bin\avutil-51.dll ()
MOD - C:\Users\Karri\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Users\Karri\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\Common Files\LogiShrd\SharedBin\LvApi11.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTXml4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTGui4.dll ()
MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTCore4.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\vpxmd.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\SDL.dll ()
MOD - C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtNetwork4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtCore4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qico4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\plugins\imageformats\qgif4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtWebKit4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtXml4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtSql4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtOpenGL4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\QtGui4.dll ()
MOD - C:\Program Files (x86)\Logitech\Vid HD\phonon4.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
MOD - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTrayLOC.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQDEVCL.dll ()
MOD - C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMDLL.DLL ()


========== Services (SafeList) ==========

SRV:64bit: - (CrmSqlStartupSvc) – C:\Program Files\Microsoft Dynamics CRM\Client\bin\CrmSqlStartupSvc.exe (Microsoft Corporation)
SRV:64bit: - (c2wts) – C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe (Microsoft Corporation)
SRV:64bit: - (ME Services Manager) – C:\Program Files\Intel\inteldh\msm\MSM.exe (Intel® Corporation)
SRV:64bit: - (Software Services Manager) – C:\Program Files\Intel\inteldh\common\IntelDHSvcMgr.exe (Intel® Corporation)
SRV:64bit: - (LMS) – C:\Program Files\Intel\AMT\LMS.exe (Intel Corporation)
SRV:64bit: - (ETService) – C:\Program Files\Acer\Empowering Technology\Service\ETService.exe ()
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AntiVirSchedulerService) – C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) – C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (Skype C2C Service) – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (APNMCP) – C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (M4-Service) – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe ()
SRV - (UMVPFSrv) – C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Nero BackItUp Scheduler 4.0) – C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (CyberLink Live Push Update Service) – C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdateService.exe (CyberLink)
SRV - (CyberLink Live Monitor Service) – C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaMonitorService.exe (CyberLink)
SRV - (CyberLink Live Service) – C:\Program Files (x86)\CyberLink\CyberLink Live\CLSomaService.exe (CyberLink Corp.)
SRV - (eDataSecurity Service) – C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
SRV - (IAANTMON) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (Acer HomeMedia Connect Service) – C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)


========== Driver Services (SafeList) ==========

DRV:64bit: - (avipbb) – C:\Windows\SysNative\DRIVERS\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avgntflt) – C:\Windows\SysNative\DRIVERS\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avkmgr) – C:\Windows\SysNative\DRIVERS\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (cbfs3) – C:\Windows\SysNative\drivers\cbfs3.sys (EldoS Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (LVUVC64) – C:\Windows\SysNative\DRIVERS\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) – C:\Windows\SysNative\DRIVERS\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (tap0901) – C:\Windows\SysNative\DRIVERS\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (WpdUsb) – C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (sptd) – C:\Windows\SysNative\Drivers\sptd.sys ()
DRV:64bit: - (NuidFltr) – C:\Windows\SysNative\DRIVERS\NuidFltr.sys (Microsoft Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\DRIVERS\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (psdvdisk) – C:\Windows\SysNative\DRIVERS\PSDVdisk.sys (Egis Incorporated)
DRV:64bit: - (PSDNServ) – C:\Windows\SysNative\DRIVERS\PSDNServ.sys (Egis Incorporated)
DRV:64bit: - (PSDFilter) – C:\Windows\SysNative\DRIVERS\psdfilter.sys (Egis Incorporated)
DRV:64bit: - (e1yexpress) – C:\Windows\SysNative\DRIVERS\e1y60x64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\DRIVERS\iaStor.sys (Intel Corporation)
DRV:64bit: - (IntcHdmiAddService) – C:\Windows\SysNative\drivers\IntcHdmi.sys (Intel® Corporation)
DRV:64bit: - (HECIx64) – C:\Windows\SysNative\DRIVERS\HECIx64.sys (Intel Corporation)
DRV:64bit: - (NTIDrvr) – C:\Windows\SysNative\Drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV:64bit: - (UBHelper) – C:\Windows\SysNative\drivers\UBHelper.sys (NewTech Infosystems Corporation)
DRV - (int15) – C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?…p={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_m5700
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7ACAW
IE - HKCU\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?…p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.theweathernetwork.com/weather/caon0532"
FF - prefs.js..extensions.enabledAddons: %7B0113D088-8ED1-468C-B225-585A9C53B5E3%7D:1.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll (Oberon-Media )
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Karri\AppData\Local\Citrix\Plugins\79\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Karri\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Karri\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/06/27 12:28:38 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/08/04 16:11:46 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/06/27 12:28:38 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/08/04 16:11:46 | 000,000,000 | —D | M]

[2009/10/29 13:03:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Extensions
[2009/10/29 13:03:00 | 000,000,000 | —D | M] (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Extensions\[removed]
[2013/09/08 09:01:35 | 000,000,000 | —D | M] (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions
[2013/09/08 08:10:07 | 000,000,000 | —D | M] (TopArcadeHits) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\{0113D088-8ED1-468C-B225-585A9C53B5E3}
[2011/10/15 14:35:37 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2013/07/26 16:31:20 | 000,713,729 | —- | M] () (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\[removed]
[2013/09/01 20:04:08 | 000,824,302 | —- | M] () (No name found) – C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013/08/20 08:37:10 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/08/20 08:37:46 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/06/27 12:28:38 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013/06/27 12:28:39 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013/06/27 12:28:39 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013/06/27 12:28:39 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}
[2013/08/20 08:37:10 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/08/20 08:37:46 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/06/27 12:28:47 | 000,000,000 | —D | M] (Default) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/10/19 19:18:49 | 000,248,192 | —- | M] (Coupons, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll
[2012/10/19 19:18:57 | 000,248,192 | —- | M] (Coupons, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncodin
g}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter}
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Karri\AppData\Local\Google\Chrome\Application\29.0.1547.62\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npCouponPrinter.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: Microsoft Lync 2010 Meeting Join Plug-in (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npMozCouponPrinter.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\Karri\AppData\Roaming\Mozilla\plugins\npo1d.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Oberon com adapter (Enabled) = C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Citrix Online Web Deployment Plugin 1.0.0.79 (Enabled) = C:\Users\Karri\AppData\Local\Citrix\Plugins\79\npappdetector.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Karri\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: Avira SearchFree Toolbar plus Web Protection = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\
CHR - Extension: Entanglement Web App = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\3.4.9_0\
CHR - Extension: AT_JamesWhite = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkeidgmehkdjmpjodpjkepolokanalkm\3\
CHR - Extension: AdBlock = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.6_0\
CHR - Extension: Skype Click to Call = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.11.0.13348_0\
CHR - Extension: Poppit = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\2.2_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0\

O1 HOSTS File: ([2013/09/08 09:01:59 | 000,000,027 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\ActiveToolBand.dll (Egis)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O4:64bit: - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Program Files\Acer\Empowering Technology\SysMonitor.exe ()
O4:64bit: - HKLM..\Run: [eDataSecurity Loader] C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe (Egis Incorporated)
O4:64bit: - HKLM..\Run: [EmpoweringTechnology] C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot File not found
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelSWUpdateClient] C:\Program Files\Intel\inteldh\common\SWUpdateClient.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Acer Assist Launcher] C:\Program Files (x86)\Acer\Acer Assist\launcher.exe ()
O4 - HKLM..\Run: [Acer Product Registration] C:\Program Files (x86)\Acer\Acer Registration\ACE1.exe (Leader Technologies)
O4 - HKLM..\Run: [ACQTMOUSE] C:\Program Files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe ()
O4 - HKLM..\Run: [ApnTBMon] C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CLPushUpdate] C:\Program Files (x86)\CyberLink\CyberLink Live\CLPushUpdate.exe (CyberLink)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [PCMMediaSharing] C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [SansaDispatch] C:\Users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe (SanDisk Corporation)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O4 - Startup: C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver; - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver; - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: aboriginallink.ca ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: aboriginallink.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: dynamics.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: live.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoftonline.com ([portal] https in Trusted sites)
O15 - HKCU\..Trusted Domains: outlook.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: sharepoint.com ([responsetrac] https in Trusted sites)
O15 - HKCU\..Trusted Domains: sharepoint.com ([responsetrac-admin] https in Trusted sites)
O15 - HKCU\..Trusted Domains: sharepoint.com ([responsetrac-my] https in Trusted sites)
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} http://www.shockwave.com/content/trijinx/s…nx.1.0.0.86.cab (CPlayFirstTriJinxControl Object)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3DF7249C-DC40-4434-8123-8375B94A51F0}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\intu-qt2008 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-qt2009 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-tt2010 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-tt2011 - No CLSID value found
O18:64bit: - Protocol\Handler\intu-tt2012 - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\intu-qt2008 {05E53CE9-66C8-4a9e-A99F-FDB7A8E7B596} - C:\Program Files (x86)\QuickTax 2008\ic2008pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files (x86)\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-tt2010 {97A0575E-2309-4e75-8509-B1F9390C4DE7} - C:\Program Files (x86)\TurboTax 2010\ic2010pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-tt2011 {B3B5DAD9-E96D-45b4-B636-B6CF2F773DE1} - C:\Program Files (x86)\TurboTax 2011\ic2011pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\intu-tt2012 {02F985EF-502B-4597-993F-6BF9E004C138} - C:\Program Files (x86)\TurboTax 2012\ic2012pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)
O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
O22:64bit: - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysNative\CbFsMntNtf3.dll (EldoS Corporation)
O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img16.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img16.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/24 11:26:00 | 000,000,740 | R— | M] () - J:\autorun.inf – [ UDF ]
O32 - Unable to obtain root file information for disk N:\
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mkdmp3enc - C:\PROGRA~2\ACERAR~1\ACERVI~1\Kernel\Burner\MKDMP3Enc.ACM File not found
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/09/08 08:56:19 | 000,000,000 | —D | C] – C:\AdwCleaner
[2013/09/08 08:10:09 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TopArcadeHits
[2013/09/03 08:59:35 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Users\Karri\Desktop\OTL.exe
[2013/09/02 19:47:14 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Roaming\Avira
[2013/09/02 19:42:54 | 000,000,000 | —D | C] – C:\ProgramData\AskPartnerNetwork
[2013/09/02 19:42:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\AskPartnerNetwork
[2013/09/02 19:42:27 | 000,000,000 | —D | C] – C:\ProgramData\APN
[2013/09/02 19:41:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013/09/02 19:41:46 | 000,132,088 | —- | C] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avipbb.sys
[2013/09/02 19:41:46 | 000,105,344 | —- | C] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avgntflt.sys
[2013/09/02 19:41:46 | 000,028,600 | —- | C] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avkmgr.sys
[2013/09/02 19:41:45 | 000,000,000 | —D | C] – C:\ProgramData\Avira
[2013/09/02 19:41:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Avira
[2013/09/02 17:19:15 | 000,000,000 | -HSD | C] – C:\AI_RecycleBin
[2013/08/28 10:49:01 | 001,706,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2013/08/28 10:49:01 | 001,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2013/08/22 23:06:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/08/22 23:06:10 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2013/08/22 23:06:08 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2013/08/22 23:06:08 | 000,000,000 | —D | C] – C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/08/18 19:39:18 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Roaming\Rainbow
[2013/08/18 19:37:21 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rush for Gold - Alaska
[2013/08/18 19:37:21 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rush for Gold - Alaska
[2013/08/18 19:37:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Rush for Gold - Alaska
[2013/08/18 19:30:41 | 000,000,000 | —D | C] – C:\ProgramData\Big Fish
[2013/08/18 19:29:08 | 000,000,000 | —D | C] – C:\Users\Karri\AppData\Local\Big Fish
[2013/08/18 19:29:07 | 000,000,000 | —D | C] – C:\BigFishCache
[2013/08/14 23:19:10 | 000,000,000 | —D | C] – C:\Windows\SysNative\MRT
[2013/08/14 23:16:50 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2013/08/14 23:16:50 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2013/08/14 23:16:50 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2013/08/14 23:16:50 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2013/08/14 23:16:49 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2013/08/14 23:16:49 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2013/08/14 23:16:49 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2013/08/14 23:16:49 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2013/08/14 23:16:48 | 002,312,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2013/08/14 23:16:48 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2013/08/14 23:16:48 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2013/08/14 23:16:48 | 000,729,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2013/08/14 23:16:47 | 000,816,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2013/08/14 23:16:47 | 000,717,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2013/08/14 23:16:47 | 000,599,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2013/08/14 18:33:28 | 004,691,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2013/08/14 18:33:28 | 001,585,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2013/08/14 18:33:28 | 000,234,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2013/08/14 18:33:28 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2013/08/14 18:33:28 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2013/08/14 18:33:28 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2013/08/14 18:33:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2013/08/14 18:33:28 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2013/08/14 18:33:28 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2013/08/14 18:33:27 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icaapi.dll
[2013/08/14 18:33:26 | 001,303,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2013/08/14 18:33:21 | 001,276,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2013/08/14 18:33:21 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2013/08/14 18:33:21 | 000,132,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2013/08/09 15:18:22 | 000,000,000 | —D | C] – C:\Users\Karri\Desktop\PHONE DUMP

========== Files - Modified Within 30 Days ==========

[2013/09/08 09:07:08 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA.job
[2013/09/08 09:01:59 | 000,065,536 | —- | M] () – C:\Windows\SysNative\Ikeext.etl
[2013/09/08 09:01:59 | 000,000,027 | —- | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2013/09/08 09:01:42 | 000,003,344 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/08 09:01:42 | 000,003,344 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/08 09:01:38 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/09/08 08:56:14 | 001,037,278 | —- | M] () – C:\Users\Karri\Desktop\adwcleaner.exe
[2013/09/08 08:46:51 | 000,132,088 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avipbb.sys
[2013/09/08 08:46:51 | 000,105,344 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avgntflt.sys
[2013/09/03 15:06:29 | 004,217,878 | —- | M] () – C:\Users\Karri\Desktop\Maroon_5_Shiver_72988.mp3
[2013/09/03 14:56:31 | 004,650,466 | —- | M] () – C:\Users\Karri\Desktop\Maroon_5_Tangled_72992.mp3
[2013/09/03 14:56:00 | 000,011,740 | -HS- | M] () – C:\Users\Karri\Desktop\Folder.jpg
[2013/09/03 14:56:00 | 000,011,740 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArt_{DE36FA42-A68C-4CA2-AE5B-4C11D5042FDF}_Large.jpg
[2013/09/03 14:55:59 | 000,002,648 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArtSmall.jpg
[2013/09/03 14:55:59 | 000,002,648 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArt_{DE36FA42-A68C-4CA2-AE5B-4C11D5042FDF}_Small.jpg
[2013/09/03 12:38:43 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/09/03 11:59:52 | 000,766,246 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/09/03 11:59:52 | 000,652,288 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/09/03 11:59:52 | 000,125,686 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013/09/03 11:57:42 | 000,041,984 | —- | M] () – C:\Users\Karri\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/09/03 09:47:09 | 006,407,775 | —- | M] () – C:\Users\Karri\Desktop\Toni_Braxton_You_re_Makin_Me_High_153366 (1).mp3
[2013/09/03 08:59:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Karri\Desktop\OTL.exe
[2013/09/02 19:45:14 | 000,000,952 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/02 19:41:51 | 000,001,905 | —- | M] () – C:\Users\Public\Desktop\Avira Control Center.lnk
[2013/09/02 19:41:17 | 000,028,600 | —- | M] (Avira Operations GmbH & Co. KG) – C:\Windows\SysNative\drivers\avkmgr.sys
[2013/09/02 17:41:15 | 000,393,832 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013/09/02 17:28:49 | 002,092,792 | —- | M] () – C:\Users\Karri\Desktop\avira_free_antivirus.exe
[2013/09/01 16:31:36 | 006,436,153 | —- | M] () – C:\Users\Karri\Desktop\Toni Braxton - You re Makin Me High - 14300 - p1.mp3
[2013/09/01 14:06:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core.job
[2013/09/01 09:58:22 | 000,002,048 | —- | M] () – C:\Users\Karri\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/09/01 09:58:22 | 000,002,046 | —- | M] () – C:\Users\Karri\Desktop\Google Chrome.lnk
[2013/08/30 21:54:38 | 008,350,032 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Stormy_Monday_69929.mp3
[2013/08/30 21:54:27 | 007,590,809 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_God_Bless_The_Child_81769.mp3
[2013/08/30 21:54:26 | 004,946,381 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Ain_t_No_Sunshine_49129.mp3
[2013/08/30 21:54:17 | 006,822,809 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Fields_Of_Gold_20046.mp3
[2013/08/30 21:53:41 | 006,456,676 | —- | M] () – C:\Users\Karri\Desktop\Eva_Cassidy_Wayfaring_Stranger_72482.mp3
[2013/08/29 20:28:23 | 000,034,175 | —- | M] () – C:\Users\Karri\Desktop\1256532_10151812894926049_1404234258_n.jpg
[2013/08/29 11:35:02 | 000,000,680 | —- | M] () – C:\Users\Karri\AppData\Local\d3d9caps.dat
[2013/08/25 19:49:42 | 008,340,514 | —- | M] () – C:\Users\Karri\Desktop\Echo and the Bunnymen - The Killing Moon.mp3
[2013/08/25 19:49:30 | 000,009,373 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Large.jpg
[2013/08/25 19:49:30 | 000,002,304 | -HS- | M] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Small.jpg
[2013/08/22 23:06:34 | 000,001,698 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2013/08/21 10:28:54 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/08/21 10:28:54 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/08/20 12:23:47 | 000,999,707 | —- | M] () – C:\Users\Karri\Desktop\scan0002.jpg
[2013/08/18 19:34:38 | 000,000,683 | —- | M] () – C:\Users\Karri\Application Data\Microsoft\Internet Explorer\Quick Launch\rush-for-gold-alaska_s1_l1_gF6467T1L1_d2141755934 - Shortcut.lnk

========== Files Created - No Company Name ==========

[2013/09/08 08:56:13 | 001,037,278 | —- | C] () – C:\Users\Karri\Desktop\adwcleaner.exe
[2013/09/03 14:56:01 | 000,011,740 | -HS- | C] () – C:\Users\Karri\Desktop\AlbumArt_{DE36FA42-A68C-4CA2-AE5B-4C11D5042FDF}_Large.jpg
[2013/09/03 14:56:01 | 000,002,648 | -HS- | C] () – C:\Users\Karri\Desktop\AlbumArt_{DE36FA42-A68C-4CA2-AE5B-4C11D5042FDF}_Small.jpg
[2013/09/03 14:55:30 | 004,650,466 | —- | C] () – C:\Users\Karri\Desktop\Maroon_5_Tangled_72992.mp3
[2013/09/03 14:55:25 | 004,217,878 | —- | C] () – C:\Users\Karri\Desktop\Maroon_5_Shiver_72988.mp3
[2013/09/03 09:46:57 | 006,407,775 | —- | C] () – C:\Users\Karri\Desktop\Toni_Braxton_You_re_Makin_Me_High_153366 (1).mp3
[2013/09/02 19:41:51 | 000,001,905 | —- | C] () – C:\Users\Public\Desktop\Avira Control Center.lnk
[2013/09/02 17:27:47 | 002,092,792 | —- | C] () – C:\Users\Karri\Desktop\avira_free_antivirus.exe
[2013/09/01 16:31:21 | 006,436,153 | —- | C] () – C:\Users\Karri\Desktop\Toni Braxton - You re Makin Me High - 14300 - p1.mp3
[2013/08/30 21:53:55 | 008,350,032 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Stormy_Monday_69929.mp3
[2013/08/30 21:53:49 | 004,946,381 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Ain_t_No_Sunshine_49129.mp3
[2013/08/30 21:53:46 | 006,822,809 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Fields_Of_Gold_20046.mp3
[2013/08/30 21:53:42 | 007,590,809 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_God_Bless_The_Child_81769.mp3
[2013/08/30 21:53:27 | 006,456,676 | —- | C] () – C:\Users\Karri\Desktop\Eva_Cassidy_Wayfaring_Stranger_72482.mp3
[2013/08/29 20:28:22 | 000,034,175 | —- | C] () – C:\Users\Karri\Desktop\1256532_10151812894926049_1404234258_n.jpg
[2013/08/25 19:49:31 | 000,009,373 | -HS- | C] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Large.jpg
[2013/08/25 19:49:31 | 000,002,304 | -HS- | C] () – C:\Users\Karri\Desktop\AlbumArt_{ECCBB417-9634-4691-918E-2C53FB3072A2}_Small.jpg
[2013/08/25 19:19:34 | 008,340,514 | —- | C] () – C:\Users\Karri\Desktop\Echo and the Bunnymen - The Killing Moon.mp3
[2013/08/20 12:24:37 | 000,999,707 | —- | C] () – C:\Users\Karri\Desktop\scan0002.jpg
[2013/08/18 19:34:38 | 000,000,683 | —- | C] () – C:\Users\Karri\Application Data\Microsoft\Internet Explorer\Quick Launch\rush-for-gold-alaska_s1_l1_gF6467T1L1_d2141755934 - Shortcut.lnk
[2012/07/22 18:32:00 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2012/02/01 18:18:15 | 000,000,552 | —- | C] () – C:\Users\Karri\AppData\Local\d3d8caps.dat
[2012/01/18 06:44:00 | 010,920,984 | —- | C] () – C:\Windows\SysWow64\LogiDPP.dll
[2012/01/18 06:44:00 | 000,336,408 | —- | C] () – C:\Windows\SysWow64\DevManagerCore.dll
[2012/01/18 06:44:00 | 000,104,472 | —- | C] () – C:\Windows\SysWow64\LogiDPPApp.exe
[2011/12/30 22:49:42 | 000,000,680 | —- | C] () – C:\Users\Karri\AppData\Local\d3d9caps.dat
[2011/10/10 18:52:43 | 000,752,602 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/09/02 14:28:57 | 000,041,984 | —- | C] () – C:\Users\Karri\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/12 22:00:58 | 000,000,760 | —- | C] () – C:\Users\Karri\AppData\Roaming\setup_ldm.iss
[2009/09/21 12:30:38 | 000,000,029 | —- | C] () – C:\Users\Karri\AppData\Roaming\default.rss
[2009/09/15 12:40:54 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2009/06/28 11:50:52 | 000,048,127 | —- | C] () – C:\ProgramData\nvModes.dat
[2009/06/28 11:50:52 | 000,048,127 | —- | C] () – C:\ProgramData\nvModes.001
[2008/10/28 08:57:39 | 000,000,052 | —- | C] () – C:\ProgramData\CLSDefine.ini

========== ZeroAccess Check ==========

[2006/11/02 11:30:40 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2012/06/08 13:59:03 | 012,899,840 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2012/06/08 13:47:00 | 011,586,048 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/04/11 03:11:14 | 000,891,392 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\SysWow64\wbem\fastprox.dll – [2009/04/11 02:28:19 | 000,614,912 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2008/01/20 22:50:58 | 000,513,024 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\SysWow64\wbem\wbemess.dll

========== LOP Check ==========

[2010/12/18 12:49:09 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\.minecraft
[2012/11/19 12:51:06 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\1morebee
[2012/07/07 22:02:22 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\8floor
[2009/03/29 20:30:38 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Acer
[2008/10/28 09:17:30 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Acer GameZone Console
[2011/12/03 14:12:53 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\AlawarSouthpoint
[2011/04/16 21:08:14 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\aliasworlds
[2012/07/14 16:40:16 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Anino Games
[2010/09/25 20:05:35 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Atlus
[2009/04/07 07:53:51 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Big Fish Games
[2011/12/12 22:07:00 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\blg
[2009/08/06 13:12:47 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\DAEMON Tools Lite
[2012/09/17 20:00:26 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\DivoGames
[2013/09/08 09:05:41 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Dropbox
[2009/03/30 20:40:22 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\eSobi
[2009/04/06 07:42:54 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\FloodLightGames
[2012/11/20 08:53:50 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\GamesCafe
[2012/08/10 20:09:27 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\HipSoft
[2013/08/20 12:23:59 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Image Zone Express
[2012/01/03 20:40:28 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Islands2
[2012/07/22 18:32:17 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Jumb-O-Fun Games
[2009/03/29 20:30:38 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Leadertech
[2012/12/14 09:14:34 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\LimeWire
[2011/03/04 12:36:00 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\MumboJumbo
[2012/11/19 09:47:11 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\northern_tale_bfg_en
[2011/02/13 21:55:28 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Oberon Media
[2013/01/02 16:50:23 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\ooVoo Details
[2013/01/28 09:36:20 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Origin
[2012/01/20 20:35:58 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\PetRush
[2011/11/27 14:02:08 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Ph03nixNewMedia
[2012/04/07 16:11:40 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\PlayFirst
[2011/12/21 19:50:08 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Playrix Entertainment
[2012/09/13 19:58:22 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Princess Isabella CE
[2009/10/28 15:05:06 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Printer Info Cache
[2013/08/18 19:39:18 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\Rainbow
[2010/06/04 22:03:13 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\runic games
[2012/07/17 18:45:03 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\SanDisk
[2013/06/18 08:36:08 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\TeamViewer
[2013/08/26 22:55:53 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\uTorrent
[2011/12/18 19:18:25 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\ValuSoft
[2012/09/12 19:41:41 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\VC 2 Paradise Resort
[2012/09/16 19:51:24 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\ViquaSoft
[2012/01/02 13:34:19 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\WendigoStudios
[2012/07/14 16:18:47 | 000,000,000 | —D | M] – C:\Users\Karri\AppData\Roaming\YoudaGames

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.EXE >
[2008/10/29 02:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14\explorer.exe
[2008/10/29 02:29:41 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19\explorer.exe
[2008/10/29 02:15:50 | 003,087,360 | —- | M] (Microsoft Corporation) MD5=50514057C28A74BAC2BD04B7B990D615 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer.exe
[2008/10/29 23:59:17 | 002,927,616 | —- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\erdnt\cache86\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41\explorer.exe
[2008/10/27 22:30:12 | 003,086,848 | —- | M] (Microsoft Corporation) MD5=72B9990E45C25AA3C75C4FB50A9D6CE0 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer.exe
[2008/10/29 02:49:22 | 003,080,704 | —- | M] (Microsoft Corporation) MD5=BBD8E74F23D7605CB0CDB57A1B25D826 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer.exe
[2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\SysWOW64\explorer.exe
[2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_ba1365f4639c6d3c\explorer.exe
[2008/10/30 01:30:07 | 003,081,216 | —- | M] (Microsoft Corporation) MD5=E404A65EF890140410E9F3D405841C95 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer.exe
[2008/10/27 22:15:02 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c\explorer.exe
[2008/01/20 22:48:44 | 003,080,704 | —- | M] (Microsoft Corporation) MD5=F6D765FB6B457542D954682F50C26E4F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer.exe
[2008/01/20 22:49:23 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2006/11/02 11:13:38 | 000,036,864 | —- | M] (Microsoft Corporation) MD5=192DD053B43250E264383CDC3D564A18 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2006/11/02 11:13:38 | 000,036,864 | —- | M] (Microsoft Corporation) MD5=192DD053B43250E264383CDC3D564A18 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_6a2f0af76374ed51\explorer.exe.mui
[2006/11/02 11:13:32 | 000,027,136 | —- | M] (Microsoft Corporation) MD5=872D519975CA4D7CC596FC93470D49E0 – C:\Windows\en-US\explorer.exe.mui
[2006/11/02 11:13:32 | 000,027,136 | —- | M] (Microsoft Corporation) MD5=872D519975CA4D7CC596FC93470D49E0 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_5fda60a52f142b56\explorer.exe.mui

< MD5 for: EXPLORER.EXE-A80E4F97.PF >
[2013/09/08 09:02:49 | 000,288,704 | —- | M] () MD5=566D07C6811BE5948B46EB107268C981 – C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf

< MD5 for: EXPLORER.PNG >
[2011/01/13 20:42:44 | 000,034,797 | —- | M] () MD5=8026B912B7BBA0B33FD5D94F50E5D91D – C:\Program Files (x86)\Island Tribe 2\data\quest\ExplorerRequest\Explorer.png

< MD5 for: EXPLORER.ZIP >
[2009/06/03 22:15:06 | 000,020,394 | —- | M] () MD5=B469409C2B2A33C542190B720E11BD79 – C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip

< MD5 for: IEXPLORE.EXE >
[2012/06/02 07:47:54 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=004640AB259C1572EBD5FB0A32F63686 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20553_none_b5336068bd3ba567\iexplore.exe
[2013/01/08 21:53:45 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=0100BCF23941C83462E4A70F94C3392E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16464_none_b49ff3fba4253ae5\iexplore.exe
[2012/05/17 19:21:54 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=0129BB16161C2FD9A6B19111AB047198 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16446_none_bf0c3eb9d873f7ac\iexplore.exe
[2008/04/25 00:22:36 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=07ED775D6DB4BFA96D7CFB09EB228418 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16681_none_9399882309d61be8\iexplore.exe
[2009/01/15 00:14:36 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=0844F5B9CB3BB85A917D347EF1565B6C – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16809_none_93f80d9f098e0166\iexplore.exe
[2012/10/03 22:07:39 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=0B09588808D3865287BE65CF62D792B2 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20562_none_b5279032bd44a801\iexplore.exe
[2012/11/13 22:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:\Windows\erdnt\cache86\iexplore.exe
[2012/11/13 22:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16457_none_bf026f17d87b2cf4\iexplore.exe
[2013/07/24 22:48:45 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=139C8953AC56A9E559C7DEF07BC45ED7 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20613_none_bfb34c50f17bf4c5\iexplore.exe
[2013/05/17 00:10:41 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=1423FF1BFD2ECD9CFC8C17EA4F98B20F – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16490_none_b47b830fa441295c\iexplore.exe
[2008/02/21 22:44:11 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=182CAF7403705ACCB51211A761080B8F – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20777_none_9433f69622e637cb\iexplore.exe
[2012/06/27 22:23:58 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=1A8A5634E778B0466BE0932B460ACCB3 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20554_none_b53460b2bd3abebe\iexplore.exe
[2008/04/24 22:16:24 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=1ACD856D345FA54F89335C793B2B0874 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20823_none_8a115c9dee6081e6\iexplore.exe
[2009/11/21 11:04:19 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=1B5572B8B9CD678E814F57B245400F64 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22956_none_6ec34e240169f05e\iexplore.exe
[2009/11/21 02:42:38 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=1B6362BB14FCEB9E76BCF9A953B04788 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18865_none_78828b751cb61529\iexplore.exe
[2009/04/24 12:25:27 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=1F44940EF1D07D0BDAF80E55853DFBD0 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16851_none_93b9fbb309bdc263\iexplore.exe
[2012/08/24 03:34:41 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=22CC6CDBA678790046693654C3B212E4 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16450_none_befb6d11d8817b93\iexplore.exe
[2013/02/22 03:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16476_none_b49724a3a42b8984\iexplore.exe
[2010/02/23 11:06:13 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=25DB705A7DC85C208B3CF2D20F118AA7 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22995_none_78ebb87c35ec08c6\iexplore.exe
[2012/05/17 18:59:46 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=268982F1FD671A077C6A2AF41E351436 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20551_none_bf860a26f19e34b4\iexplore.exe
[2012/06/28 00:16:03 | 000,754,784 | —- | M] (Microsoft Corporation) MD5=2BF1D4CA1D2DFDCA52421730CA46E851 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16448_none_b4b994fba411685f\iexplore.exe
[2009/04/11 02:27:44 | 000,636,080 | —- | M] (Microsoft Corporation) MD5=2C5168C856455CC43C4B4E1CC1920001 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_97c0beeb03de7f46\iexplore.exe
[2012/08/24 07:23:44 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=2D53C5F71653EF94E7829846405D4ED2 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16450_none_b4a6c2bfa420b998\iexplore.exe
[2009/08/27 01:23:17 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=2E48756F12C21F46895036AC089AAD97 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18828_none_78b0cc031c92f16a\iexplore.exe
[2011/02/22 02:50:19 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=2E70FE17239DFCA6209FD698D0F18C61 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19048_none_6e465be0e84297ba\iexplore.exe
[2008/02/21 22:54:54 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=2EEE7F65B04F759FE7D238AD6EAB90B7 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20777_none_89df4c43ee8575d0\iexplore.exe
[2008/02/21 00:45:17 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=31705413C889C5503F564C642D83C282 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16643_none_89721e14d5531cd7\iexplore.exe
[2013/02/22 00:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16476_none_beebcef5d88c4b7f\iexplore.exe
[2012/06/27 21:08:59 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=32F1A71CC1943BD537DA1516E0CB6AF3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16448_none_bf0e3f4dd8722a5a\iexplore.exe
[2009/04/24 12:07:30 | 000,711,432 | —- | M] (Microsoft Corporation) MD5=3319AE709DEAA8539AB3B4110C3C675D – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22418_none_8c07706deb7a6fe7\iexplore.exe
[2013/05/28 23:32:47 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=33E62E4EFC2ACA8EC63A8926F26D3889 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20606_none_bfc11d1af17124d9\iexplore.exe
[2012/06/02 05:08:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=34B01BBD8F00B6B9C9248DC4F1E3CD01 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16447_none_bf0d3f03d8731103\iexplore.exe
[2012/10/03 23:12:11 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=367045AF10C4875707E0864E352EF3F1 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16455_none_b4abc431a41c384b\iexplore.exe
[2010/11/02 02:29:04 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=37302FCB9B7D54B0DBB43624E7A21B3C – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18999_none_6e11746ce86a0984\iexplore.exe
[2010/01/02 10:58:26 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=3D8DA00B028DEA9517066F1CECBFC4A2 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22973_none_78ff57c035dd9e36\iexplore.exe
[2013/04/04 18:47:49 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=3F00BE80B9CEA20B7FE7363D15EDDB94 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16483_none_beddfe2bd8971b6b\iexplore.exe
[2013/02/22 00:10:31 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=4145E2B5663F6FACC08EFDB17B658BB2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20586_none_bf6a9bd4f1b2073a\iexplore.exe
[2010/05/04 02:32:18 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=48A6109E8DF0365195298CC527B7426A – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_7946112635a7c1dc\iexplore.exe
[2010/09/08 02:26:34 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=4A719476A6393B1DCACFEB4F3AC6599C – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23067_none_790e00f635d21ae3\iexplore.exe
[2009/07/22 02:04:09 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=4B5AEA50CE77FBA4C2D169622DC9B489 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22903_none_794b073435a4da9f\iexplore.exe
[2012/06/27 19:36:32 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=4B649ED3CDC17707898E4948AAB72528 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20554_none_bf890b04f19b80b9\iexplore.exe
[2012/05/17 22:51:05 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=4E99F42504A99D5024C2EFA015001937 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16446_none_b4b79467a41335b1\iexplore.exe
[2009/08/27 01:52:49 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=51BDD4A648CD937BC7111D09930114C3 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18828_none_6e5c21b0e8322f6f\iexplore.exe
[2013/07/25 00:00:18 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=536B5973A34DDAA6E16AC8248B726BD0 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20613_none_b55ea1febd1b32ca\iexplore.exe
[2013/07/24 22:42:37 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=57EC630DBD5F0713E77CB3540AB80A8E – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2013/07/24 22:42:37 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=57EC630DBD5F0713E77CB3540AB80A8E – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16502_none_bf337f27d8571fb3\iexplore.exe
[2009/04/11 03:11:08 | 000,712,864 | —- | M] (Microsoft Corporation) MD5=58136AB5A3DF2D44BBB483629188584A – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_8d6c1498cf7dbd4b\iexplore.exe
[2012/08/24 06:49:07 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=5A150AFABB25BEA50CEDC8650A7B8A9E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20557_none_b5376190bd380ac3\iexplore.exe
[2010/11/02 02:03:13 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=5AB037B17F8A87D052F5A88E0D29A3C8 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18999_none_78661ebf1ccacb7f\iexplore.exe
[2008/01/20 22:48:06 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=5B92133D3E7FB2644677686305E29E81 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_95d545df06bcb3fa\iexplore.exe
[2010/05/04 02:00:35 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=5C9B1062EA7A44E8F6BFDE994B68C7AA – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_78b0cde91c92ee91\iexplore.exe
[2012/06/02 08:52:21 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=610F6596921C4BAA8834ADBB9BE272EE – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16447_none_b4b894b1a4124f08\iexplore.exe
[2012/08/24 03:49:25 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=62188720CE27B982B4285C03163C9FB3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20557_none_bf8c0be2f198ccbe\iexplore.exe
[2013/05/16 19:34:33 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=67EE46FD4D3B56531C5DD1BDC149275A – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16490_none_bed02d61d8a1eb57\iexplore.exe
[2013/01/08 18:42:06 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=698EB1E5F8C66344D97C00B5699E871D – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16464_none_bef49e4dd885fce0\iexplore.exe
[2008/04/25 00:28:44 | 000,701,440 | —- | M] (Microsoft Corporation) MD5=699D1D2EAF5C80E7361809B0ED8AE773 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16681_none_8944ddd0d57559ed\iexplore.exe
[2009/04/24 12:27:28 | 000,711,432 | —- | M] (Microsoft Corporation) MD5=6B9F780596A6FA37909A1E17B13DB8F3 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21046_none_89fe97abee6e3636\iexplore.exe
[2010/05/04 02:57:44 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=6E4A7132FE953AFFAE00B15835404564 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_6e5c2396e8322c96\iexplore.exe
[2009/01/15 00:59:48 | 000,709,800 | —- | M] (Microsoft Corporation) MD5=724BC813643C688280F353EC23128A66 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20996_none_89c8afedee968ea9\iexplore.exe
[2010/06/26 02:06:48 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=7420BE0E7D3D1320054F7ACA0594953D – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18943_none_78962c9f1ca7a7c0\iexplore.exe
[2010/12/18 03:19:44 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=7852371DA9EFBC17B645558E23780EAC – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23111_none_793e10bc35aef44b\iexplore.exe
[2009/03/08 17:09:11 | 000,661,344 | —- | M] (Microsoft Corporation) MD5=7A81E0CECAE7B98459A073981F0124D5 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18702_none_6e6bbde6e827625c\iexplore.exe
[2013/02/02 04:09:12 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=7C2923004FFC497E54F38E835F108EE8 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20580_none_b50fefc6bd56ad35\iexplore.exe
[2009/08/27 09:31:08 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=7DD482E4A2E3CBB0A72F718C342F5B75 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22918_none_794538ba35a87543\iexplore.exe
[2012/10/03 18:53:29 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=7FC9E840B32E9DFBFBBA92BA5E9B97C2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20562_none_bf7c3a84f1a569fc\iexplore.exe
[2010/02/23 03:03:07 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=81AF4A1549710310E56B43C4D3F3657C – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18904_none_6e6dc246e8258f58\iexplore.exe
[2010/09/08 02:49:26 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=827BE3F3C80787B00F19E36B19531197 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18975_none_6e23131ce85d6c46\iexplore.exe
[2009/04/24 12:32:29 | 000,711,432 | —- | M] (Microsoft Corporation) MD5=8679C8CD9690758AF0984290A1843E72 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16851_none_89655160d55d0068\iexplore.exe
[2010/01/02 02:40:20 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=88BD42DAE7CFFEB256CA7145A15E4843 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18882_none_7869eabf1cc90106\iexplore.exe
[2012/11/14 01:19:40 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=8ACFFA754B6ED028B8689CAD00FC2BCB – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20565_none_b52a9110bd41f406\iexplore.exe
[2009/11/21 02:53:25 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=8ADB04E86E8A38307D0663CD002BFFD1 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18865_none_6e2de122e855532e\iexplore.exe
[2010/12/18 02:56:48 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=8F69AE4F1AC2E1D2C34348D519007A2C – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19019_none_6e67cbeee8295d3e\iexplore.exe
[2011/05/30 20:52:50 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16421_none_bf1cdd1fd8684117\iexplore.exe
[2010/11/02 03:13:47 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=92A17B0A89D14815AACC62CD190B6CE3 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23091_none_78e78f7635efd6ac\iexplore.exe
[2008/02/21 00:43:03 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=9437CA21CD48C9B6BFD6F5AC0143D251 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16643_none_93c6c86709b3ded2\iexplore.exe
[2012/10/03 19:08:28 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=96A360002311ECE53952AF2F5B4CD64E – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16455_none_bf006e83d87cfa46\iexplore.exe
[2011/02/22 03:18:28 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=9CE5543464432CA73134F170FA2BF823 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23143_none_791fa18c35c57acc\iexplore.exe
[2010/05/04 02:59:11 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=9D0512508DBDD31DA29BC05941417101 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_6ef166d40146ffe1\iexplore.exe
[2008/04/24 22:04:08 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=9F1427F203CA078005C9943800929640 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20823_none_946606f022c143e1\iexplore.exe
[2010/02/23 02:39:16 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=9F52FBE99C749E3F32C75124F09F1B03 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18904_none_78c26c991c865153\iexplore.exe
[2013/05/16 21:46:47 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=A1397D2A4924C390E55D146FB45FDF7C – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20600_none_b566710cbd15cad4\iexplore.exe
[2013/04/04 21:55:57 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=A1B0DEC3BB845C6369F97BC1A3542A07 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16483_none_b48953d9a4365970\iexplore.exe
[2013/02/02 00:19:03 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=A285E1965C115031DA02B777EE9D7689 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20580_none_bf649a18f1b76f30\iexplore.exe
[2013/05/16 18:27:11 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=A8732CEDB2C0EE7AFC08F867A47BB3EC – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20600_none_bfbb1b5ef1768ccf\iexplore.exe
[2013/02/02 03:37:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=A8EBEBCD9F5C49475194099FCD276992 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16470_none_b49122e7a430f17a\iexplore.exe
[2008/01/20 22:50:37 | 000,701,952 | —- | M] (Microsoft Corporation) MD5=AC2C3BAFD177B60C3B5E4DDBCC2C2DB3 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_8b809b8cd25bf1ff\iexplore.exe
[2013/05/29 02:24:18 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=AFF2C99AD2C599108B6BD9E77C24B463 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16496_none_b48184cba43bc166\iexplore.exe
[2013/02/22 03:17:45 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=B21A57AA4CB928059A0C0C58A9E77A02 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20586_none_b515f182bd51453f\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2009/03/08 17:09:24 | 000,638,816 | —- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18702_none_78c068391c882457\iexplore.exe
[2010/01/02 11:15:56 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=B7ECFA3A546360E2A39ADBE1D773F3DC – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22973_none_6eaaad6e017cdc3b\iexplore.exe
[2010/12/18 02:28:35 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=B988D7F127B94BD5BF8356FE81B985C4 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19019_none_78bc76411c8a1f39\iexplore.exe
[2012/06/02 04:51:58 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=BE967C74B89577B78FB57C061E12B04C – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20553_none_bf880abaf19c6762\iexplore.exe
[2013/04/04 17:55:02 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=C036AB1ED8BAC04FE4A349BA263077BB – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20593_none_bf5ccb0af1bcd726\iexplore.exe
[2011/02/22 02:21:12 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=C1D36A2CBE0CEC4DF593DB1288CF586E – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.19048_none_789b06331ca359b5\iexplore.exe
[2009/07/21 17:53:43 | 000,638,216 | —- | M] (Microsoft Corporation) MD5=C33BD196A0301F9B23D9A003D30ED8B0 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18813_none_78b69a7d1c8f56c6\iexplore.exe
[2009/07/21 18:12:12 | 000,660,744 | —- | M] (Microsoft Corporation) MD5=C45FA4DA458E0B3C9636B09488029BDD – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18813_none_6e61f02ae82e94cb\iexplore.exe
[2013/04/04 20:40:37 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=C4A4F4AD91677DA1659A9ADE63746B8B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20593_none_b50820b8bd5c152b\iexplore.exe
[2010/01/02 03:09:58 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=C9256212D298D96FE0F63D69ECD9CE97 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18882_none_6e15406ce8683f0b\iexplore.exe
[2013/05/29 01:56:53 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=C9C29508A433DAF0118D28C4F38CDDFC – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20606_none_b56c72c8bd1062de\iexplore.exe
[2009/08/27 10:04:11 | 000,660,744 | —- | M] (Microsoft Corporation) MD5=CBDEB65EDCC5E574F43F1EF79E54C8A1 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22918_none_6ef08e680147b348\iexplore.exe
[2010/02/23 12:03:02 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=D1978C9901DAA9A1C2EE78A707B1449A – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22995_none_6e970e2a018b46cb\iexplore.exe
[2009/04/24 12:03:18 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=D5271AC4A06AD9D1E2EA0151B79B2657 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21046_none_945341fe22cef831\iexplore.exe
[2010/09/08 02:02:42 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=D5A730DFDEAE005373E62BC2A866E3BB – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18975_none_7877bd6f1cbe2e41\iexplore.exe
[2009/04/24 12:01:36 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=D6157423C117F24D24695866A1D0A93F – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22418_none_965c1ac01fdb31e2\iexplore.exe
[2009/01/15 00:50:38 | 000,709,800 | —- | M] (Microsoft Corporation) MD5=D6F4816C6B7BE9A125E138B903C2B0EF – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16809_none_89a3634cd52d3f6b\iexplore.exe
[2010/09/08 03:28:01 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=D93AB1673986658EF1931FA751BCCF69 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23067_none_6eb956a4017158e8\iexplore.exe
[2013/02/02 00:19:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=DDE5A0DFAF7C6370FB36402D7A746ED3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16470_none_bee5cd39d891b375\iexplore.exe
[2011/02/22 03:54:38 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=E79C480F9DCD7512AAB9727A533CB152 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23143_none_6ecaf73a0164b8d1\iexplore.exe
[2009/11/21 11:05:17 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=E7F8DF50E483D165BB01F367D3519AA7 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22956_none_7917f87635cab259\iexplore.exe
[2010/06/26 02:31:23 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=E9D8A71AFDCA528A184C1498E22A8241 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18943_none_6e41824ce846e5c5\iexplore.exe
[2013/05/28 22:24:32 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=EE12BA876C4190532A4085994BA9B616 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16496_none_bed62f1dd89c8361\iexplore.exe
[2013/01/08 20:51:57 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=EF1F6F41FB2C9BBB484B21017F380201 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20573_none_b51dc090bd4bdd49\iexplore.exe
[2013/01/08 17:32:42 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F05982E56ABD835AA8DF260EEC873E5B – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20573_none_bf726ae2f1ac9f44\iexplore.exe
[2010/06/26 02:52:42 | 000,638,232 | —- | M] (Microsoft Corporation) MD5=F05B3A2C6CB319DD1377AD566CF5ECE5 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23040_none_791c9ec835c831a0\iexplore.exe
[2009/01/15 00:18:47 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=F0B1CA517977BA2FF6DA33F1B966C488 – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20996_none_941d5a4022f750a4\iexplore.exe
[2011/05/30 20:52:47 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16421_none_b4c832cda4077f1c\iexplore.exe
[2009/04/24 12:08:04 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=F294D8EEB05C835EC44A12CE0A1DFE7A – C:\Windows\winsxs\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18248_none_95b20c4b06d5e8c4\iexplore.exe
[2010/11/02 03:42:15 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=F686191623AC22EE2521C2D17157B199 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23091_none_6e92e524018f14b1\iexplore.exe
[2012/11/13 22:19:28 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F691418EE9A6344AEB5C1B0518FBF8AE – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20565_none_bf7f3b62f1a2b601\iexplore.exe
[2010/06/28 14:17:01 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=F896A6A9965B9C64061BE97F6D84B075 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23040_none_6ec7f47601676fa5\iexplore.exe
[2012/05/17 21:37:57 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=F8B2D47ED17C1D087D14EC747E5AC57A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.20551_none_b5315fd4bd3d72b9\iexplore.exe
[2013/07/24 23:58:46 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=FA5B33E7BB143BCE846C303B528E8D62 – C:\Program Files\Internet Explorer\iexplore.exe
[2013/07/24 23:58:46 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=FA5B33E7BB143BCE846C303B528E8D62 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16502_none_b4ded4d5a3f65db8\iexplore.exe
[2010/12/18 03:54:56 | 000,660,760 | —- | M] (Microsoft Corporation) MD5=FC6DC0E786A4D2E7DA6E9C012ED2E64F – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23111_none_6ee9666a014e3250\iexplore.exe
[2012/11/14 03:11:18 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=FD0D2E1FAEBAE5031BE2EB8000D973F1 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.1.8112.16457_none_b4adc4c5a41a6af9\iexplore.exe
[2009/04/24 12:23:20 | 000,711,448 | —- | M] (Microsoft Corporation) MD5=FD4E1EF226A34D093AAD475B94C5E36E – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18248_none_8b5d61f8d27526c9\iexplore.exe
[2009/07/22 02:30:13 | 000,660,744 | —- | M] (Microsoft Corporation) MD5=FDCF656D4B4E116D9C932AD2868FD811 – C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22903_none_6ef65ce2014418a4\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2009/03/08 18:15:57 | 000,004,608 | —- | M] (Microsoft Corporation) MD5=11E9431B29BD64A1FB13369BB8AD4116 – C:\Windows\winsxs\amd64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_8.0.6001.18702_en-us_7c9630f422ee47f7\iexplore.exe.mui
[2011/05/30 20:52:48 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2011/05/30 20:52:48 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.1.8112.16421_en-us_ae74c844dbb4c003\iexplore.exe.mui
[2006/11/02 11:13:34 | 000,016,384 | —- | M] (Microsoft Corporation) MD5=3CCDDDBC49DEACA370F39A9F0E146A1B – C:\Windows\winsxs\wow64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a1c8f6f0449888c1\iexplore.exe.mui
[2011/05/30 20:52:51 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2011/05/30 20:52:51 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.1.8112.16421_en-us_b8c97297101581fe\iexplore.exe.mui
[2009/03/08 17:27:11 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=943030B55FDB56FB8B8FCC086071E119 – C:\Windows\winsxs\wow64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_8.0.6001.18702_en-us_86eadb46574f09f2\iexplore.exe.mui
[2006/11/02 11:13:29 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=D421BD7B9646679254B0D855823C6F21 – C:\Windows\winsxs\amd64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_97744c9e1037c6c6\iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-4B6C9213.PF >
[2013/09/08 08:15:45 | 000,235,400 | —- | M] () MD5=5E8330AE194FE075CBD043164812105F – C:\Windows\Prefetch\IEXPLORE.EXE-4B6C9213.pf

< MD5 for: SERVICES >
[2006/09/18 17:37:24 | 000,017,244 | —- | M] () MD5=9F534244B7F8F55D5C0BB498D8D481E7 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\drivers\etc\services
[2006/09/18 17:37:24 | 000,017,244 | —- | M] () MD5=9F534244B7F8F55D5C0BB498D8D481E7 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_5e6cdbf5b2cd5bcb\services
[2006/09/18 17:37:24 | 000,017,244 | —- | M] () MD5=9F534244B7F8F55D5C0BB498D8D481E7 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6001.18000_none_60a39df1afb86c9f\services

< MD5 for: SERVICES.ASPX >
[2010/10/27 22:39:16 | 000,000,634 | R— | M] () MD5=40F511B512E96BAB627EA91E224DFA05 – C:\Windows\Installer\$PatchCache$\Managed\02D425C090410500A8E9C0C494E0E445\5.0.9690\services.aspx
[2013/01/13 12:35:14 | 000,000,677 | —- | M] () MD5=C5FCE7C144E4BF4F873421EBC0E5D7A2 – C:\Program Files\Microsoft Dynamics CRM\Client\res\web\ResourceCenter\services.aspx

< MD5 for: SERVICES.CFG >
[2013/05/10 03:57:30 | 000,558,879 | —- | M] () MD5=3679F8D3253DC110D1D8F2AE115EE00C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg
[2013/05/10 03:57:30 | 000,558,879 | —- | M] () MD5=3679F8D3253DC110D1D8F2AE115EE00C – C:\Users\Karri\AppData\Local\Temp\Services.cfg
[2011/06/06 12:55:30 | 000,584,045 | R— | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\services.cfg

< MD5 for: SERVICES.EXE >
[2006/11/02 07:16:09 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=0A87F57DFC2C0EB9BBA8BE1C87BAFE1A – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\services.exe
[2006/11/02 07:16:09 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=0A87F57DFC2C0EB9BBA8BE1C87BAFE1A – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_294799ef88bb616c\services.exe
[2008/01/20 22:50:34 | 000,279,040 | —- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
[2009/04/11 03:10:50 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=934E0B7D77FF78C18D9F8891221B6DE3 – C:\Windows\erdnt\cache64\services.exe
[2009/04/11 03:10:50 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=934E0B7D77FF78C18D9F8891221B6DE3 – C:\Windows\SysNative\services.exe
[2009/04/11 03:10:50 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=934E0B7D77FF78C18D9F8891221B6DE3 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_2d69d4f782c83d8c\services.exe
[2009/04/11 02:27:59 | 000,279,552 | —- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B – C:\Windows\SysWOW64\services.exe
[2009/04/11 02:27:59 | 000,279,552 | —- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe
[2008/01/20 22:49:44 | 000,384,512 | —- | M] (Microsoft Corporation) MD5=DFAC660F0F139276CC9299812DE42719 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_2b7e5beb85a67240\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2006/11/02 11:13:31 | 000,017,920 | —- | M] (Microsoft Corporation) MD5=1626EACF0E7E59F85C59DDDD27C4169C – C:\Windows\SysWOW64\en-US\services.exe.mui
[2006/11/02 11:13:31 | 000,017,920 | —- | M] (Microsoft Corporation) MD5=1626EACF0E7E59F85C59DDDD27C4169C – C:\Windows\winsxs\x86_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_67c6851b290a1ced\services.exe.mui
[2006/11/02 07:26:35 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\en-US\services.exe.mui
[2006/11/02 07:26:35 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_c3e5209ee1678e23\services.exe.mui
[2006/11/02 11:13:56 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\Windows\SysNative\en-US\services.exe.mui
[2006/11/02 11:13:56 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=F514B57C09E143F1E14415A9E9ADD695 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_c3e5209ee1678e23\services.exe.mui

< MD5 for: SERVICES.JS >
[2010/10/27 22:38:52 | 000,001,636 | R— | M] () MD5=048B0F852A5BBB2A17B4DC2DD9E4A0B9 – C:\Windows\Installer\$PatchCache$\Managed\02D425C090410500A8E9C0C494E0E445\5.0.9690\services.js
[2013/01/13 12:33:18 | 000,002,251 | —- | M] () MD5=22E454857F4819C08D898E951A9ACEAB – C:\Program Files\Microsoft Dynamics CRM\Client\res\web\_static\SM\services\services.js

< MD5 for: SERVICES.LNK >
[2008/01/20 23:20:59 | 000,001,688 | —- | M] () MD5=EFDD08F4E5E26430885F26F0C35B8C62 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2008/01/20 23:20:59 | 000,001,688 | —- | M] () MD5=EFDD08F4E5E26430885F26F0C35B8C62 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\wbem\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_294799ef88bb616c\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2006/09/18 17:46:11 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysWOW64\wbem\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_2b7e5beb85a67240\services.mof
[2006/09/18 17:44:54 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_2d69d4f782c83d8c\services.mof
[2006/09/18 17:46:11 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.mof
[2006/09/18 17:46:11 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.mof

< MD5 for: SERVICES.MSC >
[2006/11/02 11:13:51 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2006/09/18 17:29:41 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2006/11/02 11:14:00 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2006/09/18 17:29:40 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2006/11/02 11:13:51 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.0.6000.16386_en-us_fe26f08ab7d12816\services.msc
[2006/09/18 17:29:41 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6001.18000_none_2b827e27fe185619\services.msc
[2006/11/02 11:14:00 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a2085506ff73b6e0\services.msc
[2006/09/18 17:29:40 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6001.18000_none_cf63e2a445bae4e3\services.msc

< MD5 for: WINLOGON.EXE >
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\erdnt\cache64\winlogon.exe
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\SysNative\winlogon.exe
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_cdcd15a68a70b877\winlogon.exe
[2008/01/20 22:49:47 | 000,406,016 | —- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe
[2009/04/11 02:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\SysWOW64\winlogon.exe
[2009/04/11 02:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2006/11/02 07:16:20 | 000,397,312 | —- | M] (Microsoft Corporation) MD5=9642EED809219A2F914DD8E40A09C48B – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\winlogon.exe
[2006/11/02 07:16:20 | 000,397,312 | —- | M] (Microsoft Corporation) MD5=9642EED809219A2F914DD8E40A09C48B – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_c9aada9e9063dc57\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008/01/20 22:50:38 | 000,314,880 | —- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2008/01/20 22:52:39 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=1DB95B0920FA9783476AC46F187C06F6 – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2008/01/20 22:52:39 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=1DB95B0920FA9783476AC46F187C06F6 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6001.18000_en-us_27172d0ebc73e370\winlogon.exe.mui
[2008/01/20 22:52:28 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=26AC28BF50DC112BAA794A83E08588F0 – C:\Windows\SysWOW64\en-US\winlogon.exe.mui
[2008/01/20 22:52:28 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=26AC28BF50DC112BAA794A83E08588F0 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6001.18000_en-us_caf8918b0416723a\winlogon.exe.mui
[2006/11/02 07:25:07 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=2D30AB05DBA78517B34C0AAC71DF5299 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\en-US\winlogon.exe.mui
[2006/11/02 07:25:07 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=2D30AB05DBA78517B34C0AAC71DF5299 – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6000.16386_en-us_24e06b12bf88d29c\winlogon.exe.mui
[2006/11/02 11:13:52 | 000,019,968 | —- | M] (Microsoft Corporation) MD5=2D30AB05DBA78517B34C0AAC71DF5299 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6000.16386_en-us_24e06b12bf88d29c\winlogon.exe.mui
[2006/11/02 11:13:03 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=A1D2856F3EC3C86EBBF1442B0245A8B3 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6000.16386_en-us_c8c1cf8f072b6166\winlogon.exe.mui

< MD5 for: WINLOGON.MOF >
[2006/11/02 09:54:54 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\System32\wbem\winlogon.mof
[2006/11/02 09:54:54 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\ACER\Preload\Acer\Recovery\HPartition\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.0.6000.16386_none_da20a358315a3dca\winlogon.mof
[2006/09/18 17:38:40 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\SysNative\wbem\winlogon.mof
[2006/09/18 17:41:56 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\SysWOW64\wbem\winlogon.mof
[2006/09/18 17:38:40 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.0.6000.16386_none_da20a358315a3dca\winlogon.mof
[2006/09/18 17:41:56 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\winsxs\x86_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.0.6000.16386_none_7e0207d478fccc94\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2008/10/28 12:09:45 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2013/01/03 21:43:22 | 000,051,675 | —- | M] () – C:\ComboFix.txt
[2013/09/08 09:01:35 | 244,588,542 | -HS- | M] () – C:\pagefile.sys
[2008/10/28 08:47:02 | 000,000,607 | —- | M] () – C:\RHDSetup.log
[2013/01/03 20:55:34 | 000,005,490 | —- | M] () – C:\TDSSKiller.2.8.15.0_03.01.2013_19.55.10_log.txt
[2013/01/03 20:57:36 | 000,133,486 | —- | M] () – C:\TDSSKiller.2.8.15.0_03.01.2013_19.55.51_log.txt
[2013/01/04 09:43:30 | 000,133,616 | —- | M] () – C:\TDSSKiller.2.8.15.0_04.01.2013_08.41.38_log.txt
[2013/01/04 12:31:59 | 000,135,422 | —- | M] () – C:\TDSSKiller.2.8.15.0_04.01.2013_11.28.46_log.txt
[2010/01/01 14:54:04 | 000,000,927 | —- | M] () – C:\updatedatfix.log

< %systemroot%\Fonts\*.com >
[2006/11/02 11:06:41 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 11:06:41 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 11:06:41 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/09/20 21:32:20 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 17:35:48 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2006/10/19 10:00:56 | 000,187,392 | —- | M] () – C:\Windows\Acer(Normal).scr
[2006/10/19 10:00:56 | 000,187,392 | —- | M] () – C:\Windows\Acer(Wide).scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 23:21:59 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C is ACER
Volume Serial Number is F2EA-6F6E
Directory of C:\
02/11/2006 11:42 AM Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\ACER\Preload\Acer\Recovery
30/03/2009 10:32 PM HPartition [\??\Volume{be54870c-1c9c-11de-84bd-806e6f6e6963}\]
0 File(s) 0 bytes
Directory of C:\ProgramData
02/11/2006 11:42 AM Application Data [C:\ProgramData]
02/11/2006 11:42 AM Desktop [C:\Users\Public\Desktop]
02/11/2006 11:42 AM Documents [C:\Users\Public\Documents]
02/11/2006 11:42 AM Favorites [C:\Users\Public\Favorites]
02/11/2006 11:42 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
02/11/2006 11:42 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users
02/11/2006 11:42 AM All Users [C:\ProgramData]
02/11/2006 11:42 AM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\All Users
02/11/2006 11:42 AM Application Data [C:\ProgramData]
02/11/2006 11:42 AM Desktop [C:\Users\Public\Desktop]
02/11/2006 11:42 AM Documents [C:\Users\Public\Documents]
02/11/2006 11:42 AM Favorites [C:\Users\Public\Favorites]
02/11/2006 11:42 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
02/11/2006 11:42 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default
02/11/2006 11:42 AM Application Data [C:\Users\Default\AppData\Roaming]
02/11/2006 11:42 AM Local Settings [C:\Users\Default\AppData\Local]
02/11/2006 11:42 AM My Documents [C:\Users\Default\Documents]
02/11/2006 11:42 AM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
02/11/2006 11:42 AM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
02/11/2006 11:42 AM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
02/11/2006 11:42 AM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
02/11/2006 11:42 AM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
02/11/2006 11:42 AM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
02/11/2006 11:42 AM Application Data [C:\Users\Default\AppData\Local]
02/11/2006 11:42 AM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
02/11/2006 11:42 AM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
02/11/2006 11:42 AM My Music [C:\Users\Default\Music]
02/11/2006 11:42 AM My Pictures [C:\Users\Default\Pictures]
02/11/2006 11:42 AM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Guest
12/11/2009 05:53 PM Application Data [C:\Users\Guest\AppData\Roaming]
12/11/2009 05:53 PM Cookies [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Cookies]
12/11/2009 05:53 PM Local Settings [C:\Users\Guest\AppData\Local]
12/11/2009 05:53 PM My Documents [C:\Users\Guest\Documents]
12/11/2009 05:53 PM NetHood [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
12/11/2009 05:53 PM PrintHood [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
12/11/2009 05:53 PM Recent [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Recent]
12/11/2009 05:53 PM SendTo [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\SendTo]
12/11/2009 05:53 PM Start Menu [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu]
12/11/2009 05:53 PM Templates [C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Guest\AppData\Local
12/11/2009 05:53 PM Application Data [C:\Users\Guest\AppData\Local]
12/11/2009 05:53 PM History [C:\Users\Guest\AppData\Local\Microsoft\Windows\History]
12/11/2009 05:53 PM Temporary Internet Files [C:\Users\Guest\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Guest\Documents
12/11/2009 05:53 PM My Music [C:\Users\Guest\Music]
12/11/2009 05:53 PM My Pictures [C:\Users\Guest\Pictures]
12/11/2009 05:53 PM My Videos [C:\Users\Guest\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Karri
29/03/2009 08:28 PM Application Data [C:\Users\Karri\AppData\Roaming]
29/03/2009 08:28 PM Cookies [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Cookies]
29/03/2009 08:28 PM Local Settings [C:\Users\Karri\AppData\Local]
29/03/2009 08:28 PM My Documents [C:\Users\Karri\Documents]
29/03/2009 08:28 PM NetHood [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
29/03/2009 08:28 PM PrintHood [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
29/03/2009 08:28 PM Recent [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Recent]
29/03/2009 08:28 PM SendTo [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\SendTo]
29/03/2009 08:28 PM Start Menu [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu]
29/03/2009 08:28 PM Templates [C:\Users\Karri\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Karri\AppData\Local
29/03/2009 08:28 PM Application Data [C:\Users\Karri\AppData\Local]
29/03/2009 08:28 PM History [C:\Users\Karri\AppData\Local\Microsoft\Windows\History]
29/03/2009 08:28 PM Temporary Internet Files [C:\Users\Karri\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Karri\Documents
29/03/2009 08:28 PM My Music [C:\Users\Karri\Music]
29/03/2009 08:28 PM My Pictures [C:\Users\Karri\Pictures]
29/03/2009 08:28 PM My Videos [C:\Users\Karri\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Pat
09/04/2011 02:34 PM Application Data [C:\Users\Pat\AppData\Roaming]
09/04/2011 02:34 PM Cookies [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Cookies]
09/04/2011 02:34 PM Local Settings [C:\Users\Pat\AppData\Local]
09/04/2011 02:34 PM My Documents [C:\Users\Pat\Documents]
09/04/2011 02:34 PM NetHood [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
09/04/2011 02:34 PM PrintHood [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/04/2011 02:34 PM Recent [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Recent]
09/04/2011 02:34 PM SendTo [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\SendTo]
09/04/2011 02:34 PM Start Menu [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Start Menu]
09/04/2011 02:34 PM Templates [C:\Users\Pat\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Pat\AppData\Local
09/04/2011 02:34 PM Application Data [C:\Users\Pat\AppData\Local]
09/04/2011 02:34 PM History [C:\Users\Pat\AppData\Local\Microsoft\Windows\History]
09/04/2011 02:34 PM Temporary Internet Files [C:\Users\Pat\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Pat\Documents
09/04/2011 02:34 PM My Music [C:\Users\Pat\Music]
09/04/2011 02:34 PM My Pictures [C:\Users\Pat\Pictures]
09/04/2011 02:34 PM My Videos [C:\Users\Pat\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
02/11/2006 11:42 AM My Music [C:\Users\Public\Music]
02/11/2006 11:42 AM My Pictures [C:\Users\Public\Pictures]
02/11/2006 11:42 AM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser
18/11/2012 11:58 PM Application Data [C:\Users\UpdatusUser\AppData\Roaming]
18/11/2012 11:58 PM Cookies [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies]
18/11/2012 11:58 PM Local Settings [C:\Users\UpdatusUser\AppData\Local]
18/11/2012 11:58 PM My Documents [C:\Users\UpdatusUser\Documents]
18/11/2012 11:58 PM NetHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
18/11/2012 11:58 PM PrintHood [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
18/11/2012 11:58 PM Recent [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent]
18/11/2012 11:58 PM SendTo [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo]
18/11/2012 11:58 PM Start Menu [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu]
18/11/2012 11:58 PM Templates [C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\AppData\Local
18/11/2012 11:58 PM Application Data [C:\Users\UpdatusUser\AppData\Local]
18/11/2012 11:58 PM History [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History]
18/11/2012 11:58 PM Temporary Internet Files [C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\UpdatusUser\Documents
18/11/2012 11:58 PM My Music [C:\Users\UpdatusUser\Music]
18/11/2012 11:58 PM My Pictures [C:\Users\UpdatusUser\Pictures]
18/11/2012 11:58 PM My Videos [C:\Users\UpdatusUser\Videos]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
98 Dir(s) 60,875,546,624 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/05/31 21:14:29 | 000,000,286 | -HS- | M] () – C:\Users\Karri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2013/09/08 08:56:14 | 001,037,278 | —- | M] () – C:\Users\Karri\Desktop\adwcleaner.exe
[2013/09/02 17:28:49 | 002,092,792 | —- | M] () – C:\Users\Karri\Desktop\avira_free_antivirus.exe
[2013/09/03 08:59:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Karri\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Files - Unicode (All) ==========
[2013/09/02 16:07:34 | 095,286,781 | —- | M] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ᷟ舶Ÿ
[2013/09/02 16:07:34 | 095,286,781 | —- | C] ()(C:\Windows\SysWow64\????) – C:\Windows\SysWow64\ᷟ舶Ÿ
[2013/09/01 14:25:15 | 095,199,041 | —- | M] ()(C:\Windows\SysWow64\???L) – C:\Windows\SysWow64\득왲L
[2013/09/01 08:25:29 | 095,199,041 | —- | C] ()(C:\Windows\SysWow64\???L) – C:\Windows\SysWow64\득왲L

========== Alternate Data Streams ==========

@Alternate Data Stream - 94 bytes -> C:\ProgramData\Temp:D5AA39DD
@Alternate Data Stream - 257 bytes -> C:\ProgramData\Temp:36608448
@Alternate Data Stream - 252 bytes -> C:\ProgramData\Temp:1E288DA3
@Alternate Data Stream - 251 bytes -> C:\ProgramData\Temp:AE289451
@Alternate Data Stream - 247 bytes -> C:\ProgramData\Temp:7D288858
@Alternate Data Stream - 247 bytes -> C:\ProgramData\Temp:0E61938B
@Alternate Data Stream - 242 bytes -> C:\ProgramData\Temp:FEE00EB9
@Alternate Data Stream - 237 bytes -> C:\ProgramData\Temp:2EB79F01
@Alternate Data Stream - 236 bytes -> C:\ProgramData\Temp:F2327E82
@Alternate Data Stream - 236 bytes -> C:\ProgramData\Temp:DE6EED8B
@Alternate Data Stream - 235 bytes -> C:\ProgramData\Temp:35629AE6
@Alternate Data Stream - 233 bytes -> C:\ProgramData\Temp:CEE4A457
@Alternate Data Stream - 230 bytes -> C:\ProgramData\Temp:08DB8D99
@Alternate Data Stream - 229 bytes -> C:\ProgramData\Temp:3B07E6F4
@Alternate Data Stream - 229 bytes -> C:\ProgramData\Temp:349E5B74
@Alternate Data Stream - 225 bytes -> C:\ProgramData\Temp:10D45FC3
@Alternate Data Stream - 224 bytes -> C:\ProgramData\Temp:4B244549
@Alternate Data Stream - 223 bytes -> C:\ProgramData\Temp:38D2EA83
@Alternate Data Stream - 222 bytes -> C:\ProgramData\Temp:5AE33054
@Alternate Data Stream - 222 bytes -> C:\ProgramData\Temp:014BC3B4
@Alternate Data Stream - 221 bytes -> C:\ProgramData\Temp:3C0887BF
@Alternate Data Stream - 218 bytes -> C:\ProgramData\Temp:41884BBE
@Alternate Data Stream - 216 bytes -> C:\ProgramData\Temp:CB0FEE2B
@Alternate Data Stream - 216 bytes -> C:\ProgramData\Temp:169E7AC5
@Alternate Data Stream - 214 bytes -> C:\ProgramData\Temp:A9ABA3FF
@Alternate Data Stream - 210 bytes -> C:\ProgramData\Temp:ED9B661E
@Alternate Data Stream - 196 bytes -> C:\ProgramData\Temp:3D36932D
@Alternate Data Stream - 194 bytes -> C:\ProgramData\Temp:260575F1
@Alternate Data Stream - 162 bytes -> C:\Users\Karri\Desktop\DSCN1040.JPG:com.dropbox.attributes
@Alternate Data Stream - 161 bytes -> C:\Users\Karri\Desktop\DSCF4335.JPG:com.dropbox.attributes
@Alternate Data Stream - 161 bytes -> C:\Users\Karri\Desktop\DSC00973.JPG:com.dropbox.attributes
@Alternate Data Stream - 161 bytes -> C:\Users\Karri\Desktop\DSC00367.JPG:com.dropbox.attributes
@Alternate Data Stream - 160 bytes -> C:\Users\Karri\Desktop\HPIM1144.jpg:com.dropbox.attributes
@Alternate Data Stream - 160 bytes -> C:\Users\Karri\Desktop\_DSC0198.JPG:com.dropbox.attributes
@Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:6301CE40
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:2A8A3140
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:E9900C74
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:4B70A9FA
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:908A1B53
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:6E11933F
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:1B3549F2
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:7BB584AA
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:274516E7
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:131C0EE9
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:57173DB4
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:3AC0ED43
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:C9BC8592
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:793F316E
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:92DB4653
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:8AB6C1D7
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:CFF6B3FF
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:490BCC52
@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:DCA79AB3
@Alternate Data Stream - 111 bytes -> C:\ProgramData\Temp:2CED8825
@Alternate Data Stream - 108 bytes -> C:\ProgramData\Temp:FC60E0F8
@Alternate Data Stream - 108 bytes -> C:\ProgramData\Temp:861A898F
@Alternate Data Stream - 107 bytes -> C:\ProgramData\Temp:580E04D8
@Alternate Data Stream - 104 bytes -> C:\ProgramData\Temp:4F636E25

< End of report >

# AdwCleaner v3.003 - Report created 08/09/2013 at 09:52:03 # Updated 07/09/2013 by Xplode # Operating System : Windows ™ Vista Home Premium Service Pack 2 (64 bits) # Username : Karri - KARRI-PC # Running from : C:\Users\Karri\Desktop\adwcleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** [!] Folder Deleted : C:\ProgramData\AlawarSouthpoint [!] Folder Deleted : C:\Program Files (x86)\DAEMON Tools Toolbar [!] Folder Deleted : C:\Users\Karri\AppData\Roaming\AlawarSouthpoint ***** [ Shortcuts ] ***** ***** [ Registry ] ***** ***** [ Browsers ] ***** -\\ Internet Explorer v9.0.8112.16502 -\\ Mozilla Firefox v22.0 (en-US) [ File : C:\Users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\prefs.js ] [ File : C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\2kytloiw.default\prefs.js ] -\\ Google Chrome v [ File : C:\Users\Karri\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [5704 octets] - [08/09/2013 08:57:05] AdwCleaner[R1].txt - [1275 octets] - [08/09/2013 09:50:54] AdwCleaner[S0].txt - [5680 octets] - [08/09/2013 08:59:37] AdwCleaner[S1].txt - [1220 octets] - [08/09/2013 09:52:03] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1280 octets] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.9 (09.07.2013:1) OS: Windows ™ Vista Home Premium x64 Ran by [removed] on 08/09/2013 at 9:59:03.39 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ~~~ Files Successfully deleted: [File] "C:\Program Files (x86)\mozilla firefox\plugins\npcouponprinter.dll" Successfully deleted: [File] "C:\Program Files (x86)\mozilla firefox\plugins\npmozcouponprinter.dll" ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" Successfully deleted: [Folder] "C:\ProgramData\big fish" Successfully deleted: [Folder] "C:\ProgramData\big fish games" Successfully deleted: [Folder] "C:\Users\Karri\AppData\Roaming\big fish games" Successfully deleted: [Folder] "C:\Users\Karri\appdata\local\big fish" Successfully deleted: [Folder] "C:\Program Files (x86)\coupons" Successfully deleted: [Folder] "C:\Users\Karri\AppData\Roaming\microsoft\windows\start menu\programs\toparcadehits" Successfully deleted: [Folder] "C:\ai_recyclebin" Successfully deleted: [Folder] "C:\bigfishcache" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{000F1579-FBDA-4528-B550-34B77B1D9D7F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{00A78C0E-567F-416C-AF16-B5C2E2CCE7F5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{01800DC1-55F7-496C-9E3C-CCA97A7DA636} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{01E69243-1918-4404-B6AB-A830FF31EDFC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{02188C3C-F99F-4014-BFF5-723C463C0B63} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{021C0466-63ED-4F1F-A80F-5C6464D4AFD5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{02326128-EDD1-4CF1-AADA-12057C4C12CA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{024F8F38-783D-403D-94C0-2D3F9A025B37} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{026BFBDC-D75A-499E-A690-FB2E9B7A84A9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{02D5F9A3-0A88-43B6-BBAC-BC0ECA8C2817} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{02D65001-A33F-4B16-B224-5B30D2FC3687} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{03136B65-1721-4BB3-BE7C-F24F58ECB748} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{03C11162-3414-409B-94B9-2023723693F5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{047F07FD-C4A3-4F43-B4C6-4AA855AA359B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{04815835-A6C0-4324-BCCC-3D451C48EC4B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{05B750E2-4E4D-4239-BC4E-DA94FB292F78} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{063FA477-2D25-4078-A480-53771F5086DD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{06CF4131-7C18-497D-8110-59F70E8691FB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{07C46E71-326F-424A-A47F-A65EC765F0D2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{083A2F16-8AF9-41E9-9CB0-2344B76C1592} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0958E79E-93E0-49DF-AE53-7B99BBEC4232} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{09FD8802-BA15-4894-B60A-A2811C989E11} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0A3D7F27-AB53-4E94-AFDD-F66697EF4CC8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0A6E56FA-DC8F-4F4B-A6D0-1E4AE391E10D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0A7AC6B8-92E2-4898-BDD2-5952490B4ED3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0ACC7FB8-8C0C-4ADB-9AEF-158D73D88160} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0B864AAC-467A-4208-8A9D-8864EAB63180} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0CB37340-0337-46FF-802E-71CB478313AD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0CD10092-4D8A-4B3A-8161-1F0997E76605} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0DACAF4E-B646-4E3F-8194-E8A049425983} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{0F994299-1E47-4F33-BE04-78E099C307CD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{10BF1A49-4693-4220-A360-114CA5DDC371} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{10CDE5FC-6FA2-4B39-B287-5AC546C6B61B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{10E89279-C90B-4DBE-848C-FF523FD40F37} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{113B5387-B07A-4CE1-A51F-9922C67B5094} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{11B7862D-545E-4FB4-B302-AC99E39056EF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{129441B8-881D-4700-811A-49D4F0745A5E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{12B88A5A-232C-40B7-ACA9-17830E5E6B2B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{134B10FF-8301-451B-B6FE-84356166C9AC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{136ECBB6-9A0E-4B13-8F19-0EBA421F13CF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{13852609-EE6C-4B04-B927-8568A444F613} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{154076D4-FFEC-4988-B76A-FCA2E25D462E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1554EDC5-67CA-4F6C-B5E5-8360B4C69B6E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{15B6D339-5497-4AAF-A503-1AF65DE1E959} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{16BF15DC-A007-46F2-A6BF-8A160033A7DF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1703E2FC-D6E0-411C-AF05-C7AC5F4FD9BD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{171CC29E-8FE9-4D6C-A1AC-02A59AC0DB47} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{181F480C-DCAD-44F1-8706-FAEA6B5F86D7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{184713FA-E986-4774-94A8-A2A93B6AD872} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1877C42B-244D-4724-98EE-157C8DBDDEF5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{18C2BCC4-4C1F-492F-B5A4-719770EC2BAF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{18FFF71B-6B03-4840-AFBC-117CBC3AE124} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{195DACFA-9801-4AC8-BC4D-4209F7F41B0B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{19ACF5B8-2B35-4776-B4CB-5A5E62365447} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{19F9B63F-B751-4E4B-BD5B-9726D4804370} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1A1B85C4-CA13-4E5E-A1AC-BCBD26566F4A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1B0F6C27-49E6-4B39-82BA-F9E6F5BAB390} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1B5C28D6-99D8-472B-BEBF-2371CD034563} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1B7C379E-2F27-4C8B-9C7D-26384FDECA9E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1B9559C3-55A6-4EF4-9AFE-09CDE9C14A69} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1C0DBB59-4CF3-418D-B3BF-20489D16A1A6} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1CD87970-7D12-49B8-893C-1ACFF1507FA9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1E6626E6-7400-4CDC-AAE4-0B18232BE133} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1F2923DC-661F-49FC-9C11-ADC21698B3B7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{1FC4C39C-2CAE-4874-81ED-CDBD21392CB5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{20516367-6E17-417B-8AF2-82F9099D8A6B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{21891775-814F-4A77-94EF-C0A08E399F58} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{21D552D9-C329-41BB-A607-5CDC597EC698} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{23100235-7AC5-43A8-B53C-E8CA437A5FF8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{239308B4-FE26-4CF9-8FF0-8C9D9E74BC60} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{23E6C39C-A584-4409-9C6D-338CF61CEBAF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{26329B7C-C39C-4F4C-86C1-1309039325AB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{270E9829-F1F6-4D07-B112-0EFAC61D8EAC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{27D7088B-4739-4987-B04F-EF53ED9A6713} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2935C42E-43F7-4820-B6DD-3CACCA24CDFD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{29A36FB4-603D-4F6D-AA7E-0409DEA29360} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{29E0C269-0E06-49B4-B524-5B1E778746C9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2A2C8C5C-E76D-4677-9616-B22D3C2C0D0D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2B113C96-1015-4A47-9BEF-0CD54EB8DE1D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2C228139-8687-43F2-9088-E478BB61A606} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2CCBBFCD-2888-4A00-BD7F-144A7C4E61B2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2E25434B-8847-447E-A9C5-CDBA9F7FA140} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2F060986-27BE-4005-9E98-09F15EABAE6A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{2F85C35B-34A1-405A-A343-425BFFBF088C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{30078EBF-09A8-4D55-B0E8-1D90D7CE0C92} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3011AD38-F5DC-47CC-AB84-FEDE5230A43E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{304DCC53-FE14-41BF-A3CB-D21E6A9DAF6D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{30A1BE95-4210-47DE-90C3-FD7F2EB60562} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{31350500-C064-401E-B9E6-190E6A1E1C56} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3142C03D-CDC5-4A3C-B2DC-92C0C52667F5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{314E40AA-2A39-444F-B781-97A72B0732A2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{326EBB94-ED04-4E2E-A32D-215E1419FDCE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{32D3FE20-DE47-42F6-9780-AE808BFC5CEB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{32F79D6B-D48D-45F1-BCB4-512F71E9436C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{332EC8F3-BC3C-4DCD-BC24-3A6EAC464AB5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3337F25B-C588-4C47-A3C9-171274C278B9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{33934B6C-0E31-4837-8D6B-16C74284338D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3437D532-3A11-477C-8E7E-5519A40D307C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{347CD987-0982-4DF2-9728-F6AC7B4BA989} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{35275D51-976E-4383-86EB-8298089193BB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3558E42C-1F80-43F0-AF9E-4B12881A2000} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{35B78FCA-DC7D-4111-B859-5CA8ACB00764} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{360D3B52-3C4F-4D49-BB39-2C8919929E2E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{36590777-33B4-4DAF-80E6-6042D146247E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{366A9E71-45BC-468C-80BC-D0349D3A1D98} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{36B5EFF0-BFA8-4D01-833F-1FE39FC8E27A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{37240A65-7334-498A-8EC0-97A6D7D82202} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3746D791-49B4-458F-BEA6-C96E4031B6B7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3858D4CE-7BC8-4FE8-9F1E-F3F94A633EFD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{38715A54-8A46-46E6-BF32-326E77DCABC9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{38C058FD-093D-47DE-89AE-431BCDF26790} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3962546B-A902-402E-9ECE-4FCAE0BA2199} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3A395941-0E73-407E-89D2-F43C597BC61C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3A785C2E-71E7-478C-A04B-0849DFA6623B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3AA3DCDF-1C37-486A-84E7-9D8D946C9BD0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3C3D7738-7CA6-45BA-A136-70B6108A7A47} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3C5810D7-B061-4097-9240-5E10A156A42D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3D8956AF-AF1E-410A-9D40-F43372D0CC7C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3E0117F8-D450-4A7C-A717-611C9E72FAA3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3F514A7B-A500-413C-886B-1AE00B1D038D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3F80258B-A81E-40E6-86F7-E3C1177404A4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{3FBDA6A9-2EFD-4BDB-A67E-2F015241502F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{40D99E24-3333-405C-8B3E-53623B022098} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{40F844CF-CE97-4857-85B1-1888C1EB7ED4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{410342A2-7198-4A4B-8AA0-84FA0C9A1CBF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{41462647-24D1-4D64-8D93-71761A83499C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4151F52C-75AB-41E1-91C5-17B6A66FE3FE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{423F100A-E2C0-470D-80AB-625B61B8ED8C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{425A82B8-D82B-4D1E-9E65-86438C281BFE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{42CC1845-0535-4B25-8886-1410662A3D0E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{43F69C10-C83F-470B-8CE1-66046250D702} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4401B53D-7BD6-49BF-AABC-8ACE5D1BB97A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4495495B-17EA-42F4-A827-29944C0CFDF9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4599ED08-8F8D-4A4C-AFDB-4AEBE59A22FF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4621F2A8-3C23-42E6-B8D2-727DC7613F75} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{47150482-8369-4F42-A584-25C7D11599B4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{47C12C76-2D89-4CF5-9A50-54BDD853A434} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{48A0CCD9-C3BF-4F4D-A991-1957678E6687} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{48B1013C-AEA0-4ADC-AC3B-0C579764EB46} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{48DB5E0B-3980-401E-B2C7-70E517229DA7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{490ADEAD-CCEE-4D66-9051-48A634CC12AE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4949FA67-C86A-4C2C-BE66-7122690BF7AC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{49C3E379-A4AB-4D8C-81DC-2F0944E5636C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{49D29B00-0665-4CD8-B86F-F05BD77C8C61} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4AE788D6-F5C6-44F2-AA25-C53D6E32A473} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4BB125DF-A589-462D-9A63-3B494EEB25C0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4C5BDF7D-0851-4999-8E77-0394C2AEDB85} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4C9C5A8F-200E-470A-9523-273B56EE06B2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4CCEFB20-54AA-46F8-999D-D0018CDE0A24} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4CFDFE7C-79C8-4102-AE9D-EDDC481F9FC5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4D4A3565-3AE0-4207-BAF0-74EB96998832} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4D4BBB60-C1B1-44C7-A72C-24D2FB655FF7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4D780529-9945-4DF1-B4B7-354546286F5D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4E460CB7-4CF2-4E33-8BBB-DD6F96048341} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4E48E5F1-FD5F-409D-9692-E3F346492B72} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4F19BC43-3368-425A-8263-CB5B08378C65} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{4FB76471-35B0-4005-8534-C99CE8A0DEB7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{50F78DE4-B420-4904-AC24-8CE1BD15AB06} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{513FECE7-08A1-4568-A47E-AC5EABCB1976} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5252CE9B-F412-466C-B940-40BF953B90DD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5331E036-2D59-414E-B910-CF40AD96C394} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{53A75268-5FBF-4384-B095-C1F8C9553DE7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{543B62B0-B22D-401F-9503-54F2D1013679} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5445AB40-ABDA-4A9B-AAF7-1D4E1DE3647C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5471C91D-6F75-4C7A-B69D-02D68CD4C764} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{54C14E2F-14F2-4B5A-B56D-C354AC4458A3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{551FEDE5-6FD7-48F0-B5A9-74212F6A181B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5520D0C5-CC98-4E53-8D0D-FCDB96E161AA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{554B5E1D-9096-4460-B27D-E8E0AF3B3F07} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{55F86D3B-049E-495A-998A-6792C740E3AA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{56865F3C-50DB-441F-9366-B42B0E61AAD8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{56B327B6-1C5E-4A64-8036-E5B397FFD2C2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{56B7A4ED-B7C1-4BC2-B8CC-A3A2F665CCC9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{56C39742-EC60-4F81-B895-93EFD73D13F7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{56C44A77-88FB-40D2-9878-26942058DA06} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{570D91F5-438F-4068-BEE6-DA8D195DA90B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{57517375-9D92-4BB1-B5F0-546DD34FE673} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{575DB8D3-25FF-4B2F-8FBA-7DE3D1D74002} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{576D123E-926D-4EE7-9640-EF631A19067B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{57737A6E-A7D8-4AA3-B493-127B0101E03D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{57AECE94-BF36-4E90-B2D7-1A5F166C5616} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{57DD14CC-DEE1-44EE-9620-B6CB27725899} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{590525D3-3D03-458D-803B-9543D9A1A6BB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{59CFCBEB-3FB4-4CC0-A230-D8765C6DFE22} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{59F7D451-1BD8-4AEB-AAAE-D641B761C730} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5A254DD1-FC35-4B96-835D-0D4253C26F0D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5AA3FC02-DAB5-4906-9CFB-C57790FCE792} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5AE915C2-3EB9-4074-B1DA-9541F43C47E6} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5B8A5585-65C6-4F71-8BF9-D4BF8E913672} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5CA9BD0E-DBB0-445B-B7BA-960044D50803} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5CBE061F-210A-483E-A127-6E93100D2058} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5D014B65-7013-4AC5-A427-8F9A29BC5B46} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5D2F7B4B-4855-43B1-BB79-D8D3E8A79FF1} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5D84C182-1B21-4D9A-B31A-7387CCE5B898} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5D8CC911-79F2-4694-ACF3-D997B6443B32} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5E38FACB-5D05-4CF4-8B92-F302117674B8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5EA8C47C-5B22-4A9A-BE5D-3A61978CDA45} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5EB7F18B-B022-4C59-9782-87A8BD9C0BEE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5EDEA6F9-820C-4858-9D04-465BFB21A50C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5EFA1567-01C6-4592-8CB4-DE928B53CE5A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5F0A5D27-E2E8-4857-8382-205BF46CA9CE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{5FF9DB65-294A-4E38-AFE4-E48E5BF81B9B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{60243957-AB26-47C7-90A5-5C3EC2994632} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{60739F74-CE1C-4D86-B28B-CC25D3FC44A7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{611EBAF5-486C-4DA4-9353-645E28CFE837} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{616F489B-DAC3-4774-B5D1-2777DD54E5C0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{61772CBC-5040-435D-8071-46188076C24F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{617BA58F-F77A-4758-AE7B-6184D3A96E73} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6203F9A8-AE2D-461D-B530-15E8249A10F5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6292ED9F-9658-4C87-A2E0-8C9F5C113581} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{62E35B6C-501A-47B6-A4DB-815E608B1C64} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{64F76696-94BD-4E2D-A0C1-F127B6BC34F5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{66092BCF-9C72-4792-ABE5-4C557499AB85} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{663AD4C4-4874-4DD3-B533-9AF9BA905759} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{664440E1-9CC9-4ECA-B6E4-FC6226306F24} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{66B410EA-7C0C-493E-8C42-6C6717C84FE4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{66EB14CF-90D4-4965-9C6E-ED558DA15AD3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{67598317-8EED-4F45-98E1-80289D78E238} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{67D503A9-D9BF-4389-89C0-F7B01AE3B2C5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{68168672-B8B5-4BB7-BD0D-9EBF543DD82E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{68243DCE-B282-4E45-9856-EF4248E94C89} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{68BA4FB6-E311-4162-B965-416C78874FF3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{690527F4-92A2-4962-9EA1-52FCC44A37F0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{69BA081F-8462-4101-8B16-FE1BC37A9B60} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6A77FF38-DBB4-4EB7-8503-E545C8F4AF5D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6AE4F185-17B7-47F7-A4C6-2B944EBA3100} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6B2836E4-1F96-433B-AD42-558F97EE7278} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6B4044A1-39FF-4C82-A7A9-15B16E949233} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6B4ADC07-3DF9-4D13-A569-A0807AB9475B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6D7949E6-0EC6-4BC7-B2F3-6190B076DE0A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6E078AAA-B52A-40B3-A1A5-39570D9E89BA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6EFD8DBC-5CCF-45FD-9468-26FB13A38CD5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6F466046-4245-4CF7-995B-C987EF502E9D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6F7ABF23-1691-4ED7-970F-FE393B31AA5F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6FA742FD-F742-41A3-9BC9-33D7E89A5F60} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{6FE942E9-3679-4667-84D6-F6EAF73727E3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7024DF1A-A50A-473E-A3CC-7FAA818E5395} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7069D2AB-F115-4928-B074-71ACB02FC834} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{707A2DFA-A6D5-4A9C-B6C2-42A72E574FCD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{72E79828-41F6-4A07-972F-91E7B9E6A2C5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{72FF2AA3-D0DF-4649-B572-D663D691792C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7362390D-C0D7-4713-933E-037571BF898F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{74600B29-8CD7-4825-822B-38039B38BDC7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{74686BC6-67C4-4677-BA5E-DCF1376026E9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{748511C7-A8C2-4E6A-B3B3-1B637CDD521B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{74B7CBF8-D2E1-46EE-B550-8119CB425655} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{74E6B2E1-6F67-4BB8-ACE4-23640A224F6B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{750AC839-9E69-4EFB-92C4-1BD8732C30D6} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7537D216-22A3-4F5D-AB7E-D271D25420FD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7583A919-3B43-42D4-99CA-06600215382C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{75D2BB0B-DDAF-45CE-BC6E-6FE17EC7068B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{75E2BACB-4A4D-4EED-984E-5060BFB13BCB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{75F6883A-DC11-4B0E-AF1A-7CC59C350D17} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{76ABE651-F985-4627-9AF9-FD069223D276} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{77995EAB-E29F-496F-9475-D73016142DC5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{77AA08DD-D8F1-42A9-8643-32BF16D0AABA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{780B618B-CF2E-430E-B825-1E65F4BE1420} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{78EA5A4F-D666-4D12-A1F1-9E567C1DCF3F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{79EE9D66-5D0F-4818-8246-E479D84F2636} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{79EF3EE8-2BE5-460C-AC24-FB22FAA555A5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7A8F8A6C-4D39-448B-987D-9FB5C3CB957C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7AF64024-6B51-43B7-B313-07638ED02640} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7BEB36E0-A066-48E5-AC22-5E43EF375922} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7C1E7340-1756-4E24-B2F7-38EF76F93704} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7C7D1ACC-6A4F-4A8C-9246-936C0E983D66} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7DC7809C-F67C-4F97-B1A0-48EBAA390FC4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7DCA0EA9-DCD3-465C-BF69-16EF58548EC8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{7F9E9AE6-6453-4D2C-A92C-60D2E14E4CBC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{806C9239-C161-4759-8265-6899A533750D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{812382DD-A012-4F69-A13C-C2565A2F4633} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{812CCAC7-24A0-4546-BE8A-252B1E2B2EC6} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8164626E-C42A-4EA4-8BE6-C90D3FE1B530} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{826930FE-68AE-4CB4-9DD4-AC5ABA3FC3CB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{827CAFE7-9D2B-420C-8C81-C6AA475D848D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{83DFE034-8BFC-4619-8F56-990FEF79214A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{83F8D7C4-5A72-447E-96ED-BCBCF7AC9426} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{84071901-937F-46B4-9AED-8A43531EAC7E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{848830D9-0A99-4B95-A012-B229B149D045} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{853FE036-0EA3-41EE-974A-7C562A6256D5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{85A48A40-2B77-4977-8329-82875918E114} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8653A2DB-B4D3-41FB-B217-20FE2660FDF5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{86E62FE5-66DA-4681-AE2C-76E89E9BC9DD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{86F7B382-BE48-417A-B65A-E0ACBCF29A8E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{87035D76-36ED-4720-BF9B-830C39E20E79} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{87EC642A-302A-4B71-909E-63B7FAF1D21C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{88D6E7FA-CBF8-4455-B4A1-BFAE71802655} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{88E1C8F5-27C5-4496-A95C-8D8BC673C016} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{89124B75-FE8D-42D5-AD67-B10A0DB9D0F0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8AB91207-F07B-40C2-9CE7-10DDE9A022DC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8ADD80E6-5BCC-44CA-B6E3-F82F2EA2E234} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8B6A7EC8-2855-4739-8D51-F5253FEF135C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8C8087DA-6D13-4C67-8503-DAED20AD6B90} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8D1FA333-6B37-45B0-859D-F1CD60BCB620} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8E5175D8-5E52-4CC9-AED0-B3BA1F14E00B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8E858FB2-003A-4CF4-9644-6997D08122E2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8EAA013D-ACE1-447F-BABC-D7B52D9C9B87} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{8F5D3864-506D-4D93-AD27-958EE2056A4C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{909BE92B-148C-4F0B-8F2D-50C694DC9792} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{914543AA-142B-414B-A477-07490A4F0202} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{91532CA0-0341-4870-A6DC-364FB429742F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{91A02224-9FFD-4884-8A5A-7F1D116DD04D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{91A6008E-187D-4BA3-91D5-5D8644A63785} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{91CC15AE-0B40-41E4-8B3E-254C6F2AA5E5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{922D47B8-67D4-4570-BC0A-F96C38DA4BDD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{92771393-D8BC-47F8-85B4-9DA49BECB4D7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{9280D4AB-171C-4026-9DC7-67C50BCB30B2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{92CDAA66-8AF5-426B-9C48-352B5671C5EB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{94A8C439-DFE2-4E1D-AA22-E0FF07CF82A3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{96E5F734-F72B-4624-8B54-8A9E58CFEE14} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{973EA2B4-734C-4393-81B1-C33E1FDECE71} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{97405385-BE3C-48B7-9057-BD1125FF23C1} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{975D6A77-C524-44BF-BBCF-2A0633546C74} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{9794384A-958E-4006-9DAD-2EC994C62424} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{97F2085A-F015-4922-A8F7-E14AA7EF6D0B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{991BA418-4AA2-410F-BA72-81EA12A622B7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{996AB39A-5ABE-4BFE-B250-3542CC2241C9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{9A9307CF-4514-4F67-9BDD-1B1149BB1C49} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{9D507D4C-3AF4-4085-9322-2BA65666D544} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{9DFFFFF3-F7B0-46F0-8B03-3CDB0CDC0BED} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{9F72A127-D30E-45A8-BBB0-71B237FC16C6} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{9FB6D2E0-EE38-4102-A296-FDCCAB2A7312} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A067037A-E521-4C19-88ED-2AC717160003} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A092B2D0-B766-43FF-AAA9-58B401712B69} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A097DFB6-FEC4-4459-9968-89F4EE47D769} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A0E12F49-1EFD-43B2-ADD2-2117650B8D7A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A0F18620-EE1B-4D93-BCE5-CF21E86A9C01} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A122EF8E-C279-47A0-BF6B-64C219125E8A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A1827CA1-006F-4272-94B1-DF25B777E9B3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A27F11A5-5484-4BFE-9917-79EF44096F79} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A28B49D1-DF3A-4A10-BC8B-79734ACECF5D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A2D78D2A-B0DA-4108-90DA-0993DFB8610B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A2D78D42-13F1-4EC3-83DC-72E29A2B28BE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A3BC5FA4-9AAC-4E12-927B-7E28947F1D63} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A3C2F2B6-0380-49C1-BFFE-C3E041D3F068} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A4514D97-2616-4B27-AD77-1F79A04AF8AA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A4C7EEF5-843F-4720-BD17-CDD942FA9120} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A5B376B3-F265-46B8-A10A-D92A990B47E5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A6144468-52EC-4C79-9862-58E5BEAC3D7C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A627E82F-669C-40BF-99EF-2B30A7DB478F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A647E125-389F-4AF6-B147-025B89DAF5A9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A74F5F56-ED7C-4F5E-A293-841969159B9E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A77AEC79-B3A9-4CC4-9E52-7789CA0B09E5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A7A67ABF-90F0-44CD-A995-3E4008EF7A6D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A7D05E47-925E-43E1-A3DF-66980FB61068} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A7D84D55-BDEE-4983-A4B4-CCA9C8EBF17C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A84E3672-6F34-4622-B11D-D85484A32297} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A86E6847-2B78-416F-99A8-645591E12C81} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A8784BEE-10F1-4F15-9875-E432D4A70430} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A92265B7-2452-434A-9E9C-3A6977E6589B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{A93A1A35-DED9-4B69-838A-02BC483FA0CD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{ABFB91F5-AA47-4530-A762-771102637FB1} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AD81B27D-8BCD-4CBE-B232-24ECAACCF64A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{ADF6CA89-FAC9-4C7F-889B-741141DF7D99} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AE0C52F8-31FC-4D78-92EA-8684C00C1CE2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AE3CB15A-4F14-4942-B728-EFBEE1495EE0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AE6110B4-C1B7-4279-8A8B-E6B1DCD8E3F7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AF07FCCA-5EBF-4936-A72E-7DD223B23CEF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AF2CB4F2-BF6E-4882-8195-FA870310E943} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AF3FDB45-7DF3-458F-A1FE-96D9033BCEAF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AF4D0674-C0B7-4906-94C2-6A66F0D07CEC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AF641A64-E0DF-4E17-92D3-BF9AC3E13389} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AFD96703-E856-4F6C-A535-310DA3EEC954} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AFF14758-0814-4169-940F-9F049F7A057F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{AFFF4363-60B6-4C3F-9BB3-06C9041BB4AF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B0BCFFBF-2D4F-4724-973B-A77F286B51BF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B0F6C995-CB04-45A8-9C8C-2475FE1C7497} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B0F90FAF-C80A-42B5-8F3A-2A3586A2E3D0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B11228B2-0389-4E1A-AF77-F897CA6C31C5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B1475D87-B830-45FC-BF9A-A62A6E8F8A1D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B19C36AA-4D5A-4BBD-97BE-6EC90671BD3D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B1BB0E2C-2CDF-4C71-915D-3C78C5A3300C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B3B210E0-E275-4766-8155-73D275975978} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B43ABD2A-A514-414F-937A-AAE95D9F810D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B493F83F-374E-46DA-B6A0-1A87EFAFD4BE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B4D454D9-8266-474A-B661-688CEE1665A5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B60E40FA-8804-4E91-9568-245B670E5265} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B6B99241-22A2-4F2F-B9A0-9D17840845B0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B769B107-6BCA-47CB-8537-7CA23F0B12CD} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B7885A1E-2F94-4F3A-A15F-33218483C47A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B7C8FCBA-E46C-446E-9BEA-081DF980F367} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B844AED1-1DDA-401B-B37C-73CCE44490FF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{B8B35044-3A26-41D7-8A0C-45E9EDBBC70B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BA3F5BC7-BEE4-4947-87AF-19019BA7211D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BA4EFA94-AF5F-400A-B325-45432F3917EB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BC5EA837-680D-4B67-B952-81839AF95D1A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BD2008E4-31EA-41D4-A525-88C6D68891B6} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BD9A8C87-D56A-4B1A-A42E-5D4C6961A03B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BE30DD71-E27D-47E0-9314-90AB7C70FE82} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BEBDE5E0-B6F4-4F41-87A2-7D1452F2C82D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BF7854AC-9879-4825-80AC-5033E5DE1FAB} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{BF7BD2F2-CFB2-4045-A62F-6C539A10C8F8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C0679BC0-A5B8-4138-AC4A-EB34AC1E2A8F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C0F1FB80-3153-4E84-8206-BAA84C40C07B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C1F216F8-4F65-4C1A-AA3A-0073D9B1280C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C4B4FE89-A0F2-4582-B657-4F16A93EC08D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C59D22D8-DD7D-4CB1-8139-DDBB86E6AC24} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C5D63F0C-F341-41A5-9E1D-6F724F19780F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C5F2EF66-2BF8-49DB-A093-2073AC06F65C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C5FB8A78-35E0-4EE3-9F10-DBF86B296293} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C7171774-FAD0-49AE-81A5-322C685E381D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C8E6B114-7399-4982-B3B6-AE8046368835} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C962CC03-96F9-4814-83E4-CA990818D05C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{C9744401-E49E-4077-B21B-C1A2FC394CAE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{CD81D5D5-D422-4F66-82E5-F0C8C7C428ED} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{CD8B4D23-D060-47AB-ACBC-03B7B71311F2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{CE4DBD11-9DE9-4CC0-8F68-124D88F4C17A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{CE62A50A-BDE1-4337-BDCB-66248577D66A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{CE637A46-3548-40FC-AAE5-3AF0A1E043B0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{CF586D87-1AAE-4FB8-AE5E-E5E972979A89} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D00E9770-CCF3-4AA5-9A99-9E52BFCE154B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D024F02A-2006-4A2B-816C-A19C643895B8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D02D68E6-8939-47E9-86EB-5FA32EFA9B32} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D25DDA7A-32D6-4455-B0D6-D0E621B74918} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D27CE210-94F9-4ABD-8AB2-8CBCB5B9B7D7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D2872E7E-2292-4ECF-8A4C-BFF378A59B18} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D4169635-BC86-4DEC-83A3-0DFCEA2CA578} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D44970BA-C131-4D24-A967-24EE0DED88F4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D58CF2E0-C8A0-48D5-9D7A-957468B8DB06} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D84D5090-7540-473C-80C0-7166824F1198} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{D929CE20-0704-4624-A4EA-DFB040B6DB82} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DA6E52D5-A965-4B52-8050-11F723071143} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DA85B5F0-8DC0-4B76-BE08-52C0A593DB05} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DAA6DECC-E835-4222-9AC1-9889D4188347} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DB03EF86-3B2F-4E85-BEB8-1ACDABAF9671} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DB458699-D4C0-412C-BCA5-71470888019B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DB9402FB-BCAC-4CA1-9468-2BDD7EAB8849} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DBDDE224-66B5-4AB2-9C99-79120F83BB4D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DC167E0F-6249-4C6A-A2A0-06AA6A1617FA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DCCAC22E-B8FA-419A-BE40-7D3468264EC8} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DD7CCFF3-0532-4264-85FC-25265DB9691B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DDB824D5-2427-48AF-B15E-56CB799AEF5D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DF003C35-B47B-4C64-A41E-CD7BFC20ADE1} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DF0D2F4F-FCE0-4BA2-BB07-D9CDEB2D26B0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DF17B6EF-F553-4EC4-8673-10E7C180647F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DF339DC0-19AE-4B27-9318-83953649CEBC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DFBBC6CE-54B3-475D-9E2D-DB4B7A776E92} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DFC1B943-099A-43CF-A765-8514564E6A62} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{DFD06CB8-6DC8-46E3-B595-7A061863844A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E037EC13-7C14-4FAE-8A37-9E8DC0997982} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E1BE3067-E2B9-4D40-96AA-657634A35BFF} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E2457A0F-7011-4C76-8145-653A61FD13DC} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E26234B5-0315-4128-B8B1-75234E823E22} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E34BEADD-C3EC-42D6-98AC-DA567B885E5C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E57B41E9-D673-4A96-9E34-ADC2FFC35B50} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E79972F8-4B88-4C77-B77D-4724CB17044B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{E7A7CF77-BC59-4969-8FCB-8B9FC5D73778} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{EA87EF84-8FBE-4BA8-8C31-C8147C6D587B} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{EB6655D5-A0F2-4AD2-B595-B049FE2A39E0} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{EB7370FC-80B7-4CAA-A740-509FA9C7228F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{EBFB12D4-890A-432D-A730-CAB2158CC8E7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{EC12E0B7-7B26-4F96-81C0-3DB888B827E7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{EC629E80-EF10-47AB-BC3B-3F90E028E746} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{ECBDE413-8489-4FF7-A926-9BEA4D2AEC9F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{ECF0102C-A2CA-475C-9308-64CDD49334EE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{EF2F3EAD-1ECC-4CE0-BC8B-B794F115F0EE} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F178414C-85DA-4421-921C-88B37A0FB4D5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F1B42512-1B0B-49E9-86C1-9D7A87EBCB46} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F1CB4BB5-1869-4BD4-A2DA-F53B9A123559} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F205FCF9-CABB-4A3E-909A-9C162694C42D} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F273DB54-D2A8-4627-BD2F-AFEDFC7B8AB4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F29B677F-0DC6-4FF5-A8FD-782CD215DCF5} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F2A125AF-71D8-4B8D-8748-FA216AF693F3} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F3CA1E6D-A2E4-4A93-83AE-75E4209A2A5C} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F4056821-64CA-4245-8199-55150EED328E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F6293AD6-0226-4B70-8DD0-A6421495A020} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F8A8874B-34AF-4D48-8C88-A77FAF0EF863} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F9407760-867C-4089-8209-D0F944A65BD9} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F99557AC-7E5E-4753-8A98-0FE0D33BD4CA} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{F99D5588-758D-44FE-8A3E-3A4F43254FE2} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FA424379-A170-4EB5-88F3-414C4FE9FBA7} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FA98CAC3-0859-4859-A618-40F36DB6FA65} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FAEEC09B-2D16-4FCF-88BB-330860A12279} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FB5D8EC5-3D79-4511-BE13-843AF217DD48} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FBD64845-8F67-4E12-9DCB-2765994467E4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FBE94E49-1D7F-4927-914F-1AA51408BF8E} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FCA78BAE-5FF2-4DC9-9E00-B47551D2667F} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FCD78890-80B9-4632-8C76-389A36F3B997} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FCE76E20-5890-4F02-8F6D-73D9D548DE9A} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FEE9B34E-48D2-4513-8EC6-73C0BADC2673} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FF34D042-A3EE-462A-875B-95317E1959F4} Successfully deleted: [Empty Folder] C:\Users\Karri\appdata\local\{FFE2CEB8-328D-4A39-B7F9-0953421C895F} ~~~ FireFox Failed to delete: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg_igeared.xml" Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg_igeared.xml" Successfully deleted: [File] C:\Users\Karri\AppData\Roaming\mozilla\firefox\profiles\3rkyge3u.default\extensions\[removed] Successfully deleted: [Folder] C:\Users\Karri\AppData\Roaming\mozilla\firefox\profiles\3rkyge3u.default\extensions\{0113d088-8ed1-468c-b225-585a9c53b5e3} Successfully deleted the following from C:\Users\Karri\AppData\Roaming\mozilla\firefox\profiles\3rkyge3u.default\prefs.js user_pref("avg.toolbar.buttons_icon", ",,chrome://avg/skin/safesurf.png,chrome://avg/skin/safesurf.png,chrome://avg/skin/safesearch.png,chrome://avg/skin/avglinks.png,chrome:/ Emptied folder: C:\Users\Karri\AppData\Roaming\mozilla\firefox\profiles\3rkyge3u.default\minidumps [81 files] ~~~ Chrome Successfully deleted: [Folder] C:\Users\Karri\appdata\local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 08/09/2013 at 10:07:19.74 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RogueKiller V8.6.9 _x64_ [Sep 3 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Started in : Normal mode
User : Karri [Admin rights]
Mode : Scan – Date : 09/08/2013 10:21:08
| ARK || FAK || MBR |

¤¤¤ Bad processes : 2 ¤¤¤
[SUSP PATH] M4-Service.exe – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe [7] -> KILLED [TermProc]
[SUSP PATH] M4-Capture.exe – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Capture.exe [7] -> KILLED [TermProc]

¤¤¤ Registry Entries : 8 ¤¤¤
[RUN][SUSP PATH] HKCU\[…]\Run : Google Update ("C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe" /c [7]) -> FOUND
[RUN][SUSP PATH] HKUS\S-1-5-21-3989614313-289073978-4266361891-1000\[…]\Run : Google Update ("C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe" /c [7]) -> FOUND
[HJ POL] HKCU\[…]\System : DisableTaskMgr (0) -> FOUND
[HJ POL] HKCU\[…]\System : DisableRegistryTools (0) -> FOUND
[HJ POL] HKLM\[…]\System : DisableRegistryTools (0) -> FOUND
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : DisableRegistryTools (0) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Scheduled tasks : 4 ¤¤¤
[V1][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA.job : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /ua /installsource scheduler [7][x] -> FOUND
[V1][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core.job : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /c [7] -> FOUND
[V2][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /c [7] -> FOUND
[V2][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /ua /installsource scheduler [7][x] -> FOUND

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD6400AAKS-22A7B2 +++++
— User —
[MBR] 836d82655207d357e513bad9c0f2b365
[BSP] a073b175ff3e229765f81bb394d362b4 : Acer MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 15005 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 30734336 | Size: 238170 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 518506496 | Size: 357302 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[0]_S_09082013_102108.txt >>


RogueKiller V8.6.9 _x64_ [Sep 3 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Started in : Normal mode
User : Karri [Admin rights]
Mode : Remove – Date : 09/08/2013 10:22:13
| ARK || FAK || MBR |

¤¤¤ Bad processes : 2 ¤¤¤
[SUSP PATH] M4-Service.exe – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe [7] -> KILLED [TermProc]
[SUSP PATH] M4-Capture.exe – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Capture.exe [7] -> KILLED [TermProc]

¤¤¤ Registry Entries : 8 ¤¤¤
[RUN][SUSP PATH] HKCU\[…]\Run : Google Update ("C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe" /c [7]) -> DELETED
[RUN][SUSP PATH] HKUS\S-1-5-21-3989614313-289073978-4266361891-1000\[…]\Run : Google Update ("C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe" /c [7]) -> [0x2] The system cannot find the file specified.
[HJ POL] HKCU\[…]\System : DisableTaskMgr (0) -> DELETED
[HJ POL] HKCU\[…]\System : DisableRegistryTools (0) -> DELETED
[HJ POL] HKLM\[…]\System : DisableRegistryTools (0) -> DELETED
[HJ POL] HKLM\[…]\Wow6432Node\[…]\System : DisableRegistryTools (0) -> [0x2] The system cannot find the file specified.
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 4 ¤¤¤
[V1][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA.job : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /ua /installsource scheduler [7][x] -> DELETED
[V1][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core.job : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /c [7] -> DELETED
[V2][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000Core : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /c [7] -> DELETED
[V2][SUSP PATH] GoogleUpdateTaskUserS-1-5-21-3989614313-289073978-4266361891-1000UA : C:\Users\Karri\AppData\Local\Google\Update\GoogleUpdate.exe - /ua /installsource scheduler [7][x] -> DELETED

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD6400AAKS-22A7B2 +++++
— User —
[MBR] 836d82655207d357e513bad9c0f2b365
[BSP] a073b175ff3e229765f81bb394d362b4 : Acer MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 15005 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 30734336 | Size: 238170 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 518506496 | Size: 357302 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[0]_D_09082013_102213.txt >>
RKreport[0]_S_09082013_102108.txt


RogueKiller V8.6.9 _x64_ [Sep 3 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 64 bits version
Started in : Normal mode
User : Karri [Admin rights]
Mode : Shortcuts HJfix – Date : 09/08/2013 10:22:39
| ARK || FAK || MBR |

¤¤¤ Bad processes : 2 ¤¤¤
[SUSP PATH] M4-Service.exe – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Service.exe [7] -> KILLED [TermProc]
[SUSP PATH] M4-Capture.exe – C:\Users\Karri\AppData\Local\Mikogo4\Viewer\Service\M4-Capture.exe [7] -> KILLED [TermProc]

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ File attributes restored: ¤¤¤
Desktop: Success 24 / Fail 0
Quick launch: Success 0 / Fail 0
Programs: Success 0 / Fail 0
Start menu: Success 0 / Fail 0
User folder: Success 9 / Fail 0
My documents: Success 8 / Fail 8
My favorites: Success 0 / Fail 0
My pictures: Success 0 / Fail 0
My music: Success 0 / Fail 0
My videos: Success 0 / Fail 0
Local drives: Success 1 / Fail 0
Backup: [NOT FOUND]

Drives:
[C:] \Device\HarddiskVolume2 – 0x3 –> Restored
[D:] \Device\HarddiskVolume3 – 0x3 –> Restored
[E:] \Device\CdRom0 – 0x5 –> Skipped
[F:] \Device\HarddiskVolume4 – 0x2 –> Restored
[G:] \Device\HarddiskVolume5 – 0x2 –> Restored
[H:] \Device\HarddiskVolume6 – 0x2 –> Restored
[I:] \Device\HarddiskVolume7 – 0x2 –> Restored
[J:] \Device\CdRom2 – 0x5 –> Skipped
[L:] \Device\CdRom1 – 0x5 –> Skipped
[M:] \Device\HarddiskVolume8 – 0x2 –> Restored
[N:] \Device\HarddiskVolume10 – 0x2 –> Restored
[O:] \Device\HarddiskVolume9 – 0x3 –> Restored

¤¤¤ Infection : ¤¤¤

Finished : << RKreport[0]_SC_09082013_102239.txt >>
RKreport[0]_D_09082013_102213.txt;RKreport[0]_S_09082013_102108.txt

Hello, Still cannot find that OTL log! I looked where you suggested and no luck. ComboFix 13-09-08.02 - Karri 08/09/2013 13:56:13.2.4 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.2.1033.18.8125.5516 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2013-08-08 to 2013-09-08 ))))))))))))))))))))))))))))))) . . 2013-09-08 18:04 . 2013-09-08 18:04 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp 2013-09-08 18:04 . 2013-09-08 18:04 ——– d—–w- c:\users\Public\AppData\Local\temp 2013-09-08 18:04 . 2013-09-08 18:04 ——– d—–w- c:\users\Pat\AppData\Local\temp 2013-09-08 18:04 . 2013-09-08 18:04 ——– d—–w- c:\users\Guest\AppData\Local\temp 2013-09-08 18:04 . 2013-09-08 18:04 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-09-08 18:04 . 2013-09-08 18:04 ——– d—–w- c:\users\AppData\AppData\Local\temp 2013-09-08 18:04 . 2013-09-08 18:04 ——– d—–w- c:\users\Administrator\AppData\Local\temp 2013-09-08 13:58 . 2013-09-08 13:58 ——– d—–w- c:\windows\ERUNT 2013-09-08 12:56 . 2013-09-08 13:52 ——– d—–w- C:\AdwCleaner 2013-09-02 23:47 . 2013-09-02 23:47 ——– d—–w- c:\users\Karri\AppData\Roaming\Avira 2013-09-02 23:42 . 2013-09-02 23:42 ——– d—–w- c:\programdata\AskPartnerNetwork 2013-09-02 23:42 . 2013-09-02 23:42 ——– d—–w- c:\program files (x86)\AskPartnerNetwork 2013-09-02 23:41 . 2013-09-08 12:46 132088 —-a-w- c:\windows\system32\drivers\avipbb.sys 2013-09-02 23:41 . 2013-09-08 12:46 105344 —-a-w- c:\windows\system32\drivers\avgntflt.sys 2013-09-02 23:41 . 2013-09-02 23:41 28600 —-a-w- c:\windows\system32\drivers\avkmgr.sys 2013-09-02 23:41 . 2013-09-02 23:41 ——– d—–w- c:\programdata\Avira 2013-09-02 23:41 . 2013-09-02 23:41 ——– d—–w- c:\program files (x86)\Avira 2013-08-31 00:29 . 2013-08-06 08:58 9515512 ——w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C40E2118-8A42-40C8-9C79-07A1413FC8CA}\mpengine.dll 2013-08-28 14:49 . 2013-08-02 14:06 1706496 —-a-w- c:\windows\system32\WMVDECOD.DLL 2013-08-28 14:49 . 2013-08-02 04:09 1548288 —-a-w- c:\windows\SysWow64\WMVDECOD.DLL 2013-08-23 03:06 . 2013-08-23 03:06 ——– d—–w- c:\program files\iPod 2013-08-23 03:06 . 2013-08-23 03:06 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-08-23 03:06 . 2013-08-23 03:06 ——– d—–w- c:\program files\iTunes 2013-08-18 23:39 . 2013-08-18 23:39 ——– d—–w- c:\users\Karri\AppData\Roaming\Rainbow 2013-08-18 23:37 . 2013-08-18 23:37 ——– d—–w- c:\program files (x86)\Rush for Gold - Alaska 2013-08-15 03:19 . 2013-08-15 03:27 ——– d—–w- c:\windows\system32\MRT 2013-08-14 22:33 . 2013-07-09 12:04 1585256 —-a-w- c:\windows\system32\ntdll.dll 2013-08-14 15:11 . 2013-08-14 15:11 4774272 —-a-w- c:\program files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll 2013-08-14 15:11 . 2013-08-14 15:11 4774272 —-a-w- c:\program files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-08-21 14:28 . 2012-09-29 19:56 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-08-21 14:28 . 2012-09-29 19:56 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-08-15 03:19 . 2006-11-02 12:35 78161360 —-a-w- c:\windows\system32\mrt.exe 2013-07-08 04:16 . 2013-08-14 22:33 43008 —-a-w- c:\windows\apppatch\acwow64.dll 2013-06-24 15:58 . 2013-06-24 15:58 83120 —-a-w- c:\windows\system32\CRMMS32.dll 2013-06-24 14:48 . 2010-11-30 11:28 18656 —-a-w- c:\programdata\Microsoft\MSOIdentityCRL\production\msoidconfig.dll 2013-06-13 01:48 . 2012-04-28 23:22 867240 —-a-w- c:\windows\SysWow64\npdeployJava1.dll 2013-06-13 01:48 . 2010-06-02 14:27 789416 —-a-w- c:\windows\SysWow64\deployJava1.dll 2013-06-13 01:47 . 2013-06-19 19:31 96168 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-07-29 21:52 121392 —-a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-11-10 15:55 158056 —-a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] "Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-08-28 1811880] "EADM"="c:\program files (x86)\Origin\Origin.exe" [2013-08-11 3549528] "Logitech Vid"="c:\program files (x86)\Logitech\Vid HD\Vid.exe" [2010-10-29 5915480] "SansaDispatch"="c:\users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe" [2013-06-16 613888] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "CLPushUpdate"="c:\program files (x86)\CyberLink\CyberLink Live\CLPushUpdate.exe" [2008-09-11 68640] "PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-05-20 204908] "BkupTray"="c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-26 28672] "Acer Product Registration"="c:\program files (x86)\Acer\Acer Registration\ACE1.exe" [2007-11-26 3387392] "Acer Assist Launcher"="c:\program files (x86)\Acer\Acer Assist\launcher.exe" [2007-11-19 1261568] "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2006-12-11 49152] "ACQTMOUSE"="c:\program files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe" [2008-08-01 501760] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720] "LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-08-12 205336] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-08-16 152392] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-09-08 347192] . c:\users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-24 27776968] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360] WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2011-2-9 610120] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Contents of the 'Scheduled Tasks' folder . 2013-09-08 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-29 14:28] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-07-29 21:53 50736 —-a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-11-10 15:55 190312 —-a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IntelSWUpdateClient"="c:\program files\intel\inteldh\common\SWUpdateClient.exe" [2008-07-16 179600] "RtHDVCpl"="RAVCpl64.exe" [2008-08-04 6455840] "Skytel"="Skytel.exe" [2008-08-04 1833504] "Acer Empowering Technology Monitor"="c:\program files\Acer\Empowering Technology\SysMonitor.exe" [2008-06-02 319488] "EmpoweringTechnology"="c:\program files\Acer\Empowering Technology\Framework.Launcher.exe" [2008-06-02 319488] "IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-20 182808] "eDataSecurity Loader"="c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe" [2008-07-29 561200] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-25 153624] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-25 225816] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-25 199704] "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512] . ——- Supplementary Scan ——- . uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=1009&s=1&o=vp64&d=0309&m=aspire_m5700 uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=1009&s=1&o=vp64&d=0309&m=aspire_m5700 mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=1009&s=1&o=vp64&d=0309&m=aspire_m5700 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105 LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll Trusted Zone: aboriginallink.ca Trusted Zone: aboriginallink.com Trusted Zone: dynamics.com Trusted Zone: live.com Trusted Zone: microsoftonline.com\portal Trusted Zone: outlook.com Trusted Zone: sharepoint.com\responsetrac Trusted Zone: sharepoint.com\responsetrac-admin Trusted Zone: sharepoint.com\responsetrac-my TCP: DhcpNameServer = 192.168.1.1 Handler: intu-tt2011 - {B3B5DAD9-E96D-45b4-B636-B6CF2F773DE1} - c:\program files (x86)\TurboTax 2011\ic2011pp.dll Handler: intu-tt2012 - {02F985EF-502B-4597-993F-6BF9E004C138} - c:\program files (x86)\TurboTax 2012\ic2012pp.dll DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} - hxxp://www.shockwave.com/content/trijinx/sis/TriJinx.1.0.0.86.cab FF - ProfilePath - c:\users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.theweathernetwork.com/weather/caon0532 FF - ExtSQL: 2013-07-26 16:31; [removed]; c:\users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\[removed] FF - ExtSQL: 2013-08-20 08:37; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; c:\program files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF - ExtSQL: !HIDDEN! 2009-07-11 00:01; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension . - - - - ORPHANS REMOVED - - - - . BHO-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) Toolbar-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) Wow6432Node-HKCU-Run-WMPNSCFG - c:\program files (x86)\Windows Media Player\WMPNSCFG.exe SafeBoot-WudfPf SafeBoot-WudfRd AddRemove-Coupon Printer for Windows5.0.0.2 - c:\program files (x86)\Coupons\uninstall.exe AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files (x86)\DivX\DivXCodecUninstall.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.032" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.abr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ani" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.apd" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.arw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.bay" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Bitmap" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.bw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.bwf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.caf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.caf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cdda\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cdda" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cel" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cr2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.crw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cs1" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cur" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dcr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dcx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dib" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.djv" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.djvu" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dng" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.emf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.eps" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.erf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.fff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.flc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.fli" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.fpx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Gif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gsm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.gsm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.hdr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.icl" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.icn" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.iff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ilbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.int" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.inta" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.iw4" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.j2c" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.j2k" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jbr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jfif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jp2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jpc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jpk" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jpx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.kar" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.kdc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.lbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m15" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m1a" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m2a" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m4b" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m75" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mef" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mos" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mpv" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mrw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.nef" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.nrw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.orf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pbr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pcd" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pct" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pcx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pef" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pgm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pic" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pics" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pict" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pix" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Png" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ppm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.psd" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.psp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pspbrush" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pspimage" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.qcp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.qtpf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.raf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ras" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.raw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rgb" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rgba" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rle" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rsb" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rw2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rwl" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sdv" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sfil" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sgi" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.smf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.smi" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.smil" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sml" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sr2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.srf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.srw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.swa" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.tga" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.thm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ttc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ttf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ulw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v14o\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.v14o" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v14p\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.v14p" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v14pf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.v14pf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.vfw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.wbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.wbmp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.wmf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xmp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xpm" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*1*] @="?????????????????? v1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*1*\CLSID] @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*2*] @="?????????????????? v2" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*2*\CLSID] @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*] @="?????????????????? v1" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID] @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*] @="?????????????????? v2" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID] @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Completion time: 2013-09-08 14:07:11 ComboFix-quarantined-files.txt 2013-09-08 18:07 ComboFix2.txt 2013-01-04 01:43 . Pre-Run: 61,989,769,216 bytes free Post-Run: 63,811,010,560 bytes free . - - End Of File - - 0B7644883FF003AF644784472939C20D EF9CDC51B437D322D54016B68F003416

ComboFix 13-09-09.01 - Karri 09/09/2013 9:27.3.4 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.2.1033.18.8125.5793 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe Command switches used :: c:\users\Karri\Desktop\CFScript.txt AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2013-08-09 to 2013-09-09 ))))))))))))))))))))))))))))))) . . 2013-09-09 13:34 . 2013-09-09 13:34 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp 2013-09-09 13:34 . 2013-09-09 13:34 ——– d—–w- c:\users\Public\AppData\Local\temp 2013-09-09 13:34 . 2013-09-09 13:34 ——– d—–w- c:\users\Pat\AppData\Local\temp 2013-09-09 13:34 . 2013-09-09 13:34 ——– d—–w- c:\users\Guest\AppData\Local\temp 2013-09-09 13:34 . 2013-09-09 13:34 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-09-09 13:34 . 2013-09-09 13:34 ——– d—–w- c:\users\AppData\AppData\Local\temp 2013-09-09 13:34 . 2013-09-09 13:34 ——– d—–w- c:\users\Administrator\AppData\Local\temp 2013-09-09 12:56 . 2013-09-09 12:56 76232 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{60FCD9CC-6375-4345-B640-6D0D702BD5E3}\offreg.dll 2013-09-09 12:36 . 2013-08-06 08:58 9515512 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{60FCD9CC-6375-4345-B640-6D0D702BD5E3}\mpengine.dll 2013-09-08 13:58 . 2013-09-08 13:58 ——– d—–w- c:\windows\ERUNT 2013-09-08 12:56 . 2013-09-08 13:52 ——– d—–w- C:\AdwCleaner 2013-09-02 23:47 . 2013-09-02 23:47 ——– d—–w- c:\users\Karri\AppData\Roaming\Avira 2013-09-02 23:42 . 2013-09-02 23:42 ——– d—–w- c:\programdata\AskPartnerNetwork 2013-09-02 23:42 . 2013-09-02 23:42 ——– d—–w- c:\program files (x86)\AskPartnerNetwork 2013-09-02 23:41 . 2013-09-08 12:46 132088 —-a-w- c:\windows\system32\drivers\avipbb.sys 2013-09-02 23:41 . 2013-09-08 12:46 105344 —-a-w- c:\windows\system32\drivers\avgntflt.sys 2013-09-02 23:41 . 2013-09-02 23:41 28600 —-a-w- c:\windows\system32\drivers\avkmgr.sys 2013-09-02 23:41 . 2013-09-02 23:41 ——– d—–w- c:\programdata\Avira 2013-09-02 23:41 . 2013-09-02 23:41 ——– d—–w- c:\program files (x86)\Avira 2013-08-28 14:49 . 2013-08-02 14:06 1706496 —-a-w- c:\windows\system32\WMVDECOD.DLL 2013-08-28 14:49 . 2013-08-02 04:09 1548288 —-a-w- c:\windows\SysWow64\WMVDECOD.DLL 2013-08-23 03:06 . 2013-08-23 03:06 ——– d—–w- c:\program files\iPod 2013-08-23 03:06 . 2013-08-23 03:06 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-08-23 03:06 . 2013-08-23 03:06 ——– d—–w- c:\program files\iTunes 2013-08-18 23:39 . 2013-08-18 23:39 ——– d—–w- c:\users\Karri\AppData\Roaming\Rainbow 2013-08-18 23:37 . 2013-08-18 23:37 ——– d—–w- c:\program files (x86)\Rush for Gold - Alaska 2013-08-15 03:19 . 2013-08-15 03:27 ——– d—–w- c:\windows\system32\MRT 2013-08-14 22:33 . 2013-07-09 12:04 1585256 —-a-w- c:\windows\system32\ntdll.dll 2013-08-14 15:11 . 2013-08-14 15:11 4774272 —-a-w- c:\program files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll 2013-08-14 15:11 . 2013-08-14 15:11 4774272 —-a-w- c:\program files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-08-21 14:28 . 2012-09-29 19:56 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-08-21 14:28 . 2012-09-29 19:56 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-08-15 03:19 . 2006-11-02 12:35 78161360 —-a-w- c:\windows\system32\mrt.exe 2013-08-07 08:22 . 2009-10-03 14:07 278800 ——w- c:\windows\system32\MpSigStub.exe 2013-07-08 04:16 . 2013-08-14 22:33 43008 —-a-w- c:\windows\apppatch\acwow64.dll 2013-06-24 15:58 . 2013-06-24 15:58 83120 —-a-w- c:\windows\system32\CRMMS32.dll 2013-06-24 14:48 . 2010-11-30 11:28 18656 —-a-w- c:\programdata\Microsoft\MSOIdentityCRL\production\msoidconfig.dll 2013-06-13 01:48 . 2012-04-28 23:22 867240 —-a-w- c:\windows\SysWow64\npdeployJava1.dll 2013-06-13 01:48 . 2010-06-02 14:27 789416 —-a-w- c:\windows\SysWow64\deployJava1.dll 2013-06-13 01:47 . 2013-06-19 19:31 96168 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-07-29 21:52 121392 —-a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-11-10 15:55 158056 —-a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656] "Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-08-28 1811880] "EADM"="c:\program files (x86)\Origin\Origin.exe" [2013-08-11 3549528] "Logitech Vid"="c:\program files (x86)\Logitech\Vid HD\Vid.exe" [2010-10-29 5915480] "SansaDispatch"="c:\users\Karri\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe" [2013-06-16 613888] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-06-21 19875432] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "CLPushUpdate"="c:\program files (x86)\CyberLink\CyberLink Live\CLPushUpdate.exe" [2008-09-11 68640] "PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-05-20 204908] "BkupTray"="c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-26 28672] "Acer Product Registration"="c:\program files (x86)\Acer\Acer Registration\ACE1.exe" [2007-11-26 3387392] "Acer Assist Launcher"="c:\program files (x86)\Acer\Acer Assist\launcher.exe" [2007-11-19 1261568] "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2006-12-11 49152] "ACQTMOUSE"="c:\program files (x86)\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe" [2008-08-01 501760] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720] "LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-08-12 205336] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-08-16 152392] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-09-08 347192] . c:\users\Karri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Karri\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-24 27776968] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360] WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2011-2-9 610120] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Contents of the 'Scheduled Tasks' folder . 2013-09-09 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-29 14:28] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 164016 —-a-w- c:\users\Karri\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-07-29 21:53 50736 —-a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-11-10 15:55 190312 —-a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IntelSWUpdateClient"="c:\program files\intel\inteldh\common\SWUpdateClient.exe" [2008-07-16 179600] "RtHDVCpl"="RAVCpl64.exe" [2008-08-04 6455840] "Skytel"="Skytel.exe" [2008-08-04 1833504] "Acer Empowering Technology Monitor"="c:\program files\Acer\Empowering Technology\SysMonitor.exe" [2008-06-02 319488] "EmpoweringTechnology"="c:\program files\Acer\Empowering Technology\Framework.Launcher.exe" [2008-06-02 319488] "IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-20 182808] "eDataSecurity Loader"="c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe" [2008-07-29 561200] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-25 153624] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-25 225816] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-25 199704] "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512] . ——- Supplementary Scan ——- . uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=1009&s=1&o=vp64&d=0309&m=aspire_m5700 uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=1009&s=1&o=vp64&d=0309&m=aspire_m5700 mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=1009&s=1&o=vp64&d=0309&m=aspire_m5700 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105 LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll TCP: DhcpNameServer = 192.168.1.1 Handler: intu-tt2011 - {B3B5DAD9-E96D-45b4-B636-B6CF2F773DE1} - c:\program files (x86)\TurboTax 2011\ic2011pp.dll Handler: intu-tt2012 - {02F985EF-502B-4597-993F-6BF9E004C138} - c:\program files (x86)\TurboTax 2012\ic2012pp.dll DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} - hxxp://www.shockwave.com/content/trijinx/sis/TriJinx.1.0.0.86.cab FF - ProfilePath - c:\users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.theweathernetwork.com/weather/caon0532 FF - ExtSQL: 2013-07-26 16:31; [removed]; c:\users\Karri\AppData\Roaming\Mozilla\Firefox\Profiles\3rkyge3u.default\extensions\[removed] FF - ExtSQL: 2013-08-20 08:37; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; c:\program files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF - ExtSQL: !HIDDEN! 2009-07-11 00:01; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension . - - - - ORPHANS REMOVED - - - - . BHO-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) Toolbar-{41564952-412D-5637-00A7-7A786E7484D7} - (no file) AddRemove-Coupon Printer for Windows5.0.0.2 - c:\program files (x86)\Coupons\uninstall.exe AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files (x86)\DivX\DivXCodecUninstall.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.032" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.abr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ani" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.apd" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.arw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.bay" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Bitmap" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.bw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.bwf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.caf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.caf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cdda\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cdda" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cel" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cr2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.crw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cs1" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.cur" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dcr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dcx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dib" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.djv" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.djvu" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.dng" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.emf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.eps" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.erf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.fff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.flc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.fli" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.fpx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Gif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gsm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.gsm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.hdr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.icl" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.icn" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.iff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ilbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.int" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.inta" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.iw4" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.j2c" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.j2k" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jbr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jfif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jp2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jpc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jpk" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.jpx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.kar" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.kdc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.lbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m15" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m1a" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m2a" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m4b" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.m75" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mef" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mos" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mpv" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.mrw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.nef" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.nrw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.orf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pbr" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pcd" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pct" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pcx" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pef" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pgm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pic" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pics" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pict" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pix" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Png" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ppm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.psd" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.psp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pspbrush" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.pspimage" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.qcp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.qtpf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.raf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ras" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.raw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rgb" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rgba" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rle" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rsb" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rw2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.rwl" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sdv" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sfil" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sgi" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.smf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.smi" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.smil" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sml" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.sr2" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.srf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.srw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.swa" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.tga" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.thm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice] @Denied: (2) (S-1-5-21-3989614313-289073978-4266361891-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ttc" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ttf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.ulw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v14o\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.v14o" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v14p\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.v14p" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v14pf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.v14pf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.vfw" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.wbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.wbmp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.wmf" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xbm" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xif" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xmp" . [HKEY_USERS\S-1-5-21-3989614313-289073978-4266361891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 14.xpm" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*1*] @="?????????????????? v1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*1*\CLSID] @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*2*] @="?????????????????? v2" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\VideoLAN.VLCPlugin.*2*\CLSID] @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*] @="?????????????????? v1" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID] @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*] @="?????????????????? v2" . [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID] @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Completion time: 2013-09-09 09:36:50 ComboFix-quarantined-files.txt 2013-09-09 13:36 ComboFix2.txt 2013-09-08 18:07 ComboFix3.txt 2013-01-04 01:43 . Pre-Run: 62,633,811,968 bytes free Post-Run: 62,251,900,928 bytes free . - - End Of File - - 9094A1C0F3212627CEFC76B11F5DD5BB EF9CDC51B437D322D54016B68F003416