Nattly won't leave my browsers alone [Solved]

A few days ago, I downloaded a song called "08 g'maury (heavenly)." The file I downloaded was an .exe file (I know I'm a dumbass and I shouldn't have done this). But I wasn't thinking that at the time, because I did get my song, which is still there and works great.
However, the homepage to the two browsers I use primarily (Google Chrome and Mozilla Firefox) have been changed to a site called "nattly.com." Visually, this site looks just like Google, but without the Google Logo. And on both browsers, when I try to reset (using about:config on Firefox) everything to go back to my default home pages, upon restarting the browser, this nattly thing reappears. Also, I seem to be unable to delete my history on both browsers.
Aside from this, there are no visible problems with my PC. I just find this nattly thing quite odd.
I've run my antivirus (which found nothing), as well as malwarebytes (which found two things), and still Nattly returns whenever I restart my browsers.

OTL scans:

OTL.txt

OTL logfile created on: 2013-09-07 1:45:47 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:UsersShanneDownloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16660)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: yyyy-MM-dd

11.92 Gb Total Physical Memory | 10.06 Gb Available Physical Memory | 84.36% Memory free
13.61 Gb Paging File | 11.66 Gb Available in Paging File | 85.67% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 279.45 Gb Total Space | 227.97 Gb Free Space | 81.58% Space Free | Partition Type: NTFS
Drive D: | 349.32 Gb Total Space | 349.18 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive E: | 349.32 Gb Total Space | 349.18 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive F: | 397.87 Gb Total Space | 397.73 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive H: | 931.48 Gb Total Space | 834.80 Gb Free Space | 89.62% Space Free | Partition Type: NTFS

Computer Name: ARCHITECTURE | User Name: Shanne | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:UsersShanneDownloadsOTL.exe (OldTimer Tools)
PRC - C:Program Files (x86)Last.fmLast.fm Scrobbler.exe (Last.fm)
PRC - C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe (Adobe Systems Incorporated)
PRC - C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe (Intel Corporation)
PRC - C:Program Files (x86)IntelIntel® Management Engine ComponentsDALJhi_service.exe (Intel Corporation)
PRC - C:Program Files (x86)IntelIntel® Management Engine ComponentsFWServiceIntelMeFWService.exe (Intel Corporation)
PRC - C:Program Files (x86)Malwarebytes' Anti-Malwarembamservice.exe (Malwarebytes Corporation)
PRC - C:Program Files (x86)Malwarebytes' Anti-Malwarembamgui.exe (Malwarebytes Corporation)
PRC - C:Program Files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe (Malwarebytes Corporation)
PRC - C:WindowsSysWOW64UMonit64.exe ()
PRC - C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe (NVIDIA Corporation)
PRC - C:Program Files (x86)ASUSSplendidColorUService.exe (ASUSTeK Computer Inc.)
PRC - C:Program Files (x86)ASUSATK PackageATK HotkeyHControl.exe (ASUSTek Computer Inc.)
PRC - C:Program Files (x86)ASUSATK PackageATK HotkeyAsLdrSrv.exe (ASUSTek Computer Inc.)
PRC - C:Program Files (x86)CyberLinkShared filesbrs.exe (cyberlink)
PRC - C:Program Files (x86)ASUSATK PackageATKOSD2ATKOSD2.exe (ASUSTek Computer Inc.)
PRC - C:Program Files (x86)CyberLinkPower2GoPower2GoExpress.exe (CyberLink Corp.)
PRC - C:Program Files (x86)ASUSSplendidACMON.exe (ASUS)
PRC - C:Program Files (x86)ASUSATK PackageATK MediaDMedia.exe (ASUSTek Computer Inc.)
PRC - C:Program Files (x86)ASUSUSBChargerPlusUSBChargerPlus.exe (ASUSTek Computer Inc.)
PRC - C:Program Files (x86)ControlCenter4BrCcUxSys.exe (Brother Industries, Ltd.)
PRC - C:Program Files (x86)ControlCenter4BrCtrlCntr.exe (Brother Industries, Ltd.)
PRC - C:Program FilesClassic ShellClassicShellService.exe (IvoSoft)
PRC - C:WindowsSysWOW64cfgmig32.exe ()
PRC - C:Program Files (x86)CyberLinkPowerDVD10PDVD10Serv.exe (CyberLink Corp.)
PRC - C:Program Files (x86)Browny02BrotherBrStMonW.exe (Brother Industries, Ltd.)
PRC - C:Program Files (x86)Browny02BrYNSvc.exe (Brother Industries, Ltd.)
PRC - C:Program Files (x86)ASUSATK PackageATK HotkeyKBFiltr.exe (ASUSTek Computer Inc.)
PRC - C:Program Files (x86)CyberLinkPower2GoCLMLSvc.exe (CyberLink)
PRC - C:Program Files (x86)ASUSATK PackageATKGFNEXGFNEXSrv.exe (ASUS)
PRC - C:Program Files (x86)ASUS Gaming Mousehid.exe ()
PRC - C:Program Files (x86)NuancePaperPortpptd40nt.exe (Nuance Communications, Inc.)
PRC - C:Program Files (x86)NuancePaperPortPDFProFiltSrvPP.exe (Nuance Communications, Inc.)
PRC - C:Program Files (x86)NuancePDF Viewer PluspdfPro5Hook.exe (Nuance Communications, Inc.)
PRC - C:ProgramDataFLEXnetConnect11ISUSPM.exe (Acresso Corporation)


========== Modules (No Company Name) ==========

MOD - C:Program Files (x86)Last.fmlistener.dll ()
MOD - C:Program Files (x86)Last.fmunicorn.dll ()
MOD - C:Program Files (x86)Last.fmlogger.dll ()
MOD - C:Program Files (x86)Last.fmlastfm.dll ()
MOD - C:Program Files (x86)Common FilesAppleApple Application Supportzlib1.dll ()
MOD - C:Program Files (x86)Common FilesAppleApple Application Supportlibxml2.dll ()
MOD - C:WindowsSysWOW64UMonit64.exe ()
MOD - C:Program Files (x86)Last.fmpluginsphonon_backendphonon_vlc.dll ()
MOD - C:Program Files (x86)Last.fmphonon.dll ()
MOD - C:Program Files (x86)Last.fmlibvlccore.dll ()
MOD - C:Program Files (x86)Last.fmpluginsaudio_outputlibaout_directx_plugin.dll ()
MOD - C:Program Files (x86)Last.fmlibvlc.dll ()
MOD - C:Program Files (x86)CyberLinkPower2GoLanguageEnuP2GRC.dll ()
MOD - C:Program Files (x86)CyberLinkPower2GoCLMediaLibrary.dll ()
MOD - C:Program Files (x86)ASUS Gaming Mousehid.exe ()
MOD - C:Program Files (x86)CyberLinkPower2GoCLVistaAudioMixer.dll ()
MOD - C:Program Files (x86)CyberLinkPower2GoCLMLSvcPS.dll ()
MOD - C:Program Files (x86)BrotherBrUtilitiesBrLogAPI.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (mcbootdelaystartsvc) – C:Program FilesCommon FilesmcafeeMcSvcHostMcSvHost.exe /McCoreSvc File not found
SRV:64bit: - (WinDefend) – C:Program FilesWindows DefenderMsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (OfficeSvc) – C:Program FilesMicrosoft Office 15ClientX64integratedoffice.exe (Microsoft Corporation)
SRV:64bit: - (DsmSvc) – C:WindowsSysNativeDeviceSetupManager.dll (Microsoft Corporation)
SRV:64bit: - (netprofm) – C:WindowsSysNativenetprofmsvc.dll (Microsoft Corporation)
SRV:64bit: - (BrokerInfrastructure) – C:WindowsSysNativebisrv.dll (Microsoft Corporation)
SRV:64bit: - (AudioEndpointBuilder) – C:WindowsSysNativeAudioEndpointBuilder.dll (Microsoft Corporation)
SRV:64bit: - (ETDService) – C:Program FilesElantechETDService.exe (ELAN Microelectronics Corp.)
SRV:64bit: - (btwdins) – C:Program FilesWIDCOMMBluetooth Softwarebtwdins.exe (Broadcom Corporation.)
SRV:64bit: - (TimeBroker) – C:WindowsSysNativeTimeBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (SystemEventsBroker) – C:WindowsSysNativeSystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (Intel® – C:Program FilesInteliCLS ClientSocketHeciServer.exe (Intel® Corporation)
SRV:64bit: - (Intel® – C:Program FilesInteliCLS ClientHeciServer.exe (Intel® Corporation)
SRV:64bit: - (wlidsvc) – C:WindowsSysNativewlidsvc.dll (Microsoft Corporation)
SRV:64bit: - (LSM) – C:WindowsSysNativelsm.dll (Microsoft Corporation)
SRV:64bit: - (fhsvc) – C:WindowsSysNativefhsvc.dll (Microsoft Corporation)
SRV:64bit: - (WSService) – C:WindowsSysNativeWSService.dll (Microsoft Corporation)
SRV:64bit: - (PrintNotify) – C:WindowsSysNativespooldriversx643PrintConfig.dll (Microsoft Corporation)
SRV:64bit: - (BcmBtRSupport) – C:WindowsSysNativeBtwRSupportService.exe (Broadcom Corporation.)
SRV:64bit: - (ClassicShellService) – C:Program FilesClassic ShellClassicShellService.exe (IvoSoft)
SRV:64bit: - (CAISafe) – C:Program FilesTotal DefenseInternet Security SuiteAnti-Virusisafe.exe (Computer Associates International, Inc.)
SRV:64bit: - (ccSchedulerSVC) – C:Program FilesTotal DefenseInternet Security Suiteccschedulersvc.exe (Total Defense, Inc.)
SRV:64bit: - (CaCCProvSP) – C:Program FilesTotal DefenseInternet Security Suiteccprovsp.exe (Total Defense, Inc.)
SRV:64bit: - (WiaRpc) – C:WindowsSysNativewiarpc.dll (Microsoft Corporation)
SRV:64bit: - (Wcmsvc) – C:WindowsSysNativewcmsvc.dll (Microsoft Corporation)
SRV:64bit: - (VaultSvc) – C:WindowsSysNativevaultsvc.dll (Microsoft Corporation)
SRV:64bit: - (svsvc) – C:WindowsSysNativesvsvc.dll (Microsoft Corporation)
SRV:64bit: - (Netlogon) – C:WindowsSysNativenetlogon.dll (Microsoft Corporation)
SRV:64bit: - (NcaSvc) – C:WindowsSysNativeNcaSvc.dll (Microsoft Corporation)
SRV:64bit: - (NcdAutoSetup) – C:WindowsSysNativeNcdAutoSetup.dll (Microsoft Corporation)
SRV:64bit: - (KeyIso) – C:WindowsSysNativekeyiso.dll (Microsoft Corporation)
SRV:64bit: - (EFS) – C:WindowsSysNativeefssvc.dll (Microsoft Corporation)
SRV:64bit: - (DeviceAssociationService) – C:WindowsSysNativedas.dll (Microsoft Corporation)
SRV:64bit: - (AllUserInstallAgent) – C:WindowsSysNativeAUInstallAgent.dll (Microsoft Corporation)
SRV:64bit: - (vmicvss) – C:WindowsSysNativeicsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmictimesync) – C:WindowsSysNativeicsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicshutdown) – C:WindowsSysNativeicsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicrdv) – C:WindowsSysNativeicsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmickvpexchange) – C:WindowsSysNativeicsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicheartbeat) – C:WindowsSysNativeicsvc.dll (Microsoft Corporation)
SRV:64bit: - (CAAMSvc) – C:Program FilesTotal DefenseInternet Security SuiteAnti-Viruscaamsvc.exe (CA)
SRV:64bit: - (UmxEngine) – C:Program FilesCASharedComponentsTMEngineUmxEngine.exe (CA)
SRV - (AdobeFlashPlayerUpdateSvc) – C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) – C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeARMservice) – C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe (Adobe Systems Incorporated)
SRV - (LMS) – C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe (Intel Corporation)
SRV - (jhi_service) – C:Program Files (x86)IntelIntel® Management Engine ComponentsDALJhi_service.exe (Intel Corporation)
SRV - (Intel® – C:Program Files (x86)IntelIntel® Management Engine ComponentsFWServiceIntelMeFWService.exe (Intel Corporation)
SRV - (MBAMService) – C:Program Files (x86)Malwarebytes' Anti-Malwarembamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) – C:Program Files (x86)Malwarebytes' Anti-Malwarembamscheduler.exe (Malwarebytes Corporation)
SRV - (Stereo Service) – C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (nvUpdatusService) – C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe (NVIDIA Corporation)
SRV - (ASLDRService) – C:Program Files (x86)ASUSATK PackageATK HotkeyAsLdrSrv.exe (ASUSTek Computer Inc.)
SRV - (CLKMSVC10_38F51D56) – C:Program Files (x86)CyberLinkPowerDVD10NavFilterkmsvc.exe (CyberLink)
SRV - (PrintNotify) – C:Windowssystem32spoolDRIVERSx643PrintConfig.dll (Microsoft Corporation)
SRV - (WinSvchostManagerSrv) – C:WindowsSysWOW64cfgmig32.exe ()
SRV - (StorSvc) – C:WindowsSysWOW64StorSvc.dll (Microsoft Corporation)
SRV - (BrYNSvc) – C:Program Files (x86)Browny02BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (ATKGFNEXSrv) – C:Program Files (x86)ASUSATK PackageATKGFNEXGFNEXSrv.exe (ASUS)
SRV - (PDFProFiltSrvPP) – C:Program Files (x86)NuancePaperPortPDFProFiltSrvPP.exe (Nuance Communications, Inc.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (WdBoot) – C:WindowsSysNativeDriversWdBoot.sys (Microsoft Corporation)
DRV:64bit: - (WdFilter) – C:WindowsSysNativeDriversWdFilter.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:WindowsSysNativeDriverssdbus.sys (Microsoft Corporation)
DRV:64bit: - (USBXHCI) – C:WindowsSysNativeDriversUSBXHCI.SYS (Microsoft Corporation)
DRV:64bit: - (UCX01000) – C:WindowsSysNativeDriversUCX01000.SYS (Microsoft Corporation)
DRV:64bit: - (BthAvrcpTg) – C:WindowsSysNativeDriversBthAvrcpTg.sys (Microsoft Corporation)
DRV:64bit: - (BCM43XX) – C:WindowsSysNativeDriversBCMWL63a.SYS (Broadcom Corporation)
DRV:64bit: - (USBHUB3) – C:WindowsSysNativeDriversUSBHUB3.SYS (Microsoft Corporation)
DRV:64bit: - (spaceport) – C:WindowsSysNativeDriversspaceport.sys (Microsoft Corporation)
DRV:64bit: - (iaStorA) – C:WindowsSysNativeDriversiaStorA.sys (Intel Corporation)
DRV:64bit: - (MEIx64) – C:WindowsSysNativeDriversHECIx64.sys (Intel Corporation)
DRV:64bit: - (MBAMProtector) – C:WindowsSysNativeDriversmbam.sys (Malwarebytes Corporation)
DRV:64bit: - (ETD) – C:WindowsSysNativeDriversETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (storahci) – C:WindowsSysNativeDriversstorahci.sys (Microsoft Corporation)
DRV:64bit: - (TPM) – C:WindowsSysNativeDriverstpm.sys (Microsoft Corporation)
DRV:64bit: - (pdc) – C:WindowsSysNativeDriverspdc.sys (Microsoft Corporation)
DRV:64bit: - (btwampfl) – C:WindowsSysNativeDriversbtwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) – C:WindowsSysNativeDriversbtwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwaudio) – C:WindowsSysNativeDriversbtwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) – C:WindowsSysNativeDriversbtwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (BTWPANFL) – C:WindowsSysNativeDriversbtwpanfl.sys (Broadcom Corporation.)
DRV:64bit: - (msgpiowin32) – C:WindowsSysNativeDriversmsgpiowin32.sys (Microsoft Corporation)
DRV:64bit: - (L1C) – C:WindowsSysNativeDriversL1C63x64.sys (Qualcomm Atheros Co., Ltd.)
DRV:64bit: - (ebdrv) – C:WindowsSysNativeDriversevbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:WindowsSysNativeDriversbxvbda.sys (Broadcom Corporation)
DRV:64bit: - (GPIOClx0101) – C:WindowsSysNativeDriversmsgpioclx.sys (Microsoft Corporation)
DRV:64bit: - (bthhfhid) – C:WindowsSysNativeDriversBthhfHid.sys (Microsoft Corporation)
DRV:64bit: - (hidi2c) – C:WindowsSysNativeDrivershidi2c.sys (Microsoft Corporation)
DRV:64bit: - (FxPPM) – C:WindowsSysNativeDriversfxppm.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) – C:WindowsSysNativeDriversrdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (sdstor) – C:WindowsSysNativeDriverssdstor.sys (Microsoft Corporation)
DRV:64bit: - (dam) – C:WindowsSysNativeDriversdam.sys (Microsoft Corporation)
DRV:64bit: - (StillCam) – C:WindowsSysNativeDriversserscan.sys (Microsoft Corporation)
DRV:64bit: - (bcbtums) – C:WindowsSysNativeDriversbcbtums.sys (Broadcom Corporation.)
DRV:64bit: - (AiCharger) – C:WindowsSysNativeDriversAiCharger.sys (ASUSTek Computer Inc.)
DRV:64bit: - (GEARAspiWDM) – C:WindowsSysNativeDriversGEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (kbfiltr) – C:WindowsSysNativeDriverskbfiltr.sys ( )
DRV:64bit: - (btwl2cap) – C:WindowsSysNativeDriversbtwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (Fs_Rec) – C:WindowsSysNativedriversfs_rec.sys (Microsoft Corporation)
DRV:64bit: - (condrv) – C:WindowsSysNativeDriverscondrv.sys (Microsoft Corporation)
DRV:64bit: - (VSTXRAID) – C:WindowsSysNativeDriversVSTXRAID.SYS (VIA Corporation)
DRV:64bit: - (VerifierExt) – C:WindowsSysNativeDriversVerifierExt.sys (Microsoft Corporation)
DRV:64bit: - (UASPStor) – C:WindowsSysNativeDriversuaspstor.sys (Microsoft Corporation)
DRV:64bit: - (acpiex) – C:WindowsSysNativeDriversacpiex.sys (Microsoft Corporation)
DRV:64bit: - (mvumis) – C:WindowsSysNativeDriversmvumis.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (stexstor) – C:WindowsSysNativeDriversstexstor.sys (Promise Technology, Inc.)
DRV:64bit: - (LSI_SAS2) – C:WindowsSysNativeDriverslsi_sas2.sys (LSI Corporation)
DRV:64bit: - (LSI_SSS) – C:WindowsSysNativeDriverslsi_sss.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:WindowsSysNativeDriversHpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (EhStorTcgDrv) – C:WindowsSysNativeDriversEhStorTcgDrv.sys (Microsoft Corporation)
DRV:64bit: - (EhStorClass) – C:WindowsSysNativeDriversEhStorClass.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) – C:WindowsSysNativeDriversamdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (3ware) – C:WindowsSysNativeDrivers3ware.sys (LSI)
DRV:64bit: - (amdsata) – C:WindowsSysNativeDriversamdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:WindowsSysNativeDriversamdxata.sys (Advanced Micro Devices)
DRV:64bit: - (CLFS) – C:WindowsSysNativeDriversclfs.sys (Microsoft Corporation)
DRV:64bit: - (WFPLWFS) – C:WindowsSysNativeDriverswfplwfs.sys (Microsoft Corporation)
DRV:64bit: - (vpci) – C:WindowsSysNativeDriversvpci.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) – C:WindowsSysNativeDriversterminpt.sys (Microsoft Corporation)
DRV:64bit: - (WSDPrintDevice) – C:WindowsSysNativeDriversWSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (mshidumdf) – C:WindowsSysNativeDriversmshidumdf.sys (Microsoft Corporation)
DRV:64bit: - (BasicDisplay) – C:WindowsSysNativeDriversBasicDisplay.sys (Microsoft Corporation)
DRV:64bit: - (HyperVideo) – C:WindowsSysNativeDriversHyperVideo.sys (Microsoft Corporation)
DRV:64bit: - (BasicRender) – C:WindowsSysNativeDriversBasicRender.sys (Microsoft Corporation)
DRV:64bit: - (gencounter) – C:WindowsSysNativeDriversvmgencounter.sys (Microsoft Corporation)
DRV:64bit: - (kdnic) – C:WindowsSysNativeDriverskdnic.sys (Microsoft Corporation)
DRV:64bit: - (acpitime) – C:WindowsSysNativeDriversacpitime.sys (Microsoft Corporation)
DRV:64bit: - (npsvctrig) – C:WindowsSysNativeDriversnpsvctrig.sys (Microsoft Corporation)
DRV:64bit: - (WpdUpFltr) – C:WindowsSysNativeDriversWpdUpFltr.sys (Microsoft Corporation)
DRV:64bit: - (acpipagr) – C:WindowsSysNativeDriversacpipagr.sys (Microsoft Corporation)
DRV:64bit: - (hyperkbd) – C:WindowsSysNativeDrivershyperkbd.sys (Microsoft Corporation)
DRV:64bit: - (SerCx) – C:WindowsSysNativeDriversSerCx.sys (Microsoft Corporation)
DRV:64bit: - (SpbCx) – C:WindowsSysNativeDriversSpbCx.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) – C:WindowsSysNativeDriversTsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (BthHFEnum) – C:WindowsSysNativeDriversbthhfenum.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) – C:WindowsSysNativeDriversdmvsc.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) – C:WindowsSysNativeDriversTsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (wpcfltr) – C:WindowsSysNativeDriverswpcfltr.sys (Microsoft Corporation)
DRV:64bit: - (BthLEEnum) – C:WindowsSysNativeDriversBthLEEnum.sys (Microsoft Corporation)
DRV:64bit: - (NdisImPlatform) – C:WindowsSysNativeDriversNdisImPlatform.sys (Microsoft Corporation)
DRV:64bit: - (MsLldp) – C:WindowsSysNativeDriversmslldp.sys (Microsoft Corporation)
DRV:64bit: - (Ndu) – C:WindowsSysNativeDriversNdu.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) – C:WindowsSysNativeDriversnvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (igfx) – C:WindowsSysNativeDriversigdkmd64.sys (Intel Corporation)
DRV:64bit: - (AgereSoftModem) – C:WindowsSysNativeDriversagrsm64.sys (LSI Corp)
DRV:64bit: - (RTL8168) – C:WindowsSysNativeDriversRt630x64.sys (Realtek )
DRV:64bit: - (NETwNs64) – C:WindowsSysNativeDriversNETwNs64.sys (Intel Corporation)
DRV:64bit: - (e1iexpress) – C:WindowsSysNativeDriverse1i63x64.sys (Intel Corporation)
DRV:64bit: - (athr) – C:WindowsSysNativeDriversathrx.sys (Qualcomm Atheros Communications, Inc.)
DRV:64bit: - (HIDSwitch) – C:WindowsSysNativeDriversAsHIDSwitch64.sys (ASUS)
DRV:64bit: - (KmxAMRT) – C:WindowsSysNativeDriversKmxAMRT.sys (Total Defense)
DRV:64bit: - (KmxAgent) – C:WindowsSysNativeDriversKmxAgent.sys (CA)
DRV:64bit: - (KmxCF) – C:WindowsSysNativeDriversKmxCF.sys (CA)
DRV:64bit: - (KmxFw) – C:WindowsSysNativeDriversKmxFw.sys (CA)
DRV:64bit: - (KmxFilter) – C:WindowsSysNativeDriversKmxFilter.sys (CA)
DRV:64bit: - (KmxCfg) – C:WindowsSysNativeDriversKmxCfg.sys (CA)
DRV:64bit: - (KmxFile) – C:WindowsSysNativeDriversKmxFile.sys (CA)
DRV:64bit: - (KmxSbx) – C:WindowsSysNativeDriversKmxSbx.sys (CA)
DRV:64bit: - (WDC_SAM) – C:WindowsSysNativeDriverswdcsam64.sys (Western Digital Technologies)
DRV - (ATKWMIACPIIO) – C:Program Files (x86)ASUSATK PackageATK WMIACPIatkwmiacpi64.sys (ASUS)
DRV - (ASMMAP64) – C:Program Files (x86)ASUSATK PackageATKGFNEXASMMAP64.sys (ASUS)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM..SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…R&pc;=ASU2JS
IE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Local Page = C:WindowsSysWOW64blank.htm
IE - HKLM..SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…R&pc;=ASU2JS

IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,BrowserMngr Start Page = nattly.com
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://asus13.msn.com
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Search Page = nattly.com
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page = nattly.com
IE - HKCU..SearchScopes,BrowserMngrDefaultScope = {N324-ADWF32D-T23R-TR32DSA-L32RT-YRED123}
IE - HKCU..SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU..SearchScopes{N324-ADWF32D-T23R-TR32DSA-L32RT-YRED123}: "URL" = http://nattly.com/?q={searchTerms}
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1


FF:64bit: - [removed]/FlashPlayer: C:Windowssystem32MacromedFlashNPSWF64_11_8_800_94.dll File not found
FF:64bit: - [removed]/DTPlugin,version=10.25.2: C:Windowssystem32npDeployJava1.dll (Oracle Corporation)
FF:64bit: - [removed]/JavaPlugin,version=10.25.2: C:Program FilesJavajre7binplugin2npjp2.dll (Oracle Corporation)
FF:64bit: - [removed]/NpCtrl,version=1.0: C:Program FilesMicrosoft Silverlight5.1.20513.0npctrl.dll ( Microsoft Corporation)
FF - [removed]/FlashPlayer: C:WindowsSysWOW64MacromedFlashNPSWF32_11_8_800_94.dll ()
FF - [removed]/ShockwavePlayer: C:WindowsSysWOW64AdobeDirectornp32dsw_1203133.dll (Adobe Systems, Inc.)
FF - [removed]/iTunes,version=: File not found
FF - [removed]/iTunes,version=1.0: C:Program Files (x86)iTunesMozilla Pluginsnpitunes.dll ()
FF - [removed]/Intel WebAPI ipt;version=3.0.72: C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIIPT.dll (Intel Corporation)
FF - [removed]/Intel WebAPI updater: C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIUpdater.dll (Intel Corporation)
FF - [removed]/DTPlugin,version=10.25.2: C:WindowsSysWOW64npDeployJava1.dll (Oracle Corporation)
FF - [removed]/JavaPlugin,version=10.25.2: C:Program Files (x86)Javajre7binplugin2npjp2.dll (Oracle Corporation)
FF - [removed]/NpCtrl,version=1.0: C:Program Files (x86)Microsoft Silverlight5.1.20513.0npctrl.dll ( Microsoft Corporation)
FF - [removed]/SharePoint,version=14.0: C:Program FilesMicrosoft Office 15rootOffice15NPSPWRAP.DLL (Microsoft Corporation)
FF - [removed]/WLPG,version=16.4.3505.0912: C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll (Microsoft Corporation)
FF - [removed]/3DVision: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dv.dll (NVIDIA Corporation)
FF - [removed]/3DVisionStreaming: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dvstreaming.dll (NVIDIA Corporation)
FF - [removed]/Google Update;version=3: C:Program Files (x86)GoogleUpdate1.3.21.153npGoogleUpdate3.dll (Google Inc.)
FF - [removed]/Google Update;version=9: C:Program Files (x86)GoogleUpdate1.3.21.153npGoogleUpdate3.dll (Google Inc.)
FF - [removed]/vlc,version=2.0.8: C:Program Files (x86)VideoLANVLCnpvlc.dll (VideoLAN)
FF - HKLMSoftwareMozillaPluginsAdobe Reader: C:Program Files (x86)AdobeReader 11.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)

FF - [removed]: C:Program FilesTotal DefenseInternet Security SuiteAnti-Phishingx86ToolbarFirefox [2013-08-20 14:25:49 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 23.0.1extensionsComponents: C:Program Files (x86)Mozilla Firefoxcomponents
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 23.0.1extensionsPlugins: C:Program Files (x86)Mozilla Firefoxplugins
FF - [removed]: C:Program FilesMcAfeeMSK

[2013-08-19 20:12:32 | 000,000,000 | —D | M] (No name found) – C:UsersShanneAppDataRoamingmozillaExtensions
[2013-09-04 22:21:06 | 000,000,000 | —D | M] (No name found) – C:UsersShanneAppDataRoamingmozillaFirefoxProfilesudgv82ly.default-1378347462758extensions
[2013-09-04 22:21:06 | 000,824,302 | —- | M] () (No name found) – C:UsersShanneAppDataRoamingmozillafirefoxprofilesudgv82ly.default-1378347462758extensions{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013-08-19 20:11:49 | 000,000,000 | —D | M] (No name found) – C:Program Files (x86)Mozilla Firefoxbrowserextensions
[2013-08-19 20:11:49 | 000,000,000 | —D | M] (Default) – C:Program Files (x86)Mozilla Firefoxbrowserextensions{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:in
s
tantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncodi
n
g}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter}
CHR - plugin: Shockwave Flash (Enabled) = C:Program Files (x86)GoogleChromeApplication29.0.1547.66PepperFlashpepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:Program Files (x86)GoogleChromeApplication29.0.1547.66ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:Program Files (x86)GoogleChromeApplication29.0.1547.66pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:Program Files (x86)AdobeReader 11.0ReaderAIRnppdf32.dll
CHR - plugin: Google Update (Enabled) = C:Program Files (x86)GoogleUpdate1.3.21.153npGoogleUpdate3.dll
CHR - plugin: (Enabled) = C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIIPT.dll
CHR - plugin: (Enabled) = C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIUpdater.dll
CHR - plugin: Java™ Platform SE 7 U25 (Enabled) = C:Program Files (x86)Javajre7binplugin2npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:Program Files (x86)Microsoft Silverlight5.1.20513.0npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dvstreaming.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:Program Files (x86)VideoLANVLCnpvlc.dll
CHR - plugin: Photo Gallery (Enabled) = C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:Program Files (x86)iTunesMozilla Pluginsnpitunes.dll
CHR - plugin: Microsoft Office 2013 (Enabled) = C:Program FilesMicrosoft Office 15rootOffice15NPSPWRAP.DLL
CHR - plugin: Shockwave for Director (Enabled) = C:WindowsSysWOW64AdobeDirectornp32dsw_1203133.dll
CHR - plugin: Shockwave Flash (Enabled) = C:WindowsSysWOW64MacromedFlashNPSWF32_11_8_800_94.dll
CHR - plugin: Java Deployment Toolkit [removed] (Enabled) = C:WindowsSysWOW64npDeployJava1.dll
CHR - Extension: Google Docs = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake\0.5_0
CHR - Extension: Google Drive = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf6.3_0
CHR - Extension: YouTube = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo4.2.6_0
CHR - Extension: Google Search = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionscoobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR - Extension: AdBlock = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionsgighmmpiobklfepjocnamgkkbiglidom2.6.6_0
CHR - Extension: Total Defense Anti-Phishing Toolbar = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionshpdpkkpdlooddakbebmkeeegehfjdnih2.0.0.556_0
CHR - Extension: Chrome In-App Payments service = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR - Extension: Gmail = C:UsersShanneAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia7_0

O1 HOSTS File: ([2012-07-26 01:26:49 | 000,000,824 | —- | M]) - C:WindowsSysNativeDriversetchosts
O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15OCHelper.dll (Microsoft Corporation)
O2:64bit: - BHO: (Total Defense Anti-Phishing Toolbar Helper) - {45011CF5-E4A9-4F13-9093-F30A784EB9B2} - C:Program FilesTotal DefenseInternet Security SuiteAnti-PhishingToolbarcaIEToolbar.dll (Total Defense, Inc.)
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre7binssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre7binjp2ssv.dll (Oracle Corporation)
O2 - BHO: (Total Defense Anti-Phishing Toolbar Helper) - {45011CF5-E4A9-4F13-9093-F30A784EB9B2} - C:Program FilesTotal DefenseInternet Security SuiteAnti-Phishingx86ToolbarcaIEToolbar.dll (Total Defense, Inc.)
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:Program Files (x86)NuancePDF Viewer PlusbinPlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre7binssv.dll (Oracle Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:Program FilesMicrosoft Office 15rootoffice15URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre7binjp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM..Toolbar: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:Program FilesTotal DefenseInternet Security SuiteAnti-PhishingToolbarcaIEToolbar.dll (Total Defense, Inc.)
O3:64bit: - HKLM..Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM..Toolbar: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:Program FilesTotal DefenseInternet Security SuiteAnti-Phishingx86ToolbarcaIEToolbar.dll (Total Defense, Inc.)
O3 - HKLM..Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKCU..ToolbarWebBrowser: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:Program FilesTotal DefenseInternet Security SuiteAnti-PhishingToolbarcaIEToolbar.dll (Total Defense, Inc.)
O3 - HKCU..ToolbarWebBrowser: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:Program FilesTotal DefenseInternet Security SuiteAnti-Phishingx86ToolbarcaIEToolbar.dll (Total Defense, Inc.)
O4:64bit: - HKLM..Run: [cctray] C:Program FilesTotal DefenseInternet Security Suitecasc.exe (Total Defense, Inc.)
O4:64bit: - HKLM..Run: [ETDCtrl] C:Program FilesElantechETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..Run: [RtHDVBg] C:Program FilesRealtekAudioHDARAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..Run: [RTHDVCPL] C:Program FilesRealtekAudioHDARAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..Run: [UMonit64] C:WindowsSysWOW64UMonit64.exe ()
O4 - HKLM..Run: [APSDaemon] C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe (Apple Inc.)
O4 - HKLM..Run: [ASUSPRP] C:Program Files (x86)ASUSAPRPAPRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..Run: [ASUSWebStorage] C:Program Files (x86)ASUSWebStorage Sync Agent1.1.10.123AsusWSPanel.exe (ASUS Cloud Corporation)
O4 - HKLM..Run: [BDRegion] C:Program Files (x86)CyberLinkShared filesbrs.exe (cyberlink)
O4 - HKLM..Run: [BrStsMon00] C:Program Files (x86)Browny02BrotherBrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..Run: [CLMLServer] C:Program Files (x86)CyberLinkPower2GoCLMLSvc.exe (CyberLink)
O4 - HKLM..Run: [ControlCenter4] C:Program Files (x86)ControlCenter4BrCcBoot.exe (Brother Industries, Ltd.)
O4 - HKLM..Run: [IndexSearch] C:Program Files (x86)NuancePaperPortIndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..Run: [PaperPort PTD] C:Program Files (x86)NuancePaperPortpptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..Run: [PDF5 Registry Controller] C:Program Files (x86)NuancePDF Viewer PlusRegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..Run: [PDFHook] C:Program Files (x86)NuancePDF Viewer PluspdfPro5Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..Run: [PPort12reminder] C:Program Files (x86)NuancePaperPortEregEreg.exe (Nuance Communications, Inc.)
O4 - HKLM..Run: [RemoteControl10] C:Program Files (x86)CyberLinkPowerDVD10PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..Run: [ROGNB] C:Program Files (x86)ASUS Gaming Mousehid.exe ()
O4 - HKCU..Run: [ISUSPM] C:ProgramDataFLEXnetConnect11ISUSPM.exe (Acresso Corporation)
O4 - HKCU..Run: [NattlyDefender] C:UsersShanneAppDataRoamingNattlyDefender.exe File not found
O4 - HKCU..Run: [Power2GoExpress] C:Program Files (x86)CyberLinkPower2GoPower2GoExpress.exe (CyberLink Corp.)
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktopChanges = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktop = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: ConsentPromptBehaviorAdmin = 5
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: EnableCursorSuppression = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: ConsentPromptBehaviorUser = 3
O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program FilesMicrosoft Office 15rootvfsProgramFilesX64Microsoft OfficeOffice15ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program FilesMicrosoft Office 15rootoffice15ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program FilesMicrosoft Office 15rootoffice15ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program FilesMicrosoft Office 15rootoffice15ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program FilesMicrosoft Office 15rootoffice15ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5Catalog_Entries64\000000000008 [] - C:Program FilesBonjourmdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000001 - C:WindowsSysNativeVetRedir64.dll (Computer Associates International, Inc.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000002 - C:WindowsSysNativeVetRedir64.dll (Computer Associates International, Inc.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000014 - C:WindowsSysNativeVetRedir64.dll (Computer Associates International, Inc.)
O10 - NameSpace_Catalog5Catalog_Entries\000000000008 [] - C:Program Files (x86)BonjourmdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9Catalog_Entries\000000000001 - C:WindowsSysWow64VetRedir.dll (Computer Associates International, Inc.)
O10 - Protocol_Catalog9Catalog_Entries\000000000002 - C:WindowsSysWow64VetRedir.dll (Computer Associates International, Inc.)
O10 - Protocol_Catalog9Catalog_Entries\000000000014 - C:WindowsSysWow64VetRedir.dll (Computer Associates International, Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLMSystemCCSServicesTcpipParameters: DhcpNameServer = 192.168.2.1
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{3B7C03B4-6E91-4406-BB5D-B7AA964AEF23}: DhcpNameServer = 192.168.2.1
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{900A7FEC-591F-4F28-9710-9ECB26A4BBF6}: DhcpNameServer = 8.8.8.8 4.2.2.1 192.168.1.1
O18:64bit: - ProtocolHandlerosf - No CLSID value found
O18:64bit: - ProtocolHandlerwlpg - No CLSID value found
O18 - ProtocolHandlerosf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:Program FilesMicrosoft Office 15rootoffice15MSOSB.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (UmxSbxExA64.dll) - C:WindowsSysNativeUmxSbxExA64.dll (CA)
O20 - AppInit_DLLs: (UmxSbxExw.dll) - C:WindowsSysWow64UmxSbxExw.dll (CA)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:Windowsexplorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:Windowssystem32userinit.exe) - C:WindowsSysNativeuserinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:WindowsSysWow64explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:WindowsSysWow64userinit.exe (Microsoft Corporation)
O20:64bit: - WinlogonNotifyPFW: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O20 - WinlogonNotifyPFW: DllName - (UmxWnp.Dll) - C:WindowsSysWow64UmxWNP.dll (CA)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM..comfile [open] – "%1" %*
O35:64bit: - HKLM..exefile [open] – "%1" %*
O35 - HKLM..comfile [open] – "%1" %*
O35 - HKLM..exefile [open] – "%1" %*
O37:64bit: - HKLM…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM…exe [@ = exefile] – "%1" %*
O37 - HKLM…com [@ = comfile] – "%1" %*
O37 - HKLM…exe [@ = exefile] – "%1" %*
O38 - SubSystemsWindows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystemsWindows: (ServerDll=sxssrv,4)

NetSvcs:64bit: wlidsvc - C:WindowsSysNativewlidsvc.dll (Microsoft Corporation)
NetSvcs:64bit: DsmSvc - C:WindowsSysNativeDeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:64bit: NcaSvc - C:WindowsSysNativeNcaSvc.dll (Microsoft Corporation)
NetSvcs:64bit: SystemEventsBroker - C:WindowsSysNativeSystemEventsBrokerServer.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:WindowsSystem32l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:WindowsSysWOW64l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:WindowsSysWow64iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013-09-07 01:26:52 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingMalwarebytes
[2013-09-07 01:26:47 | 000,025,928 | —- | C] (Malwarebytes Corporation) – C:WindowsSysNativedriversmbam.sys
[2013-09-07 01:26:47 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsMalwarebytes' Anti-Malware
[2013-09-07 01:26:47 | 000,000,000 | —D | C] – C:Program Files (x86)Malwarebytes' Anti-Malware
[2013-09-07 01:26:47 | 000,000,000 | —D | C] – C:ProgramDataMalwarebytes
[2013-09-07 01:26:26 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalPrograms
[2013-09-07 00:33:29 | 000,000,000 | —D | C] – C:Program FilesNuance
[2013-09-07 00:33:10 | 000,000,000 | —D | C] – C:ProgramDatazeon
[2013-09-07 00:32:47 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsNuance PaperPort 12
[2013-09-07 00:32:17 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesScanSoft Shared
[2013-09-07 00:32:16 | 000,000,000 | —D | C] – C:UsersShanneDocumentsMyWebPages
[2013-09-07 00:06:14 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingFLEXnet
[2013-09-06 23:58:17 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingNuance
[2013-09-06 23:58:04 | 000,000,000 | —D | C] – C:ProgramDataScanSoft
[2013-09-06 23:57:30 | 000,000,000 | —D | C] – C:ProgramDataNuance
[2013-09-06 23:57:30 | 000,000,000 | —D | C] – C:Program Files (x86)Nuance
[2013-09-06 23:57:30 | 000,000,000 | —D | C] – C:ProgramDataFLEXnet
[2013-09-06 23:52:29 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingPC-FAX TX
[2013-09-06 23:02:24 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalDiagnostics
[2013-09-03 22:20:30 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsLast.fm
[2013-09-02 12:04:52 | 000,000,000 | —D | C] – C:UsersShanneDesktopDesktop
[2013-09-02 11:58:36 | 000,000,000 | —D | C] – C:ProgramDataLast.fm
[2013-09-02 11:56:38 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalLast.fm
[2013-09-02 11:56:38 | 000,000,000 | —D | C] – C:Program Files (x86)Last.fm
[2013-09-02 11:19:24 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingControlCenter4
[2013-09-02 11:07:08 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsBrother
[2013-09-02 11:06:29 | 000,000,000 | —D | C] – C:Brother
[2013-09-02 11:06:29 | 000,000,000 | —D | C] – C:UsersPublicDocumentsBrFaxRx
[2013-09-02 11:06:28 | 000,000,000 | —D | C] – C:Program Files (x86)Browny02
[2013-09-02 11:06:27 | 000,000,000 | —D | C] – C:ProgramDataControlCenter4
[2013-09-02 11:06:26 | 000,000,000 | —D | C] – C:Program Files (x86)ControlCenter4
[2013-09-02 11:06:25 | 000,316,928 | R— | C] (brother) – C:WindowsSysNativeNSSRH64.dll
[2013-09-02 11:06:25 | 000,290,304 | —- | C] (Brother Industries, Ltd.) – C:WindowsSysNativeBrfxDA5c.dll
[2013-09-02 11:06:25 | 000,058,880 | R— | C] (Brother Industries,Ltd.) – C:WindowsSysNativeBrWiaNCp.dll
[2013-09-02 11:06:24 | 000,084,480 | R— | C] (Brother Industries, Ltd.) – C:WindowsSysNativeBrNetSti.dll
[2013-09-02 11:06:24 | 000,051,712 | R— | C] (Brother Industries,Ltd) – C:WindowsSysNativeBrnsplg.dll
[2013-09-02 11:06:20 | 001,439,744 | —- | C] (Brother Industries, Ltd.) – C:WindowsSysNativeBrWi209d.dll
[2013-09-02 11:06:20 | 000,278,528 | —- | C] (Brother Industries, Ltd.) – C:WindowsSysNativeBrJDec.dll
[2013-09-02 11:06:08 | 000,103,792 | —- | C] (Brother Industries Ltd) – C:WindowsSysWow64BRRBI100.EXE
[2013-09-02 11:06:08 | 000,050,176 | —- | C] (Brother Industries Ltd.) – C:WindowsSysWow64BRPRTINK.DLL
[2013-09-02 11:06:06 | 000,180,224 | —- | C] (Brother Industries, Ltd.) – C:WindowsSysWow64BROSNMP.DLL
[2013-09-02 11:06:06 | 000,077,824 | —- | C] (Brother Industries, Ltd.) – C:WindowsSysWow64BRLMW03A.DLL
[2013-09-02 11:06:06 | 000,025,299 | —- | C] (Brother Industries, Ltd) – C:WindowsSysWow64BRLM03A.DLL
[2013-09-02 11:06:01 | 000,245,760 | —- | C] (brother) – C:WindowsSysWow64NSSearch.dll
[2013-09-02 11:06:01 | 000,073,728 | —- | C] (Brother Industries Ltd.) – C:WindowsSysWow64BrDctF2.dll
[2013-09-02 11:06:01 | 000,005,120 | —- | C] (Brother Industries Ltd.) – C:WindowsSysWow64BrDctF2S.dll
[2013-09-02 11:06:01 | 000,005,120 | —- | C] (Brother Industries Ltd.) – C:WindowsSysWow64BrDctF2L.dll
[2013-09-02 11:06:00 | 000,000,000 | —D | C] – C:Program Files (x86)Brother
[2013-09-02 11:04:47 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingInstallShield
[2013-09-02 11:03:31 | 000,000,000 | —D | C] – C:Program Files (x86)MSXML 4.0
[2013-09-02 11:03:20 | 000,000,000 | —D | C] – C:ProgramDataBrother
[2013-09-01 23:43:42 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingApple Computer
[2013-09-01 23:43:42 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalApple Computer
[2013-09-01 23:43:32 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsiTunes
[2013-09-01 23:43:12 | 000,033,240 | —- | C] (GEAR Software Inc.) – C:WindowsSysNativedriversGEARAspiWDM.sys
[2013-09-01 23:43:12 | 000,000,000 | —D | C] – C:WindowsSysNativeDRVSTORE
[2013-09-01 23:42:50 | 000,000,000 | —D | C] – C:Program FilesiTunes
[2013-09-01 23:42:50 | 000,000,000 | —D | C] – C:Program Files (x86)iTunes
[2013-09-01 23:42:50 | 000,000,000 | —D | C] – C:Program FilesiPod
[2013-09-01 23:42:50 | 000,000,000 | —D | C] – C:ProgramDataApple Computer
[2013-09-01 23:42:50 | 000,000,000 | —D | C] – C:ProgramData34BE82C4-E596-4e99-A191-52C6199EBF69
[2013-09-01 20:02:13 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalApple
[2013-09-01 20:02:11 | 000,000,000 | —D | C] – C:Program Files (x86)Apple Software Update
[2013-09-01 20:01:54 | 000,000,000 | —D | C] – C:Program FilesCommon FilesApple
[2013-09-01 20:01:50 | 000,000,000 | —D | C] – C:Program FilesBonjour
[2013-09-01 20:01:50 | 000,000,000 | —D | C] – C:Program Files (x86)Bonjour
[2013-09-01 20:01:32 | 000,000,000 | —D | C] – C:ProgramDataApple
[2013-09-01 20:01:32 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesApple
[2013-09-01 18:57:04 | 000,000,000 | —D | C] – C:UsersShanneDocumentsCyberLink
[2013-09-01 18:50:36 | 000,109,568 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedskquota.dll
[2013-09-01 18:50:35 | 000,082,944 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dskquota.dll
[2013-09-01 18:50:29 | 000,396,008 | —- | C] (Microsoft Corporation) – C:WindowsSysNativehal.dll
[2013-09-01 18:50:26 | 001,172,992 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfnetsrc.dll
[2013-09-01 18:50:26 | 000,929,792 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfnetsrc.dll
[2013-09-01 18:50:26 | 000,677,888 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfnetcore.dll
[2013-09-01 18:50:26 | 000,673,280 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfmpeg2srcsnk.dll
[2013-09-01 18:50:26 | 000,568,832 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfnetcore.dll
[2013-09-01 18:50:26 | 000,513,024 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfmpeg2srcsnk.dll
[2013-09-01 18:50:18 | 002,219,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedwmcore.dll
[2013-09-01 18:50:18 | 001,842,176 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dwmcore.dll
[2013-09-01 18:50:17 | 006,987,008 | —- | C] (Microsoft Corporation) – C:WindowsSysNativentoskrnl.exe
[2013-09-01 18:50:17 | 002,391,280 | —- | C] (Microsoft Corporation) – C:Windowsexplorer.exe
[2013-09-01 18:50:17 | 002,106,176 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64explorer.exe
[2013-09-01 18:50:16 | 001,527,808 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfcore.dll
[2013-09-01 18:50:16 | 001,453,568 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfcore.dll
[2013-09-01 18:50:16 | 000,729,600 | —- | C] (Microsoft Corporation) – C:WindowsSysNativesamsrv.dll
[2013-09-01 18:50:15 | 001,403,296 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewinload.efi
[2013-09-01 18:50:15 | 001,271,584 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewinload.exe
[2013-09-01 18:50:15 | 001,217,352 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewinresume.efi
[2013-09-01 18:50:15 | 000,523,264 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeXpsGdiConverter.dll
[2013-09-01 18:50:14 | 001,093,904 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewinresume.exe
[2013-09-01 18:50:14 | 001,048,576 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfasfsrcsnk.dll
[2013-09-01 18:50:14 | 000,583,168 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemscms.dll
[2013-09-01 18:50:13 | 000,850,944 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfasfsrcsnk.dll
[2013-09-01 18:50:13 | 000,364,544 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64XpsGdiConverter.dll
[2013-09-01 18:50:13 | 000,213,248 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversUCX01000.SYS
[2013-09-01 18:50:13 | 000,106,496 | —- | C] (Microsoft Corporation) – C:WindowsSysNativesamlib.dll
[2013-09-01 18:50:12 | 000,337,152 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversUSBXHCI.SYS
[2013-09-01 18:50:12 | 000,207,872 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeDeviceSetupManager.dll
[2013-09-01 18:50:12 | 000,194,816 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriverssdbus.sys
[2013-09-01 18:50:12 | 000,190,976 | —- | C] (Microsoft Corporation) – C:WindowsSysNativevdsutil.dll
[2013-09-01 18:50:12 | 000,125,184 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversdumpsd.sys
[2013-09-01 18:50:12 | 000,080,896 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeMbaeParserTask.exe
[2013-09-01 18:50:11 | 000,037,632 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversBthAvrcpTg.sys
[2013-09-01 18:50:06 | 001,184,256 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeDisplay.dll
[2013-09-01 18:50:06 | 001,164,800 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Display.dll
[2013-09-01 18:50:06 | 000,007,168 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeKBDKURD.DLL
[2013-09-01 18:50:06 | 000,006,656 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64KBDKURD.DLL
[2013-09-01 18:50:04 | 000,641,536 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWSShared.dll
[2013-09-01 18:50:04 | 000,523,776 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64WSShared.dll
[2013-09-01 18:50:04 | 000,198,656 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.ApplicationModel.Store.dll
[2013-09-01 18:50:04 | 000,163,840 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.ApplicationModel.Store.TestingFramework.dll
[2013-09-01 18:50:04 | 000,143,872 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.ApplicationModel.Store.dll
[2013-09-01 18:50:04 | 000,124,928 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.ApplicationModel.Store.TestingFramework.dll
[2013-09-01 18:49:42 | 001,395,712 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.UI.Immersive.dll
[2013-09-01 18:49:42 | 001,265,152 | —- | C] (Microsoft Corporation) – C:WindowsSysNativelsasrv.dll
[2013-09-01 18:49:42 | 001,226,752 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.UI.Immersive.dll
[2013-09-01 18:49:42 | 000,579,584 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeStructuredQuery.dll
[2013-09-01 18:49:41 | 000,793,200 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfplat.dll
[2013-09-01 18:49:41 | 000,590,848 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSHCore.dll
[2013-09-01 18:49:39 | 000,612,416 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfplat.dll
[2013-09-01 18:49:39 | 000,517,120 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewinlogon.exe
[2013-09-01 18:49:39 | 000,441,576 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversnetio.sys
[2013-09-01 18:49:38 | 001,045,504 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeusercpl.dll
[2013-09-01 18:49:38 | 000,286,208 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversportcls.sys
[2013-09-01 18:49:38 | 000,154,112 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.Storage.Compression.dll
[2013-09-01 18:49:37 | 000,962,560 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64usercpl.dll
[2013-09-01 18:49:37 | 000,505,344 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSpaceControl.dll
[2013-09-01 18:49:37 | 000,244,224 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedhcpcore6.dll
[2013-09-01 18:49:37 | 000,204,800 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dhcpcore6.dll
[2013-09-01 18:49:37 | 000,058,088 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversdam.sys
[2013-09-01 18:49:36 | 000,056,552 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriverssdstor.sys
[2013-09-01 18:49:36 | 000,033,512 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversbattc.sys
[2013-09-01 18:49:33 | 000,460,800 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64SHCore.dll
[2013-09-01 18:49:33 | 000,116,224 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.Storage.Compression.dll
[2013-09-01 18:49:32 | 000,219,648 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64input.dll
[2013-09-01 18:49:31 | 000,259,584 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeinput.dll
[2013-09-01 18:49:31 | 000,062,976 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedhcpcsvc6.dll
[2013-09-01 18:49:30 | 000,047,616 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64PCPKsp.dll
[2013-09-01 18:49:30 | 000,034,816 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemicrosoft-windows-pdc.dll
[2013-09-01 18:49:29 | 000,757,760 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeFirewallAPI.dll
[2013-09-01 18:49:27 | 000,099,840 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64AppxSip.dll
[2013-09-01 18:49:26 | 000,370,176 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSysFxUI.dll
[2013-09-01 18:49:26 | 000,118,784 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAppxSip.dll
[2013-09-01 18:49:26 | 000,105,984 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeicfupgd.dll
[2013-09-01 18:49:26 | 000,049,664 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeBdeUISrv.exe
[2013-09-01 18:49:25 | 000,055,808 | —- | C] (Microsoft Corporation) – C:WindowsSysNativePCPKsp.dll
[2013-09-01 18:49:23 | 000,111,616 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversdrmk.sys
[2013-09-01 18:49:23 | 000,024,576 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewfapigp.dll
[2013-09-01 18:49:23 | 000,019,968 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wfapigp.dll
[2013-09-01 18:49:23 | 000,012,288 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversserscan.sys
[2013-09-01 18:49:23 | 000,007,680 | —- | C] (Microsoft Corporation) – C:WindowsSysNativekbdhebl3.dll
[2013-09-01 18:49:23 | 000,007,168 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64kbdhebl3.dll
[2013-09-01 18:49:05 | 003,245,568 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerdpcorets.dll
[2013-09-01 18:49:04 | 001,536,512 | —- | C] (Microsoft Corporation) – C:WindowsSysNativestoragewmi.dll
[2013-09-01 18:49:04 | 001,122,768 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeTaskmgr.exe
[2013-09-01 18:49:04 | 001,027,152 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Taskmgr.exe
[2013-09-01 18:49:02 | 000,955,904 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWebcamUi.dll
[2013-09-01 18:48:59 | 000,798,208 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64WebcamUi.dll
[2013-09-01 18:48:59 | 000,631,808 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeUserLanguagesCpl.dll
[2013-09-01 18:48:58 | 001,048,064 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mstsc.exe
[2013-09-01 18:48:58 | 000,560,128 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64UserLanguagesCpl.dll
[2013-09-01 18:48:58 | 000,244,736 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewpnapps.dll
[2013-09-01 18:48:58 | 000,179,200 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wpnapps.dll
[2013-09-01 18:48:58 | 000,027,880 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversrdpvideominiport.sys
[2013-09-01 18:48:57 | 001,217,536 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64storagewmi.dll
[2013-09-01 18:48:57 | 001,123,840 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemstsc.exe
[2013-09-01 18:48:57 | 000,888,832 | —- | C] (Microsoft Corporation) – C:WindowsSysNativenshwfp.dll
[2013-09-01 18:48:57 | 000,702,464 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64nshwfp.dll
[2013-09-01 18:48:56 | 000,378,880 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeFWPUCLNT.DLL
[2013-09-01 18:48:56 | 000,245,248 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64FWPUCLNT.DLL
[2013-09-01 18:48:56 | 000,235,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerdpudd.dll
[2013-09-01 18:48:56 | 000,120,832 | —- | C] (Microsoft Corporation) – C:WindowsSysNativevds_ps.dll
[2013-09-01 18:48:56 | 000,046,592 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64vds_ps.dll
[2013-09-01 18:48:56 | 000,036,352 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerfxvmt.dll
[2013-09-01 18:48:56 | 000,023,552 | —- | C] (Microsoft Corporation) – C:WindowsSysNativevdsldr.exe
[2013-09-01 18:48:51 | 000,368,640 | —- | C] (Microsoft Corporation) – C:WindowsSysNativesppwinob.dll
[2013-09-01 18:48:28 | 011,459,584 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeglcndFilter.dll
[2013-09-01 18:48:26 | 008,552,448 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64glcndFilter.dll
[2013-09-01 18:48:24 | 000,976,384 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeKernelBase.dll
[2013-09-01 18:48:23 | 001,566,432 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeole32.dll
[2013-09-01 18:48:23 | 001,037,312 | —- | C] (Microsoft Corporation) – C:WindowsSysNativelocalspl.dll
[2013-09-01 18:48:22 | 000,883,712 | —- | C] (Microsoft Corporation) – C:WindowsHelpPane.exe
[2013-09-01 18:48:21 | 000,110,080 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedafWCN.dll
[2013-09-01 18:48:20 | 000,470,016 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewlanmsm.dll
[2013-09-01 18:48:20 | 000,386,560 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wlanmsm.dll
[2013-09-01 18:48:20 | 000,314,880 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerdpclip.exe
[2013-09-01 18:48:20 | 000,273,408 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewlanapi.dll
[2013-09-01 18:48:20 | 000,212,992 | —- | C] (Microsoft Corporation) – C:WindowsSysNativebthprops.cpl
[2013-09-01 18:48:20 | 000,189,440 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64bthprops.cpl
[2013-09-01 18:48:20 | 000,172,032 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeMFCaptureEngine.dll
[2013-09-01 18:48:20 | 000,126,464 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64MFCaptureEngine.dll
[2013-09-01 18:48:17 | 000,446,464 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewlansec.dll
[2013-09-01 18:48:17 | 000,375,296 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wlansec.dll
[2013-09-01 18:48:17 | 000,202,240 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wlanapi.dll
[2013-09-01 18:48:17 | 000,126,976 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWcnApi.dll
[2013-09-01 18:48:17 | 000,102,400 | —- | C] (Microsoft Corporation) – C:WindowsSysNativefdWCN.dll
[2013-09-01 18:48:17 | 000,093,696 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64WcnApi.dll
[2013-09-01 18:48:17 | 000,027,136 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWcnEapPeerProxy.dll
[2013-09-01 18:48:17 | 000,026,624 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWcnEapAuthProxy.dll
[2013-09-01 18:48:16 | 000,030,720 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewfdprov.dll
[2013-09-01 18:48:16 | 000,025,600 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wfdprov.dll
[2013-09-01 18:48:15 | 000,022,528 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversfxppm.sys
[2013-09-01 18:48:15 | 000,016,384 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiscsilog.dll
[2013-09-01 18:48:15 | 000,009,728 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wlanhlp.dll
[2013-09-01 18:48:15 | 000,009,728 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewlanhlp.dll
[2013-09-01 16:36:54 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalMacromedia
[2013-08-20 17:03:36 | 000,693,112 | —- | C] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerApp.exe
[2013-08-20 17:03:36 | 000,078,200 | —- | C] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerCPLApp.cpl
[2013-08-20 16:53:55 | 000,000,000 | —D | C] – C:sources
[2013-08-20 15:16:54 | 000,000,000 | —D | C] – C:WindowsSysNativeMRT
[2013-08-20 15:08:26 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesAdobe
[2013-08-20 15:03:44 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsVideoLAN
[2013-08-20 15:03:29 | 000,000,000 | —D | C] – C:Program Files (x86)VideoLAN
[2013-08-20 15:01:49 | 000,000,000 | —D | C] – C:WindowsSysWow64Adobe
[2013-08-20 15:01:05 | 001,093,032 | —- | C] (Oracle Corporation) – C:WindowsSysNativenpDeployJava1.dll
[2013-08-20 15:01:05 | 000,972,712 | —- | C] (Oracle Corporation) – C:WindowsSysNativedeployJava1.dll
[2013-08-20 15:01:05 | 000,312,232 | —- | C] (Oracle Corporation) – C:WindowsSysNativejavaws.exe
[2013-08-20 15:01:03 | 000,189,352 | —- | C] (Oracle Corporation) – C:WindowsSysNativejavaw.exe
[2013-08-20 15:01:03 | 000,188,840 | —- | C] (Oracle Corporation) – C:WindowsSysNativejava.exe
[2013-08-20 15:01:03 | 000,108,968 | —- | C] (Oracle Corporation) – C:WindowsSysNativeWindowsAccessBridge-64.dll
[2013-08-20 15:00:48 | 000,000,000 | —D | C] – C:Program FilesJava
[2013-08-20 14:59:20 | 000,000,000 | —D | C] – C:ProgramDataSun
[2013-08-20 14:59:17 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesJava
[2013-08-20 14:59:16 | 000,867,240 | —- | C] (Oracle Corporation) – C:WindowsSysWow64npDeployJava1.dll
[2013-08-20 14:59:16 | 000,789,416 | —- | C] (Oracle Corporation) – C:WindowsSysWow64deployJava1.dll
[2013-08-20 14:59:16 | 000,263,592 | —- | C] (Oracle Corporation) – C:WindowsSysWow64javaws.exe
[2013-08-20 14:59:11 | 000,175,016 | —- | C] (Oracle Corporation) – C:WindowsSysWow64javaw.exe
[2013-08-20 14:59:11 | 000,175,016 | —- | C] (Oracle Corporation) – C:WindowsSysWow64java.exe
[2013-08-20 14:59:11 | 000,096,168 | —- | C] (Oracle Corporation) – C:WindowsSysWow64WindowsAccessBridge-32.dll
[2013-08-20 14:59:02 | 000,000,000 | —D | C] – C:Program Files (x86)Java
[2013-08-20 14:58:45 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesAdobe AIR
[2013-08-20 14:58:43 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalAdobe
[2013-08-20 14:58:36 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsMicrosoft Silverlight
[2013-08-20 14:57:50 | 000,000,000 | —D | C] – C:Program FilesMicrosoft Silverlight
[2013-08-20 14:57:50 | 000,000,000 | —D | C] – C:Program Files (x86)Microsoft Silverlight
[2013-08-20 14:55:48 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome
[2013-08-20 14:55:27 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalGoogle
[2013-08-20 14:55:27 | 000,000,000 | —D | C] – C:Program Files (x86)Google
[2013-08-20 14:53:14 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsClassic Shell
[2013-08-20 14:53:14 | 000,000,000 | —D | C] – C:Program FilesClassic Shell
[2013-08-20 14:26:38 | 000,259,664 | —- | C] (Total Defense, Inc.) – C:WindowsSysNativeisafprod64.dll
[2013-08-20 14:26:38 | 000,207,952 | —- | C] (Total Defense, Inc.) – C:WindowsSysWow64Isafprod.dll
[2013-08-20 14:26:38 | 000,142,928 | —- | C] (Computer Associates International, Inc.) – C:WindowsSysNativeIsafeif64.dll
[2013-08-20 14:26:38 | 000,130,128 | —- | C] (Computer Associates International, Inc.) – C:WindowsSysWow64Isafeif.dll
[2013-08-20 14:26:38 | 000,105,552 | —- | C] (Computer Associates International, Inc.) – C:WindowsSysNativeVetredir64.dll
[2013-08-20 14:26:38 | 000,097,360 | —- | C] (Computer Associates International, Inc.) – C:WindowsSysWow64Vetredir.dll
[2013-08-20 14:26:10 | 000,000,000 | —D | C] – C:Program FilesCA
[2013-08-20 14:26:10 | 000,000,000 | —D | C] – C:Program Files (x86)CA
[2013-08-20 14:26:03 | 000,000,000 | -H-D | C] – C:Config.msi
[2013-08-20 14:25:57 | 002,990,096 | —- | C] (PureSight Technologies Ltd) – C:WindowsSysWow64winsflte.dll
[2013-08-20 14:25:54 | 000,007,440 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64sporder.dll
[2013-08-20 14:25:54 | 000,000,000 | —D | C] – C:Windowsrnapxs
[2013-08-20 14:25:46 | 000,000,000 | —D | C] – C:Program FilesISSThirdParty
[2013-08-20 14:25:43 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsTotal Defense
[2013-08-20 14:25:11 | 000,000,000 | —D | C] – C:Program FilesTotal Defense
[2013-08-20 14:22:50 | 000,031,232 | —- | C] (Microsoft Corporation) – C:WindowsSysNativepcadm.dll
[2013-08-20 14:22:50 | 000,013,312 | —- | C] (Microsoft Corporation) – C:WindowsSysNativepcalua.exe
[2013-08-20 14:22:50 | 000,011,776 | —- | C] (Microsoft Corporation) – C:WindowsSysNativepcaevts.dll
[2013-08-20 14:22:35 | 000,026,624 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeReAgentc.exe
[2013-08-20 14:22:35 | 000,024,064 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ReAgentc.exe
[2013-08-20 14:22:34 | 001,011,200 | —- | C] (Microsoft Corporation) – C:WindowsSysNativereseteng.dll
[2013-08-20 14:22:34 | 000,945,152 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeresetengmig.dll
[2013-08-20 14:22:34 | 000,443,392 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeReAgent.dll
[2013-08-20 14:22:34 | 000,375,808 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ReAgent.dll
[2013-08-20 14:22:34 | 000,132,096 | —- | C] (Microsoft Corporation) – C:WindowsSysNativesysreset.exe
[2013-08-20 14:22:32 | 002,851,840 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeesent.dll
[2013-08-20 14:22:32 | 002,382,336 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64esent.dll
[2013-08-20 14:21:33 | 000,030,720 | —- | C] (Microsoft Corporation) – C:WindowsSysNativecryptdlg.dll
[2013-08-20 14:21:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64cryptdlg.dll
[2013-08-20 14:21:31 | 000,247,216 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversWdFilter.sys
[2013-08-20 14:21:30 | 000,036,288 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversWdBoot.sys
[2013-08-20 12:06:14 | 000,000,000 | —D | C] – C:ProgramDataCA
[2013-08-20 11:50:57 | 000,017,888 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsvcr100_clr0400.dll
[2013-08-20 11:50:19 | 000,017,888 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64msvcr100_clr0400.dll
[2013-08-20 11:48:03 | 002,094,592 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemmc.exe
[2013-08-20 11:48:03 | 001,964,544 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewlidsvc.dll
[2013-08-20 11:48:03 | 001,120,768 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsctf.dll
[2013-08-20 11:48:02 | 001,611,776 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mmc.exe
[2013-08-20 11:47:58 | 001,886,208 | —- | C] (Microsoft Corporation) – C:WindowsSysNativesetupapi.dll
[2013-08-20 11:47:55 | 000,438,272 | —- | C] (Microsoft Corporation) – C:WindowsSysNativelsm.dll
[2013-08-20 11:47:55 | 000,406,016 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.Media.dll
[2013-08-20 11:47:54 | 000,028,904 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversmsgpiowin32.sys
[2013-08-20 11:47:53 | 000,666,112 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeMP4SDECD.DLL
[2013-08-20 11:47:53 | 000,261,120 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.Media.dll
[2013-08-20 11:47:53 | 000,256,000 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWSDMon.dll
[2013-08-20 11:47:53 | 000,159,232 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeinetpp.dll
[2013-08-20 11:47:53 | 000,095,232 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewiaacmgr.exe
[2013-08-20 11:47:52 | 000,436,736 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64MP4SDECD.DLL
[2013-08-20 11:47:52 | 000,171,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativencbservice.dll
[2013-08-20 11:47:52 | 000,107,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativehttpprxm.dll
[2013-08-20 11:47:52 | 000,083,968 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wiaacmgr.exe
[2013-08-20 11:47:52 | 000,062,464 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeadhsvc.dll
[2013-08-20 11:47:51 | 000,022,528 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeadhapi.dll
[2013-08-20 11:47:51 | 000,017,920 | —- | C] (Microsoft Corporation) – C:WindowsSysNativehttpprxp.dll
[2013-08-20 11:47:51 | 000,015,872 | —- | C] (Microsoft Corporation) – C:WindowsSysNativekeepaliveprovider.dll
[2013-08-20 11:47:40 | 001,314,816 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerpcrt4.dll
[2013-08-20 11:47:16 | 014,267,904 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewmp.dll
[2013-08-20 11:47:16 | 003,552,768 | —- | C] (Microsoft Corporation) – C:WindowsSysNativetquery.dll
[2013-08-20 11:47:13 | 011,878,912 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wmp.dll
[2013-08-20 11:47:11 | 002,107,904 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemssrch.dll
[2013-08-20 11:47:09 | 002,767,360 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64tquery.dll
[2013-08-20 11:47:07 | 001,593,344 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mssrch.dll
[2013-08-20 11:47:05 | 001,829,408 | —- | C] (Microsoft Corporation) – C:WindowsSysNativentdll.dll
[2013-08-20 11:47:02 | 001,444,864 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeMSAudDecMFT.dll
[2013-08-20 11:47:01 | 001,113,600 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64MSAudDecMFT.dll
[2013-08-20 11:47:01 | 000,306,952 | —- | C] (Microsoft Corporation) – C:WindowsSysNativekd_02_10ec.dll
[2013-08-20 11:46:59 | 000,403,968 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mssph.dll
[2013-08-20 11:46:59 | 000,298,456 | —- | C] (Microsoft Corporation) – C:WindowsSysNativersaenh.dll
[2013-08-20 11:46:58 | 000,446,792 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAudioSes.dll
[2013-08-20 11:46:58 | 000,373,760 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSearchProtocolHost.exe
[2013-08-20 11:46:57 | 000,804,352 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeRecoveryDrive.exe
[2013-08-20 11:46:57 | 000,595,456 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.Networking.dll
[2013-08-20 11:46:57 | 000,489,576 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAudioEng.dll
[2013-08-20 11:46:57 | 000,435,200 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemssph.dll
[2013-08-20 11:46:57 | 000,367,616 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeconhost.exe
[2013-08-20 11:46:57 | 000,253,544 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeaudiodg.exe
[2013-08-20 11:46:57 | 000,172,544 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedwmredir.dll
[2013-08-20 11:46:56 | 000,456,704 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewpncore.dll
[2013-08-20 11:46:55 | 000,468,992 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeMFMediaEngine.dll
[2013-08-20 11:46:55 | 000,391,168 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.Networking.BackgroundTransfer.dll
[2013-08-20 11:46:54 | 000,411,136 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.Networking.dll
[2013-08-20 11:46:53 | 002,146,304 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeactxprxy.dll
[2013-08-20 11:46:53 | 000,503,080 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeci.dll
[2013-08-20 11:46:53 | 000,231,936 | —- | C] (Microsoft Corporation) – C:WindowsSysNativefhengine.dll
[2013-08-20 11:46:53 | 000,196,096 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedmvdsitf.dll
[2013-08-20 11:46:52 | 000,659,456 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mssvp.dll
[2013-08-20 11:46:52 | 000,361,984 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64MFMediaEngine.dll
[2013-08-20 11:46:52 | 000,228,352 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeXpsRasterService.dll
[2013-08-20 11:46:51 | 000,281,088 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfreadwrite.dll
[2013-08-20 11:46:51 | 000,268,800 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.Networking.BackgroundTransfer.dll
[2013-08-20 11:46:51 | 000,197,120 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSearchFilterHost.exe
[2013-08-20 11:46:51 | 000,169,472 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAudioEndpointBuilder.dll
[2013-08-20 11:46:51 | 000,155,136 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64XpsRasterService.dll
[2013-08-20 11:46:51 | 000,126,464 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeRobocopy.exe
[2013-08-20 11:46:51 | 000,123,880 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wscapi.dll
[2013-08-20 11:46:51 | 000,106,496 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Robocopy.exe
[2013-08-20 11:46:51 | 000,083,968 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedrivershidclass.sys
[2013-08-20 11:46:51 | 000,077,960 | —- | C] (Microsoft Corporation) – C:WindowsSysNativekdvm.dll
[2013-08-20 11:46:51 | 000,069,864 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriverspdc.sys
[2013-08-20 11:46:50 | 000,522,640 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAUDIOKSE.dll
[2013-08-20 11:46:50 | 000,463,768 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64AUDIOKSE.dll
[2013-08-20 11:46:50 | 000,210,432 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiuilp.dll
[2013-08-20 11:46:50 | 000,155,648 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dmvdsitf.dll
[2013-08-20 11:46:50 | 000,086,280 | —- | C] (Microsoft Corporation) – C:WindowsSysNativekdnet.dll
[2013-08-20 11:46:49 | 000,303,848 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversdxgmms1.sys
[2013-08-20 11:46:49 | 000,214,528 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfreadwrite.dll
[2013-08-20 11:46:48 | 000,745,984 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemssvp.dll
[2013-08-20 11:46:48 | 000,414,720 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeGenuineCenter.dll
[2013-08-20 11:46:48 | 000,050,176 | —- | C] (Microsoft Corporation) – C:WindowsSysNativefmifs.dll
[2013-08-20 11:46:48 | 000,041,984 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64fmifs.dll
[2013-08-20 11:46:48 | 000,039,936 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedrivershidi2c.sys
[2013-08-20 11:46:48 | 000,013,824 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsshooks.dll
[2013-08-20 11:46:47 | 000,246,272 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemssphtb.dll
[2013-08-20 11:46:47 | 000,102,400 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemssitlb.dll
[2013-08-20 11:46:47 | 000,096,256 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemssprxy.dll
[2013-08-20 11:46:47 | 000,094,208 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mssitlb.dll
[2013-08-20 11:46:47 | 000,065,024 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsscntrs.dll
[2013-08-20 11:46:47 | 000,048,640 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64msscntrs.dll
[2013-08-20 11:46:47 | 000,010,752 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64msshooks.dll
[2013-08-20 11:46:46 | 000,267,264 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeEncDump.dll
[2013-08-20 02:41:59 | 013,644,288 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.UI.Xaml.dll
[2013-08-20 02:41:57 | 010,116,096 | —- | C] (Microsoft Corporation) – C:WindowsSysNativetwinui.dll
[2013-08-20 02:41:54 | 008,857,088 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64twinui.dll
[2013-08-20 02:41:52 | 010,788,864 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.UI.Xaml.dll
[2013-08-20 02:41:50 | 001,131,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAppXDeploymentServer.dll
[2013-08-20 02:41:47 | 000,389,120 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeBCP47Langs.dll
[2013-08-20 02:41:47 | 000,328,192 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeubpm.dll
[2013-08-20 02:41:46 | 002,305,024 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeauthui.dll
[2013-08-20 02:41:46 | 000,760,320 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewuapi.dll
[2013-08-20 02:41:46 | 000,470,528 | —- | C] (Microsoft Corporation) – C:WindowsSysNativenetprofmsvc.dll
[2013-08-20 02:41:46 | 000,247,296 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ubpm.dll
[2013-08-20 02:41:45 | 002,035,712 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64authui.dll
[2013-08-20 02:41:45 | 000,309,760 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64BCP47Langs.dll
[2013-08-20 02:41:44 | 001,619,968 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewucltux.dll
[2013-08-20 02:41:44 | 000,446,720 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversUSBHUB3.SYS
[2013-08-20 02:41:44 | 000,014,848 | —- | C] (Microsoft) – C:WindowsSysWow64rars.rs
[2013-08-20 02:41:43 | 000,812,544 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeMagnify.exe
[2013-08-20 02:41:43 | 000,708,096 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAppXDeploymentExtensions.dll
[2013-08-20 02:41:43 | 000,621,056 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wuapi.dll
[2013-08-20 02:41:43 | 000,560,640 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemfmp4srcsnk.dll
[2013-08-20 02:41:43 | 000,411,136 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mfmp4srcsnk.dll
[2013-08-20 02:41:43 | 000,330,240 | —- | C] (Microsoft Corporation) – C:WindowsSysNativestobject.dll
[2013-08-20 02:41:43 | 000,251,904 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWUSettingsProvider.dll
[2013-08-20 02:41:43 | 000,169,984 | —- | C] (Microsoft Corporation) – C:WindowsSysNativenetplwiz.dll
[2013-08-20 02:41:43 | 000,014,848 | —- | C] (Microsoft) – C:WindowsSysNativerars.rs
[2013-08-20 02:41:42 | 000,758,784 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Magnify.exe
[2013-08-20 02:41:42 | 000,501,760 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeDevicePairing.dll
[2013-08-20 02:41:42 | 000,419,840 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeintl.cpl
[2013-08-20 02:41:42 | 000,284,416 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversspaceport.sys
[2013-08-20 02:41:42 | 000,151,040 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64netplwiz.dll
[2013-08-20 02:41:42 | 000,120,736 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeAuthHost.exe
[2013-08-20 02:41:42 | 000,093,696 | —- | C] (Microsoft Corporation) – C:WindowsSysNativepsmsrv.dll
[2013-08-20 02:41:42 | 000,077,824 | —- | C] (Microsoft Corporation) – C:WindowsSysNativetaskhost.exe
[2013-08-20 02:41:42 | 000,072,192 | —- | C] (Microsoft Corporation) – C:WindowsSysNativetaskhostex.exe
[2013-08-20 02:41:42 | 000,058,312 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewuauclt.exe
[2013-08-20 02:41:42 | 000,043,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewups.dll
[2013-08-20 02:41:41 | 000,449,536 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64DevicePairing.dll
[2013-08-20 02:41:41 | 000,389,632 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64intl.cpl
[2013-08-20 02:41:41 | 000,179,712 | —- | C] (Microsoft Corporation) – C:WindowsSysNativebisrv.dll
[2013-08-20 02:41:41 | 000,173,568 | —- | C] (Microsoft Corporation) – C:WindowsSysNativestorewuauth.dll
[2013-08-20 02:41:41 | 000,141,824 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewuwebv.dll
[2013-08-20 02:41:41 | 000,125,952 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wuwebv.dll
[2013-08-20 02:41:41 | 000,122,368 | —- | C] (Microsoft Corporation) – C:WindowsSysNativebiwinrt.dll
[2013-08-20 02:41:41 | 000,098,304 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewudriver.dll
[2013-08-20 02:41:41 | 000,092,160 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64biwinrt.dll
[2013-08-20 02:41:41 | 000,083,968 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wudriver.dll
[2013-08-20 02:41:41 | 000,048,640 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewups2.dll
[2013-08-20 02:41:41 | 000,039,424 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewuapp.exe
[2013-08-20 02:41:41 | 000,017,408 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewuaext.dll
[2013-08-20 02:41:40 | 000,034,304 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wuapp.exe
[2013-08-20 02:41:40 | 000,018,432 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wups.dll
[2013-08-20 02:41:40 | 000,017,408 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemuifontsetup.dll
[2013-08-20 02:41:40 | 000,015,872 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64nlmproxy.dll
[2013-08-20 02:41:40 | 000,014,336 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64muifontsetup.dll
[2013-08-20 02:41:40 | 000,012,288 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64nlmsprep.dll
[2013-08-20 02:41:39 | 000,099,328 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewushareduxresources.dll
[2013-08-20 02:41:29 | 000,888,320 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeautochk.exe
[2013-08-20 02:41:29 | 000,793,088 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64autochk.exe
[2013-08-20 02:41:29 | 000,542,208 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeuntfs.dll
[2013-08-20 02:41:29 | 000,482,816 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64untfs.dll
[2013-08-20 02:41:28 | 001,257,472 | —- | C] (Microsoft Corporation) – C:WindowsSysNativekernel32.dll
[2013-08-20 02:41:28 | 000,094,208 | —- | C] (Microsoft Corporation) – C:WindowsSysNativesynceng.dll
[2013-08-20 02:41:28 | 000,072,192 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64synceng.dll
[2013-08-20 02:41:13 | 001,161,728 | —- | C] (Microsoft Corporation) – C:WindowsSysNativesppobjs.dll
[2013-08-20 02:41:06 | 001,627,648 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindowsCodecs.dll
[2013-08-20 02:41:03 | 005,978,624 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemstscax.dll
[2013-08-20 02:41:02 | 001,101,824 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewmpmde.dll
[2013-08-20 02:41:02 | 000,327,912 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversClasspnp.sys
[2013-08-20 02:41:00 | 005,091,840 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mstscax.dll
[2013-08-20 02:41:00 | 001,149,952 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewinmde.dll
[2013-08-20 02:40:59 | 000,951,808 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.Globalization.dll
[2013-08-20 02:40:59 | 000,645,120 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.Security.Authentication.OnlineId.dll
[2013-08-20 02:40:59 | 000,357,888 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64netcfgx.dll
[2013-08-20 02:40:59 | 000,180,224 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSystemEventsBrokerServer.dll
[2013-08-20 02:40:58 | 000,332,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversstorport.sys
[2013-08-20 02:40:58 | 000,171,008 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeTimeBrokerServer.dll
[2013-08-20 02:40:57 | 000,893,952 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64winmde.dll
[2013-08-20 02:40:57 | 000,601,088 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.Globalization.dll
[2013-08-20 02:40:57 | 000,455,168 | —- | C] (Microsoft Corporation) – C:WindowsSysNativenetcfgx.dll
[2013-08-20 02:40:57 | 000,448,512 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSettingSync.dll
[2013-08-20 02:40:57 | 000,245,248 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeusbmon.dll
[2013-08-20 02:40:56 | 000,703,488 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedrvstore.dll
[2013-08-20 02:40:56 | 000,550,912 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64drvstore.dll
[2013-08-20 02:40:56 | 000,504,320 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.Security.Authentication.OnlineId.dll
[2013-08-20 02:40:54 | 000,356,352 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64SettingSync.dll
[2013-08-20 02:40:54 | 000,150,016 | —- | C] (Microsoft Corporation) – C:WindowsSysNativediscan.dll
[2013-08-20 02:40:53 | 000,240,640 | —- | C] (Microsoft Corporation) – C:WindowsSysNativefsquirt.exe
[2013-08-20 02:40:53 | 000,156,160 | —- | C] (Microsoft Corporation) – C:WindowsSysNativepowercfg.cpl
[2013-08-20 02:40:53 | 000,148,712 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriverstpm.sys
[2013-08-20 02:40:53 | 000,145,408 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64powercfg.cpl
[2013-08-20 02:40:53 | 000,117,248 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeNdisImPlatform.dll
[2013-08-20 02:40:53 | 000,100,864 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64SettingSyncInfo.dll
[2013-08-20 02:40:53 | 000,077,544 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversstorahci.sys
[2013-08-20 02:40:53 | 000,071,168 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWSDPrintProxy.DLL
[2013-08-20 02:40:53 | 000,049,152 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeDevDispItemProvider.dll
[2013-08-20 02:40:52 | 000,128,512 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeSettingSyncInfo.dll
[2013-08-20 02:40:52 | 000,036,352 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64DevDispItemProvider.dll
[2013-08-20 02:40:42 | 000,086,016 | —- | C] (Microsoft Corporation) – C:WindowsSysNativencryptsslp.dll
[2013-08-20 02:40:42 | 000,071,168 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ncryptsslp.dll
[2013-08-20 02:40:34 | 001,300,992 | —- | C] (Microsoft Corporation) – C:WindowsSysNativegdi32.dll
[2013-08-20 02:39:58 | 001,838,080 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeDWrite.dll
[2013-08-20 02:39:32 | 001,255,936 | —- | C] (Microsoft Corporation) – C:WindowsSysNativecertutil.exe
[2013-08-20 02:39:32 | 001,013,248 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64certutil.exe
[2013-08-20 02:39:32 | 000,141,312 | —- | C] (Microsoft Corporation) – C:WindowsSysNativecryptnet.dll
[2013-08-20 02:39:25 | 000,411,880 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversFWPKCLNT.SYS
[2013-08-20 02:39:24 | 000,595,968 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeqedit.dll
[2013-08-20 02:39:24 | 000,496,640 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64qedit.dll
[2013-08-20 02:39:03 | 000,729,600 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeduser.dll
[2013-08-20 02:39:02 | 000,543,232 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewlroamextension.dll
[2013-08-20 02:39:02 | 000,475,136 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWWanAPI.dll
[2013-08-20 02:39:02 | 000,385,024 | —- | C] (Microsoft Corporation) – C:WindowsSysNativencsi.dll
[2013-08-20 02:39:02 | 000,293,376 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWindows.Networking.Connectivity.dll
[2013-08-20 02:39:01 | 000,410,624 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64wlroamextension.dll
[2013-08-20 02:39:01 | 000,370,688 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64WWanAPI.dll
[2013-08-20 02:39:01 | 000,260,096 | —- | C] (Microsoft Corporation) – C:WindowsSysNativehotspotauth.dll
[2013-08-20 02:39:01 | 000,225,280 | —- | C] (Microsoft Corporation) – C:WindowsSysNativembsmsapi.dll
[2013-08-20 02:39:01 | 000,197,632 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64Windows.Networking.Connectivity.dll
[2013-08-20 02:39:01 | 000,157,696 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mbsmsapi.dll
[2013-08-20 02:39:01 | 000,107,520 | —- | C] (Microsoft Corporation) – C:WindowsSysNativetaskkill.exe
[2013-08-20 02:39:01 | 000,102,400 | —- | C] (Microsoft Corporation) – C:WindowsSysNativetasklist.exe
[2013-08-20 02:39:01 | 000,079,360 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64taskkill.exe
[2013-08-20 02:39:00 | 000,611,840 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewpd_ci.dll
[2013-08-20 02:39:00 | 000,080,896 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64tasklist.exe
[2013-08-20 02:39:00 | 000,061,672 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriverscrashdmp.sys
[2013-08-20 02:39:00 | 000,029,952 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversBthhfHid.sys
[2013-08-20 02:39:00 | 000,018,432 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversBtaMPM.sys
[2013-08-20 02:38:50 | 001,690,624 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeGdiPlus.dll
[2013-08-20 02:38:49 | 001,437,184 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64GdiPlus.dll
[2013-08-20 02:38:46 | 000,020,992 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversusb8023.sys
[2013-08-20 02:38:28 | 000,222,208 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeshdocvw.dll
[2013-08-20 02:38:28 | 000,112,872 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeconsent.exe
[2013-08-20 02:38:15 | 000,915,968 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeuxtheme.dll
[2013-08-20 02:38:15 | 000,053,760 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeUXInit.dll
[2013-08-20 02:38:15 | 000,033,280 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64iernonce.dll
[2013-08-20 02:38:14 | 000,061,440 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64iesetup.dll
[2013-08-20 02:38:14 | 000,044,032 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64UXInit.dll
[2013-08-20 02:38:11 | 000,109,056 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64iesysprep.dll
[2013-08-20 02:38:11 | 000,051,712 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeie4uinit.exe
[2013-08-20 02:38:11 | 000,039,936 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiernonce.dll
[2013-08-20 02:38:10 | 000,603,136 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsfeeds.dll
[2013-08-20 02:38:09 | 000,067,072 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiesetup.dll
[2013-08-20 02:38:08 | 000,136,704 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiesysprep.dll
[2013-08-20 02:38:01 | 000,855,552 | —- | C] (Microsoft Corporation) – C:WindowsSysNativejscript.dll
[2013-08-20 02:37:38 | 003,958,784 | —- | C] (Microsoft Corporation) – C:WindowsSysNativejscript9.dll
[2013-08-20 02:37:38 | 000,690,688 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64jscript.dll
[2013-08-20 02:36:13 | 002,842,112 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeWMVDECOD.DLL
[2013-08-20 02:36:13 | 002,620,928 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64WMVDECOD.DLL
[2013-08-20 02:36:08 | 000,463,872 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedpnet.dll
[2013-08-20 02:36:08 | 000,375,808 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dpnet.dll
[2013-08-20 02:36:08 | 000,067,584 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedpnathlp.dll
[2013-08-20 02:36:08 | 000,058,880 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dpnathlp.dll
[2013-08-20 02:36:08 | 000,034,816 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedpnsvr.exe
[2013-08-20 02:36:08 | 000,032,256 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dpnsvr.exe
[2013-08-20 02:36:08 | 000,009,216 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedpnhupnp.dll
[2013-08-20 02:36:08 | 000,009,216 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedpnhpast.dll
[2013-08-20 02:36:08 | 000,008,192 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dpnhupnp.dll
[2013-08-20 02:36:08 | 000,008,192 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dpnhpast.dll
[2013-08-20 02:36:08 | 000,004,096 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedpnlobby.dll
[2013-08-20 02:36:08 | 000,003,584 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedpnaddr.dll
[2013-08-20 02:36:08 | 000,003,072 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dpnlobby.dll
[2013-08-20 02:36:08 | 000,002,560 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64dpnaddr.dll
[2013-08-20 02:36:05 | 001,889,280 | —- | C] (Microsoft Corporation) – C:WindowsSysNativecrypt32.dll
[2013-08-20 02:36:04 | 000,337,408 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewintrust.dll
[2013-08-20 02:36:04 | 000,124,416 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeapprepapi.dll
[2013-08-20 02:36:04 | 000,098,304 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeapprepsync.dll
[2013-08-20 02:36:04 | 000,087,040 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64apprepapi.dll
[2013-08-20 02:36:04 | 000,074,240 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64apprepsync.dll
[2013-08-20 02:36:01 | 000,733,184 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewin32spl.dll
[2013-08-20 02:36:01 | 000,362,496 | —- | C] (Adobe Systems Incorporated) – C:WindowsSysNativeatmfd.dll
[2013-08-20 02:36:01 | 000,300,032 | —- | C] (Adobe Systems Incorporated) – C:WindowsSysWow64atmfd.dll
[2013-08-20 02:36:00 | 000,096,256 | —- | C] (Microsoft Corporation) – C:WindowsSysNativefontsub.dll
[2013-08-20 02:36:00 | 000,075,776 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64fontsub.dll
[2013-08-20 02:36:00 | 000,046,080 | —- | C] (Adobe Systems) – C:WindowsSysNativeatmlib.dll
[2013-08-20 02:36:00 | 000,035,328 | —- | C] (Adobe Systems) – C:WindowsSysWow64atmlib.dll
[2013-08-20 02:36:00 | 000,014,336 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedciman32.dll
[2013-08-20 02:36:00 | 000,003,072 | —- | C] (Microsoft Corporation) – C:WindowsSysNativelpk.dll
[2013-08-20 02:35:57 | 000,148,480 | —- | C] (Microsoft Corporation) – C:WindowsSysNativepoqexec.exe
[2013-08-20 02:35:57 | 000,144,384 | —- | C] (Microsoft Corporation) – C:WindowsSysNativetssdisai.dll
[2013-08-20 02:35:57 | 000,135,680 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeappserverai.dll
[2013-08-20 02:35:57 | 000,132,608 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64poqexec.exe
[2013-08-20 02:35:57 | 000,126,976 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeRDWebAI.dll
[2013-08-20 02:35:57 | 000,122,880 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeVmHostAI.dll
[2013-08-20 02:35:31 | 000,002,048 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64msxml6r.dll
[2013-08-20 02:35:31 | 000,002,048 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsxml6r.dll
[2013-08-20 02:35:31 | 000,002,048 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64msxml3r.dll
[2013-08-20 02:35:31 | 000,002,048 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsxml3r.dll
[2013-08-19 20:52:07 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalMicrosoft_Corporation
[2013-08-19 20:49:32 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalPower2Go
[2013-08-19 20:49:29 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingCyberLink
[2013-08-19 20:46:51 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsCyberLink Media Suite
[2013-08-19 20:37:04 | 000,000,000 | R–D | C] – C:UsersShanneSkyDrive
[2013-08-19 20:36:26 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesDESIGNER
[2013-08-19 20:34:26 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsMicrosoft Office 2013
[2013-08-19 20:33:54 | 000,000,000 | —D | C] – C:Program FilesMicrosoft Office 15
[2013-08-19 20:11:57 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingMozilla
[2013-08-19 20:11:57 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalMozilla
[2013-08-19 20:11:50 | 000,000,000 | —D | C] – C:Program Files (x86)Mozilla Maintenance Service
[2013-08-19 20:11:50 | 000,000,000 | —D | C] – C:ProgramDataMozilla
[2013-08-19 20:11:48 | 000,000,000 | —D | C] – C:Program Files (x86)Mozilla Firefox
[2013-08-19 20:08:40 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingASUS WebStorage
[2013-08-19 20:08:37 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingASUS
[2013-08-19 20:08:36 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalBroadcom
[2013-08-19 20:08:36 | 000,000,000 | —D | C] – C:UsersShanneDocumentsBluetooth Exchange Folder
[2013-08-19 20:08:08 | 000,000,000 | R–D | C] – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
[2013-08-19 20:08:08 | 000,000,000 | R–D | C] – C:UsersShanneSearches
[2013-08-19 20:08:08 | 000,000,000 | R–D | C] – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsAdministrative Tools
[2013-08-19 20:08:08 | 000,000,000 | -H-D | C] – C:UsersShanneApplication DataMicrosoftInternet ExplorerQuick LaunchUser Pinned
[2013-08-19 20:07:21 | 000,000,000 | —D | C] – C:ProgramDataFolderView
[2013-08-19 20:06:30 | 000,000,000 | R–D | C] – C:UsersShanneContacts
[2013-08-19 20:06:25 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingMacromedia
[2013-08-19 20:06:24 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingAdobe
[2013-08-19 20:06:23 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalASUS
[2013-08-19 20:05:46 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalVirtualStore
[2013-08-19 20:05:32 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalPackages
[2013-08-19 20:03:58 | 000,000,000 | –SD | C] – C:UsersShanneAppDataRoamingMicrosoft
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneVideos
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsSystem Tools
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneSaved Games
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShannePictures
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneMusic
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneLinks
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneFavorites
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneDownloads
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneDocuments
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneDesktop
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsAccessories
[2013-08-19 20:03:58 | 000,000,000 | R–D | C] – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsAccessibility
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneAppDataLocalTemporary Internet Files
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneTemplates
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneStart Menu
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneSendTo
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneRecent
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShannePrintHood
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneNetHood
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneDocumentsMy Videos
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneDocumentsMy Pictures
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneDocumentsMy Music
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneMy Documents
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneLocal Settings
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneAppDataLocalHistory
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneCookies
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneApplication Data
[2013-08-19 20:03:58 | 000,000,000 | -HSD | C] – C:UsersShanneAppDataLocalApplication Data
[2013-08-19 20:03:58 | 000,000,000 | -H-D | C] – C:UsersShanneAppData
[2013-08-19 20:03:58 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalTemp
[2013-08-19 20:03:58 | 000,000,000 | —D | C] – C:UsersShanneAppDataLocalMicrosoft
[2013-08-19 20:03:58 | 000,000,000 | —D | C] – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsMaintenance

========== Files - Modified Within 30 Days ==========

[2013-09-07 13:30:00 | 000,000,830 | —- | M] () – C:WindowstasksAdobe Flash Player Updater.job
[2013-09-07 13:25:02 | 000,000,928 | —- | M] () – C:WindowstasksGoogleUpdateTaskMachineCore.job
[2013-09-07 13:25:02 | 000,000,074 | —- | M] () – C:UsersShanneAppDataRoamingsp_data.sys
[2013-09-07 13:17:29 | 000,067,584 | –S- | M] () – C:Windowsbootstat.dat
[2013-09-07 01:05:00 | 000,000,932 | —- | M] () – C:WindowstasksGoogleUpdateTaskMachineUA.job
[2013-09-07 00:43:21 | 000,848,230 | —- | M] () – C:WindowsSysNativePerfStringBackup.INI
[2013-09-07 00:43:21 | 000,723,700 | —- | M] () – C:WindowsSysNativeperfh009.dat
[2013-09-07 00:43:21 | 000,136,838 | —- | M] () – C:WindowsSysNativeperfc009.dat
[2013-09-07 00:38:52 | 000,316,072 | —- | M] () – C:WindowsSysNativeFNTCACHE.DAT
[2013-09-07 00:38:46 | 268,435,456 | -HS- | M] () – C:swapfile.sys
[2013-09-07 00:38:41 | 1648,771,070 | -HS- | M] () – C:hiberfil.sys
[2013-09-07 00:37:23 | 005,586,965 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k0
[2013-09-07 00:37:23 | 000,182,572 | —- | M] () – C:WindowsSysNativedriversKmxAgent.asc
[2013-09-07 00:37:23 | 000,000,553 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k0
[2013-09-07 00:37:23 | 000,000,085 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k7
[2013-09-07 00:37:23 | 000,000,085 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k6
[2013-09-07 00:37:23 | 000,000,085 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k5
[2013-09-07 00:37:23 | 000,000,085 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k4
[2013-09-07 00:37:23 | 000,000,085 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k3
[2013-09-07 00:37:23 | 000,000,085 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k2
[2013-09-07 00:37:23 | 000,000,085 | —- | M] () – C:WindowsSysNativedriverskmxcfg.u2k1
[2013-09-07 00:37:23 | 000,000,049 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k7
[2013-09-07 00:37:23 | 000,000,049 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k6
[2013-09-07 00:37:23 | 000,000,049 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k5
[2013-09-07 00:37:23 | 000,000,049 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k4
[2013-09-07 00:37:23 | 000,000,049 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k3
[2013-09-07 00:37:23 | 000,000,049 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k2
[2013-09-07 00:37:23 | 000,000,049 | —- | M] () – C:WindowsSysNativedriverskmxzone.u2k1
[2013-09-07 00:36:01 | 000,000,776 | —- | M] () – C:WindowsBrpfx04a.ini
[2013-09-07 00:36:01 | 000,000,064 | —- | M] () – C:Windowsbrpcfx.ini
[2013-09-07 00:35:59 | 000,000,000 | —- | M] () – C:WindowsBRPARAM.INI
[2013-09-04 00:14:53 | 000,001,456 | —- | M] () – C:UsersShanneApplication DataMicrosoftInternet ExplorerQuick LaunchLaunch Internet Explorer Browser.lnk
[2013-09-02 11:06:29 | 000,000,066 | —- | M] () – C:WindowsBrfaxrx.ini
[2013-08-20 15:00:50 | 000,108,968 | —- | M] (Oracle Corporation) – C:WindowsSysNativeWindowsAccessBridge-64.dll
[2013-08-20 15:00:49 | 001,093,032 | —- | M] (Oracle Corporation) – C:WindowsSysNativenpDeployJava1.dll
[2013-08-20 15:00:49 | 000,972,712 | —- | M] (Oracle Corporation) – C:WindowsSysNativedeployJava1.dll
[2013-08-20 15:00:49 | 000,312,232 | —- | M] (Oracle Corporation) – C:WindowsSysNativejavaws.exe
[2013-08-20 15:00:49 | 000,189,352 | —- | M] (Oracle Corporation) – C:WindowsSysNativejavaw.exe
[2013-08-20 15:00:49 | 000,188,840 | —- | M] (Oracle Corporation) – C:WindowsSysNativejava.exe
[2013-08-20 14:59:04 | 000,096,168 | —- | M] (Oracle Corporation) – C:WindowsSysWow64WindowsAccessBridge-32.dll
[2013-08-20 14:59:03 | 000,867,240 | —- | M] (Oracle Corporation) – C:WindowsSysWow64npDeployJava1.dll
[2013-08-20 14:59:03 | 000,789,416 | —- | M] (Oracle Corporation) – C:WindowsSysWow64deployJava1.dll
[2013-08-20 14:59:03 | 000,263,592 | —- | M] (Oracle Corporation) – C:WindowsSysWow64javaws.exe
[2013-08-20 14:59:03 | 000,175,016 | —- | M] (Oracle Corporation) – C:WindowsSysWow64javaw.exe
[2013-08-20 14:59:03 | 000,175,016 | —- | M] (Oracle Corporation) – C:WindowsSysWow64java.exe
[2013-08-20 14:25:58 | 002,524,176 | —- | M] () – C:WindowsSysNativewinsflt.dll
[2013-08-20 14:25:58 | 001,744,912 | —- | M] () – C:WindowsSysWow64winsflt.dll
[2013-08-20 14:20:34 | 000,000,000 | -H– | M] () – C:WindowsSysNativedriversMsft_User_WpdFs_01_11_00.Wdf
[2013-08-19 20:22:31 | 000,000,017 | —- | M] () – C:UsersShanneAppDataLocalresmon.resmoncfg

========== Files Created - No Company Name ==========

[2013-09-07 00:35:59 | 000,000,000 | —- | C] () – C:WindowsBRPARAM.INI
[2013-09-07 00:05:09 | 000,316,072 | —- | C] () – C:WindowsSysNativeFNTCACHE.DAT
[2013-09-02 11:07:05 | 000,000,776 | —- | C] () – C:WindowsBrpfx04a.ini
[2013-09-02 11:07:05 | 000,000,064 | —- | C] () – C:Windowsbrpcfx.ini
[2013-09-02 11:06:25 | 000,000,066 | —- | C] () – C:WindowsBrfaxrx.ini
[2013-09-02 11:06:25 | 000,000,000 | —- | C] () – C:Windowsbrdfxspd.dat
[2013-09-02 11:06:24 | 000,143,360 | R— | C] () – C:WindowsSysNativeBrSNMP64.dll
[2013-09-02 11:06:10 | 000,045,056 | —- | C] () – C:WindowsSysWow64BRTCPCON.DLL
[2013-09-02 11:06:06 | 000,000,114 | —- | C] () – C:WindowsSysWow64BRLMW03A.INI
[2013-09-01 20:02:11 | 000,002,519 | —- | C] () – C:ProgramDataMicrosoftWindowsStart MenuProgramsApple Software Update.lnk
[2013-09-01 18:50:11 | 000,386,642 | —- | C] () – C:WindowsSysNativeApnDatabase.xml
[2013-09-01 16:36:23 | 000,000,830 | —- | C] () – C:WindowstasksAdobe Flash Player Updater.job
[2013-08-20 17:00:32 | 005,586,965 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k0
[2013-08-20 17:00:32 | 000,000,553 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k0
[2013-08-20 17:00:32 | 000,000,085 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k7
[2013-08-20 17:00:32 | 000,000,085 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k6
[2013-08-20 17:00:32 | 000,000,085 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k5
[2013-08-20 17:00:32 | 000,000,085 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k4
[2013-08-20 17:00:32 | 000,000,085 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k3
[2013-08-20 17:00:32 | 000,000,085 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k2
[2013-08-20 17:00:32 | 000,000,085 | —- | C] () – C:WindowsSysNativedriverskmxcfg.u2k1
[2013-08-20 17:00:32 | 000,000,049 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k7
[2013-08-20 17:00:32 | 000,000,049 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k6
[2013-08-20 17:00:32 | 000,000,049 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k5
[2013-08-20 17:00:32 | 000,000,049 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k4
[2013-08-20 17:00:32 | 000,000,049 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k3
[2013-08-20 17:00:32 | 000,000,049 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k2
[2013-08-20 17:00:32 | 000,000,049 | —- | C] () – C:WindowsSysNativedriverskmxzone.u2k1
[2013-08-20 17:00:30 | 000,182,572 | —- | C] () – C:WindowsSysNativedriversKmxAgent.asc
[2013-08-20 15:08:30 | 000,002,441 | —- | C] () – C:ProgramDataMicrosoftWindowsStart MenuProgramsAdobe Reader XI.lnk
[2013-08-20 14:55:32 | 000,000,932 | —- | C] () – C:WindowstasksGoogleUpdateTaskMachineUA.job
[2013-08-20 14:55:30 | 000,000,928 | —- | C] () – C:WindowstasksGoogleUpdateTaskMachineCore.job
[2013-08-20 14:54:17 | 000,000,902 | —- | C] () – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsWin8 Start Button.lnk
[2013-08-20 14:26:42 | 001,424,464 | —- | C] () – C:WindowsSysWow64cfgmig32.dll
[2013-08-20 14:26:42 | 001,424,464 | —- | C] () – C:WindowsSysNativecfgmig32.dll
[2013-08-20 14:26:42 | 000,265,296 | —- | C] () – C:WindowsSysWow64cfgmig32.exe
[2013-08-20 14:25:58 | 003,207,184 | —- | C] () – C:WindowsSysNativemdmcls32.exe
[2013-08-20 14:25:57 | 004,108,304 | —- | C] () – C:WindowsSysWow64win32cpr.dll
[2013-08-20 14:25:57 | 003,207,184 | —- | C] () – C:WindowsSysWow64mdmcls32.exe
[2013-08-20 14:25:57 | 002,760,720 | —- | C] () – C:WindowsSysWow64svcprs32.exe
[2013-08-20 14:25:57 | 002,524,176 | —- | C] () – C:WindowsSysNativewinsflt.dll
[2013-08-20 14:25:57 | 001,744,912 | —- | C] () – C:WindowsSysWow64winsflt.dll
[2013-08-20 14:25:57 | 000,289,296 | —- | C] () – C:WindowsSysNativewinsfinst.exe
[2013-08-20 14:25:57 | 000,098,320 | —- | C] () – C:WindowsSysWow64winsfinst.exe
[2013-08-20 14:20:34 | 000,000,000 | -H– | C] () – C:WindowsSysNativedriversMsft_User_WpdFs_01_11_00.Wdf
[2013-08-19 20:22:31 | 000,000,017 | —- | C] () – C:UsersShanneAppDataLocalresmon.resmoncfg
[2013-08-19 20:11:50 | 000,001,157 | —- | C] () – C:ProgramDataMicrosoftWindowsStart MenuProgramsMozilla Firefox.lnk
[2013-08-19 20:11:00 | 000,001,456 | —- | C] () – C:UsersShanneApplication DataMicrosoftInternet ExplorerQuick LaunchLaunch Internet Explorer Browser.lnk
[2013-08-19 20:07:25 | 000,001,462 | —- | C] () – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsInternet Explorer.lnk
[2013-08-19 20:06:45 | 000,000,074 | —- | C] () – C:UsersShanneAppDataRoamingsp_data.sys
[2013-08-19 20:03:58 | 000,002,163 | —- | C] () – C:UsersShanneAppDataRoamingMicrosoftWindowsStart MenuProgramsSkyDrive.lnk
[2013-08-19 20:03:58 | 000,000,352 | —- | C] () – C:UsersShanneApplication DataMicrosoftInternet ExplorerQuick LaunchShows Desktop.lnk
[2013-08-19 20:03:58 | 000,000,334 | —- | C] () – C:UsersShanneApplication DataMicrosoftInternet ExplorerQuick LaunchWindow Switcher.lnk
[2013-05-25 01:00:38 | 000,172,097 | —- | C] () – C:WindowsSysWow64NoMSGuninstall.exe
[2013-05-25 01:00:38 | 000,040,960 | —- | C] () – C:WindowsSysWow64UMonit64.exe
[2013-05-25 01:00:38 | 000,001,519 | —- | C] () – C:WindowsSysWow64_IconCfg0.ini
[2013-05-25 01:00:38 | 000,000,911 | —- | C] () – C:WindowsSysWow64ProductName.ini
[2013-05-25 01:00:38 | 000,000,213 | —- | C] () – C:WindowsSysWow64IconCfg0.ini
[2013-02-13 15:27:54 | 000,001,536 | —- | C] () – C:WindowsSysWow64IusEventLog.dll
[2012-11-27 14:26:00 | 000,024,576 | —- | C] () – C:ProgramDataSetStretch.exe
[2012-11-27 14:26:00 | 000,000,256 | —- | C] () – C:ProgramDataSetStretch.cmd
[2012-11-27 14:26:00 | 000,000,103 | —- | C] () – C:ProgramDataSetStretch.VBS
[2012-11-27 13:57:29 | 000,083,968 | —- | C] () – C:WindowsSysWow64OEMLicense.dll
[2012-07-26 04:13:10 | 000,215,943 | —- | C] () – C:WindowsSysWow64dssec.dat
[2012-07-26 04:13:09 | 000,000,741 | —- | C] () – C:WindowsSysWow64NOISE.DAT
[2012-07-26 03:21:26 | 000,067,584 | –S- | C] () – C:Windowsbootstat.dat
[2012-07-25 21:17:42 | 000,043,520 | —- | C] () – C:WindowsSysWow64BWContextHandler.dll
[2012-07-25 16:37:29 | 000,043,131 | —- | C] () – C:Windowsmib.bin
[2012-07-25 16:28:31 | 000,364,544 | —- | C] () – C:WindowsSysWow64msjetoledb40.dll
[2012-07-25 16:22:56 | 000,267,284 | —- | C] () – C:WindowsSysWow64igvpkrng600.bin
[2012-07-25 16:22:54 | 000,963,376 | —- | C] () – C:WindowsSysWow64igcodeckrng600.bin
[2012-06-02 10:31:19 | 000,673,088 | —- | C] () – C:WindowsSysWow64mlang.dat

========== ZeroAccess Check ==========


[HKEY_CURRENT_USERSoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32] /64

[HKEY_CURRENT_USERSoftwareClassesWow6432nodeclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]

[HKEY_CURRENT_USERSoftwareClassesclsid{fbeb8a05-beee-4442-804e-409d6c4515e9}InProcServer32] /64

[HKEY_CURRENT_USERSoftwareClassesWow6432nodeclsid{fbeb8a05-beee-4442-804e-409d6c4515e9}InProcServer32]

[HKEY_LOCAL_MACHINESoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32] /64
"" = C:WindowsSysNativeshell32.dll – [2013-03-06 02:31:28 | 019,758,592 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINESoftwareWow6432NodeClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]
"" = %SystemRoot%system32shell32.dll – [2013-03-06 01:03:37 | 017,561,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINESoftwareClassesclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F}InProcServer32] /64
"" = C:WindowsSysNativewbemfastprox.dll – [2012-07-25 23:05:38 | 001,004,544 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINESoftwareWow6432NodeClassesclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F}InProcServer32]
"" = %systemroot%system32wbemfastprox.dll – [2012-07-25 23:18:27 | 000,784,896 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINESoftwareClassesclsid{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}InProcServer32] /64
"" = C:WindowsSysNativewbemwbemess.dll – [2012-07-25 23:07:41 | 000,455,680 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINESoftwareWow6432NodeClassesclsid{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}InProcServer32]

========== LOP Check ==========

[2013-08-19 20:08:37 | 000,000,000 | —D | M] – C:UsersShanneAppDataRoamingASUS
[2013-08-19 20:08:40 | 000,000,000 | —D | M] – C:UsersShanneAppDataRoamingASUS WebStorage
[2013-09-07 00:40:04 | 000,000,000 | —D | M] – C:UsersShanneAppDataRoamingControlCenter4
[2013-09-06 23:58:17 | 000,000,000 | —D | M] – C:UsersShanneAppDataRoamingNuance
[2013-09-06 23:52:29 | 000,000,000 | —D | M] – C:UsersShanneAppDataRoamingPC-FAX TX

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%..|smtmp;true;true;true /FP >

< %temp%smtmp*.* /s > >

< MD5 for: EXPLORER.0.LOCALSETTINGUNIT >
[2013-09-07 13:44:25 | 000,000,359 | -HS- | M] () MD5=B08612E21E7511AEA948FA32DE2FBE32 – C:UsersShanneAppDataLocalMicrosoftWindowsLiveRoamingLocalCachewindows-explorerExplorer.0.localsettingunit

< MD5 for: EXPLORER.ADML >
[2012-07-26 03:49:05 | 000,003,671 | —- | M] () MD5=007B16AEF3E958080573CDB80648167D – C:WindowsWinSxSamd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.2.9200.16384_en-us_7bca26f6f419a854Explorer.adml
[2012-07-26 03:49:05 | 000,003,671 | —- | M] () MD5=007B16AEF3E958080573CDB80648167D – C:WindowsWinSxSamd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.2.9200.16433_en-us_7bff382ef3f2006fExplorer.adml
[2012-07-26 03:49:05 | 000,003,671 | —- | M] () MD5=007B16AEF3E958080573CDB80648167D – C:WindowsWinSxSamd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.2.9200.20534_en-us_7c89d5440d0eb990Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2012-06-02 10:32:35 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:WindowsWinSxSamd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.2.9200.16384_none_6e8451187a9a1607Explorer.admx
[2012-06-02 10:32:35 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:WindowsWinSxSamd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.2.9200.16420_none_6ec1315e7a6d062cExplorer.admx
[2012-06-02 10:32:35 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:WindowsWinSxSamd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.2.9200.16433_none_6eb962507a726e22Explorer.admx
[2012-06-02 10:32:35 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:WindowsWinSxSamd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.2.9200.20521_none_6f4bce739389bf4dExplorer.admx
[2012-06-02 10:32:35 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:WindowsWinSxSamd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.2.9200.20534_none_6f43ff65938f2743Explorer.admx

< MD5 for: EXPLORER.EXE >
[2012-10-11 01:53:24 | 002,115,952 | —- | M] (Microsoft Corporation) MD5=0AD19A3CA61271BA872AD90771BA47DC – C:WindowsWinSxSwow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_b592a71650d677edexplorer.exe
[2012-10-11 04:09:58 | 002,380,944 | —- | M] (Microsoft Corporation) MD5=0DDFEAA2AA18D4295EF220EB666B2312 – C:WindowsWinSxSamd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_ab3dfcc41c75b5f2explorer.exe
[2013-06-01 07:34:21 | 002,391,280 | —- | M] (Microsoft Corporation) MD5=0E8E6463F81C80AFBED533E0F1F8895D – C:Windowsexplorer.exe
[2013-06-01 07:34:21 | 002,391,280 | —- | M] (Microsoft Corporation) MD5=0E8E6463F81C80AFBED533E0F1F8895D – C:WindowsWinSxSamd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16628_none_aac334d9034c59e1explorer.exe
[2013-06-01 06:17:57 | 002,116,520 | —- | M] (Microsoft Corporation) MD5=15C505AD0118275E7363A539009EF3AF – C:WindowsWinSxSwow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20733_none_b591aa9850d758e4explorer.exe
[2012-07-25 23:50:01 | 002,114,936 | —- | M] (Microsoft Corporation) MD5=5B6ED1B57DBFF18D405A0260559B571E – C:WindowsWinSxSwow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_b4d2f8c937e166b1explorer.exe
[2012-07-26 00:49:13 | 002,380,440 | —- | M] (Microsoft Corporation) MD5=928791755FDDEA721B053535EF84FA17 – C:WindowsWinSxSamd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_aa7e4e770380a4b6explorer.exe
[2012-10-11 01:56:41 | 002,115,952 | —- | M] (Microsoft Corporation) MD5=953ADECFF08202A01EFC6110214FDE02 – C:WindowsWinSxSwow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_b5080a0137b9beccexplorer.exe
[2013-06-01 08:41:08 | 002,380,968 | —- | M] (Microsoft Corporation) MD5=D1FF6792A3B0FBD2F2F17DC936AF6177 – C:WindowsWinSxSamd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20733_none_ab3d00461c7696e9explorer.exe
[2012-10-11 03:35:16 | 002,380,944 | —- | M] (Microsoft Corporation) MD5=E13A31D5254C25406A7946BDD9B06364 – C:WindowsWinSxSamd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_aab35faf0358fcd1explorer.exe
[2013-06-01 06:24:46 | 002,106,176 | —- | M] (Microsoft Corporation) MD5=EAFE46B0292D2BD2467835E2ACF717CC – C:WindowsSysWOW64explorer.exe
[2013-06-01 06:24:46 | 002,106,176 | —- | M] (Microsoft Corporation) MD5=EAFE46B0292D2BD2467835E2ACF717CC – C:WindowsWinSxSwow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16628_none_b517df2b37ad1bdcexplorer.exe

< MD5 for: EXPLORER.EXE.CONFIG >
[2009-02-26 02:50:32 | 000,000,176 | —- | M] () MD5=E1FD9DE48AF5D7652AA31BBE914F54B8 – C:Windowsexplorer.exe.config

< MD5 for: EXPLORER.EXE.LOG >
[2013-09-07 00:03:47 | 000,001,284 | —- | M] () MD5=7E854ED708E5840E59A9200F8959698D – C:UsersShanneAppDataLocalMicrosoftCLR_v4.0UsageLogsExplorer.EXE.log

< MD5 for: EXPLORER.EXE.MUI >
[2012-07-26 03:48:57 | 000,020,480 | —- | M] (Microsoft Corporation) MD5=C25D32FEDB5AA6FF87B5A29D56D35FFA – C:Windowsen-USexplorer.exe.mui
[2012-07-26 03:48:57 | 000,020,480 | —- | M] (Microsoft Corporation) MD5=C25D32FEDB5AA6FF87B5A29D56D35FFA – C:WindowsSysWOW64en-USexplorer.exe.mui
[2012-07-26 03:48:57 | 000,020,480 | —- | M] (Microsoft Corporation) MD5=C25D32FEDB5AA6FF87B5A29D56D35FFA – C:WindowsWinSxSamd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.2.9200.16384_en-us_5ebc2e81fd6600ebexplorer.exe.mui
[2012-07-26 03:48:57 | 000,020,480 | —- | M] (Microsoft Corporation) MD5=C25D32FEDB5AA6FF87B5A29D56D35FFA – C:WindowsWinSxSwow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.2.9200.16384_en-us_6910d8d431c6c2e6explorer.exe.mui

< MD5 for: EXPLORER.EXE-5F7AEA8B.PF >
[2013-09-01 18:10:30 | 000,366,674 | —- | M] () MD5=B43274A60492E8EE48C2E18D29485F86 – C:WindowsPrefetchEXPLORER.EXE-5F7AEA8B.pf

< MD5 for: IEXPLORE.EXE >
[2012-10-11 02:34:54 | 000,770,544 | —- | M] (Microsoft Corporation) MD5=06E77B5F6BB60E11A377B68BA4AA1DA7 – C:WindowsWinSxSwow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.20534_none_2b74d7cd3a353a33iexplore.exe
[2012-10-11 03:33:47 | 000,775,168 | —- | M] (Microsoft Corporation) MD5=0A5074651C95792D32BCF536D64D0463 – C:WindowsWinSxSamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.20534_none_21202d7b05d47838iexplore.exe
[2012-07-25 23:36:56 | 000,770,504 | —- | M] (Microsoft Corporation) MD5=1249974F2A658D07E2647DD9C3592B9E – C:WindowsWinSxSwow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16384_none_425d1fb32079214fiexplore.exe
[2013-07-26 02:23:39 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=133CEF30905806A35606652D409EEEBA – C:Program FilesInternet Exploreriexplore.exe
[2013-07-26 02:23:39 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=133CEF30905806A35606652D409EEEBA – C:WindowsWinSxSamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16660_none_37e66028ec3219f5iexplore.exe
[2012-10-11 03:24:22 | 000,775,168 | —- | M] (Microsoft Corporation) MD5=13F97D5006C3E37D0A4AABC767C0E553 – C:WindowsWinSxSamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16433_none_37f8bacaec24e2f1iexplore.exe
[2012-07-26 00:58:31 | 000,775,112 | —- | M] (Microsoft Corporation) MD5=29CD24D8CA72FDB986B39277E70A48B6 – C:WindowsWinSxSamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16384_none_38087560ec185f54iexplore.exe
[2012-10-23 23:14:41 | 000,770,528 | —- | M] (Microsoft Corporation) MD5=39F90724C1A98648CCCDDF13631F2D4A – C:WindowsWinSxSwow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16442_none_424e7c2f2084a4a2iexplore.exe
[2012-10-23 23:20:45 | 000,770,528 | —- | M] (Microsoft Corporation) MD5=79FF6755B94FF918441D8F8162E5AC9C – C:WindowsWinSxSwow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.20544_none_2b75d8173a34538aiexplore.exe
[2013-07-25 23:49:06 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=7BA1862B8A5698DC5FCFDFF3BC359DE9 – C:Program Files (x86)Internet Exploreriexplore.exe
[2013-07-25 23:49:06 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=7BA1862B8A5698DC5FCFDFF3BC359DE9 – C:WindowsWinSxSwow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16660_none_423b0a7b2092dbf0iexplore.exe
[2013-07-26 01:47:06 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=8D805B4EEEE0ECF6B604BE284978F135 – C:WindowsWinSxSamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.20768_none_210d336105e262a3iexplore.exe
[2012-10-24 00:43:41 | 000,775,136 | —- | M] (Microsoft Corporation) MD5=8E1B68702CDB0DDC6597357766E941D9 – C:WindowsWinSxSamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16442_none_37f9d1dcec23e2a7iexplore.exe
[2013-04-04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:Program Files (x86)Malwarebytes' Anti-MalwareChameleoniexplore.exe
[2012-10-11 01:41:41 | 000,770,560 | —- | M] (Microsoft Corporation) MD5=BCF25D644DF1288CD9A6524FF7AB23C8 – C:WindowsWinSxSwow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.16433_none_424d651d2085a4eciexplore.exe
[2013-07-26 01:09:39 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=E70D60B3A350BD09D86CDAD9CF55F36B – C:WindowsWinSxSwow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.20768_none_2b61ddb33a43249eiexplore.exe
[2012-10-24 02:08:39 | 000,775,152 | —- | M] (Microsoft Corporation) MD5=F78F14096EB41341C4D880CEA6D681A2 – C:WindowsWinSxSamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.0.9200.20544_none_21212dc505d3918fiexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2012-07-26 03:49:06 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C724BBF739D40D8AA3023943F3450A7 – C:Program Files (x86)Internet Exploreren-USiexplore.exe.mui
[2012-07-26 03:49:06 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C724BBF739D40D8AA3023943F3450A7 – C:Program FilesInternet Exploreren-USiexplore.exe.mui
[2012-07-26 03:49:06 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C724BBF739D40D8AA3023943F3450A7 – C:WindowsWinSxSamd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.0.9200.16384_en-us_31b50ad823c5a03biexplore.exe.mui
[2012-07-26 03:49:06 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C724BBF739D40D8AA3023943F3450A7 – C:WindowsWinSxSwow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.0.9200.16384_en-us_3c09b52a58266236iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-6499D5EC.PF >
[2013-09-07 00:06:57 | 000,100,566 | —- | M] () MD5=52AF364EE8EEC6CDD09F99044D9E0F2F – C:WindowsPrefetchIEXPLORE.EXE-6499D5EC.pf

< MD5 for: IEXPLORE.EXE-9E8A2849.PF >
[2013-09-07 00:07:22 | 000,298,440 | —- | M] () MD5=AB31F4F4BBD27C185A065029FD068389 – C:WindowsPrefetchIEXPLORE.EXE-9E8A2849.pf

< MD5 for: SERVICES >
[2012-07-26 01:26:47 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:WindowsWinSxSamd64_microsoft-windows-w..ucture-other-minwin_31bf3856ad364e35_6.2.9200.16384_none_8e0944daeed62829services

< MD5 for: SERVICES.CFG >
[2012-09-23 20:43:36 | 000,603,848 | R— | M] () MD5=81B120EAEE296F0E54F66C16C5A21367 – C:WindowsInstaller$PatchCache$Managed68AB67CA7DA73301B744BA000000001011.0.0services.cfg
[2013-05-11 06:37:26 | 000,558,990 | —- | M] () MD5=FE8FB005031C2574E990DAC1F9F5ACF8 – C:Program Files (x86)AdobeReader 11.0ReaderServicesServices.cfg

< MD5 for: SERVICES.EXE >
[2012-11-27 13:57:26 | 000,410,624 | —- | M] (Microsoft Corporation) MD5=581190907DA1CF8CB7B87B35FFE64A07 – C:WindowsWinSxSamd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.20521_none_98a9ea2e9f571eb2services.exe
[2012-07-26 01:26:45 | 000,410,624 | —- | M] (Microsoft Corporation) MD5=754A2CC1F32107EA87CBD305ABE3E618 – C:WindowsWinSxSamd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.16384_none_97e26cd38667756cservices.exe
[2012-11-27 13:57:26 | 000,410,624 | —- | M] (Microsoft Corporation) MD5=8F226143046435C75C033B0C52E90FFE – C:WindowsSysNativeservices.exe
[2012-11-27 13:57:26 | 000,410,624 | —- | M] (Microsoft Corporation) MD5=8F226143046435C75C033B0C52E90FFE – C:WindowsWinSxSamd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.2.9200.16420_none_981f4d19863a6591services.exe

< MD5 for: SERVICES.EXE.MUI >
[2012-07-26 03:48:33 | 000,018,944 | —- | M] (Microsoft Corporation) MD5=8BCB19134E995FA62587DCE26E13B36C – C:WindowsSysNativeen-USservices.exe.mui
[2012-07-26 03:48:33 | 000,018,944 | —- | M] (Microsoft Corporation) MD5=8BCB19134E995FA62587DCE26E13B36C – C:WindowsWinSxSamd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.2.9200.16384_en-us_c2c6ee7bafb963b8services.exe.mui

< MD5 for: SERVICES.JS >
[2013-09-02 09:19:46 | 000,052,388 | —- | M] () MD5=170AC4B9F3DC60E0D38D7CC307CEFD12 – C:Program FilesWindowsAppsMicrosoft.BingFinance_2.0.0.308_x64__8wekyb3d8bbwecommonjss
ervices.js
[2013-08-20 18:25:34 | 000,052,388 | —- | M] () MD5=170AC4B9F3DC60E0D38D7CC307CEFD12 – C:Program FilesWindowsAppsMicrosoft.BingNews_2.0.0.273_x64__8wekyb3d8bbwecommonjsserv
ices.js
[2013-08-20 18:25:34 | 000,052,388 | —- | M] () MD5=170AC4B9F3DC60E0D38D7CC307CEFD12 – C:Program FilesWindowsAppsMicrosoft.BingNews_2.0.0.308_x64__8wekyb3d8bbwecommonjsserv
ices.js
[2013-09-01 23:18:43 | 000,052,388 | —- | M] () MD5=170AC4B9F3DC60E0D38D7CC307CEFD12 – C:Program FilesWindowsAppsMicrosoft.BingSports_2.0.0.309_x64__8wekyb3d8bbwecommonjsse
rvices.js
[2013-09-01 23:17:17 | 000,052,388 | —- | M] () MD5=170AC4B9F3DC60E0D38D7CC307CEFD12 – C:Program FilesWindowsAppsMicrosoft.BingTravel_2.0.0.308_x64__8wekyb3d8bbwecommonjsse
rvices.js
[2013-09-02 09:20:32 | 000,052,388 | —- | M] () MD5=170AC4B9F3DC60E0D38D7CC307CEFD12 – C:Program FilesWindowsAppsMicrosoft.BingWeather_2.0.0.310_x64__8wekyb3d8bbwecommonjss
ervices.js
[2012-07-26 03:54:02 | 000,056,775 | —- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 – C:Program FilesWindowsAppsMicrosoft.BingFinance_1.2.0.135_x64__8wekyb3d8bbweplatformjs
services.js
[2012-07-26 03:53:53 | 000,056,775 | —- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 – C:Program FilesWindowsAppsMicrosoft.BingNews_1.2.0.135_x64__8wekyb3d8bbweplatformjsse
rvices.js
[2012-07-26 03:53:50 | 000,056,775 | —- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 – C:Program FilesWindowsAppsMicrosoft.BingSports_1.2.0.135_x64__8wekyb3d8bbweplatformjs
services.js
[2012-07-26 03:54:33 | 000,056,775 | —- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 – C:Program FilesWindowsAppsMicrosoft.BingTravel_1.2.0.145_x64__8wekyb3d8bbweplatformjs
services.js
[2012-07-26 03:53:57 | 000,056,775 | —- | M] () MD5=33C1E65B760A9589F6DE37F64941E449 – C:Program FilesWindowsAppsMicrosoft.BingWeather_1.2.0.135_x64__8wekyb3d8bbweplatformjs
services.js

< MD5 for: SERVICES.LNK >
[2012-07-25 16:19:37 | 000,001,158 | —- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 – C:ProgramDataMicrosoftWindowsStart MenuProgramsAdministrative Toolsservices.lnk
[2012-07-25 16:19:37 | 000,001,158 | —- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 – C:UsersAll UsersMicrosoftWindowsStart MenuProgramsAdministrative Toolsservices.lnk
[2012-07-25 16:19:37 | 000,001,158 | —- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 – C:WindowsWinSxSamd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_282d8a08cf7f1adaservices.ln
k

< MD5 for: SERVICES.MOF >
[2012-06-02 10:35:05 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:WindowsSysNativewbemservices.mof
[2012-06-02 10:35:05 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:WindowsWinSxSamd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.2.9200.16384_none_282967cc570d3701services
.mof

< MD5 for: SERVICES.MSC >
[2012-07-26 03:48:57 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsSysNativeen-USservices.msc
[2012-06-02 10:31:20 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsSysNativeservices.msc
[2012-07-26 03:48:57 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsSysWOW64en-USservices.msc
[2012-06-02 10:31:13 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsSysWOW64services.msc
[2012-07-26 03:48:57 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsWinSxSamd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.2.9200.16384_en-us_fd08be678622fdabservices.msc
[2012-06-02 10:31:20 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsWinSxSamd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_282d8a08cf7f1adaservices.ms
c
[2012-06-02 10:31:13 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsWinSxSwow64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.2.9200.16384_none_3282345b03dfdcd5services.ms
c
[2012-07-26 03:48:57 | 000,092,746 | —- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 – C:WindowsWinSxSx86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.2.9200.16384_en-us_a0ea22e3cdc58c75services.msc

< MD5 for: SERVICES.PTXML >
[2012-07-25 16:30:54 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:WindowsSysNativewdiperftrackServices.ptxml
[2012-07-25 16:30:54 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:WindowsWinSxSamd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.2.9200.16384_none_282967cc570d3701Services
.ptxml

< MD5 for: WINLOGON.ADML >
[2012-07-26 03:49:05 | 000,008,017 | —- | M] () MD5=C270056255498A723E7331EFF1AA162F – C:WindowsWinSxSamd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.2.9200.16384_en-us_edcdb8ec66a62fc0WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2012-06-02 10:34:22 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:WindowsWinSxSamd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.2.9200.16384_none_d3d704270306719dWinLogon.admx

< MD5 for: WINLOGON.EXE >
[2012-11-27 13:57:26 | 000,516,608 | —- | M] (Microsoft Corporation) MD5=1F84B5F8DBDFFD36DF143C61CE25F12A – C:WindowsWinSxSamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211winlogon.exe
[2012-11-27 13:57:26 | 000,516,608 | —- | M] (Microsoft Corporation) MD5=6522E98C94A2A81AE11EB66D2AF5743A – C:WindowsWinSxSamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32winlogon.exe
[2012-07-25 23:08:50 | 000,516,608 | —- | M] (Microsoft Corporation) MD5=93AB226C07A9789B2EC7B41F73602F76 – C:WindowsWinSxSamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ecwinlogon.exe
[2013-04-04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:Program Files (x86)Malwarebytes' Anti-MalwareChameleonwinlogon.exe
[2012-10-11 01:46:58 | 000,517,120 | —- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E – C:WindowsSysNativewinlogon.exe
[2012-10-11 01:46:58 | 000,517,120 | —- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E – C:WindowsWinSxSamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07winlogon.exe
[2012-10-11 01:45:27 | 000,517,120 | —- | M] (Microsoft Corporation) MD5=CBFD56B4EC07CB056A6ABD55DD33671F – C:WindowsWinSxSamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2012-07-26 03:48:51 | 000,024,064 | —- | M] (Microsoft Corporation) MD5=B9094B7088CD579E5AED57A693F9BFBD – C:WindowsSysNativeen-USwinlogon.exe.mui
[2012-07-26 03:48:51 | 000,024,064 | —- | M] (Microsoft Corporation) MD5=B9094B7088CD579E5AED57A693F9BFBD – C:WindowsWinSxSamd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.2.9200.16384_en-us_23c238ef8ddaa831winlogon.exe.mui

< MD5 for: WINLOGON.EXE-6B149215.PF >
[2013-09-07 01:40:50 | 000,026,902 | —- | M] () MD5=A42359B14CA42571CD7DEEE933C22BB0 – C:WindowsPrefetchWINLOGON.EXE-6B149215.pf

< MD5 for: WINLOGON.MFL >
[2012-07-26 03:48:52 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:WindowsSysNativewbemen-USwinlogon.mfl
[2012-07-26 03:48:52 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:WindowsWinSxSamd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.2.9200.16384_en-us_81848abaa91301c6winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2012-07-25 16:30:16 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:WindowsSysNativewbemwinlogon.mof
[2012-07-25 16:30:16 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:WindowsWinSxSamd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.2.9200.16384_none_d9027134ffac135fwinlogon.mof

< %SYSTEMDRIVE%*.* >
[2012-07-25 23:44:30 | 000,398,156 | RHS- | M] () – C:bootmgr
[2012-06-02 10:30:55 | 000,000,001 | -HS- | M] () – C:BOOTNXT
[2013-09-07 00:38:41 | 1648,771,070 | -HS- | M] () – C:hiberfil.sys
[2013-09-07 00:38:46 | 1811,939,328 | -HS- | M] () – C:pagefile.sys
[2013-09-07 00:38:46 | 268,435,456 | -HS- | M] () – C:swapfile.sys

< %systemroot%Fonts*.com >
[2012-08-01 21:39:43 | 000,026,040 | —- | M] () – C:WindowsFontsGlobalMonospace.CompositeFont
[2012-08-01 21:39:43 | 000,026,489 | —- | M] () – C:WindowsFontsGlobalSansSerif.CompositeFont
[2012-08-01 21:39:43 | 000,029,779 | —- | M] () – C:WindowsFontsGlobalSerif.CompositeFont
[2012-08-01 21:39:43 | 000,043,318 | —- | M] () – C:WindowsFontsGlobalUserInterface.CompositeFont

< %systemroot%Fonts*.dll >

< %systemroot%Fonts*.ini >
[2012-07-26 04:11:41 | 000,000,065 | —- | M] () – C:WindowsFontsdesktop.ini

< %systemroot%Fonts*.ini2 >

< %systemroot%Fonts*.exe >

< %systemroot%system32spoolprtprocsw32x86*.* >

< %systemroot%REPAIR*.bak1 >

< %systemroot%REPAIR*.ini >

< %systemroot%system32*.jpg >

< %systemroot%*.jpg >

< %systemroot%*.png >

< %systemroot%*.scr >
[2012-09-12 19:57:44 | 000,322,048 | —- | M] (Microsoft Corporation) – C:WindowsWLXPGSS.SCR

< %systemroot%*._sy >

< %APPDATA%AdobeUpdate*.* >

< %ALLUSERSPROFILE%Favorites*.* >

< %APPDATA%Microsoft*.* >

< %PROGRAMFILES%*.* >
[2012-07-26 04:11:35 | 000,000,174 | -HS- | M] () – C:Program Files (x86)desktop.ini

< %APPDATA%Update*.* >

< %systemroot%*. /mp /s >

< dir "%systemdrive%*" /S /A:L /C >
Volume in drive C is OS
Volume Serial Number is EC87-0D61
Directory of C:
2012-07-26 03:22 AM Documents and Settings [C:Users]
0 File(s) 0 bytes
Directory of C:ProgramData
2012-07-26 03:22 AM Application Data [C:ProgramData]
2012-07-26 03:22 AM Desktop [C:UsersPublicDesktop]
2012-07-26 03:22 AM Documents [C:UsersPublicDocuments]
2012-07-26 03:22 AM Start Menu [C:ProgramDataMicrosoftWindowsStart Menu]
2012-07-26 03:22 AM Templates [C:ProgramDataMicrosoftWindowsTemplates]
0 File(s) 0 bytes
Directory of C:Users
2012-07-26 03:22 AM All Users [C:ProgramData]
2012-07-26 03:22 AM Default User [C:UsersDefault]
0 File(s) 0 bytes
Directory of C:UsersAll Users
2012-07-26 03:22 AM Application Data [C:ProgramData]
2012-07-26 03:22 AM Desktop [C:UsersPublicDesktop]
2012-07-26 03:22 AM Documents [C:UsersPublicDocuments]
2012-07-26 03:22 AM Start Menu [C:ProgramDataMicrosoftWindowsStart Menu]
2012-07-26 03:22 AM Templates [C:ProgramDataMicrosoftWindowsTemplates]
0 File(s) 0 bytes
Directory of C:UsersDefault
2012-07-26 03:22 AM Application Data [C:UsersDefaultAppDataRoaming]
2012-07-26 03:22 AM Cookies [C:UsersDefaultAppDataRoamingMicrosoftWindowsCookies]
2012-07-26 03:22 AM Local Settings [C:UsersDefaultAppDataLocal]
2012-07-26 03:22 AM My Documents [C:UsersDefaultDocuments]
2012-07-26 03:22 AM NetHood [C:UsersDefaultAppDataRoamingMicrosoftWindowsNetwork Shortcuts]
2012-07-26 03:22 AM PrintHood [C:UsersDefaultAppDataRoamingMicrosoftWindowsPrinter Shortcuts]
2012-07-26 03:22 AM Recent [C:UsersDefaultAppDataRoamingMicrosoftWindowsRecent]
2012-07-26 03:22 AM SendTo [C:UsersDefaultAppDataRoamingMicrosoftWindowsSendTo]
2012-07-26 03:22 AM Start Menu [C:UsersDefaultAppDataRoamingMicrosoftWindowsStart Menu]
2012-07-26 03:22 AM Templates [C:UsersDefaultAppDataRoamingMicrosoftWindowsTemplates]
0 File(s) 0 bytes
Directory of C:UsersDefaultAppDataLocal
2012-07-26 03:22 AM Application Data [C:UsersDefaultAppDataLocal]
2012-07-26 03:22 AM History [C:UsersDefaultAppDataLocalMicrosoftWindowsHistory]
2012-07-26 03:22 AM Temporary Internet Files [C:UsersDefaultAppDataLocalMicrosoftWindowsTemporary Internet Files]
0 File(s) 0 bytes
Directory of C:UsersDefaultDocuments
2012-07-26 03:22 AM My Music [C:UsersDefaultMusic]
2012-07-26 03:22 AM My Pictures [C:UsersDefaultPictures]
2012-07-26 03:22 AM My Videos [C:UsersDefaultVideos]
0 File(s) 0 bytes
Directory of C:UsersPublicDocuments
2012-07-26 03:22 AM My Music [C:UsersPublicMusic]
2012-07-26 03:22 AM My Pictures [C:UsersPublicPictures]
2012-07-26 03:22 AM My Videos [C:UsersPublicVideos]
0 File(s) 0 bytes
Directory of C:UsersShanne
2013-08-19 08:03 PM Application Data [C:UsersShanneAppDataRoaming]
2013-08-19 08:03 PM Cookies [C:UsersShanneAppDataRoamingMicrosoftWindowsCookies]
2013-08-19 08:03 PM Local Settings [C:UsersShanneAppDataLocal]
2013-08-19 08:03 PM My Documents [C:UsersShanneDocuments]
2013-08-19 08:03 PM NetHood [C:UsersShanneAppDataRoamingMicrosoftWindowsNetwork Shortcuts]
2013-08-19 08:03 PM PrintHood [C:UsersShanneAppDataRoamingMicrosoftWindowsPrinter Shortcuts]
2013-08-19 08:03 PM Recent [C:UsersShanneAppDataRoamingMicrosoftWindowsRecent]
2013-08-19 08:03 PM SendTo [C:UsersShanneAppDataRoamingMicrosoftWindowsSendTo]
2013-08-19 08:03 PM Start Menu [C:UsersShanneAppDataRoamingMicrosoftWindowsStart Menu]
2013-08-19 08:03 PM Templates [C:UsersShanneAppDataRoamingMicrosoftWindowsTemplates]
0 File(s) 0 bytes
Directory of C:UsersShanneAppDataLocal
2013-08-19 08:03 PM Application Data [C:UsersShanneAppDataLocal]
2013-08-19 08:03 PM History [C:UsersShanneAppDataLocalMicrosoftWindowsHistory]
2013-08-19 08:03 PM Temporary Internet Files [C:UsersShanneAppDataLocalMicrosoftWindowsTemporary Internet Files]
0 File(s) 0 bytes
Directory of C:UsersShanneDocuments
2013-08-19 08:03 PM My Music [C:UsersShanneMusic]
2013-08-19 08:03 PM My Pictures [C:UsersShannePictures]
2013-08-19 08:03 PM My Videos [C:UsersShanneVideos]
0 File(s) 0 bytes
Directory of C:UsersUpdatusUser
2013-05-25 12:54 AM Application Data [C:UsersUpdatusUserAppDataRoaming]
2013-05-25 12:54 AM Cookies [C:UsersUpdatusUserAppDataRoamingMicrosoftWindowsCookies]
2013-05-25 12:54 AM Local Settings [C:UsersUpdatusUserAppDataLocal]
2013-05-25 12:54 AM My Documents [C:UsersUpdatusUserDocuments]
2013-05-25 12:54 AM NetHood [C:UsersUpdatusUserAppDataRoamingMicrosoftWindowsNetwork Shortcuts]
2013-05-25 12:54 AM PrintHood [C:UsersUpdatusUserAppDataRoamingMicrosoftWindowsPrinter Shortcuts]
2013-05-25 12:54 AM Recent [C:UsersUpdatusUserAppDataRoamingMicrosoftWindowsRecent]
2013-05-25 12:54 AM SendTo [C:UsersUpdatusUserAppDataRoamingMicrosoftWindowsSendTo]
2013-05-25 12:54 AM Start Menu [C:UsersUpdatusUserAppDataRoamingMicrosoftWindowsStart Menu]
2013-05-25 12:54 AM Templates [C:UsersUpdatusUserAppDataRoamingMicrosoftWindowsTemplates]
0 File(s) 0 bytes
Directory of C:UsersUpdatusUserAppDataLocal
2013-05-25 12:54 AM Application Data [C:UsersUpdatusUserAppDataLocal]
2013-05-25 12:54 AM History [C:UsersUpdatusUserAppDataLocalMicrosoftWindowsHistory]
2013-05-25 12:54 AM Temporary Internet Files [C:UsersUpdatusUserAppDataLocalMicrosoftWindowsTemporary Internet Files]
0 File(s) 0 bytes
Directory of C:UsersUpdatusUserDocuments
2013-05-25 12:54 AM My Music [C:UsersUpdatusUserMusic]
2013-05-25 12:54 AM My Pictures [C:UsersUpdatusUserPictures]
2013-05-25 12:54 AM My Videos [C:UsersUpdatusUserVideos]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
64 Dir(s) 244,582,916,096 bytes free

< %systemroot%System32config*.sav >

< %PROGRAMFILES%bak. /s >

< %systemroot%system32bak. /s >

< %ALLUSERSPROFILE%Start Menu*.lnk /x >

< %systemroot%system32configsystemprofile*.dat /x >

< %systemroot%*.config >
[2009-02-26 02:50:32 | 000,000,176 | —- | M] () – C:Windowsexplorer.exe.config

< %systemroot%system32*.db >

< %PROGRAMFILES%Internet Explorer*.dat >

< %APPDATA%MicrosoftInternet ExplorerQuick Launch*.lnk /x >
[2013-08-19 20:11:00 | 000,000,223 | -HS- | M] () – C:UsersShanneAppDataRoamingMicrosoftInternet ExplorerQuick Launchdesktop.ini

< %USERPROFILE%Desktop*.exe >

< %PROGRAMFILES%Common Files*.* >

< %systemroot%*.src >

< %systemroot%install*.* >

< %systemroot%system32DLL*.* >

< %systemroot%system32HelpFiles*.* >

< %systemroot%system32rundll*.* >

< %systemroot%winn32*.* >

< %systemroot%Java*.* >

< %systemroot%system32test*.* >

< %systemroot%system32Rundll32*.* >

< %systemroot%AppPatchCustom*.* >

< HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU >

< HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstall|LastSuccessTime /rs >

< End of report >

Extras.txt:
OTL Extras logfile created on: 2013-09-07 1:45:47 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:UsersShanneDownloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16660)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: yyyy-MM-dd

11.92 Gb Total Physical Memory | 10.06 Gb Available Physical Memory | 84.36% Memory free
13.61 Gb Paging File | 11.66 Gb Available in Paging File | 85.67% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 279.45 Gb Total Space | 227.97 Gb Free Space | 81.58% Space Free | Partition Type: NTFS
Drive D: | 349.32 Gb Total Space | 349.18 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive E: | 349.32 Gb Total Space | 349.18 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive F: | 397.87 Gb Total Space | 397.73 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive H: | 931.48 Gb Total Space | 834.80 Gb Free Space | 89.62% Space Free | Partition Type: NTFS

Computer Name: ARCHITECTURE | User Name: Shanne | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREClasses]
.html[@ = htmlfile] – C:Program FilesInternet Exploreriexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] – C:WindowsSysNativerundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINESOFTWAREClasses]
.cpl [@ = cplfile] – C:WindowsSysWow64control.exe (Microsoft Corporation)
.html [@ = htmlfile] – C:Program FilesInternet Exploreriexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USERSOFTWAREClasses]
.html [@ = FirefoxHTML] – C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] – "%systemroot%system32rundll32.exe" "%systemroot%system32mshtml.dll",PrintHTML "%1"
http [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
https [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –playlist-enqueue "%1" (VideoLAN)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –no-playlist-enqueue "%1" (VideoLAN)
Folder [open] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Applicationsiexplore.exe [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
CLSID{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "C:Program FilesInternet Exploreriexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%System32control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] – "%systemroot%system32rundll32.exe" "%systemroot%system32mshtml.dll",PrintHTML "%1"
http [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
https [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –playlist-enqueue "%1" (VideoLAN)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –no-playlist-enqueue "%1" (VideoLAN)
Folder [open] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Applicationsiexplore.exe [open] – "C:Program FilesInternet Exploreriexplore.exe" %1 (Microsoft Corporation)
CLSID{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringCA Personal Firewall]

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvcVol]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyPublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyFirewallRules]
"{0224F9BD-4426-445E-9AE7-8790BD42147C}" = lport=139 | protocol=6 | dir=in | app=system |
"{06C54497-2A30-4CD3-9C7C-D57ED90504B4}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%system32spoolsv.exe |
"{0D48DA7A-578F-42AC-8EB6-81304662CCBA}" = lport=445 | protocol=6 | dir=in | app=system |
"{11D85019-4F17-4722-A55C-A6A7600131F0}" = rport=445 | protocol=6 | dir=out | app=system |
"{1BB07AC4-76DB-4BC2-BFFC-2C8F8453291B}" = lport=137 | protocol=17 | dir=in | app=system |
"{2E1BB6E7-9727-444A-829C-C6ED0E1C2B05}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{3F0F0D81-165A-45A3-8BF7-30964C4663D7}" = rport=137 | protocol=17 | dir=out | app=system |
"{5C390241-E976-49A0-9384-7B473F435B00}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%system32svchost.exe |
"{5DDBD3DC-30FC-4F99-9EC2-BA4F189902E3}" = rport=10243 | protocol=6 | dir=out | app=system |
"{868C3BFC-5640-4A3F-B7B8-CE36D93AC415}" = lport=138 | protocol=17 | dir=in | app=system |
"{89A8808F-8A4A-4CD6-8FFD-B8643FC13ABF}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{963C85A6-046F-40AB-92E5-424F10D98037}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{99A8A3E7-639F-4064-AB05-E0EC272DB360}" = rport=139 | protocol=6 | dir=out | app=system |
"{AD954E0A-5118-43B7-8A47-62744BE864EC}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B355007A-A2E4-4F92-8376-B49282ED9A46}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%system32svchost.exe |
"{C574429F-7D72-435D-892B-BA44F1A3646A}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner |
"{C899E167-4702-4895-951C-68CDA79EF509}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%system32svchost.exe |
"{C9034E39-8690-44DF-8F9E-FF0E1BEC431C}" = lport=6004 | protocol=17 | dir=in | app=c:program filesmicrosoft office 15rootoffice15outlook.exe |
"{C9CE292D-DC94-40ED-9AC9-79D499AD6B02}" = lport=10243 | protocol=6 | dir=in | app=system |
"{D7614C88-CFE9-4DE0-AC37-801071D85CB4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{D966A639-4840-442F-BA62-E9878961643E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%system32svchost.exe |
"{E643066D-7AEC-47F9-8C4A-A35DE30D2ABF}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%system32svchost.exe |
"{E9C545E9-A864-43EE-88B6-10E7892C9C81}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%system32svchost.exe |
"{EA45B2FC-EECF-42D8-B91D-353B51B08C90}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%system32svchost.exe |
"{EE2E430B-B104-4888-A349-43F7C6E7E746}" = rport=138 | protocol=17 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyFirewallRules]
"{07451603-4498-4EC0-8486-18F915A8ED52}" = dir=out | name=@{microsoft.bingmaps_1.2.0.136_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{0C79B340-58E5-4BCD-A90D-2547B4F0264B}" = dir=out | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{0EC2093F-6A64-4EC4-8C73-1F5EDCD674A3}" = protocol=6 | dir=out | app=system |
"{17F252B8-BB9D-4EDD-A61F-BC980D7004ED}" = dir=out | name=adera |
"{1E2B0167-C004-409D-8E55-72C2409D12B1}" = protocol=17 | dir=in | app=c:program filescommon filesmcafeemcsvchostmcsvhost.exe |
"{22D38AA5-84CB-4787-AFF0-4D736153DEDB}" = protocol=17 | dir=in | app=%programfiles%windows media playerwmplayer.exe |
"{233782FA-ADA4-406E-A306-EFF0732D4492}" = protocol=6 | dir=in | app=c:program filesbonjourmdnsresponder.exe |
"{2B090D2A-0636-4A6C-A168-0C6A6D974FDA}" = dir=in | name=@{microsoft.skypeapp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{32F288D6-E77F-43DB-A4FD-8D700D2D53DA}" = protocol=17 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{368CB127-B439-45EF-B75A-E73121DADC5F}" = dir=out | name=@{microsoft.xboxlivegames_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{36E1962F-6C53-43DD-AD02-FE2A4A55ECBA}" = dir=out | name=microsoft solitaire collection |
"{381E8562-61F2-430C-9154-FB9EA4AC6E37}" = protocol=6 | dir=in | app=c:program filescommon filesmcafeemcsvchostmcsvhost.exe |
"{3A027BAB-0CF8-49CD-B5B9-09674BD33B1F}" = protocol=6 | dir=out | app=%programfiles(x86)%windows media playerwmplayer.exe |
"{4203AAD1-004C-4F7D-AB57-6370C73DD2E3}" = dir=out | name=@{microsoft.zunemusic_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/33273} |
"{45A66AE2-F9D6-4DAE-823C-2DDC2FFC3078}" = protocol=17 | dir=in | app=c:program filesbonjourmdnsresponder.exe |
"{4F2AED09-342A-4A43-B832-73083E332616}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} |
"{4F7F6E0B-C770-4E81-82D4-4EF1ACD0A9A2}" = dir=out | name=@{microsoft.bingweather_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |
"{51280D79-F3DF-4646-B5CC-4CF5F815215C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{5175F7FF-87D7-417B-B786-98FB4CDA439C}" = protocol=6 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{52FCEE98-B7C3-41C1-B997-6B068594CA23}" = protocol=17 | dir=out | app=%programfiles%windows media playerwmpnetwk.exe |
"{53CDB8FF-23C2-4A36-8037-58602CAF3450}" = dir=out | name=@{microsoft.bingtravel_1.2.0.145_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |
"{591C4DE5-8856-4F11-BD58-7BE6777BA794}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{59335FE8-BD46-4196-AB08-856D2F61027A}" = protocol=17 | dir=in | app=%programfiles%windows media playerwmpnetwk.exe |
"{5BCB0D67-7042-4625-AC6E-CBC194C1B0C8}" = dir=out | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{61151A0F-D60F-43E6-9B42-E01161FAFF65}" = dir=out | name=taptiles |
"{63FDB226-324C-4E41-82DB-DDAEBF03D727}" = protocol=6 | dir=in | app=c:program files (x86)bonjourmdnsresponder.exe |
"{64A44A98-F3D7-409C-85AC-DE20A0E5DB65}" = dir=in | name=@{microsoft.windowsphotos_16.4.4204.712_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} |
"{6887482C-D459-4F1F-AF6D-E796E4B24901}" = protocol=6 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{6DAFCD72-60D6-4516-B593-2E7DCA97B263}" = dir=out | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
"{713E4D8B-5B71-4CD1-8AC1-7562595384A0}" = protocol=6 | dir=in | app=%programfiles%windows media playerwmpnetwk.exe |
"{73D1D2C7-5CDA-4E1E-A79D-61C87543EF34}" = protocol=17 | dir=out | app=%programfiles%windows media playerwmplayer.exe |
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:windowswinstoreresources.pri?ms-resource://winstore/resources/displayname} |
"{880FC844-005D-475F-9311-873646AF9350}" = dir=in | app=c:program files (x86)cyberlinkpowerdvd10powerdvd cinemapowerdvdcinema10.exe |
"{882DB798-5AFA-43E5-ACAF-82C4FF624EC3}" = dir=out | name=@{microsoft.zunevideo_1.0.927.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/33270} |
"{8AC8D997-720F-48F7-91B1-7AD47E273322}" = dir=in | app=c:program files (x86)itunesitunes.exe |
"{8BA07C8B-7F5E-4374-B168-F38B8CA0898C}" = dir=out | name=pinball fx2 |
"{8E111FFA-7403-41C1-8090-B3DCD1869FE8}" = dir=out | name=windows_ie_ac_001 |
"{9376DAD8-CFB1-418E-B2A3-0A0B7509D7F7}" = dir=out | name=@{microsoft.bingnews_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} |
"{945495FA-2865-4D50-9432-FA95573D99CC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%system32svchost.exe |
"{96080335-451C-4902-974E-18026FE61C90}" = dir=in | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{B2A8384C-0E25-4448-AB16-FDED1D2647B0}" = protocol=6 | dir=out | app=%programfiles%windows media playerwmpnetwk.exe |
"{B71B7D74-DC0E-4F1E-A45B-4C2DEF41E098}" = dir=out | name=fresh paint |
"{B817702A-CB1E-4ABB-8461-53568BAEC851}" = dir=in | app=c:program files (x86)windows livecontactswlcomm.exe |
"{C06D8DE8-ED87-4444-8604-1AE84C6FD708}" = protocol=17 | dir=in | app=c:program files (x86)bonjourmdnsresponder.exe |
"{C22FB991-ED6A-4457-9276-60E5113F6F19}" = protocol=17 | dir=in | app=c:program files (x86)brotherbrmfl10gfaxrx.exe |
"{C47CFBBB-42EB-494B-BF2C-2A911FE24F44}" = protocol=17 | dir=out | app=%programfiles(x86)%windows media playerwmplayer.exe |
"{C4C4C82C-CEA3-4703-AD8D-BAC30BA20416}" = dir=in | name=@{microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{C56FAA1E-91B8-4CEB-AE76-6DC3633E758A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{C8A658B2-25C7-47D8-A4F6-43972C451E1B}" = dir=in | name=@{microsoft.bing_1.2.0.137_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} |
"{D5526CAF-F6AB-4B3C-AD14-0C22E45B804D}" = protocol=6 | dir=in | app=c:program files (x86)brotherbrmfl10gfaxrx.exe |
"{D84E8E35-55F4-436E-9238-3DCBFA7F8E69}" = dir=out | name=@{microsoft.bingfinance_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} |
"{DB8C844B-8A9F-4CA7-BEBB-867844081AF1}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E1811BF9-CAED-4CF5-9360-011DBF36D258}" = dir=in | app=c:program files (x86)common filesappleapple application supportwebkit2webprocess.exe |
"{E2B84C06-FF15-448F-82A7-3B8E13E8DA81}" = protocol=17 | dir=in | app=%programfiles%windows media playerwmplayer.exe |
"{E37E6C0C-63FB-426E-B392-B11EB11C36A2}" = dir=out | name=@{microsoft.bingsports_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} |
"{E4F6607D-FF77-499C-9CDD-7EF575EAA035}" = dir=out | name=@{microsoft.skypeapp_1.0.0.266_x86__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/manifest_display_name} |
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:windowswinstoreresources.pri?ms-resource://winstore/resources/displayname} |
"{E8F6CC40-57A5-46B0-8243-914630DB1152}" = dir=in | app=c:program files (x86)cyberlinkpowerdvd10powerdvd10.exe |
"{ED161A30-AAC5-4B08-949B-62E5B0DDE8A5}" = dir=in | name=pinball fx2 |
"{EE6350A1-F5D6-4AB9-A608-E46A7970936E}" = dir=out | name=@{microsoft.reader_6.2.8516.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} |
"{FE695A1B-5618-4B57-B590-4172A9C08875}" = protocol=17 | dir=in | app=%programfiles(x86)%windows media playerwmplayer.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}" = ASUS Screen Saver
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86417025FF}" = Java 7 Update 25 (64-bit)
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{38151262-FAF8-4778-9AAB-33E90B60D8E9}" = Anti-Virus
"{427174C0-096E-40D9-9684-9C109BEE2CBF}" = iTunes
"{44B72151-611E-429D-9765-9BA093D7E48A}" = Intel® Trusted Connect Service Client
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}" = PaperPort Image Printer 64-bit
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 311.41
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 311.41
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 311.41
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}" = WIDCOMM Bluetooth Software
"{DC45D291-769A-4608-A688-77E6DBC03498}" = Classic Shell
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64
"{F3A591D1-C991-4722-B40D-C4A80C2A6D05}" = HIPS
"Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter
"CAAPH2" = APH placeholder
"Elantech" = ETDWare PS/2-X64 11.5.8.3_WHQL
"eTrust Suite Personal" = Total Defense Internet Security Suite
"HomeBusinessRetail - en-us" = Microsoft Office Home and Business 2013 - en-us

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{017E337D-D709-437C-83DB-71F82AA78BF6}" = 照片库
"{022C7C52-B294-4346-88BC-C7C2FF7FF1B7}" = Movie Maker
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{061FF8F3-5226-4278-8AAB-282C1B024F58}" = Photo Common
"{068724F8-D8BE-4B43-8DDD-B9FE9E49FD76}" = Scansoft PDF Professional
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{0A5B39D2-7ED6-4779-BCC9-37F381139DB3}" = Adobe AIR
"{1367D815-EC9F-4e2f-9FB9-E40A075AD19B}" = DNAMigrator
"{13F3CEA5-9E2C-4C4E-9F0F-D0DB389CF4A9}" = Movie Maker
"{17795164-3BC1-4D4F-8ADA-65C895EBFC9A}" = Brother MFL-Pro Suite MFC-J6910DW
"{18272881-CFC0-434D-A975-E5BE44206AA0}" = Windows Live UX Platform Language Pack
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1FEE19BC-6F0C-42E4-82FF-FB597F6141DF}" = Windows Live Essentials
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{28656860-4728-433C-8AD4-D1A930437BC8}" = Nuance PDF Viewer Plus
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Qualcomm Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver
"{3B9E171F-A955-4834-B877-447C0A437260}" = ASUS ROG Gaming Mouse
"{3C63F944-803E-49A7-B3A2-B8AB3313E883}" = Windows Live UX Platform Language Pack
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{446CC8CE-0E90-44F7-ADD0-774B243EF090}" = Galerie de photos
"{44A3A561-AE74-472D-A51C-43F4C9E7B5E5}" = Windows Live 软件包
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{58172D66-2F69-4215-9AEC-ED8196023736}" = ASUS Tutor
"{5A05B328-35EB-4CED-B16F-62FA5A2642E6}" =
"{5BABDA39-61CF-41EE-992D-4054B6649A9B}" = Movie Maker
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{631C4E4F-6FDC-4CC0-A067-E9876A9BA7FD}" = 影像中心
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{6C0A559F-8583-4B5A-8B50-20BEE15D8E64}" = Nuance PaperPort 12
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{802E137D-DA8F-47CC-AC21-6DD075CD948C}" = Windows Live UX Platform Language Pack
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}" = ASUS Instant Connect
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8D813AFF-D91D-4EE0-821F-B901FC2E89FA}" = Windows Live
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{8F7FECEC-088F-431D-A5FB-2B59E1E69943}" = Galería de fotos
"{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component
"{90150000-008C-0409-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component
"{90993BD9-C7D9-4C2F-B56C-2F7AFEBD4CD0}" = Windows Live UX Platform Language Pack
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A17946CA-18E5-4CF0-8D55-A56D804718F8}" = Movie Maker
"{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}" = ASUS USB Charger Plus
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.03)
"{C034A6F9-6569-491B-B3BF-F5D15221A708}" = Windows Live Essentials
"{C40D110E-0718-4E11-A69B-D4EC7BF2EB04}" = Windows Live UX Platform Language Pack
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint 2.5
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{CBD486B9-01C2-3412-8BAA-1C20A5A58EAC}" = Google Chrome
"{D5082B89-2E86-447E-A02C-922534592FA8}" = Photo Common
"{D888F114-7537-4D48-AF03-5DA9C82D7540}" = Photo Common
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = ASUSDVD
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0B5FDF0-6940-44B2-8204-CFA746A6B4AF}" = Movie Maker
"{EA2BE047-FF29-4336-BB70-6AF201085BAF}" = Windows Live 程式集
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{EE2E1BED-0821-4244-ABDC-149E9F9750C3}" = Photo Common
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F54030F3-14B6-432D-9361-78DCB1473920}" = Photo Common
"{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}" = ASUS Live Update
"{FC6C7107-7D72-41A1-A031-3CE751159BAB}" = Photo Gallery
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 12.0
"Asus Vibe2.0" = AsusVibe2.0
"ASUS WebStorage" = ASUS WebStorage Sync Agent
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint 2.5
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = ASUSDVD
"LastFM_is1" = Last.fm Scrobbler 2.1.36
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Mozilla Firefox 23.0.1 (x86 en-US)" = Mozilla Firefox 23.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MyBitCast" = MyBitCast 2.0
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"VLC media player" = VLC media player 2.0.8
"WinLiveSuite" = Windows Live Essentials

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"SkyDriveSetup.exe" = Microsoft SkyDrive

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2013-08-19 9:20:21 PM | Computer Name = Architecture | Source = McLogEvent | ID = 5022
Description =

Error - 2013-09-01 6:10:20 PM | Computer Name = Architecture | Source = Application Hang | ID = 1002
Description = The program Explorer.EXE version 6.2.9200.16384 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 13c8 Start
Time: 01cea752792f9929 Termination Time: 0 Application Path: C:WindowsExplorer.EXE

Report
Id: 36f73940-1353-11e3-be78-6c71d953d0aa Faulting package full name: Faulting package-relative
application ID:

Error - 2013-09-02 11:04:08 AM | Computer Name = Architecture | Source = MsiInstaller | ID = 11935
Description =

Error - 2013-09-02 11:05:00 AM | Computer Name = Architecture | Source = MsiInstaller | ID = 11935
Description =

Error - 2013-09-02 11:09:26 AM | Computer Name = Architecture | Source = MsiInstaller | ID = 11935
Description =

[ System Events ]
Error - 2013-08-20 12:11:36 PM | Computer Name = Architecture | Source = cdrom | ID = 262151
Description = The device, DeviceCdRom0, has a bad block.

Error - 2013-08-20 12:11:43 PM | Computer Name = Architecture | Source = cdrom | ID = 262151
Description = The device, DeviceCdRom0, has a bad block.

Error - 2013-08-20 12:11:50 PM | Computer Name = Architecture | Source = cdrom | ID = 262151
Description = The device, DeviceCdRom0, has a bad block.

Error - 2013-08-20 12:11:57 PM | Computer Name = Architecture | Source = cdrom | ID = 262151
Description = The device, DeviceCdRom0, has a bad block.

Error - 2013-08-20 12:12:04 PM | Computer Name = Architecture | Source = cdrom | ID = 262151
Description = The device, DeviceCdRom0, has a bad block.

Error - 2013-08-20 12:12:11 PM | Computer Name = Architecture | Source = cdrom | ID = 262151
Description = The device, DeviceCdRom0, has a bad block.

Error - 2013-08-20 12:12:17 PM | Computer Name = Architecture | Source = cdrom | ID = 262151
Description = The device, DeviceCdRom0, has a bad block.

Error - 2013-08-20 2:25:43 PM | Computer Name = Architecture | Source = Service Control Manager | ID = 7030
Description = The CA Common Scheduler Service service is marked as an interactive
service. However, the system is configured to not allow interactive services.
This service may not function properly.

Error - 2013-08-20 2:26:42 PM | Computer Name = Architecture | Source = Service Control Manager | ID = 7030
Description = The CAISafe service is marked as an interactive service. However,
the system is configured to not allow interactive services. This service may not
function properly.

Error - 2013-08-20 2:35:43 PM | Computer Name = Architecture | Source = Service Control Manager | ID = 7000
Description = The McAfee Boot Delay Start Service service failed to start due to
the following error: %%2


< End of report >

Alright, so I fixed the problem by deleting everything with "nattly" in its name on my computer, resetting my browser settings, and deleting and recreating shortcuts. Not sure why or how this worked, but it did.

I have another "problem" (in quotations because the actual performance of the computer isn't being affected as far as I can tell) now.

Whenever the computer is restarted, a notepad file named "desktop.ini" appears on my desktop, which contains the following:

"
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%system32shell32.dll,-21769
IconResource=%SystemRoot%system32imageres.dll,-183
"

No idea what this means or why its there, or why it reappears everytime I delete it and empty my recycle bin.

OTL.txt

OTL logfile created on: 2013-10-13 2:53:11 PM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Shanne\Downloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: yyyy-MM-dd

11.92 Gb Total Physical Memory | 9.63 Gb Available Physical Memory | 80.76% Memory free
23.92 Gb Paging File | 21.63 Gb Available in Paging File | 90.44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 279.45 Gb Total Space | 191.77 Gb Free Space | 68.62% Space Free | Partition Type: NTFS
Drive D: | 349.32 Gb Total Space | 348.75 Gb Free Space | 99.84% Space Free | Partition Type: NTFS
Drive E: | 349.32 Gb Total Space | 349.18 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive F: | 397.87 Gb Total Space | 397.73 Gb Free Space | 99.96% Space Free | Partition Type: NTFS
Drive H: | 931.48 Gb Total Space | 786.00 Gb Free Space | 84.38% Space Free | Partition Type: NTFS

Computer Name: ARCHITECTURE | User Name: Shanne | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Shanne\Downloads\OTL(1).exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\cfgmig32.exe ()
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe (Robert McNeel & Associates)
PRC - C:\Users\Shanne\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Windows\SysWOW64\UMonit64.exe ()
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Autodesk, Inc.)
PRC - C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe (Brother Industries, Ltd.)
PRC - C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Classic Shell\ClassicShellService.exe (IvoSoft)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
PRC - C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe ()
PRC - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)
PRC - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\SysWOW64\UMonit64.exe ()
MOD - C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll ()
MOD - C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe ()
MOD - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll ()
MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (mcbootdelaystartsvc) – C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe /McCoreSvc File not found
SRV:64bit: - (CaCCProvSP) – C:\Program Files\Total Defense\Internet Security Suite\ccprovsp.exe (Total Defense, Inc.)
SRV:64bit: - (ccSchedulerSVC) – C:\Program Files\Total Defense\Internet Security Suite\ccschedulersvc.exe (Total Defense, Inc.)
SRV:64bit: - (CAAMSvc) – C:\Program Files\Total Defense\Internet Security Suite\Anti-Virus\CAAMSvc.exe (Total Defense, Inc.)
SRV:64bit: - (FlexNet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software LLC)
SRV:64bit: - (WSService) – C:\Windows\SysNative\WSService.dll (Microsoft Corporation)
SRV:64bit: - (OfficeSvc) – C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe (Microsoft Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (Wcmsvc) – C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SRV:64bit: - (DsmSvc) – C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
SRV:64bit: - (netprofm) – C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SRV:64bit: - (BrokerInfrastructure) – C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SRV:64bit: - (AudioEndpointBuilder) – C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV:64bit: - (ETDService) – C:\Program Files\Elantech\ETDService.exe (ELAN Microelectronics Corp.)
SRV:64bit: - (btwdins) – C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV:64bit: - (TimeBroker) – C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (SystemEventsBroker) – C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (Intel® – C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe (Intel® Corporation)
SRV:64bit: - (Intel® – C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel® Corporation)
SRV:64bit: - (wlidsvc) – C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
SRV:64bit: - (LSM) – C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SRV:64bit: - (fhsvc) – C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)
SRV:64bit: - (PrintNotify) – C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV:64bit: - (BcmBtRSupport) – C:\Windows\SysNative\BtwRSupportService.exe (Broadcom Corporation.)
SRV:64bit: - (ClassicShellService) – C:\Program Files\Classic Shell\ClassicShellService.exe (IvoSoft)
SRV:64bit: - (CAISafe) – C:\Program Files\Total Defense\Internet Security Suite\Anti-Virus\isafe.exe (Computer Associates International, Inc.)
SRV:64bit: - (WiaRpc) – C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)
SRV:64bit: - (VaultSvc) – C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SRV:64bit: - (svsvc) – C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)
SRV:64bit: - (Netlogon) – C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SRV:64bit: - (NcaSvc) – C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
SRV:64bit: - (NcdAutoSetup) – C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
SRV:64bit: - (KeyIso) – C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SRV:64bit: - (EFS) – C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SRV:64bit: - (DeviceAssociationService) – C:\Windows\SysNative\das.dll (Microsoft Corporation)
SRV:64bit: - (AllUserInstallAgent) – C:\Windows\SysNative\AUInstallAgent.dll (Microsoft Corporation)
SRV:64bit: - (vmicvss) – C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmictimesync) – C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicshutdown) – C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicrdv) – C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmickvpexchange) – C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicheartbeat) – C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (UmxEngine) – C:\Program Files\CA\SharedComponents\TMEngine\UmxEngine.exe (CA)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (WinSvchostManagerSrv) – C:\Windows\SysWOW64\cfgmig32.exe ()
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (McNeelUpdate) – C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe (Robert McNeel & Associates)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (LMS) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (jhi_service) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
SRV - (Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation)
SRV - (MBAMService) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (ASLDRService) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTek Computer Inc.)
SRV - (CLKMSVC10_38F51D56) – C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe (CyberLink)
SRV - (Autodesk Content Service) – C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Autodesk, Inc.)
SRV - (PrintNotify) – C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV - (StorSvc) – C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation)
SRV - (BrYNSvc) – C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (ATKGFNEXSrv) – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
SRV - (PDFProFiltSrvPP) – C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)
SRV - (SwitchBoard) – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)


========== Driver Services (SafeList) ==========

DRV:64bit: - (dam) – C:\Windows\SysNative\Drivers\dam.sys (Microsoft Corporation)
DRV:64bit: - (GPIOClx0101) – C:\Windows\SysNative\Drivers\msgpioclx.sys (Microsoft Corporation)
DRV:64bit: - (USBHUB3) – C:\Windows\SysNative\Drivers\USBHUB3.SYS (Microsoft Corporation)
DRV:64bit: - (USBXHCI) – C:\Windows\SysNative\Drivers\USBXHCI.SYS (Microsoft Corporation)
DRV:64bit: - (UCX01000) – C:\Windows\SysNative\Drivers\UCX01000.SYS (Microsoft Corporation)
DRV:64bit: - (WdBoot) – C:\Windows\SysNative\Drivers\WdBoot.sys (Microsoft Corporation)
DRV:64bit: - (WdFilter) – C:\Windows\SysNative\Drivers\WdFilter.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\Drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (WFPLWFS) – C:\Windows\SysNative\Drivers\wfplwfs.sys (Microsoft Corporation)
DRV:64bit: - (BthAvrcpTg) – C:\Windows\SysNative\Drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV:64bit: - (BCM43XX) – C:\Windows\SysNative\Drivers\BCMWL63a.SYS (Broadcom Corporation)
DRV:64bit: - (spaceport) – C:\Windows\SysNative\Drivers\spaceport.sys (Microsoft Corporation)
DRV:64bit: - (iaStorA) – C:\Windows\SysNative\Drivers\iaStorA.sys (Intel Corporation)
DRV:64bit: - (MEIx64) – C:\Windows\SysNative\Drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (MBAMProtector) – C:\Windows\SysNative\Drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (ETD) – C:\Windows\SysNative\Drivers\ETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (storahci) – C:\Windows\SysNative\Drivers\storahci.sys (Microsoft Corporation)
DRV:64bit: - (TPM) – C:\Windows\SysNative\Drivers\tpm.sys (Microsoft Corporation)
DRV:64bit: - (pdc) – C:\Windows\SysNative\Drivers\pdc.sys (Microsoft Corporation)
DRV:64bit: - (btwampfl) – C:\Windows\SysNative\Drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) – C:\Windows\SysNative\Drivers\btwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwaudio) – C:\Windows\SysNative\Drivers\btwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) – C:\Windows\SysNative\Drivers\btwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (BTWPANFL) – C:\Windows\SysNative\Drivers\btwpanfl.sys (Broadcom Corporation.)
DRV:64bit: - (msgpiowin32) – C:\Windows\SysNative\Drivers\msgpiowin32.sys (Microsoft Corporation)
DRV:64bit: - (L1C) – C:\Windows\SysNative\Drivers\L1C63x64.sys (Qualcomm Atheros Co., Ltd.)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\Drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\Drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (bthhfhid) – C:\Windows\SysNative\Drivers\BthhfHid.sys (Microsoft Corporation)
DRV:64bit: - (hidi2c) – C:\Windows\SysNative\Drivers\hidi2c.sys (Microsoft Corporation)
DRV:64bit: - (FxPPM) – C:\Windows\SysNative\Drivers\fxppm.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) – C:\Windows\SysNative\Drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (sdstor) – C:\Windows\SysNative\Drivers\sdstor.sys (Microsoft Corporation)
DRV:64bit: - (StillCam) – C:\Windows\SysNative\Drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (bcbtums) – C:\Windows\SysNative\Drivers\bcbtums.sys (Broadcom Corporation.)
DRV:64bit: - (AiCharger) – C:\Windows\SysNative\Drivers\AiCharger.sys (ASUSTek Computer Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\Drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (kbfiltr) – C:\Windows\SysNative\Drivers\kbfiltr.sys ( )
DRV:64bit: - (btwl2cap) – C:\Windows\SysNative\Drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (condrv) – C:\Windows\SysNative\Drivers\condrv.sys (Microsoft Corporation)
DRV:64bit: - (VSTXRAID) – C:\Windows\SysNative\Drivers\VSTXRAID.SYS (VIA Corporation)
DRV:64bit: - (VerifierExt) – C:\Windows\SysNative\Drivers\VerifierExt.sys (Microsoft Corporation)
DRV:64bit: - (UASPStor) – C:\Windows\SysNative\Drivers\uaspstor.sys (Microsoft Corporation)
DRV:64bit: - (acpiex) – C:\Windows\SysNative\Drivers\acpiex.sys (Microsoft Corporation)
DRV:64bit: - (mvumis) – C:\Windows\SysNative\Drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\Drivers\stexstor.sys (Promise Technology, Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\Drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (LSI_SSS) – C:\Windows\SysNative\Drivers\lsi_sss.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\Drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (EhStorTcgDrv) – C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV:64bit: - (EhStorClass) – C:\Windows\SysNative\Drivers\EhStorClass.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\Drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (3ware) – C:\Windows\SysNative\Drivers\3ware.sys (LSI)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\Drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\Drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (CLFS) – C:\Windows\SysNative\Drivers\clfs.sys (Microsoft Corporation)
DRV:64bit: - (vpci) – C:\Windows\SysNative\Drivers\vpci.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) – C:\Windows\SysNative\Drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (WSDPrintDevice) – C:\Windows\SysNative\Drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (mshidumdf) – C:\Windows\SysNative\Drivers\mshidumdf.sys (Microsoft Corporation)
DRV:64bit: - (BasicDisplay) – C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
DRV:64bit: - (HyperVideo) – C:\Windows\SysNative\Drivers\HyperVideo.sys (Microsoft Corporation)
DRV:64bit: - (BasicRender) – C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
DRV:64bit: - (gencounter) – C:\Windows\SysNative\Drivers\vmgencounter.sys (Microsoft Corporation)
DRV:64bit: - (kdnic) – C:\Windows\SysNative\Drivers\kdnic.sys (Microsoft Corporation)
DRV:64bit: - (acpitime) – C:\Windows\SysNative\Drivers\acpitime.sys (Microsoft Corporation)
DRV:64bit: - (npsvctrig) – C:\Windows\SysNative\Drivers\npsvctrig.sys (Microsoft Corporation)
DRV:64bit: - (WpdUpFltr) – C:\Windows\SysNative\Drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV:64bit: - (acpipagr) – C:\Windows\SysNative\Drivers\acpipagr.sys (Microsoft Corporation)
DRV:64bit: - (hyperkbd) – C:\Windows\SysNative\Drivers\hyperkbd.sys (Microsoft Corporation)
DRV:64bit: - (SerCx) – C:\Windows\SysNative\Drivers\SerCx.sys (Microsoft Corporation)
DRV:64bit: - (SpbCx) – C:\Windows\SysNative\Drivers\SpbCx.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) – C:\Windows\SysNative\Drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (BthHFEnum) – C:\Windows\SysNative\Drivers\bthhfenum.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) – C:\Windows\SysNative\Drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\Drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (wpcfltr) – C:\Windows\SysNative\Drivers\wpcfltr.sys (Microsoft Corporation)
DRV:64bit: - (BthLEEnum) – C:\Windows\SysNative\Drivers\BthLEEnum.sys (Microsoft Corporation)
DRV:64bit: - (NdisImPlatform) – C:\Windows\SysNative\Drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV:64bit: - (MsLldp) – C:\Windows\SysNative\Drivers\mslldp.sys (Microsoft Corporation)
DRV:64bit: - (Ndu) – C:\Windows\SysNative\Drivers\Ndu.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\Drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\Drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (AgereSoftModem) – C:\Windows\SysNative\Drivers\agrsm64.sys (LSI Corp)
DRV:64bit: - (RTL8168) – C:\Windows\SysNative\Drivers\Rt630x64.sys (Realtek )
DRV:64bit: - (NETwNs64) – C:\Windows\SysNative\Drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (e1iexpress) – C:\Windows\SysNative\Drivers\e1i63x64.sys (Intel Corporation)
DRV:64bit: - (athr) – C:\Windows\SysNative\Drivers\athrx.sys (Qualcomm Atheros Communications, Inc.)
DRV:64bit: - (HIDSwitch) – C:\Windows\SysNative\Drivers\AsHIDSwitch64.sys (ASUS)
DRV:64bit: - (KmxAMRT) – C:\Windows\SysNative\Drivers\KmxAMRT.sys (Total Defense)
DRV:64bit: - (KmxAgent) – C:\Windows\SysNative\Drivers\KmxAgent.sys (CA)
DRV:64bit: - (KmxCF) – C:\Windows\SysNative\Drivers\KmxCF.sys (CA)
DRV:64bit: - (KmxFw) – C:\Windows\SysNative\Drivers\KmxFw.sys (CA)
DRV:64bit: - (KmxFilter) – C:\Windows\SysNative\Drivers\KmxFilter.sys (CA)
DRV:64bit: - (KmxCfg) – C:\Windows\SysNative\Drivers\KmxCfg.sys (CA)
DRV:64bit: - (KmxFile) – C:\Windows\SysNative\Drivers\KmxFile.sys (CA)
DRV:64bit: - (KmxSbx) – C:\Windows\SysNative\Drivers\KmxSbx.sys (CA)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\Drivers\wdcsam64.sys (Western Digital Technologies)
DRV - (ATKWMIACPIIO) – C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys (ASUS)
DRV - (ASMMAP64) – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…R&pc;=ASU2JS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = nattly.com
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = nattly.com
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus13.msn.com
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\..\SearchScopes,bProtectorDefaultScope = {N324-ADWF32D-T23R-TR32DSA-L32RT-YRED123}
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\..\SearchScopes,BrowserMngrDefaultScope = {N324-ADWF32D-T23R-TR32DSA-L32RT-YRED123}
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\..\SearchScopes\{N324-ADWF32D-T23R-TR32DSA-L32RT-YRED123}: "URL" = http://nattly.com/?q={searchTerms}
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-902799289-96371314-3691115440-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = nattly.com
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = nattly.com
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1002\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1002\..\SearchScopes\{N324-ADWF32D-T23R-TR32DSA-L32RT-YRED123}: "URL" = http://nattly.com/?q={searchTerms}
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-902799289-96371314-3691115440-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\Firefox [2013-10-12 11:02:56 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-10-10 12:55:34 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\McAfee\MSK
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013-08-19 20:12:32 | 000,000,000 | —D | M] (No name found) – C:\Users\Shanne\AppData\Roaming\mozilla\Extensions
[2013-10-10 00:44:17 | 000,000,000 | —D | M] (No name found) – C:\Users\Shanne\AppData\Roaming\mozilla\Firefox\Profiles\udgv82ly.default-1378347462758\extensions
[2013-10-10 00:44:17 | 000,915,554 | —- | M] () (No name found) – C:\Users\Shanne\AppData\Roaming\mozilla\firefox\profiles\udgv82ly.default-1378347462758\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013-10-01 02:55:01 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013-10-01 02:55:04 | 000,000,000 | —D | M] (Default) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncodin
g}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugk
ey={google:suggestAPIKeyParameter},
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: (Enabled) = C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: (Enabled) = C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java™ Platform SE 7 U25 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Microsoft Office 2013 (Enabled) = C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: Google Docs = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: AdBlock = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.8_0\
CHR - Extension: Total Defense Anti-Phishing Toolbar = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpdpkkpdlooddakbebmkeeegehfjdnih\2.2.0.33_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\
CHR - Extension: Gmail = C:\Users\Shanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012-07-26 01:26:49 | 000,000,824 | —- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O2:64bit: - BHO: (Total Defense Anti-Phishing Toolbar Helper) - {45011CF5-E4A9-4F13-9093-F30A784EB9B2} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Total Defense Anti-Phishing Toolbar Helper) - {45011CF5-E4A9-4F13-9093-F30A784EB9B2} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:64bit: - HKLM\..\Toolbar: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-902799289-96371314-3691115440-1001\..\Toolbar\WebBrowser: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O3 - HKU\S-1-5-21-902799289-96371314-3691115440-1001\..\Toolbar\WebBrowser: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O3:64bit: - HKU\S-1-5-21-902799289-96371314-3691115440-1002\..\Toolbar\WebBrowser: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O3 - HKU\S-1-5-21-902799289-96371314-3691115440-1002\..\Toolbar\WebBrowser: (Total Defense Anti-Phishing Toolbar) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\caIEToolbar.dll (Total Defense, Inc.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [cctray] C:\Program Files\Total Defense\Internet Security Suite\casc.exe (Total Defense, Inc.)
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [UMonit64] C:\Windows\SysWOW64\UMonit64.exe ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.10.123\AsusWSPanel.exe (ASUS Cloud Corporation)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDF5 Registry Controller] C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PPort12reminder] C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [ROGNB] C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\.DEFAULT..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (Autodesk, Inc.)
O4 - HKU\S-1-5-18..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (Autodesk, Inc.)
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1001..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation)
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1001..\Run: [NattlyDefender] C:\Users\UpdatusUser\AppData\Roaming\NattlyDefender.exe File not found
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1001..\Run: [Power2GoExpress] C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe (CyberLink Corp.)
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1002..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1002..\Run: [Akamai NetSession Interface] C:\Users\Shanne\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1002..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (Autodesk, Inc.)
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1002..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation)
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1002..\Run: [NattlyDefender] C:\Users\Shanne\AppData\Roaming\NattlyDefender.exe File not found
O4 - HKU\S-1-5-21-902799289-96371314-3691115440-1002..\Run: [Power2GoExpress] C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe (CyberLink Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-902799289-96371314-3691115440-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-902799289-96371314-3691115440-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =
O8:64bit: - Extra context menu item: E&xport; to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: Se&nd; to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport; to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd; to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\VetRedir64.dll (Computer Associates International, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\VetRedir64.dll (Computer Associates International, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000014 - C:\Windows\SysNative\VetRedir64.dll (Computer Associates International, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\VetRedir.dll (Computer Associates International, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\VetRedir.dll (Computer Associates International, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\SysWow64\VetRedir.dll (Computer Associates International, Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3B7C03B4-6E91-4406-BB5D-B7AA964AEF23}: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{900A7FEC-591F-4F28-9710-9ECB26A4BBF6}: DhcpNameServer = 8.8.8.8 4.2.2.1 192.168.1.1
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (UmxSbxExA64.dll) - C:\Windows\SysNative\UmxSbxExA64.dll (CA)
O20 - AppInit_DLLs: (UmxSbxExw.dll) - C:\Windows\SysWow64\UmxSbxExw.dll (CA)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\PFW: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O20 - Winlogon\Notify\PFW: DllName - (UmxWnp.Dll) - C:\Windows\SysWow64\UmxWNP.dll (CA)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30 - LSA: Security Packages - (livessp) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013-10-10 00:59:27 | 000,000,000 | —D | M] - C:\Autodesk – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013-10-13 13:32:32 | 010,116,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twinui.dll
[2013-10-13 13:32:31 | 008,858,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twinui.dll
[2013-10-13 13:32:31 | 001,125,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msctf.dll
[2013-10-13 13:32:28 | 002,304,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2013-10-13 13:32:26 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SettingSync.dll
[2013-10-13 13:32:25 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2013-10-13 13:32:23 | 002,035,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2013-10-13 13:32:23 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SettingSync.dll
[2013-10-13 13:32:23 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mbsmsapi.dll
[2013-10-13 13:32:23 | 000,158,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mbsmsapi.dll
[2013-10-13 13:32:23 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SettingSyncInfo.dll
[2013-10-13 13:32:10 | 001,374,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2013-10-13 13:32:10 | 001,245,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2013-10-13 13:32:10 | 000,566,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2013-10-13 13:32:10 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2013-10-13 13:32:10 | 000,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2013-10-13 13:32:09 | 000,437,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2013-10-12 11:27:19 | 000,000,000 | —D | C] – C:\ProgramData\TotalDefense
[2013-10-12 02:03:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013-10-12 02:03:07 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2013-10-12 02:03:07 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2013-10-12 02:03:07 | 000,000,000 | —D | C] – C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013-10-10 20:03:59 | 000,652,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2013-10-10 20:03:33 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2013-10-10 20:03:33 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UXInit.dll
[2013-10-10 20:03:32 | 000,603,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2013-10-10 20:03:32 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2013-10-10 20:03:32 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UXInit.dll
[2013-10-10 20:03:32 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2013-10-10 20:03:31 | 000,915,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxtheme.dll
[2013-10-10 20:03:31 | 000,855,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2013-10-10 20:03:31 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2013-10-10 20:03:31 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2013-10-10 20:03:31 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2013-10-10 20:03:30 | 000,136,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2013-10-10 20:03:23 | 003,959,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2013-10-10 20:03:23 | 000,690,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2013-10-10 19:58:52 | 000,054,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\WdfLdr.sys
[2013-10-10 19:58:50 | 000,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2013-10-10 19:58:50 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidparse.sys
[2013-10-10 19:58:48 | 000,362,496 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2013-10-10 19:58:48 | 000,300,032 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2013-10-10 19:58:48 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2013-10-10 19:58:48 | 000,035,328 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2013-10-10 19:58:44 | 000,498,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2013-10-10 19:58:44 | 000,021,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2013-10-10 19:58:43 | 000,447,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBHUB3.SYS
[2013-10-10 19:58:43 | 000,337,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBXHCI.SYS
[2013-10-10 19:58:43 | 000,213,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\UCX01000.SYS
[2013-10-10 19:58:43 | 000,124,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2013-10-10 19:58:43 | 000,102,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2013-10-10 12:55:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2
[2013-10-10 12:43:09 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Design Standard CS6
[2013-10-10 01:20:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2014 - English
[2013-10-10 00:45:06 | 002,992,528 | —- | C] (PureSight Technologies Ltd) – C:\Windows\SysWow64\winsflte.dll
[2013-10-05 16:27:17 | 000,000,000 | —D | C] – C:\ProgramData\ALM
[2013-10-05 15:53:24 | 000,000,000 | —D | C] – C:\ProgramData\regid.1986-12.com.adobe
[2013-10-05 15:52:44 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2013-10-05 15:41:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2013-10-02 12:22:19 | 000,000,000 | —D | C] – C:\Users\Shanne\Documents\Inventor Server SDK ACAD 2014
[2013-10-02 11:51:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\WIBU-SYSTEMS
[2013-10-02 11:51:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\WIBUKEY
[2013-10-02 11:47:44 | 000,000,000 | —D | C] – C:\ProgramData\ASGVIS
[2013-10-02 10:57:19 | 000,000,000 | —D | C] – C:\Program Files\7-Zip
[2013-10-01 02:55:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2013-09-29 04:32:16 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revit 2014
[2013-09-28 13:37:56 | 000,000,000 | —D | C] – C:\Users\Shanne\AppData\Roaming\NVIDIA
[2013-09-28 00:15:56 | 000,000,000 | —D | C] – C:\ProgramData\FARO
[2013-09-28 00:15:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap
[2013-09-28 00:00:59 | 000,000,000 | —D | C] – C:\Users\Shanne\Documents\Autodesk
[2013-09-27 23:59:38 | 000,000,000 | —D | C] – C:\Users\Shanne\Documents\Inventor Server SDK ACA 2014
[2013-09-27 23:31:16 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Macrovision Shared
[2013-09-27 23:30:53 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD Architecture 2014 - English
[2013-09-27 23:30:11 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Autodesk
[2013-09-27 23:30:06 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Autodesk Shared
[2013-09-27 23:30:06 | 000,000,000 | —D | C] – C:\Users\Shanne\AppData\Local\Autodesk
[2013-09-27 23:12:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\Autodesk
[2013-09-27 23:10:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Autodesk Shared
[2013-09-27 23:08:05 | 000,239,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_7.dll
[2013-09-27 23:08:05 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_7.dll
[2013-09-27 23:08:04 | 001,907,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_43.dll
[2013-09-27 23:08:04 | 001,868,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_43.dll
[2013-09-27 23:08:03 | 002,401,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_43.dll
[2013-09-27 23:08:03 | 001,998,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_43.dll
[2013-09-27 23:08:03 | 000,511,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_43.dll
[2013-09-27 23:08:03 | 000,470,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_43.dll
[2013-09-27 23:08:02 | 000,352,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_1.dll
[2013-09-27 23:08:02 | 000,229,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_1.dll
[2013-09-27 23:08:02 | 000,083,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_1.dll
[2013-09-27 23:08:02 | 000,062,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_1.dll
[2013-09-27 23:08:02 | 000,016,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\x3daudio1_0.dll
[2013-09-27 23:08:02 | 000,014,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\x3daudio1_0.dll
[2013-09-27 23:07:55 | 003,927,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_30.dll
[2013-09-27 23:07:55 | 002,388,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_30.dll
[2013-09-27 22:52:04 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
[2013-09-27 22:52:04 | 000,000,000 | —D | C] – C:\Program Files\Autodesk
[2013-09-27 22:46:16 | 000,000,000 | —D | C] – C:\Users\Shanne\AppData\Roaming\Autodesk
[2013-09-27 22:46:16 | 000,000,000 | —D | C] – C:\ProgramData\Autodesk
[2013-09-27 22:39:49 | 000,000,000 | —D | C] – C:\Users\Shanne\AppData\Local\Akamai
[2013-09-27 22:39:36 | 000,000,000 | —D | C] – C:\Autodesk
[2013-09-27 22:22:43 | 000,000,000 | —D | C] – C:\Program Files\Rhinoceros 5 (64-bit)
[2013-09-27 22:22:28 | 000,000,000 | —D | C] – C:\ProgramData\McNeel
[2013-09-27 22:22:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\McNeelUpdate
[2013-09-27 22:22:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\McNeel Shared
[2013-09-27 22:22:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rhinoceros 5
[2013-09-27 22:22:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Rhinoceros 5
[2013-09-25 19:34:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tssdisai.dll
[2013-09-18 01:20:34 | 000,000,000 | R–D | C] – C:\Users\Shanne\AppData\Roaming\Brother
[2013-09-17 02:30:43 | 000,000,000 | —D | C] – C:\Users\Shanne\Documents\Custom Office Templates
[2013-09-15 17:03:41 | 000,000,000 | RH-D | C] – C:\MSOCache

========== Files - Modified Within 30 Days ==========

[2013-10-13 14:38:54 | 000,848,230 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013-10-13 14:38:54 | 000,723,700 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013-10-13 14:38:54 | 000,136,838 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013-10-13 14:35:13 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013-10-13 14:34:43 | 000,000,074 | —- | M] () – C:\Users\Shanne\AppData\Roaming\sp_data.sys
[2013-10-13 14:34:09 | 000,000,928 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-10-13 14:33:11 | 268,435,456 | -HS- | M] () – C:\swapfile.sys
[2013-10-13 14:33:10 | 787,706,012 | —- | M] () – C:\Windows\MEMORY.DMP
[2013-10-13 14:32:44 | 1648,771,070 | -HS- | M] () – C:\hiberfil.sys
[2013-10-13 14:30:00 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-10-13 14:25:03 | 012,316,615 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k0
[2013-10-13 14:25:03 | 000,257,556 | —- | M] () – C:\Windows\SysNative\drivers\KmxAgent.asc
[2013-10-13 14:25:03 | 000,000,619 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k0
[2013-10-13 14:25:03 | 000,000,085 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k7
[2013-10-13 14:25:03 | 000,000,085 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k6
[2013-10-13 14:25:03 | 000,000,085 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k5
[2013-10-13 14:25:03 | 000,000,085 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k4
[2013-10-13 14:25:03 | 000,000,085 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k3
[2013-10-13 14:25:03 | 000,000,085 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k2
[2013-10-13 14:25:03 | 000,000,085 | —- | M] () – C:\Windows\SysNative\drivers\kmxcfg.u2k1
[2013-10-13 14:25:03 | 000,000,049 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k7
[2013-10-13 14:25:03 | 000,000,049 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k6
[2013-10-13 14:25:03 | 000,000,049 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k5
[2013-10-13 14:25:03 | 000,000,049 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k4
[2013-10-13 14:25:03 | 000,000,049 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k3
[2013-10-13 14:25:03 | 000,000,049 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k2
[2013-10-13 14:25:03 | 000,000,049 | —- | M] () – C:\Windows\SysNative\drivers\kmxzone.u2k1
[2013-10-13 14:23:40 | 005,016,552 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013-10-13 14:05:01 | 000,000,932 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-10-10 00:45:07 | 002,535,824 | —- | M] () – C:\Windows\SysNative\winsflt.dll
[2013-10-10 00:45:07 | 001,755,536 | —- | M] () – C:\Windows\SysWow64\winsflt.dll
[2013-10-10 00:44:15 | 001,424,904 | —- | M] () – C:\Windows\SysWow64\cfgmig32.dll
[2013-10-10 00:44:15 | 001,424,904 | —- | M] () – C:\Windows\SysNative\cfgmig32.dll
[2013-10-10 00:44:15 | 000,265,736 | —- | M] () – C:\Windows\SysWow64\cfgmig32.exe
[2013-10-08 03:28:57 | 000,007,619 | —- | M] () – C:\Users\Shanne\AppData\Local\resmon.resmoncfg
[2013-10-01 21:38:13 | 000,694,232 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013-10-01 21:38:13 | 000,078,296 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013-09-27 23:31:21 | 000,000,153 | —- | M] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013-09-24 01:39:50 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2013-09-22 19:27:49 | 000,690,688 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2013-09-22 18:55:16 | 000,051,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2013-09-22 18:54:55 | 000,603,136 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2013-09-22 18:54:51 | 003,959,296 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2013-09-22 18:54:51 | 000,855,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll

========== Files Created - No Company Name ==========

[2013-10-13 14:23:19 | 005,016,552 | —- | C] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013-10-13 13:32:22 | 000,386,923 | —- | C] () – C:\Windows\SysNative\ApnDatabase.xml
[2013-10-10 12:55:37 | 000,002,465 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk
[2013-10-10 12:55:37 | 000,002,453 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk
[2013-10-10 00:45:14 | 001,424,904 | —- | C] () – C:\Windows\SysWow64\cfgmig32.dll
[2013-10-10 00:45:14 | 001,424,904 | —- | C] () – C:\Windows\SysNative\cfgmig32.dll
[2013-10-10 00:45:14 | 000,265,736 | —- | C] () – C:\Windows\SysWow64\cfgmig32.exe
[2013-10-10 00:45:07 | 003,213,712 | —- | C] () – C:\Windows\SysWow64\mdmcls32.exe
[2013-10-10 00:45:07 | 003,213,712 | —- | C] () – C:\Windows\SysNative\mdmcls32.exe
[2013-10-10 00:45:07 | 001,755,536 | —- | C] () – C:\Windows\SysWow64\winsflt.dll
[2013-10-10 00:45:06 | 000,291,728 | —- | C] () – C:\Windows\SysWow64\winsfinst_x64.exe
[2013-09-27 23:31:21 | 000,000,153 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013-09-24 01:39:50 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2013-09-11 22:12:21 | 000,083,968 | —- | C] () – C:\Windows\SysWow64\OEMLicense.dll
[2013-09-07 00:35:59 | 000,000,000 | —- | C] () – C:\Windows\BRPARAM.INI
[2013-09-02 11:07:05 | 000,000,776 | —- | C] () – C:\Windows\Brpfx04a.ini
[2013-09-02 11:07:05 | 000,000,064 | —- | C] () – C:\Windows\brpcfx.ini
[2013-09-02 11:06:25 | 000,000,066 | —- | C] () – C:\Windows\Brfaxrx.ini
[2013-09-02 11:06:25 | 000,000,000 | —- | C] () – C:\Windows\brdfxspd.dat
[2013-09-02 11:06:10 | 000,045,056 | —- | C] () – C:\Windows\SysWow64\BRTCPCON.DLL
[2013-09-02 11:06:06 | 000,000,114 | —- | C] () – C:\Windows\SysWow64\BRLMW03A.INI
[2013-08-20 14:25:57 | 004,110,736 | —- | C] () – C:\Windows\SysWow64\win32cpr.dll
[2013-08-20 14:25:57 | 002,763,152 | —- | C] () – C:\Windows\SysWow64\svcprs32.exe
[2013-08-20 14:25:57 | 000,100,752 | —- | C] () – C:\Windows\SysWow64\winsfinst.exe
[2013-08-19 20:22:31 | 000,007,619 | —- | C] () – C:\Users\Shanne\AppData\Local\resmon.resmoncfg
[2013-08-19 20:06:45 | 000,000,074 | —- | C] () – C:\Users\Shanne\AppData\Roaming\sp_data.sys
[2013-05-25 01:00:38 | 000,172,097 | —- | C] () – C:\Windows\SysWow64\NoMSGuninstall.exe
[2013-05-25 01:00:38 | 000,040,960 | —- | C] () – C:\Windows\SysWow64\UMonit64.exe
[2013-05-25 01:00:38 | 000,001,519 | —- | C] () – C:\Windows\SysWow64\_IconCfg0.ini
[2013-05-25 01:00:38 | 000,000,911 | —- | C] () – C:\Windows\SysWow64\ProductName.ini
[2013-05-25 01:00:38 | 000,000,213 | —- | C] () – C:\Windows\SysWow64\IconCfg0.ini
[2013-02-13 15:27:54 | 000,001,536 | —- | C] () – C:\Windows\SysWow64\IusEventLog.dll
[2012-11-27 14:26:00 | 000,024,576 | —- | C] () – C:\ProgramData\SetStretch.exe
[2012-11-27 14:26:00 | 000,000,256 | —- | C] () – C:\ProgramData\SetStretch.cmd
[2012-11-27 14:26:00 | 000,000,103 | —- | C] () – C:\ProgramData\SetStretch.VBS
[2012-07-26 04:13:10 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2012-07-26 04:13:09 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2012-07-26 03:21:26 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2012-07-25 21:17:42 | 000,043,520 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2012-07-25 16:37:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2012-07-25 16:28:31 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2012-07-25 16:22:56 | 000,267,284 | —- | C] () – C:\Windows\SysWow64\igvpkrng600.bin
[2012-07-25 16:22:54 | 000,963,376 | —- | C] () – C:\Windows\SysWow64\igcodeckrng600.bin
[2012-06-02 10:31:19 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

========== ZeroAccess Check ==========

[2013-09-27 23:07:54 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2013-08-02 02:28:20 | 019,758,080 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2013-08-02 01:08:10 | 017,561,088 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2012-07-25 23:05:38 | 001,004,544 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2012-07-25 23:18:27 | 000,784,896 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2012-07-25 23:07:41 | 000,455,680 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >

My initial problem of running very fast and an unresponsive Microsoft Word have been remedied by a system restore (which deleted many programs that required redownloading.
But that problem has since been replaced by a frequent rebooting issue with a DRIVER_IRQL_NOT_LESS_OR_EQUAL error, especially when I visit certain websites.
Sorry if I keep changing the problem…