Jo;
Once again sorry for the delay, we must be in very different time zones and I have Physical Therapy Monday thru Friday. I once again apologize if this inconveniences you in any way, you have been so helpful. I am seeing vast improvement already!!!!!
Here are the items you requested;
# AdwCleaner v3.017 - Report created 23/01/2014 at 06:56:55
# Updated 12/01/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : HESS - HESS-A23995F71B
# Running from : D:\Documents and Settings\HESS\Desktop\What The Tech Apps\AdwCleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
File Found : D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\searchplugins\zonealarm.xml
File Found : D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\user.js
File Found : D:\WINDOWS.0\Tasks\Object Browser-chromeinstaller.job
File Found : D:\WINDOWS.0\Tasks\Object Browser-codedownloader.job
File Found : D:\WINDOWS.0\Tasks\Object Browser-enabler.job
File Found : D:\WINDOWS.0\Tasks\Object Browser-firefoxinstaller.job
File Found : D:\WINDOWS.0\Tasks\Object Browser-updater.job
Folder Found : D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com
Folder Found : D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan
Folder Found D:\Documents and Settings\All Users.WINDOWS.0\Application Data\Conduit
Folder Found D:\Documents and Settings\HESS\Local Settings\Application Data\genienext
Folder Found D:\Documents and Settings\HESS\Local Settings\Application Data\Object Browser
Folder Found D:\Program Files\Conduit
Folder Found D:\Program Files\Level Quality Watcher
Folder Found D:\Program Files\Object Browser
Folder Found D:\WINDOWS.0\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found : HKCU\Software\Object Browser
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKCU\Toolbar
Key Found : HKLM\Software\AskBarDis
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0032850.BHO
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Found : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2428615
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0eb7a38e-6c46-42ba-82df-fc76e86818cf}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ba4ef084-eba0-4a60-a329-05f8bd41f9c0}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{edb18fac-25fd-4b78-8600-1b0f5b01ce8b}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f75188d7-d2cc-4214-bdd7-9e10f484d617}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Object Browser
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Object Browser
Key Found : HKLM\Software\Object Browser
***** [ Browsers ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Mozilla Firefox v26.0 (en-US)
[ File : D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\prefs.js ]
Line Found : user_pref("CT3306061_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1388999550854,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN36769864511048520&UM=2&SearchSource=13");
Line Found : user_pref("Smartbar.ConduitSearchEngineList", "");
Line Found : user_pref("Smartbar.ConduitSearchUrlList", "");
Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.zonealarm.com/search?src=sp&tbid=goughGA&Lan=en&gu=0c5fc5451cf94920a5e39ea319a7af67&tu=10G9y00Be2C01g0&sku=&tstsId=&ver=&&q=");
Line Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3306061");
Line Found : user_pref("extensions.BabylonToolbar.admin", false);
Line Found : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Line Found : user_pref("extensions.BabylonToolbar.babExt", "");
Line Found : user_pref("extensions.BabylonToolbar.babTrack", "affID=100486");
Line Found : user_pref("extensions.BabylonToolbar.bbDpng", 30);
Line Found : user_pref("extensions.BabylonToolbar.dfltSrch", false);
Line Found : user_pref("extensions.BabylonToolbar.hmpg", false);
Line Found : user_pref("extensions.BabylonToolbar.id", "60a515d6000000000000000c6e617452");
Line Found : user_pref("extensions.BabylonToolbar.instlDay", "15369");
Line Found : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Line Found : user_pref("extensions.BabylonToolbar.lastDP", 30);
Line Found : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1712:53:57");
Line Found : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "9.0");
Line Found : user_pref("extensions.BabylonToolbar.newTab", true);
Line Found : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
Line Found : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Line Found : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Line Found : user_pref("extensions.BabylonToolbar.propectorlck", 66511213);
Line Found : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Line Found : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Line Found : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Line Found : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Line Found : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Line Found : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
Line Found : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1712:53:57");
Line Found : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
Line Found : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Line Found : user_pref("extensions.BabylonToolbar_i.babExt", "");
Line Found : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100486");
Line Found : user_pref("extensions.BabylonToolbar_i.hardId", "60a515d6000000000000000c6e617452");
Line Found : user_pref("extensions.BabylonToolbar_i.id", "60a515d6000000000000000c6e617452");
Line Found : user_pref("extensions.BabylonToolbar_i.instlDay", "15369");
Line Found : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Line Found : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Line Found : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Line Found : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Line Found : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Line Found : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Line Found : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Line Found : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1712:53:57");
Line Found : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Line Found : user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_meta.value", "%7B%22handlebars.js%22%3A%7B%22id%22%3A183015%2C%22ver%22%3A2%2[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.InstallationThankYouPage", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.InstallationTime", 1390392208);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.active", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.addressbar", "NA");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.addressbarenhanced", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.asyncdb_dbWasSet", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.asyncdb_dbWasSet_FF25_FIX", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.asyncinternaldb_dbWasSet", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.asyncinternaldb_dbWasSet_FF25_FIX", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.backgroundver", 1);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.certdomaininstaller", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.changeprevious", false);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.InstallationTime.value", "%221390392208%22");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22000037%22%2C%22sub_id%22%3A%220%22%2C%22uz[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.jw_token.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.jw_token.value", "%22f12b8932-a080-f788-56b0-801c5a9a73f0%22");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.uc.expiration", "Wed Feb 05 2014 07:06:30 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.cookie.uc.value", "%22%5C%22US%5C%22%22");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.description", "Browser enhancer");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.domain", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.enablesearch", false);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.homepage", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.iframe", false);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard [...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%2297513D2E8EB5459584CEEBF759E36[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22000037%22%2C%22sub_id%22%3A%220%22%2C%[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard [...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000037%22%2C%22sub_id%22%3A%220%2[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern [...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%2297513D2E8EB5459584CE[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_appVer.value", "142");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_lastVersion.value", "1");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)"[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_meta.value", "%7B%7D");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_nextCheck.expiration", "Thu Jan 23 2014 10:00:16 GMT-0500 (Eastern Standard T[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_nextCheck.value", "true");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_queue.value", "%7B%7D");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Sta[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT-0500 (Eastern Standard Time)");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%2297513D2E[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.monetization_plugin_last_executable_request.expiration", "Thu Jan 23 2014 07:17:53 GMT-[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//download.microsoft.com[...]
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.lastDailyReport", "1390467614728");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.lastUpdate", "1390467601029");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.manifesturl", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.name", "Object Browser");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.newtab", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.opensearch", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/32850/plugins/093/ff/plugins.json");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.pluginsversion", 107);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.publisher", "Object Browser");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.searchstatus", 0);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.setnewtab", false);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.thankyou", "");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.updateinterval", 360);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.ver", 142);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.apps", "32850");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.bic", "143a9c0a4d61e42f3d9fdfdc6b29e465");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.cid", 32850);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.firstrun", false);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.hadappinstalled", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.installationdate", 1390392343);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.modetype", "production");
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.reportInstall", true);
Line Found : user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.statsDailyCounter", 3);
Line Found : user_pref("extensions.crossrider.bic", "143a9c0a4d61e42f3d9fdfdc6b29e465");
Line Found : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Found : user_pref("smartbar.machineId", "IZXOCY7ECGZIGRAG2QKWSSY/9K+DTDGHNDN5BTO9YLSVZCUXT4HBNVVA5R8/6+6U4F1BDU5N7L+JSXR6FHKLCW");
[ File : D:\Documents and Settings\Administrator.HESS-A23995F71B.000\Application Data\Mozilla\Firefox\Profiles\z53beqry.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [9073 octets] - [21/01/2014 19:29:09]
AdwCleaner[R1].txt - [10159 octets] - [23/01/2014 06:40:00]
AdwCleaner[R2].txt - [22698 octets] - [23/01/2014 06:56:55]
########## EOF - D:\AdwCleaner\AdwCleaner[R2].txt - [22759 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Microsoft Windows XP x86
Ran by HESS on Thu 01/23/2014 at 18:11:58.76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D7E36EA9-168A-45D3-9BA2-1B70F49BD2C6}
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "D:\Documents and Settings\All Users.WINDOWS.0\application data\adtrustmedia"
Successfully deleted: [Folder] "D:\Documents and Settings\HESS\Local Settings\Application Data\adtrustmedia"
~~~ FireFox
Successfully deleted the following from D:\Documents and Settings\HESS\Application Data\mozilla\firefox\profiles\da8qvwrs.default\prefs.js
user_pref("extensions.trusted-ads.TrustAd", "{\"r\":[{\"t\":\"FQDN\",\"r\":\"trustedads.adtrustmedia.com\",\"c\":[{\"i\":\"1\",\"s\":[\"display.clickpoint.com\",\"www.africawi
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 01/23/2014 at 18:25:28.79
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
OTL logfile created on: 1/23/2014 6:31:24 PM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = D:\Documents and Settings\HESS\Desktop\What The Tech Apps
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.42 Gb Available Physical Memory | 71.05% Memory free
5.85 Gb Paging File | 5.31 Gb Available in Paging File | 90.76% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092D:\pagef [Binary data over 200 bytes]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS.0 | %ProgramFiles% = D:\Program Files
Drive C: | 74.50 Gb Total Space | 6.78 Gb Free Space | 9.10% Space Free | Partition Type: NTFS
Drive D: | 55.89 Gb Total Space | 20.00 Gb Free Space | 35.78% Space Free | Partition Type: NTFS
Computer Name: HESS-A23995F71B | User Name: HESS | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - D:\Documents and Settings\HESS\Desktop\What The Tech Apps\OTL.exe (OldTimer Tools)
PRC - D:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - D:\Program Files\AVG\AVG2014\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe (Motorola Mobility LLC)
PRC - D:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe (Motorola Mobility LLC)
PRC - D:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Program Files\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Program Files\AVG\AVG2014\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Program Files\AVG\AVG2014\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Program Files\AVG\AVG2014\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies LTD)
PRC - D:\Program Files\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
PRC - D:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe (Check Point Software Technologies, Ltd.)
PRC - D:\Program Files\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Program Files\ShaPlus Bandwidth Meter\ShaPlus Bandwidth Meter.exe (ShaPlus Software)
PRC - D:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe (NVIDIA)
PRC - D:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA)
PRC - D:\WINDOWS.0\explorer.exe (Microsoft Corporation)
PRC - D:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe (YourWare Solutions )
========== Modules (No Company Name) ==========
MOD - D:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\cab8d2f8933390bab32c35c5c6a479bd\System.Configuration.Install.ni.dll ()
MOD - D:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\15fd2d2f4e709154b44187a6915db244\System.ServiceProcess.ni.dll ()
MOD - D:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Configuration\1b7600e7fe5e152f21ba6d79f3c0c3b6\System.Configuration.ni.dll ()
MOD - D:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll ()
MOD - D:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Xml\f93600ac836b9140e1df13bb0f6bfccf\System.Xml.ni.dll ()
MOD - D:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Core\83cd19e8259b8dd9435c1c3f8f31b60c\System.Core.ni.dll ()
MOD - D:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System\10df39542df7d48462451fc39bce8418\System.ni.dll ()
MOD - D:\Program Files\Motorola Mobility\Motorola Device Manager\css_core.dll ()
MOD - D:\Program Files\FileZilla FTP Client\fzshellext.dll ()
MOD - D:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - D:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - D:\Program Files\ArcSoft\Software Suite\PhotoImpression 5\Share\PIHook.dll ()
========== Services (SafeList) ==========
SRV - (TTFixerService) -- D:\Program Files\NeoSmart Technologies\ToolTipFixer\ToolTipFixer.exe File not found
SRV - (rpcapd) -- %ProgramFiles%\WinPcap\rpcapd.exe File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- D:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (JavaQuickStarterService) -- D:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (MozillaMaintenance) -- D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (Motorola Device Manager) -- D:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe (Motorola Mobility LLC)
SRV - (AVGIDSAgent) -- D:\Program Files\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
SRV - (vsmon) -- D:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies LTD)
SRV - (ZAPrivacyService) -- D:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe (Check Point Software Technologies, Ltd.)
SRV - (avgwd) -- D:\Program Files\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (SkypeUpdate) -- D:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (!SASCORE) -- D:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
SRV - (getPlusHelper) -- D:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (LxrJD31s) -- D:\WINDOWS.0\System32\LxrJD31s.exe ()
SRV - (FileZilla Server) -- D:\Program Files\FileZilla Server\FileZilla server.exe (FileZilla Project)
SRV - (UpdateCenterService) -- D:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe (NVIDIA)
SRV - (nTuneService) -- D:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe (NVIDIA)
SRV - (spupdsvc) -- D:\WINDOWS.0\system32\spupdsvc.exe (Microsoft Corporation)
SRV - (NeroRegInCDSrv) -- D:\Program Files\Nero\Nero8\InCD\NBHRegInCDSrv.exe (Nero AG)
SRV - (InCDsrv) -- D:\Program Files\Nero\Nero8\InCD\InCDsrv.exe (Nero AG)
SRV - (Maxtor Sync Service) -- D:\Program Files\Maxtor\Sync\SyncServices.exe (Seagate Technology LLC)
SRV - (SandraAgentSrv) -- D:\Program Files\SiSoftware\SiSoftware Sandra Professional Home XII.SP2c\RpcAgentSrv.exe (SiSoftware)
SRV - (Diskeeper) -- D:\Program Files\Executive Software\Diskeeper\DkService.exe (Executive Software International, Inc.)
SRV - (Pctspk) -- D:\WINDOWS.0\system32\pctspk.exe (PCtel, Inc.)
========== Driver Services (SafeList) ==========
DRV - (WudfRd) -- D:\WINDOWS.0\system32\wudfrd.sys File not found
DRV - (WudfPf) -- D:\WINDOWS.0\system32\WudfPf.sys File not found
DRV - (WDICA) -- File not found
DRV - (SWUMX20) -- system32\DRIVERS\swumx20.sys File not found
DRV - (PLTurbo) -- system32\drivers\plturbo.sys File not found
DRV - (PLTurbh) -- system32\drivers\plturbh.sys File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (MRESP50a64) -- D:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS File not found
DRV - (MREMP50a64) -- D:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS File not found
DRV - (MpKslc4fa901a) -- d:\Documents and Settings\All Users.WINDOWS.0\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{770A43F5-431F-44BC-8FF1-80B9C62ADAB6}\MpKslc4fa901a.sys File not found
DRV - (motccgpfl) -- system32\DRIVERS\motccgpfl.sys File not found
DRV - (lbrtfdc) -- File not found
DRV - (Inspect) -- System32\DRIVERS\inspect.sys File not found
DRV - (i2omgmt) -- File not found
DRV - (cmdHlp) -- System32\DRIVERS\cmdhlp.sys File not found
DRV - (cmdGuard) -- System32\DRIVERS\cmdguard.sys File not found
DRV - (cmderd) -- System32\DRIVERS\cmderd.sys File not found
DRV - (Changer) -- File not found
DRV - (catchme) -- D:\DOCUME~1\HESS\LOCALS~1\Temp\catchme.sys File not found
DRV - (MBAMSwissArmy) -- D:\WINDOWS.0\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (SWDUMon) -- D:\WINDOWS.0\system32\drivers\SWDUMon.sys ()
DRV - (Avgdiskx) -- D:\WINDOWS.0\system32\drivers\avgdiskx.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSDriver) -- D:\WINDOWS.0\system32\drivers\avgidsdriverx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgldx86) -- D:\WINDOWS.0\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avglogx) -- D:\WINDOWS.0\system32\drivers\avglogx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Vsdatant) -- D:\WINDOWS.0\system32\vsdatant.sys (Check Point Software Technologies LTD)
DRV - (AVGIDSHX) -- D:\WINDOWS.0\system32\drivers\avgidshx.sys (AVG Technologies CZ, s.r.o.)
DRV - (HMD) -- D:\WINDOWS.0\system32\drivers\hmd.sys ()
DRV - (Avgmfx86) -- D:\WINDOWS.0\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) -- D:\WINDOWS.0\system32\drivers\avgidsshimx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgrkx86) -- D:\WINDOWS.0\system32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgtdix) -- D:\WINDOWS.0\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (CFRMD) -- D:\WINDOWS.0\system32\drivers\CFRMD.sys (Windows ® Win 7 DDK provider)
DRV - (BTCFilterService) -- D:\WINDOWS.0\system32\drivers\motfilt.sys (Motorola Inc)
DRV - (motusbdevice) -- D:\WINDOWS.0\system32\drivers\motusbdevice.sys (Motorola Inc)
DRV - (Motousbnet) -- D:\WINDOWS.0\system32\drivers\Motousbnet.sys (Motorola Mobility Inc)
DRV - (motccgp) -- D:\WINDOWS.0\system32\drivers\motccgp.sys (Motorola Mobility Inc)
DRV - (MotoSwitchService) -- D:\WINDOWS.0\system32\drivers\motswch.sys (Motorola)
DRV - (SASKUTIL) -- D:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) -- D:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (LxrJD31d) -- D:\WINDOWS.0\system32\drivers\LxrJD31d.sys ()
DRV - (cpuz133) -- D:\WINDOWS.0\system32\drivers\cpuz133_x32.sys (Windows ® Win 7 DDK provider)
DRV - (SASENUM) -- D:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (cpudrv) -- D:\Program Files\SystemRequirementsLab\cpudrv.sys ()
DRV - (nvoclock) -- D:\WINDOWS.0\system32\drivers\nvoclock.sys (NVIDIA Corp.)
DRV - (swmsflt) -- D:\WINDOWS.0\system32\drivers\swmsflt.sys ()
DRV - (InCDfs) -- D:\WINDOWS.0\system32\drivers\InCDfs.sys (Nero AG)
DRV - (incdrm) -- D:\WINDOWS.0\system32\drivers\InCDRm.sys (Nero AG)
DRV - (InCDPass) -- D:\WINDOWS.0\system32\drivers\InCDPass.sys (Nero AG)
DRV - (InCDRec) -- D:\WINDOWS.0\system32\drivers\InCDrec.sys (Nero AG)
DRV - (gameenum) -- D:\WINDOWS.0\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (nm) -- D:\WINDOWS.0\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (AN983) -- D:\WINDOWS.0\system32\drivers\an983.sys (ADMtek Incorporated.)
DRV - (SANDRA) -- D:\Program Files\SiSoftware\SiSoftware Sandra Professional Home XII.SP2c\WNt500x86\sandra.sys (SiSoftware)
DRV - (LMouKE) -- D:\WINDOWS.0\system32\drivers\LMouKE.Sys (Logitech, Inc.)
DRV - (LMouFilt) -- D:\WINDOWS.0\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- D:\WINDOWS.0\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042mou) -- D:\WINDOWS.0\system32\drivers\L8042mou.Sys (Logitech, Inc.)
DRV - (L8042Kbd) -- D:\WINDOWS.0\system32\drivers\L8042Kbd.sys (Logitech, Inc.)
DRV - (MREMP50) -- D:\Program Files\Common Files\Motive\MREMP50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (MRESP50) -- D:\Program Files\Common Files\Motive\MRESP50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (MXOPSWD) -- D:\WINDOWS.0\system32\drivers\mxopswd.sys (Maxtor Corp.)
DRV - (camvid40) -- D:\WINDOWS.0\system32\drivers\camdrv41.sys (Philips Consumer Electronics)
DRV - (smrt) -- D:\WINDOWS.0\system32\drivers\smrt.sys (Sony Corporation)
DRV - (itchfltr) -- D:\WINDOWS.0\system32\drivers\itchfltr.sys (Logitech, Inc.)
DRV - (als4k) -- D:\WINDOWS.0\system32\drivers\als4000.sys (Avance Logic, Inc.)
DRV - (Vpctcom) -- D:\WINDOWS.0\system32\drivers\vpctcom.sys (PCtel, Inc.)
DRV - (Vvoice) -- D:\WINDOWS.0\system32\drivers\vvoice.sys (PCtel, Inc.)
DRV - (Vmodem) -- D:\WINDOWS.0\system32\drivers\vmodem.sys (PCTEL, INC.)
DRV - (Ptserlp) -- D:\WINDOWS.0\system32\drivers\ptserlp.sys (PCTEL, INC.)
DRV - (DMICall) -- D:\WINDOWS.0\system32\drivers\DMICall.sys (Sony Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS.0\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS.0\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.zoneal...=&tstsId=&ver=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B4 A7 8B 79 3A 0C CA 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0B4A65FE-2087-4F0E-9609-5B154A682F67}: "URL" = http://www.google.co...&rlz=1I7GGLL_en
IE - HKCU\..\SearchScopes\{C365D2C2-CDBB-4D39-84BD-ED1418F9D43C}: "URL" = http://search.zoneal...Id=&ver=&&r=203
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;192.168.*.*
========== FireFox ==========
FF - prefs.js..extensions.enabledAddons: %7B20a82645-c095-46ed-80e3-08825760534b%7D:0.0.0
FF - prefs.js..extensions.enabledAddons: personas%40christopher.beard:1.7.3
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20131118
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS.0\system32\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\WINDOWS.0\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: D:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: D:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: d:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: D:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: d:\WINDOWS.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: D:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: D:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: D:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: D:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: D:\Program Files\Google\Update\1.2.183.29\npGoogleOneClick8.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2013/12/18 13:37:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2014/01/18 02:37:02 | 000,000,000 | ---D | M]
[2009/06/15 15:30:19 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\HESS\Application Data\Mozilla\Extensions
[2014/01/23 03:47:28 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\extensions
[2013/12/19 16:51:17 | 000,000,000 | ---D | M] (WOT) -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2013/12/22 04:15:10 | 000,000,000 | ---D | M] (DownloadHelper) -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013/12/22 06:29:16 | 000,000,000 | ---D | M] ("PrivDog") -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\extensions\PrivDog@AdTrustMedia.com
[2013/12/18 12:24:12 | 000,348,260 | ---- | M] () (No name found) -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\extensions\personas@christopher.beard.xpi
[2014/01/18 01:15:26 | 000,940,775 | ---- | M] () (No name found) -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014/01/23 04:53:21 | 000,002,289 | ---- | M] () -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\searchplugins\alexa.xml
[2014/01/04 02:59:05 | 000,001,100 | ---- | M] () -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\searchplugins\connect-dlc-5-customized-web-search.xml
[2009/06/15 16:41:45 | 000,001,632 | ---- | M] () -- D:\Documents and Settings\HESS\Application Data\Mozilla\Firefox\Profiles\da8qvwrs.default\searchplugins\live-search.xml
[2011/11/09 16:12:29 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions
[2013/12/18 12:22:59 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\browser\extensions
[2013/12/18 12:22:59 | 000,000,000 | ---D | M] (Default) -- D:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/09/01 15:51:30 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- D:\WINDOWS.0\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2004/11/12 22:36:20 | 000,005,120 | ---- | M] (Adobe Systems Incorporated) -- D:\Program Files\mozilla firefox\plugins\NPAdbESD.dll
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - Extension: No name found = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aghgalahdhgjcpjhdeknpodognmmkgeh\2.0_0\
CHR - Extension: No name found = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\anaehjnjgheaikfecjlfokolkoalpnda\1.5.4_0\
CHR - Extension: Docs = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: Docs = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: Google Drive = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: YouTube = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Google Search = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ghkaiibchaggdgpdkmbbgdehaecjhcoc\3.3.4_0\
CHR - Extension: No name found = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icppfcnhkcmnfdhfhphakoifcfokfdhg\5.2_0\
CHR - Extension: No name found = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lbnkklencjcmkepldaineciclcheaoef\1.2_0\
CHR - Extension: No name found = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Gmail = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Gmail = D:\Documents and Settings\HESS\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2014/01/22 20:35:29 | 000,000,027 | ---- | M]) - D:\WINDOWS.0\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] D:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_UI] D:\Program Files\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ShaPlus Bandwidth Meter] "D:\Program Files\ShaPlus Bandwidth Meter\ShaPlus Bandwidth Meter" /s File not found
O4 - HKLM..\Run: [ZoneAlarm] D:\Program Files\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
O4 - HKCU..\Run: [FreeRAM XP] D:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe (YourWare Solutions )
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki... - res://D:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - D:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.co...sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.51.2)
O16 - DPF: {CAEAFE12-7726-4C39-B620-2601216CFBB5} http://phughescw.hug.../Mcci_6-1-0.cab (McciContext Class)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.51.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 184.63.160.68 184.63.160.69 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3F35E9F8-C8F5-44E1-98A7-A03CF2BC6842}: DhcpNameServer = 67.142.164.10 67.142.164.11 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{88C1685A-4604-41DA-89EC-6F6F00B585F0}: DhcpNameServer = 184.63.160.68 184.63.160.69 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS.0\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (D:\WINDOWS.0\system32\userinit.exe) - D:\WINDOWS.0\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (D:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - D:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: D:\Documents and Settings\HESS\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Documents and Settings\HESS\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/06/29 07:52:00 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (D:\PROGRA~1\AVG\AVG2014\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2014/01/23 06:42:59 | 000,000,000 | ---D | C] -- D:\WINDOWS.0\ERUNT
[2014/01/23 05:08:27 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS.0\System32\drivers\mbamswissarmy.sys
[2014/01/23 03:58:06 | 000,000,000 | RH-D | C] -- D:\Documents and Settings\HESS\Recent
[2014/01/23 03:57:11 | 000,000,000 | -HSD | C] -- D:\RECYCLER
[2014/01/22 20:48:25 | 000,012,568 | ---- | C] (Sysinternals - www.sysinternals.com) -- D:\WINDOWS.0\System32\drivers\PROCEXP113.SYS
[2014/01/22 20:00:06 | 000,518,144 | ---- | C] (SteelWerX) -- D:\WINDOWS.0\SWREG.exe
[2014/01/22 20:00:06 | 000,406,528 | ---- | C] (SteelWerX) -- D:\WINDOWS.0\SWSC.exe
[2014/01/22 20:00:06 | 000,212,480 | ---- | C] (SteelWerX) -- D:\WINDOWS.0\SWXCACLS.exe
[2014/01/22 20:00:06 | 000,060,416 | ---- | C] (NirSoft) -- D:\WINDOWS.0\NIRCMD.exe
[2014/01/22 06:39:28 | 000,000,000 | ---D | C] -- D:\Qoobox
[2014/01/22 06:37:30 | 005,173,757 | R--- | C] (Swearware) -- D:\Documents and Settings\HESS\Desktop\ComboFix.exe
[2014/01/22 06:30:23 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Desktop\What The Tech Apps
[2014/01/21 19:27:18 | 000,000,000 | ---D | C] -- D:\AdwCleaner
[2014/01/21 05:48:45 | 000,051,416 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS.0\System32\drivers\mbamchameleon.sys
[2014/01/21 04:10:00 | 000,000,000 | ---D | C] -- D:\SUPERDelete
[2014/01/20 13:38:28 | 000,000,000 | ---D | C] -- D:\Program Files\ShaPlus Bandwidth Meter
[2014/01/20 13:38:28 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Start Menu\Programs\ShaPlus Bandwidth Meter
[2014/01/20 03:07:42 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Desktop\tor
[2014/01/19 04:04:48 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Application Data\SearchModule
[2014/01/19 04:02:55 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Goobzo
[2014/01/19 04:02:44 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Local Settings\Application Data\Installer
[2014/01/19 04:02:23 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Local Settings\Application Data\CrashRpt
[2014/01/18 02:43:57 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Motorola Device Manager
[2014/01/18 02:42:43 | 001,461,992 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS.0\System32\wdfcoinstaller01009.dll
[2014/01/18 02:42:43 | 000,011,264 | ---- | C] (Motorola Inc) -- D:\WINDOWS.0\System32\drivers\motusbdevice.sys
[2014/01/18 02:42:42 | 000,023,936 | ---- | C] (Motorola Mobility Inc) -- D:\WINDOWS.0\System32\drivers\Motousbnet.sys
[2014/01/18 02:42:42 | 000,006,272 | ---- | C] (Motorola Inc) -- D:\WINDOWS.0\System32\drivers\motfilt.sys
[2014/01/18 02:42:37 | 000,021,376 | ---- | C] (Motorola Mobility Inc) -- D:\WINDOWS.0\System32\drivers\motccgp.sys
[2014/01/18 02:42:37 | 000,006,656 | ---- | C] (Motorola) -- D:\WINDOWS.0\System32\drivers\motswch.sys
[2014/01/18 02:42:27 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Desktop\V & Other Pics
[2014/01/16 23:05:36 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Local Settings\Application Data\libimobiledevice
[2014/01/16 03:35:18 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\SlimCleaner
[2014/01/16 03:35:16 | 000,000,000 | ---D | C] -- D:\Program Files\SlimCleaner
[2014/01/16 01:20:50 | 000,264,616 | ---- | C] (Oracle Corporation) -- D:\WINDOWS.0\System32\javaws.exe
[2014/01/16 01:20:34 | 000,175,016 | ---- | C] (Oracle Corporation) -- D:\WINDOWS.0\System32\javaw.exe
[2014/01/16 01:20:34 | 000,174,504 | ---- | C] (Oracle Corporation) -- D:\WINDOWS.0\System32\java.exe
[2014/01/16 01:20:34 | 000,094,632 | ---- | C] (Oracle Corporation) -- D:\WINDOWS.0\System32\WindowsAccessBridge.dll
[2014/01/08 06:27:13 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Local Settings\Application Data\Sun
[2014/01/07 05:19:13 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Java
[2014/01/07 05:17:56 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Application Data\McAfee
[2014/01/07 05:03:21 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Start Menu\Programs\Microsoft Bootvis
[2014/01/07 05:03:13 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft Bootvis
[2014/01/07 04:55:28 | 000,000,000 | ---D | C] -- D:\Fonts Backup
[2014/01/06 04:59:20 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Start Menu\Programs\Music Manager
[2014/01/06 04:59:10 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Local Settings\Application Data\Programs
[2014/01/04 03:01:13 | 000,000,000 | ---D | C] -- D:\Program Files\YourWare Solutions
[2014/01/04 03:01:13 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Start Menu\Programs\FreeRAM XP Pro
[2014/01/04 03:00:57 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\.android
[2014/01/04 03:00:53 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Local Settings\Application Data\cache
[2013/12/29 05:51:41 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Desktop\Ebay Pics
[2013/12/29 03:50:45 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Application Data\WinPatrol
[2013/12/29 03:36:49 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\WinPatrol
[2013/12/29 03:36:48 | 000,000,000 | ---D | C] -- D:\Program Files\BillP Studios
[2013/12/29 03:36:47 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Application Data\InstallMate
[2013/12/25 04:11:12 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- D:\WINDOWS.0\System32\CSVer.dll
[2013/12/25 04:09:37 | 000,000,000 | ---D | C] -- D:\Intel
[2013/12/25 04:08:11 | 000,000,000 | ---D | C] -- D:\adaptec
[2013/12/25 04:00:23 | 000,000,000 | ---D | C] -- D:\Documents and Settings\HESS\Application Data\Sierra Wireless
[2013/12/25 03:14:32 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Microsoft Office Live Add-in
[2002/12/23 06:45:40 | 000,021,866 | ---- | C] (In-System Design, Inc.) -- D:\Program Files\Common Files\tppupd2k.dll
[3 D:\Documents and Settings\HESS\*.tmp files -> D:\Documents and Settings\HESS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2014/01/23 18:26:00 | 000,000,834 | ---- | M] () -- D:\WINDOWS.0\tasks\Adobe Flash Player Updater.job
[2014/01/23 18:12:00 | 000,000,974 | ---- | M] () -- D:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-261903793-1644491937-1003UA.job
[2014/01/23 17:46:00 | 000,000,882 | ---- | M] () -- D:\WINDOWS.0\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/23 17:08:05 | 000,002,206 | ---- | M] () -- D:\WINDOWS.0\System32\wpa.dbl
[2014/01/23 17:07:20 | 000,000,240 | ---- | M] () -- D:\WINDOWS.0\tasks\OGALogon.job
[2014/01/23 17:07:19 | 000,000,882 | ---- | M] () -- D:\WINDOWS.0\tasks\GoogleUpdateTaskMachineCore1cefc1ca1468c7b.job
[2014/01/23 17:07:19 | 000,000,482 | ---- | M] () -- D:\WINDOWS.0\tasks\AVG_SYS_TASK_DELETE.job
[2014/01/23 17:07:19 | 000,000,454 | ---- | M] () -- D:\WINDOWS.0\tasks\AVG_SYS_TASK.job
[2014/01/23 17:07:01 | 000,002,048 | --S- | M] () -- D:\WINDOWS.0\bootstat.dat
[2014/01/23 05:12:01 | 000,000,922 | ---- | M] () -- D:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-261903793-1644491937-1003Core.job
[2014/01/23 05:08:27 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- D:\WINDOWS.0\System32\drivers\mbamswissarmy.sys
[2014/01/22 20:48:25 | 000,012,568 | ---- | M] (Sysinternals - www.sysinternals.com) -- D:\WINDOWS.0\System32\drivers\PROCEXP113.SYS
[2014/01/22 20:35:29 | 000,000,027 | ---- | M] () -- D:\WINDOWS.0\System32\drivers\etc\hosts
[2014/01/22 19:33:25 | 000,002,968 | ---- | M] () -- D:\FixitRegBackup.reg
[2014/01/22 18:54:45 | 000,002,485 | ---- | M] () -- D:\Documents and Settings\HESS\Desktop\Microsoft Excel.lnk
[2014/01/22 06:37:34 | 005,173,757 | R--- | M] (Swearware) -- D:\Documents and Settings\HESS\Desktop\ComboFix.exe
[2014/01/21 05:50:35 | 000,051,416 | ---- | M] (Malwarebytes Corporation) -- D:\WINDOWS.0\System32\drivers\mbamchameleon.sys
[2014/01/21 04:08:15 | 000,002,235 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS.0\Desktop\SlimCleaner.lnk
[2014/01/21 04:07:47 | 000,000,000 | ---- | M] () -- D:\Documents and Settings\HESS\defogger_reenable
[2014/01/20 13:49:34 | 000,002,439 | ---- | M] () -- D:\Documents and Settings\HESS\Desktop\HiJackThis.lnk
[2014/01/20 13:24:00 | 000,000,284 | ---- | M] () -- D:\WINDOWS.0\tasks\AppleSoftwareUpdate.job
[2014/01/20 04:46:31 | 000,002,201 | ---- | M] () -- D:\Documents and Settings\HESS\Application Data\Microsoft\Internet Explorer\Quick Launch\Live From The Press Box.Com.lnk
[2014/01/20 04:46:31 | 000,001,831 | ---- | M] () -- D:\Documents and Settings\HESS\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/01/20 04:46:31 | 000,000,815 | ---- | M] () -- D:\Documents and Settings\HESS\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/01/20 04:46:31 | 000,000,742 | ---- | M] () -- D:\Documents and Settings\HESS\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2014/01/19 02:52:34 | 000,001,324 | ---- | M] () -- D:\WINDOWS.0\System32\d3d9caps.dat
[2014/01/19 02:44:07 | 000,000,460 | ---- | M] () -- D:\WINDOWS.0\tasks\Motorola Device Manager Engine.job
[2014/01/18 03:01:49 | 000,000,476 | ---- | M] () -- D:\WINDOWS.0\tasks\Motorola Device Manager Update.job
[2014/01/18 02:59:21 | 000,000,051 | ---- | M] () -- D:\WINDOWS.0\iTouch.ini
[2014/01/18 02:45:00 | 000,000,000 | -H-- | M] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_motfilt_01009.Wdf
[2014/01/18 02:44:59 | 000,000,000 | -H-- | M] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_Motousbnet_01009.Wdf
[2014/01/18 02:43:18 | 000,000,000 | -H-- | M] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_motccgp_01009.Wdf
[2014/01/18 02:43:12 | 000,000,000 | -H-- | M] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_motusbdevice_01009.Wdf
[2014/01/18 02:43:10 | 000,000,000 | -H-- | M] () -- D:\WINDOWS.0\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2014/01/18 02:37:03 | 000,001,738 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS.0\Desktop\Adobe Reader XI.lnk
[2014/01/18 02:32:14 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS.0\System32\FlashPlayerApp.exe
[2014/01/18 02:32:13 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS.0\System32\FlashPlayerCPLApp.cpl
[2014/01/07 05:59:10 | 000,044,128 | ---- | M] () -- D:\WINDOWS.0\System32\FNTCACHE.DAT
[2013/12/29 05:01:59 | 000,001,798 | ---- | M] () -- D:\Documents and Settings\HESS\Desktop\WinPatrol.lnk
[2013/12/25 03:41:03 | 000,013,464 | ---- | M] () -- D:\WINDOWS.0\System32\drivers\SWDUMon.sys
[2013/12/25 03:40:51 | 000,002,235 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS.0\Desktop\SlimDrivers.lnk
[2013/12/25 03:24:52 | 000,000,682 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS.0\Desktop\CCleaner.lnk
[3 D:\Documents and Settings\HESS\*.tmp files -> D:\Documents and Settings\HESS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2014/01/22 20:00:06 | 000,256,000 | ---- | C] () -- D:\WINDOWS.0\PEV.exe
[2014/01/22 20:00:06 | 000,208,896 | ---- | C] () -- D:\WINDOWS.0\MBR.exe
[2014/01/22 20:00:06 | 000,098,816 | ---- | C] () -- D:\WINDOWS.0\sed.exe
[2014/01/22 20:00:06 | 000,080,412 | ---- | C] () -- D:\WINDOWS.0\grep.exe
[2014/01/22 20:00:06 | 000,068,096 | ---- | C] () -- D:\WINDOWS.0\zip.exe
[2014/01/22 19:20:55 | 000,002,968 | ---- | C] () -- D:\FixitRegBackup.reg
[2014/01/21 04:07:47 | 000,000,000 | ---- | C] () -- D:\Documents and Settings\HESS\defogger_reenable
[2014/01/18 03:01:49 | 000,000,476 | ---- | C] () -- D:\WINDOWS.0\tasks\Motorola Device Manager Update.job
[2014/01/18 02:45:00 | 000,000,000 | -H-- | C] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_motfilt_01009.Wdf
[2014/01/18 02:44:59 | 000,000,000 | -H-- | C] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_Motousbnet_01009.Wdf
[2014/01/18 02:44:27 | 000,000,460 | ---- | C] () -- D:\WINDOWS.0\tasks\Motorola Device Manager Engine.job
[2014/01/18 02:43:18 | 000,000,000 | -H-- | C] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_motccgp_01009.Wdf
[2014/01/18 02:43:12 | 000,000,000 | -H-- | C] () -- D:\WINDOWS.0\System32\drivers\Msft_Kernel_motusbdevice_01009.Wdf
[2014/01/18 02:43:10 | 000,000,000 | -H-- | C] () -- D:\WINDOWS.0\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2014/01/18 02:37:03 | 000,001,738 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS.0\Desktop\Adobe Reader XI.lnk
[2014/01/18 02:37:02 | 000,001,808 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Adobe Reader XI.lnk
[2014/01/16 03:35:19 | 000,002,235 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS.0\Desktop\SlimCleaner.lnk
[2014/01/06 04:58:40 | 000,000,974 | ---- | C] () -- D:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-261903793-1644491937-1003UA.job
[2014/01/06 04:58:39 | 000,000,922 | ---- | C] () -- D:\WINDOWS.0\tasks\GoogleUpdateTaskUserS-1-5-21-220523388-261903793-1644491937-1003Core.job
[2013/12/29 05:01:59 | 000,001,798 | ---- | C] () -- D:\Documents and Settings\HESS\Desktop\WinPatrol.lnk
[2013/12/22 04:37:34 | 000,013,464 | ---- | C] () -- D:\WINDOWS.0\System32\drivers\SWDUMon.sys
[2013/12/19 05:23:29 | 000,003,072 | ---- | C] () -- D:\WINDOWS.0\System32\iacenc.dll
[2013/10/07 00:17:38 | 000,014,272 | ---- | C] () -- D:\WINDOWS.0\System32\drivers\hmd.sys
[2013/02/08 05:03:08 | 002,816,504 | ---- | C] () -- D:\WINDOWS.0\System32\nvdata.data
[2012/01/30 12:54:55 | 000,098,304 | ---- | C] () -- D:\WINDOWS.0\System32\redmonnt.dll
[2010/08/31 05:28:53 | 000,000,036 | ---- | C] () -- D:\Documents and Settings\HESS\Local Settings\Application Data\housecall.guid.cache
[2010/07/04 03:20:27 | 000,000,091 | ---- | C] () -- D:\Documents and Settings\HESS\Application Data\default.pls
[2010/05/09 03:49:57 | 000,000,600 | ---- | C] () -- D:\Documents and Settings\HESS\Local Settings\Application Data\PUTTY.RND
[2010/04/28 03:50:49 | 001,401,344 | ---- | C] () -- D:\Program Files\HijackThis.msi
[2009/12/14 18:48:49 | 000,001,024 | ---- | C] () -- D:\Documents and Settings\HESS\.rnd
[2009/09/21 17:04:52 | 000,000,568 | RHS- | C] () -- D:\Documents and Settings\All Users.WINDOWS.0\ntuser.pol
[2009/06/21 02:48:15 | 007,118,848 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS.0\Application Data\sandra.mda
[2009/06/15 15:51:18 | 000,036,864 | ---- | C] () -- D:\Documents and Settings\HESS\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/06/09 18:00:24 | 000,000,086 | ---- | C] () -- D:\Documents and Settings\HESS\DelB18.bat
========== ZeroAccess Check ==========
[2009/06/09 17:49:41 | 000,000,227 | RHS- | M] () -- D:\WINDOWS.0\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2009/04/28 23:46:52 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/02/09 07:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008/04/14 07:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
< End of report >
Thanks again so very much;
Bill