WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93084 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Outfox.tv removal help [Solved]

Started by Natfrangou , Apr 01 2014 07:23 AM

This topic is locked

14 replies to this topic

#1 Natfrangou

New Member

Authentic Member
7 posts

Posted 01 April 2014 - 07:23 AM

Hi,

I've got something on my computer called Outfox.tv. Any help you can offer removing it would be greatly appreciated. It's changed the homepage on my browsers and creates lots of pop ups. Turns out Conduit was also installed along with it.

hijackthis:

Logfile of Trend Micro HijackThis v2.0.5

Scan saved at 13:44:36, on 01/04/2014

Platform: Unknown Windows (WinNT 6.02.1008)

MSIE: Internet Explorer v11.0 (11.00.9600.16518)

FIREFOX: 28.0 (en-US)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Nathaniel\AppData\Roaming\Search Protection\SearchProtection.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\OutfoxTV\OutfoxTV\DesktopContainer.exe

C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Nathaniel\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.outfox.tv/?referid=

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft..../?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearc...r=204900537&ir=

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: FindRight - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files (x86)\FindRight\FindRightbho.dll

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files (x86)\Mysearchdial\1.8.21.0\bh\mysearchdial.dll

O3 - Toolbar: mysearchdial Toolbar - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.21.0\mysearchdialTlbr.dll

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll" (file missing)

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [StatusAlerts] "C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on

O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_4F6BA42AF0EA495F169444359A24FF26] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

O4 - HKCU\..\Run: [SearchProtection] "C:\Users\Nathaniel\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart

O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Nathaniel\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [OutfoxTV] C:\Program Files\OutfoxTV\OutfoxTV\DesktopContainer.exe

O4 - Startup: Dropbox.lnk = C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000

O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL

O20 - AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll C:\Windows\SysWOW64\nvinit.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Just Develop It - C:\Program Files (x86)\MyPC Backup\BackupStack.exe

O23 - Service: Search Protect by Conduit Service (CltMngSvc) - Conduit - C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: HP DS Service - Hewlett-Packard Company - C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe

O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\nlssrv32.exe

O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: OutfoxTvService - Outfox Tv Productions Pty Ltd - C:\Program Files\OutfoxTV\OutfoxTvService.exe

O23 - Service: OutfoxTvUpdater - Outfox Tv Productions Pty Ltd - C:\Program Files\OutfoxTV\OutfoxTvUpdater.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

End of file - 11668 bytes

OTL

OTL logfile created on: 01/04/2014 14:08:45 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Nathaniel\Downloads

64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.16521)

Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

5.90 Gb Total Physical Memory | 4.42 Gb Available Physical Memory | 74.93% Memory free

6.84 Gb Paging File | 5.23 Gb Available in Paging File | 76.46% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 465.42 Gb Total Space | 415.06 Gb Free Space | 89.18% Space Free | Partition Type: NTFS

Computer Name: MA-LAPTOP | User Name: Nathaniel | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/04/01 13:51:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Nathaniel\Downloads\OTL.exe

PRC - [2014/03/30 12:05:12 | 002,466,080 | ---- | M] (Conduit) -- C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe

PRC - [2014/03/28 15:16:18 | 000,228,744 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe

PRC - [2014/03/27 08:09:28 | 000,318,864 | ---- | M] (Outfox Tv Productions Pty Ltd) -- C:\Program Files\OutfoxTV\OutfoxTV\DesktopContainer.exe

PRC - [2014/03/25 05:45:30 | 000,259,472 | ---- | M] (Outfox Tv Productions Pty Ltd) -- C:\Program Files\OutfoxTV\OutfoxTvUpdater.exe

PRC - [2014/03/25 05:45:22 | 000,610,192 | ---- | M] (Outfox Tv Productions Pty Ltd) -- C:\Program Files\OutfoxTV\OutfoxTvService.exe

PRC - [2014/03/19 13:24:28 | 000,842,088 | ---- | M] (Spigot, Inc.) -- C:\Users\Nathaniel\AppData\Roaming\Search Protection\SearchProtection.exe

PRC - [2014/03/15 01:50:42 | 000,859,976 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

PRC - [2014/02/08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2014/02/01 00:16:26 | 032,179,440 | ---- | M] (Dropbox, Inc.) -- C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\Dropbox.exe

PRC - [2014/01/21 03:57:40 | 002,234,144 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

PRC - [2014/01/21 03:57:07 | 001,593,632 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

PRC - [2013/12/21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2013/12/15 22:06:36 | 000,070,768 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\nlssrv32.exe

PRC - [2013/08/22 03:54:00 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cmd.exe

PRC - [2012/07/18 13:02:42 | 000,313,248 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe

PRC - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe

PRC - [2012/01/25 16:23:54 | 000,240,408 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE

========== Modules (No Company Name) ==========

MOD - [2014/04/01 13:57:08 | 000,027,136 | ---- | M] () -- C:\Users\NATHAN~1\AppData\Local\Temp\CertMon.dll

MOD - [2014/04/01 13:38:37 | 000,041,984 | ---- | M] () -- c:\users\nathan~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfnzoff.dll

MOD - [2014/03/15 01:50:40 | 013,637,448 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll

MOD - [2014/03/15 01:50:40 | 000,394,568 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppgooglenaclpluginchrome.dll

MOD - [2014/03/15 01:50:38 | 004,061,000 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll

MOD - [2014/03/15 01:50:35 | 000,716,616 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll

MOD - [2014/03/15 01:50:34 | 000,100,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll

MOD - [2014/03/15 01:50:32 | 001,647,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

MOD - [2014/03/15 01:50:30 | 000,051,016 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll

MOD - [2014/02/08 19:34:51 | 000,013,088 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll

MOD - [2014/01/03 04:42:50 | 003,610,624 | ---- | M] () -- C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll

MOD - [2013/11/13 02:13:53 | 005,287,936 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

MOD - [2013/10/24 05:38:44 | 004,554,752 | ---- | M] () -- C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

MOD - [2013/10/19 00:55:02 | 025,100,288 | ---- | M] () -- C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\libcef.dll

MOD - [2013/08/17 01:06:32 | 002,052,096 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll

MOD - [2013/08/17 01:06:31 | 005,025,792 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

MOD - [2013/08/17 01:06:31 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

MOD - [2013/08/17 01:06:31 | 000,131,072 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

MOD - [2013/08/17 01:06:31 | 000,114,688 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

MOD - [2013/08/17 01:06:30 | 003,198,976 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

MOD - [2013/08/17 01:06:30 | 000,970,752 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

MOD - [2013/08/17 01:06:30 | 000,630,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

MOD - [2013/08/17 01:06:29 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll

MOD - [2013/08/17 01:06:23 | 000,010,752 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

========== Services (SafeList) ==========

SRV:64bit: - [2014/03/25 05:45:30 | 000,259,472 | ---- | M] (Outfox Tv Productions Pty Ltd) [Auto | Running] -- C:\Program Files\OutfoxTV\OutfoxTvUpdater.exe -- (OutfoxTvUpdater)

SRV:64bit: - [2014/03/25 05:45:22 | 000,610,192 | ---- | M] (Outfox Tv Productions Pty Ltd) [Auto | Running] -- C:\Program Files\OutfoxTV\OutfoxTvService.exe -- (OutfoxTvService)

SRV:64bit: - [2014/02/06 11:48:45 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:64bit: - [2014/01/21 03:56:53 | 016,939,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)

SRV:64bit: - [2013/11/27 16:36:30 | 003,395,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)

SRV:64bit: - [2013/11/27 10:17:40 | 000,263,168 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)

SRV:64bit: - [2013/11/23 05:50:00 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)

SRV:64bit: - [2013/11/08 04:41:17 | 001,302,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)

SRV:64bit: - [2013/10/31 01:29:53 | 000,348,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)

SRV:64bit: - [2013/10/31 01:29:53 | 000,023,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)

SRV:64bit: - [2013/10/22 02:53:47 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)

SRV:64bit: - [2013/10/04 09:10:59 | 000,533,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)

SRV:64bit: - [2013/09/21 06:38:15 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)

SRV:64bit: - [2013/09/21 06:34:45 | 001,555,456 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)

SRV:64bit: - [2013/08/31 11:00:10 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)

SRV:64bit: - [2013/08/22 21:59:55 | 000,183,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV:64bit: - [2013/08/22 21:59:55 | 000,090,464 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\KeyboardFilterSvc.dll -- (MsKeyboardFilter)

SRV:64bit: - [2013/08/22 13:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)

SRV:64bit: - [2013/08/22 12:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)

SRV:64bit: - [2013/08/22 12:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)

SRV:64bit: - [2013/08/22 12:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)

SRV:64bit: - [2013/08/22 12:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)

SRV:64bit: - [2013/08/22 12:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)

SRV:64bit: - [2013/08/22 11:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)

SRV:64bit: - [2013/08/22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)

SRV:64bit: - [2013/08/22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)

SRV:64bit: - [2013/08/22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)

SRV:64bit: - [2013/08/22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)

SRV:64bit: - [2013/08/22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)

SRV:64bit: - [2013/08/22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)

SRV:64bit: - [2013/08/22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)

SRV:64bit: - [2013/08/22 11:04:53 | 000,716,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)

SRV:64bit: - [2013/08/22 11:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)

SRV:64bit: - [2013/08/22 10:59:26 | 000,832,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)

SRV:64bit: - [2013/08/22 10:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)

SRV:64bit: - [2013/08/22 10:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)

SRV:64bit: - [2013/08/22 10:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)

SRV:64bit: - [2013/08/22 10:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)

SRV:64bit: - [2013/08/22 10:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)

SRV:64bit: - [2013/08/22 10:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)

SRV:64bit: - [2013/08/22 10:40:14 | 000,398,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)

SRV:64bit: - [2013/08/22 10:39:33 | 000,198,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)

SRV:64bit: - [2013/08/22 10:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)

SRV:64bit: - [2013/08/22 10:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)

SRV - [2014/03/30 12:05:12 | 002,466,080 | ---- | M] (Conduit) [Auto | Running] -- C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe -- (CltMngSvc)

SRV - [2014/03/29 15:21:14 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2014/03/14 15:17:00 | 000,036,392 | ---- | M] (Just Develop It) [Auto | Running] -- C:\Program Files (x86)\MyPC Backup\BackupStack.exe -- (BackupStack)

SRV - [2014/03/13 09:25:50 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2014/02/08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2014/01/21 03:57:07 | 001,593,632 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)

SRV - [2013/12/21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2013/12/21 01:02:54 | 000,279,000 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)

SRV - [2013/12/15 22:06:36 | 000,070,768 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\nlssrv32.exe -- (nlsX86cc)

SRV - [2013/10/23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2013/08/31 10:25:30 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)

SRV - [2013/08/22 13:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)

SRV - [2013/08/22 04:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)

SRV - [2013/08/22 03:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)

SRV - [2012/05/02 22:02:16 | 000,164,864 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)

SRV - [2012/01/25 16:23:54 | 000,240,408 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE -- (BBUpdate)

SRV - [2012/01/25 16:23:54 | 000,192,792 | ---- | M] (Microsoft Corporation.) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.EXE -- (BBSvc)

SRV - [2011/10/17 16:51:54 | 000,013,824 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] -- C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe -- (HP DS Service)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/02/08 19:34:51 | 000,032,544 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)

DRV:64bit: - [2014/01/08 02:46:27 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)

DRV:64bit: - [2013/12/27 19:42:26 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)

DRV:64bit: - [2013/12/21 01:02:44 | 004,216,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2013/12/20 00:18:36 | 000,099,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)

DRV:64bit: - [2013/12/15 00:34:54 | 000,039,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)

DRV:64bit: - [2013/12/15 00:34:54 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)

DRV:64bit: - [2013/11/11 03:48:41 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)

DRV:64bit: - [2013/11/01 12:39:53 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)

DRV:64bit: - [2013/10/31 01:58:59 | 000,372,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)

DRV:64bit: - [2013/10/31 01:29:36 | 000,236,888 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)

DRV:64bit: - [2013/10/31 01:29:36 | 000,124,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)

DRV:64bit: - [2013/10/31 01:28:47 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)

DRV:64bit: - [2013/10/26 02:54:32 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)

DRV:64bit: - [2013/10/13 03:48:34 | 000,136,536 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)

DRV:64bit: - [2013/10/05 16:25:54 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)

DRV:64bit: - [2013/09/25 23:52:42 | 003,589,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwbw02.sys -- (NETwNb64)

DRV:64bit: - [2013/09/21 13:10:51 | 000,236,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)

DRV:64bit: - [2013/09/17 10:18:30 | 000,467,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)

DRV:64bit: - [2013/09/14 15:06:57 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)

DRV:64bit: - [2013/08/22 21:59:57 | 000,022,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbldfltr.sys -- (kbldfltr)

DRV:64bit: - [2013/08/22 21:59:55 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2013/08/22 21:59:46 | 000,220,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid)

DRV:64bit: - [2013/08/22 21:59:46 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbusr.sys -- (vmbusr)

DRV:64bit: - [2013/08/22 21:59:46 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsp.sys -- (storvsp)

DRV:64bit: - [2013/08/22 21:59:46 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcivsp.sys -- (vpcivsp)

DRV:64bit: - [2013/08/22 21:59:46 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)

DRV:64bit: - [2013/08/22 14:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)

DRV:64bit: - [2013/08/22 14:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2013/08/22 13:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)

DRV:64bit: - [2013/08/22 13:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)

DRV:64bit: - [2013/08/22 13:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)

DRV:64bit: - [2013/08/22 13:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)

DRV:64bit: - [2013/08/22 13:43:48 | 000,146,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)

DRV:64bit: - [2013/08/22 13:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)

DRV:64bit: - [2013/08/22 13:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2013/08/22 13:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2013/08/22 13:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)

DRV:64bit: - [2013/08/22 13:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2013/08/22 13:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)

DRV:64bit: - [2013/08/22 13:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)

DRV:64bit: - [2013/08/22 13:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2013/08/22 13:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2013/08/22 13:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)

DRV:64bit: - [2013/08/22 13:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2013/08/22 13:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)

DRV:64bit: - [2013/08/22 13:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)

DRV:64bit: - [2013/08/22 13:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2013/08/22 13:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)

DRV:64bit: - [2013/08/22 13:43:33 | 000,189,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)

DRV:64bit: - [2013/08/22 13:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)

DRV:64bit: - [2013/08/22 13:43:32 | 000,078,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)

DRV:64bit: - [2013/08/22 13:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2013/08/22 13:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)

DRV:64bit: - [2013/08/22 13:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)

DRV:64bit: - [2013/08/22 13:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)

DRV:64bit: - [2013/08/22 13:41:08 | 000,054,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)

DRV:64bit: - [2013/08/22 13:39:44 | 000,377,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)

DRV:64bit: - [2013/08/22 13:39:15 | 000,924,512 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS)

DRV:64bit: - [2013/08/22 13:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)

DRV:64bit: - [2013/08/22 13:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)

DRV:64bit: - [2013/08/22 13:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)

DRV:64bit: - [2013/08/22 12:39:58 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)

DRV:64bit: - [2013/08/22 12:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)

DRV:64bit: - [2013/08/22 12:39:50 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)

DRV:64bit: - [2013/08/22 12:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)

DRV:64bit: - [2013/08/22 12:39:28 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)

DRV:64bit: - [2013/08/22 12:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)

DRV:64bit: - [2013/08/22 12:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)

DRV:64bit: - [2013/08/22 12:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)

DRV:64bit: - [2013/08/22 12:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)

DRV:64bit: - [2013/08/22 12:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)

DRV:64bit: - [2013/08/22 12:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)

DRV:64bit: - [2013/08/22 12:38:23 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb22.sys -- (xusb22)

DRV:64bit: - [2013/08/22 12:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)

DRV:64bit: - [2013/08/22 12:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)

DRV:64bit: - [2013/08/22 12:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)

DRV:64bit: - [2013/08/22 12:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)

DRV:64bit: - [2013/08/22 12:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2013/08/22 12:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)

DRV:64bit: - [2013/08/22 12:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2013/08/22 12:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)

DRV:64bit: - [2013/08/22 12:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)

DRV:64bit: - [2013/08/22 12:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)

DRV:64bit: - [2013/08/22 12:36:37 | 000,224,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)

DRV:64bit: - [2013/08/22 12:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)

DRV:64bit: - [2013/08/22 12:36:17 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)

DRV:64bit: - [2013/08/22 12:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)

DRV:64bit: - [2013/08/22 12:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)

DRV:64bit: - [2013/08/22 11:27:46 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)

DRV:64bit: - [2013/08/22 09:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)

DRV:64bit: - [2013/08/13 00:25:46 | 000,017,624 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)

DRV:64bit: - [2013/08/10 01:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)

DRV:64bit: - [2013/07/30 19:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)

DRV:64bit: - [2013/07/25 20:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)

DRV:64bit: - [2013/06/18 15:46:17 | 000,591,360 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)

DRV:64bit: - [2013/06/18 15:45:43 | 004,649,440 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETwew02.sys -- (NETwNe64)

DRV:64bit: - [2013/01/24 19:12:08 | 000,010,752 | ---- | M] (OSR Open Systems Resources, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\DellRbtn.sys -- (DellRbtn)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearc...r=204900537&ir=

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE:64bit: - HKLM\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://start.mysearc...r=204900537&ir=

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearc...r=204900537&ir=

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://search.conduit.com/?gd=&cti [Binary data over 200 bytes]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.outfox.tv/?referid=

IE - HKCU\..\SearchScopes,DefaultScope = {F3790D08-4135-48A5-9B70-05BEE3956152}

IE - HKCU\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://start.mysearc...r=204900537&ir=

IE - HKCU\..\SearchScopes\{F3790D08-4135-48A5-9B70-05BEE3956152}: "URL" = http://uk.search.yah...p={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.search.suggest.enabled: false

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://www.outfox.tv....google.co.uk/"

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.0

FF - prefs.js..keyword.URL: "http://uk.search.yah...type=599486&p="

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Nathaniel\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014/03/29 15:21:02 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014/03/29 15:21:02 | 000,000,000 | ---D | M]

[2014/02/24 20:06:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathaniel\AppData\Roaming\mozilla\Extensions

[2014/03/20 22:27:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathaniel\AppData\Roaming\mozilla\Firefox\Profiles\rroi02vo.default\extensions

[2014/02/27 16:09:00 | 000,957,290 | ---- | M] () (No name found) -- C:\Users\Nathaniel\AppData\Roaming\mozilla\firefox\profiles\rroi02vo.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

[2014/03/31 22:42:07 | 000,001,030 | ---- | M] () -- C:\Users\Nathaniel\AppData\Roaming\mozilla\firefox\profiles\rroi02vo.default\searchplugins\conduit-search.xml

[2014/02/28 00:12:57 | 000,000,922 | ---- | M] () -- C:\Users\Nathaniel\AppData\Roaming\mozilla\firefox\profiles\rroi02vo.default\searchplugins\yahoo_ff.xml

[2014/03/29 15:21:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions

[2014/03/29 15:21:15 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2013/11/15 04:32:00 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

========== Chrome ==========

CHR - default_search_provider: Conduit Search (Enabled)

CHR - default_search_provider: search_url = http://search.condui...rchTerms}&SSPV=

CHR - default_search_provider: suggest_url = ,

CHR - homepage: http://search.condui...E74740E56&SSPV=

CHR - plugin: Error reading preferences file

CHR - Extension: Google Docs = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\

CHR - Extension: Google Drive = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\

CHR - Extension: YouTube = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\

CHR - Extension: Google Search = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\

CHR - Extension: ZenMate for Google Chromeâ„¢ = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme\3.3_0\

CHR - Extension: AdBlock = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.23_0\

CHR - Extension: Google Wallet = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: Gmail = C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\

O1 HOSTS File: ([2013/08/22 14:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2 - BHO: (FindRight) - {2c774641-5504-46a8-b63f-6715ae3fe376} - C:\Program Files (x86)\FindRight\FindRightBHO.dll (FindRight)

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (mysearchdial Helper Object) - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files (x86)\Mysearchdial\1.8.21.0\bh\mysearchdial.dll (Ironsource Israel (2011) LTD)

O3 - HKLM\..\Toolbar: (mysearchdial Toolbar) - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files (x86)\Mysearchdial\1.8.21.0\mysearchdialTlbr.dll (Ironsource Israel (2011) LTD)

O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [HP LaserJet 200 color MFP M276 Series Fax] C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe (Hewlett-Packard Company)

O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [StatusAlerts] C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe (Hewlett-Packard Company)

O4 - HKCU..\Run: [Facebook Update] C:\Users\Nathaniel\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)

O4 - HKCU..\Run: [GoogleChromeAutoLaunch_4F6BA42AF0EA495F169444359A24FF26] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKCU..\Run: [OutfoxTV] C:\Program Files\OutfoxTV\OutfoxTV\DesktopContainer.exe (Outfox Tv Productions Pty Ltd)

O4 - HKCU..\Run: [SearchProtection] C:\Users\Nathaniel\AppData\Roaming\Search Protection\SearchProtection.EXE (Spigot, Inc.)

O4 - Startup: C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O4 - Startup: C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 8.8.4.4

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{66070FB6-F290-47C0-84BD-E83204150AFC}: DhcpNameServer = 8.8.8.8 8.8.4.4

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95B3F918-8C29-481F-B622-D862464C9667}: DhcpNameServer = 8.8.8.8 8.8.4.4

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18 - Protocol\Handler\ms-help - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (Conduit)

O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)

O20 - AppInit_DLLs: (C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (Conduit)

O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:64bit: lfsvc - C:\Windows\SysNative\GeofenceMonitorService.dll (Microsoft Corporation)

NetSvcs:64bit: wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)

NetSvcs:64bit: DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)

NetSvcs:64bit: NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

NetSvcs:64bit: MsKeyboardFilter - C:\Windows\SysNative\KeyboardFilterSvc.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2014/04/01 14:02:47 | 000,688,992 | ---- | C] (Swearware) -- C:\Users\Nathaniel\Desktop\dds (1).scr

[2014/03/31 22:43:05 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Roaming\Systweak

[2014/03/31 22:42:24 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Local\Programs

[2014/03/31 22:42:11 | 000,000,000 | ---D | C] -- C:\Program Files\OutfoxTV

[2014/03/31 22:42:03 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Local\SearchProtect

[2014/03/31 22:41:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SearchProtect

[2014/03/31 22:41:34 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup

[2014/03/31 22:41:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup

[2014/03/31 21:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies

[2014/03/31 21:30:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild

[2014/03/31 21:30:44 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies

[2014/03/31 21:30:44 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild

[2014/03/31 21:29:39 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationNative_v0300.dll

[2014/03/31 21:29:39 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll

[2014/03/31 21:29:39 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TsWpfWrp.exe

[2014/03/31 21:29:38 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationNative_v0300.dll

[2014/03/31 21:29:38 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll

[2014/03/31 21:29:38 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsWpfWrp.exe

[2014/03/31 21:11:46 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\Documents\My Kindle Content

[2014/03/31 21:11:42 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

[2014/03/31 21:11:41 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Local\Amazon

[2014/03/31 21:11:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Amazon

[2014/03/30 22:05:25 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Local\Facebook

[2014/03/29 15:21:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2014/03/22 21:26:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

[2014/03/22 21:26:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight

[2014/03/22 21:26:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight

[2014/03/18 13:40:36 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe

[2014/03/18 13:40:35 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe

[2014/03/17 19:15:04 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Local\Diagnostics

[2014/03/14 20:49:14 | 000,236,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdFilter.sys

[2014/03/14 20:49:11 | 000,035,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdBoot.sys

[2014/03/14 20:49:10 | 000,124,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdNisDrv.sys

[2014/03/14 07:08:52 | 001,643,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi

[2014/03/14 07:08:52 | 001,507,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe

[2014/03/14 07:08:37 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe

[2014/03/14 07:08:33 | 005,768,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2014/03/14 07:08:31 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll

[2014/03/14 07:08:31 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll

[2014/03/14 07:08:31 | 000,627,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll

[2014/03/14 07:08:20 | 006,640,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll

[2014/03/14 07:08:20 | 005,770,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll

[2014/03/14 07:08:19 | 002,143,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcore.dll

[2014/03/14 07:08:19 | 002,133,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcore.dll

[2014/03/14 07:08:19 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvidcrl.dll

[2014/03/14 07:08:19 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvidcrl.dll

[2014/03/14 07:08:18 | 004,175,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll

[2014/03/14 07:08:18 | 001,928,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\combase.dll

[2014/03/14 07:08:18 | 001,371,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\combase.dll

[2014/03/14 07:08:18 | 001,287,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll

[2014/03/14 07:08:18 | 000,764,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmpeg2srcsnk.dll

[2014/03/14 07:08:18 | 000,669,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmpeg2srcsnk.dll

[2014/03/14 07:08:17 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll

[2014/03/14 07:08:17 | 001,486,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll

[2014/03/14 07:08:17 | 001,238,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll

[2014/03/14 07:08:17 | 000,458,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFault.exe

[2014/03/14 07:08:17 | 000,408,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFault.exe

[2014/03/14 07:08:17 | 000,407,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll

[2014/03/14 07:08:17 | 000,369,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll

[2014/03/14 07:08:17 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll

[2014/03/14 07:08:17 | 000,233,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll

[2014/03/14 07:08:17 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll

[2014/03/14 07:08:16 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll

[2014/03/14 07:08:16 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWWIN.EXE

[2014/03/14 07:08:16 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWWIN.EXE

[2014/03/14 07:08:16 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll

[2014/03/14 07:08:16 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll

[2014/03/14 07:07:58 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll

[2014/03/14 07:07:58 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll

[2014/03/08 18:20:54 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\Desktop\Issue Boarding Pass_files

[2014/03/06 12:06:54 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Roaming\Hewlett-Packard Company

[2014/03/06 12:06:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft

[2014/03/06 12:06:14 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\HP_LaserJet_Fax_0_6

[2014/03/06 12:06:07 | 000,027,704 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\hppfaxprintermon5.dll

[2014/03/06 12:06:07 | 000,022,072 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\hppfaxprintermonui5.dll

[2014/03/06 12:05:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

[2014/03/06 12:05:37 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\AppData\Roaming\HpUpdate

[2014/03/06 12:05:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard

[2014/03/06 12:05:09 | 000,000,000 | ---D | C] -- C:\Users\Nathaniel\Desktop\HP

[2014/03/06 12:01:06 | 000,511,488 | ---- | C] (HP) -- C:\Windows\SysWow64\hpcdmc32.DLL

[2014/03/06 12:01:06 | 000,311,808 | ---- | C] (Hewlett-Packard Corporation) -- C:\Windows\SysNative\hpcpn117.dll

[2014/03/06 12:00:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP

[2014/03/06 12:00:18 | 000,000,000 | ---D | C] -- C:\ProgramData\HP

[2014/03/06 12:00:00 | 000,947,104 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpptsplj276_x64.dll

[2014/03/06 12:00:00 | 000,776,096 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysWow64\hpptsplj276.dll

[2014/03/06 12:00:00 | 000,638,008 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpzjcd01.dll

[2014/03/06 12:00:00 | 000,522,128 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpwia2_lj276.dll

[2014/03/06 12:00:00 | 000,217,656 | ---- | C] (Hewlett Packard) -- C:\Windows\SysNative\hppscancoins64.dll

[2014/03/06 11:59:57 | 000,311,296 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpbcoins64.dll

[2014/03/06 11:59:27 | 000,000,000 | ---D | C] -- C:\HP_LaserJet_200_color_MFP_M276

========== Files - Modified Within 30 Days ==========

[2014/04/01 14:03:01 | 000,688,992 | ---- | M] (Swearware) -- C:\Users\Nathaniel\Desktop\dds (1).scr

[2014/04/01 14:02:15 | 000,625,664 | ---- | M] () -- C:\Users\Nathaniel\Desktop\dds.scr

[2014/04/01 13:59:01 | 000,000,326 | ---- | M] () -- C:\Windows\tasks\MySearchDial.job

[2014/04/01 13:57:03 | 000,000,326 | ---- | M] () -- C:\Windows\tasks\UpdaterEX.job

[2014/04/01 13:57:03 | 000,000,179 | ---- | M] () -- C:\Users\Nathaniel\AppData\Roaming\WB.CFG

[2014/04/01 13:41:53 | 000,863,592 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2014/04/01 13:41:53 | 000,735,932 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2014/04/01 13:41:53 | 000,139,816 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2014/04/01 13:39:14 | 000,002,203 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014/04/01 13:39:01 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/04/01 13:38:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/04/01 07:24:41 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/04/01 07:23:31 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys

[2014/04/01 07:23:26 | 773,910,527 | -HS- | M] () -- C:\hiberfil.sys

[2014/04/01 07:21:07 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/04/01 07:10:00 | 000,000,964 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003UA.job

[2014/03/31 22:41:36 | 000,001,985 | ---- | M] () -- C:\Users\Nathaniel\Desktop\Sync Folder.lnk

[2014/03/31 22:41:34 | 000,001,113 | ---- | M] () -- C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

[2014/03/31 22:41:34 | 000,001,103 | ---- | M] () -- C:\Users\Nathaniel\Desktop\MyPC Backup.lnk

[2014/03/31 22:10:00 | 000,000,942 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003Core.job

[2014/03/31 21:11:42 | 000,002,014 | ---- | M] () -- C:\Users\Nathaniel\Desktop\Kindle.lnk

[2014/03/15 02:47:05 | 000,473,392 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2014/03/14 20:11:21 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_wpdcomp_01_11_00.Wdf

[2014/03/14 20:11:20 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

[2014/03/08 18:20:54 | 000,020,148 | ---- | M] () -- C:\Users\Nathaniel\Desktop\Issue Boarding Pass.htm

[2014/03/06 12:06:15 | 000,001,272 | ---- | M] () -- C:\Users\Public\Desktop\HP LJ200 M276 Scan.lnk

[2014/03/06 12:06:07 | 000,000,608 | -HS- | M] () -- C:\Windows\SysNative\winzvprt5.sys

[2014/03/06 12:06:07 | 000,000,242 | ---- | M] () -- C:\Windows\SysNative\hppfaxprinter5.ini

[2014/03/06 12:05:48 | 000,001,297 | ---- | M] () -- C:\Users\Public\Desktop\HP LaserJet 200 color MFP M276 - Help & Learn Center.lnk

[2014/03/06 12:05:09 | 000,000,168 | ---- | M] () -- C:\Windows\SysNative\AddPort.ini

[2014/03/04 23:53:05 | 000,105,464 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

[2014/03/04 23:53:04 | 000,693,240 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe

========== Files Created - No Company Name ==========

[2014/04/01 14:02:07 | 000,625,664 | ---- | C] () -- C:\Users\Nathaniel\Desktop\dds.scr

[2014/03/31 22:41:36 | 000,001,985 | ---- | C] () -- C:\Users\Nathaniel\Desktop\Sync Folder.lnk

[2014/03/31 22:41:34 | 000,001,113 | ---- | C] () -- C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

[2014/03/31 22:41:34 | 000,001,103 | ---- | C] () -- C:\Users\Nathaniel\Desktop\MyPC Backup.lnk

[2014/03/31 21:11:42 | 000,002,014 | ---- | C] () -- C:\Users\Nathaniel\Desktop\Kindle.lnk

[2014/03/30 22:05:28 | 000,000,964 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003UA.job

[2014/03/30 22:05:27 | 000,000,942 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003Core.job

[2014/03/14 20:11:21 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_wpdcomp_01_11_00.Wdf

[2014/03/14 20:11:20 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

[2014/03/14 07:08:16 | 000,386,722 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml

[2014/03/08 18:20:54 | 000,020,148 | ---- | C] () -- C:\Users\Nathaniel\Desktop\Issue Boarding Pass.htm

[2014/03/06 12:06:15 | 000,001,272 | ---- | C] () -- C:\Users\Public\Desktop\HP LJ200 M276 Scan.lnk

[2014/03/06 12:06:07 | 000,000,608 | -HS- | C] () -- C:\Windows\SysNative\winzvprt5.sys

[2014/03/06 12:06:07 | 000,000,242 | ---- | C] () -- C:\Windows\SysNative\hppfaxprinter5.ini

[2014/03/06 12:05:48 | 000,001,297 | ---- | C] () -- C:\Users\Public\Desktop\HP LaserJet 200 color MFP M276 - Help & Learn Center.lnk

[2014/03/06 12:05:09 | 000,000,168 | ---- | C] () -- C:\Windows\SysNative\AddPort.ini

[2014/03/06 12:01:06 | 000,316,928 | ---- | C] () -- C:\Windows\SysWow64\hpcc3117.DLL

[2014/02/24 19:57:24 | 000,000,179 | ---- | C] () -- C:\Users\Nathaniel\AppData\Roaming\WB.CFG

[2014/02/12 16:18:11 | 000,103,936 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll

[2013/12/21 01:02:44 | 000,280,064 | ---- | C] () -- C:\Windows\SysWow64\igdmd32.dll

[2013/12/21 01:02:40 | 000,182,272 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll

[2013/12/21 01:02:40 | 000,142,848 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll

[2013/08/22 16:36:43 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat

[2013/08/22 16:36:42 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT

[2013/08/22 15:46:23 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat

[2013/08/22 08:01:23 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin

[2013/08/22 04:32:36 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll

[2013/08/22 00:55:20 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[2013/08/22 00:52:39 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== ZeroAccess Check ==========

[2014/03/31 22:41:35 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/12/09 09:05:24 | 021,199,256 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/12/09 05:51:04 | 018,643,560 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013/08/22 10:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2013/08/22 03:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013/08/22 10:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >

[2013/08/22 21:57:03 | 000,003,671 | ---- | M] () MD5=007B16AEF3E958080573CDB80648167D -- C:\Windows\PolicyDefinitions\en-US\Explorer.adml

[2013/08/22 21:57:03 | 000,003,671 | ---- | M] () MD5=007B16AEF3E958080573CDB80648167D -- C:\Windows\WinSxS\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.3.9600.16384_en-us_13bedf9d3e4c78d1\Explorer.adml

< MD5 for: EXPLORER.ADMX >

[2013/06/18 15:57:40 | 000,003,836 | ---- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 -- C:\Windows\PolicyDefinitions\Explorer.admx

[2013/06/18 15:57:40 | 000,003,836 | ---- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 -- C:\Windows\WinSxS\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.3.9600.16384_none_067909bec4cce684\Explorer.admx

< MD5 for: EXPLORER.EXE >

[2013/10/22 07:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) MD5=1A0BC9598E4A58FC84570FFF5A108E58 -- C:\Windows\SysWOW64\explorer.exe

[2013/10/22 07:03:47 | 002,065,448 | ---- | M] (Microsoft Corporation) MD5=1A0BC9598E4A58FC84570FFF5A108E58 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16441_none_4ceff22781f6788c\explorer.exe

[2014/03/06 00:42:45 | 000,133,444 | ---- | M] () MD5=3DDF61E1B538A1205612192A61CC2376 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16408_none_42cd898b4d6ef82e\explorer.exe

[2013/10/22 08:55:27 | 002,328,872 | ---- | M] (Microsoft Corporation) MD5=63DC38C3E4564B2405D562855643ABA2 -- C:\Windows\explorer.exe

[2013/10/22 08:55:27 | 002,328,872 | ---- | M] (Microsoft Corporation) MD5=63DC38C3E4564B2405D562855643ABA2 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16441_none_429b47d54d95b691\explorer.exe

[2014/03/06 00:42:42 | 000,274,077 | ---- | M] () MD5=95F49CF19E3CA220190E7927773EE5B1 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16384_none_4273071d4db37533\explorer.exe

[2014/03/08 13:14:08 | 000,127,825 | ---- | M] () MD5=983D8A3EB94B05A199D3744C0F0C475F -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16408_none_4d2233dd81cfba29\explorer.exe

[2014/03/08 13:14:03 | 000,200,020 | ---- | M] () MD5=FF997A1639CC22EC790E7AB05C8C0550 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.16384_none_4cc7b16f8214372e\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >

[2013/08/22 21:56:47 | 000,016,896 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\en-GB\explorer.exe.mui

[2013/08/22 21:56:47 | 000,016,896 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\en-GB\explorer.exe.mui

[2013/08/22 21:56:47 | 000,016,896 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.3.9600.16384_en-gb_ef282c0a4c701da3\explorer.exe.mui

[2013/08/22 21:56:47 | 000,016,896 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.3.9600.16384_en-gb_f97cd65c80d0df9e\explorer.exe.mui

< MD5 for: EXPLORER.EXE-A80E4F97.PF >

[2014/03/31 07:54:14 | 000,300,596 | ---- | M] () MD5=6A204884AB39958AF1477A8A8CC4A0F7 -- C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf

< MD5 for: IEXPLORE.EXE >

[2014/02/06 14:08:02 | 000,806,064 | ---- | M] (Microsoft Corporation) MD5=2E032281A818BCD191E3DD92000A8EAE -- C:\Program Files\Internet Explorer\iexplore.exe

[2014/02/06 14:08:02 | 000,806,064 | ---- | M] (Microsoft Corporation) MD5=2E032281A818BCD191E3DD92000A8EAE -- C:\Windows\WinSxS\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.0.9600.16521_none_9c60612a90cfaeb6\iexplore.exe

[2014/03/08 13:14:15 | 000,009,369 | ---- | M] () MD5=7B0FB14120A13191E63C458C64720489 -- C:\Windows\WinSxS\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.0.9600.16384_none_a6d068b8c51b1dbc\iexplore.exe

[2014/03/19 13:08:41 | 000,000,012 | ---- | M] () MD5=8F5B97C692CD84C0E5DF02F9142ECEB3 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.0.9600.16518_none_9c5ec16890d148c6\iexplore.exe

[2014/03/19 21:06:40 | 000,000,012 | ---- | M] () MD5=8F5B97C692CD84C0E5DF02F9142ECEB3 -- C:\Windows\WinSxS\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.0.9600.16518_none_a6b36bbac5320ac1\iexplore.exe

[2014/02/06 12:18:16 | 000,808,112 | ---- | M] (Microsoft Corporation) MD5=9FBB2F038A2DDCE696BDEE7080241C0C -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

[2014/02/06 12:18:16 | 000,808,112 | ---- | M] (Microsoft Corporation) MD5=9FBB2F038A2DDCE696BDEE7080241C0C -- C:\Windows\WinSxS\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.0.9600.16521_none_a6b50b7cc53070b1\iexplore.exe

[2014/03/06 11:49:38 | 000,010,956 | ---- | M] () MD5=CB6B6941B52B10900DB2808854F70233 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.0.9600.16384_none_9c7bbe6690ba5bc1\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >

[2013/08/22 21:57:05 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=C49F63C313FE47CCB08488A6A9107E42 -- C:\Program Files (x86)\Internet Explorer\en-GB\iexplore.exe.mui

[2013/08/22 21:57:05 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=C49F63C313FE47CCB08488A6A9107E42 -- C:\Program Files\Internet Explorer\en-GB\iexplore.exe.mui

[2013/08/22 21:57:05 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=C49F63C313FE47CCB08488A6A9107E42 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_11.0.9600.16384_en-gb_8e9f98bfcd3ee8e3\iexplore.exe.mui

[2013/08/22 21:57:05 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=C49F63C313FE47CCB08488A6A9107E42 -- C:\Windows\WinSxS\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_11.0.9600.16384_en-gb_98f44312019faade\iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-4B6C9215.PF >

[2014/02/12 13:11:24 | 000,255,656 | ---- | M] () MD5=270C3C7BC1BD9D49F6ED3C806F2466FE -- C:\Windows\Prefetch\IEXPLORE.EXE-4B6C9215.pf

< MD5 for: IEXPLORE.EXE-908C99F8.PF >

[2014/02/12 13:10:10 | 000,107,518 | ---- | M] () MD5=5C31E26C8D93ECB3338F2648D874548E -- C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf

< MD5 for: IEXPLORE.VISUALELEMENTSMANIFEST.XML >

[2013/06/18 15:48:46 | 000,000,340 | ---- | M] () MD5=2C776DCD91132FCC6A8C066DD529B307 -- C:\Program Files\Internet Explorer\iexplore.VisualElementsManifest.xml

[2013/06/18 15:48:46 | 000,000,340 | ---- | M] () MD5=2C776DCD91132FCC6A8C066DD529B307 -- C:\Windows\WinSxS\amd64_microsoft-windows-immersivebrowser_31bf3856ad364e35_11.0.9600.16384_none_c673d0d2f4ca87f4\iexplore.VisualElementsManifest.xml

< MD5 for: SERVICES >

[2013/08/22 16:04:54 | 000,003,777 | ---- | M] () MD5=5EE2D65841D1985E8C1BC68B2EB4357B -- C:\Windows\WinSxS\amd64_microsoft-windows-w..ucture-other-minwin_31bf3856ad364e35_6.3.9600.16384_none_25fdfd813908f8a6\services

< MD5 for: SERVICES.CFG >

[2012/09/23 21:43:36 | 000,603,848 | R--- | M] () MD5=81B120EAEE296F0E54F66C16C5A21367 -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744BA0000000010\11.0.0\services.cfg

[2013/12/21 07:04:16 | 000,559,392 | ---- | M] () MD5=F9FBA73F44366AB3514BD1985707F178 -- C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Services\Services.cfg

< MD5 for: SERVICES.EXE >

[2013/08/22 14:25:40 | 000,405,488 | ---- | M] (Microsoft Corporation) MD5=B4B610BBCB002EC478C6FD80CF915697 -- C:\Windows\SysNative\services.exe

[2013/08/22 14:25:40 | 000,405,488 | ---- | M] (Microsoft Corporation) MD5=B4B610BBCB002EC478C6FD80CF915697 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.16384_none_2fd72579d09a45e9\services.exe

< MD5 for: SERVICES.EXE.MUI >

[2013/08/22 21:56:37 | 000,018,944 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysNative\en-GB\services.exe.mui

[2013/08/22 21:56:37 | 000,018,944 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.3.9600.16384_en-gb_5332ec03fec38070\services.exe.mui

< MD5 for: SERVICES.JS >

[2014/02/25 13:54:27 | 000,078,905 | ---- | M] () MD5=DE4B5FF45A106DA53CA566314EFE2E1F -- C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.2.234_x64__8wekyb3d8bbwe\Common\js\services.js

[2014/02/25 13:54:27 | 000,078,905 | ---- | M] () MD5=DE4B5FF45A106DA53CA566314EFE2E1F -- C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.2.236_x64__8wekyb3d8bbwe\Common\js\services.js

[2014/02/25 13:54:27 | 000,078,905 | ---- | M] () MD5=DE4B5FF45A106DA53CA566314EFE2E1F -- C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.2.233_x64__8wekyb3d8bbwe\Common\js\services.js

[2014/02/25 13:54:27 | 000,078,905 | ---- | M] () MD5=DE4B5FF45A106DA53CA566314EFE2E1F -- C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.2.233_x64__8wekyb3d8bbwe\Common\js\services.js

[2014/02/25 13:54:27 | 000,078,905 | ---- | M] () MD5=DE4B5FF45A106DA53CA566314EFE2E1F -- C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.2.233_x64__8wekyb3d8bbwe\Common\js\services.js

[2014/02/25 13:54:27 | 000,078,905 | ---- | M] () MD5=DE4B5FF45A106DA53CA566314EFE2E1F -- C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.2.233_x64__8wekyb3d8bbwe\Common\js\services.js

[2014/02/25 13:54:27 | 000,078,905 | ---- | M] () MD5=DE4B5FF45A106DA53CA566314EFE2E1F -- C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.2.233_x64__8wekyb3d8bbwe\Common\js\services.js

< MD5 for: SERVICES.LNK >

[2013/08/22 07:54:57 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

[2013/08/22 07:54:57 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

[2013/08/22 07:54:57 | 000,001,158 | ---- | M] () MD5=5C11B0E362D426FD6E99B07705BA4A48 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.3.9600.16384_none_c02242af19b1eb57\services.lnk

< MD5 for: SERVICES.MOF >

[2013/06/18 15:51:33 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof

[2013/06/18 15:51:33 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.3.9600.16384_none_c01e2072a140077e\services.mof

< MD5 for: SERVICES.MSC >

[2013/08/22 21:56:40 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysNative\en-US\services.msc

[2013/06/18 15:47:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysNative\services.msc

[2013/08/22 21:56:40 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysWOW64\en-US\services.msc

[2013/06/18 13:23:54 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\SysWOW64\services.msc

[2013/08/22 21:56:40 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.3.9600.16384_en-us_94fd770dd055ce28\services.msc

[2013/06/18 15:47:53 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.3.9600.16384_none_c02242af19b1eb57\services.msc

[2013/06/18 13:23:54 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\wow64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.3.9600.16384_none_ca76ed014e12ad52\services.msc

[2013/08/22 21:56:40 | 000,092,746 | ---- | M] () MD5=2D8D95469EC26AAA986AAD1CE424E631 -- C:\Windows\WinSxS\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.3.9600.16384_en-us_38dedb8a17f85cf2\services.msc

< MD5 for: SERVICES.PTXML >

[2013/08/22 07:45:36 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml

[2013/08/22 07:45:36 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.3.9600.16384_none_c01e2072a140077e\Services.ptxml

< MD5 for: WINLOGON.ADML >

[2013/08/22 21:57:02 | 000,008,978 | ---- | M] () MD5=AD266AC436809BBDC0A19A05E80904A8 -- C:\Windows\PolicyDefinitions\en-US\WinLogon.adml

[2013/08/22 21:57:02 | 000,008,978 | ---- | M] () MD5=AD266AC436809BBDC0A19A05E80904A8 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.3.9600.16384_en-us_85c27192b0d9003d\WinLogon.adml

< MD5 for: WINLOGON.ADMX >

[2013/08/22 21:59:51 | 000,005,790 | ---- | M] () MD5=940072E0DE8621F5AB0028A96309221E -- C:\Windows\PolicyDefinitions\WinLogon.admx

[2013/08/22 21:59:51 | 000,005,790 | ---- | M] () MD5=940072E0DE8621F5AB0028A96309221E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.3.9600.16384_none_6bcbbccd4d39421a\WinLogon.admx

< MD5 for: WINLOGON.EXE >

[2013/08/22 10:55:08 | 000,564,736 | ---- | M] (Microsoft Corporation) MD5=7C94FDA3809015B8F2208D2E1C221F17 -- C:\Windows\SysNative\winlogon.exe

[2013/08/22 10:55:08 | 000,564,736 | ---- | M] (Microsoft Corporation) MD5=7C94FDA3809015B8F2208D2E1C221F17 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.16384_none_60816121a8e88269\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >

[2013/08/22 21:56:54 | 000,024,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysNative\en-GB\winlogon.exe.mui

[2013/08/22 21:56:54 | 000,024,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.3.9600.16384_en-gb_b42e3677dce4c4e9\winlogon.exe.mui

< MD5 for: WINLOGON.EXE-B020DC41.PF >

[2014/03/31 22:47:30 | 000,028,936 | ---- | M] () MD5=D8EAA5C62FC20D70FD9CBD840CCE1AA9 -- C:\Windows\Prefetch\WINLOGON.EXE-B020DC41.pf

< MD5 for: WINLOGON.MFL >

[2013/08/22 21:56:54 | 000,001,080 | ---- | M] () MD5=0779A1504D28B9451EC8E32425EA473B -- C:\Windows\SysNative\wbem\en-GB\winlogon.mfl

[2013/08/22 21:56:54 | 000,001,080 | ---- | M] () MD5=0779A1504D28B9451EC8E32425EA473B -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.3.9600.16384_en-gb_11f08842f81d1e7e\winlogon.mfl

< MD5 for: WINLOGON.MOF >

[2013/08/22 07:45:12 | 000,003,192 | ---- | M] () MD5=DF722B96F32A61783BC310FACF10240B -- C:\Windows\SysNative\wbem\winlogon.mof

[2013/08/22 07:45:12 | 000,003,192 | ---- | M] () MD5=DF722B96F32A61783BC310FACF10240B -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.3.9600.16384_none_70f729db49dee3dc\winlogon.mof

< %SYSTEMDRIVE%\*.* >

[2013/08/22 06:31:45 | 000,427,680 | RHS- | M] () -- C:\bootmgr

[2013/06/18 13:18:29 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT

[2014/04/01 07:23:26 | 773,910,527 | -HS- | M] () -- C:\hiberfil.sys

[2014/04/01 07:23:31 | 1006,632,960 | -HS- | M] () -- C:\pagefile.sys

[2014/04/01 07:23:31 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys

< %systemroot%\Fonts\*.com >

[2014/03/31 21:30:39 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont

[2014/03/31 21:30:39 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont

[2014/03/31 21:30:39 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont

[2014/03/31 21:30:39 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >

[2013/08/22 16:35:03 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

[2013/08/22 16:34:52 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >

Volume in drive C has no label.

Volume Serial Number is 2CDE-7114

Directory of C:\

22/08/2013 15:45 <JUNCTION> Documents and Settings [C:\Users]

0 File(s) 0 bytes

Directory of C:\ProgramData

22/08/2013 15:45 <JUNCTION> Application Data [C:\ProgramData]

22/08/2013 15:45 <JUNCTION> Desktop [C:\Users\Public\Desktop]

22/08/2013 15:45 <JUNCTION> Documents [C:\Users\Public\Documents]

22/08/2013 15:45 <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]

22/08/2013 15:45 <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]

0 File(s) 0 bytes

Directory of C:\Users

22/08/2013 15:45 <SYMLINKD> All Users [C:\ProgramData]

22/08/2013 15:45 <JUNCTION> Default User [C:\Users\Default]

0 File(s) 0 bytes

Directory of C:\Users\All Users

22/08/2013 15:45 <JUNCTION> Application Data [C:\ProgramData]

22/08/2013 15:45 <JUNCTION> Desktop [C:\Users\Public\Desktop]

22/08/2013 15:45 <JUNCTION> Documents [C:\Users\Public\Documents]

22/08/2013 15:45 <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]

22/08/2013 15:45 <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]

0 File(s) 0 bytes

Directory of C:\Users\Default

22/08/2013 15:45 <JUNCTION> Application Data [C:\Users\Default\AppData\Roaming]

22/08/2013 15:45 <JUNCTION> Cookies [C:\Users\Default\AppData\Local\Microsoft\Windows\INetCookies]

22/08/2013 15:45 <JUNCTION> Local Settings [C:\Users\Default\AppData\Local]

22/08/2013 15:45 <JUNCTION> My Documents [C:\Users\Default\Documents]

22/08/2013 15:45 <JUNCTION> NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]

22/08/2013 15:45 <JUNCTION> PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]

22/08/2013 15:45 <JUNCTION> Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]

22/08/2013 15:45 <JUNCTION> SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]

22/08/2013 15:45 <JUNCTION> Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]

22/08/2013 15:45 <JUNCTION> Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]

0 File(s) 0 bytes

Directory of C:\Users\Default\AppData\Local

22/08/2013 15:45 <JUNCTION> Application Data [C:\Users\Default\AppData\Local]

22/08/2013 15:45 <JUNCTION> History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]

22/08/2013 15:45 <JUNCTION> Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache]

0 File(s) 0 bytes

Directory of C:\Users\Default\AppData\Local\Microsoft\Windows

22/08/2013 15:45 <JUNCTION> Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache]

0 File(s) 0 bytes

Directory of C:\Users\Default\Documents

22/08/2013 15:45 <JUNCTION> My Music [C:\Users\Default\Music]

22/08/2013 15:45 <JUNCTION> My Pictures [C:\Users\Default\Pictures]

22/08/2013 15:45 <JUNCTION> My Videos [C:\Users\Default\Videos]

0 File(s) 0 bytes

Directory of C:\Users\Nathaniel\AppData\Local\Microsoft\Windows

17/02/2014 13:03 <JUNCTION> Temporary Internet Files [C:\Users\Nathaniel\AppData\Local\Microsoft\Windows\INetCache]

0 File(s) 0 bytes

Directory of C:\Users\Nathaniel\AppData\Local\Microsoft\Windows\INetCache

17/02/2014 13:06 <JUNCTION> Content.IE5 [C:\Users\Nathaniel\AppData\Local\Microsoft\Windows\INetCache\IE\]

0 File(s) 0 bytes

Directory of C:\Users\Public\Documents

22/08/2013 15:45 <JUNCTION> My Music [C:\Users\Public\Music]

22/08/2013 15:45 <JUNCTION> My Pictures [C:\Users\Public\Pictures]

22/08/2013 15:45 <JUNCTION> My Videos [C:\Users\Public\Videos]

0 File(s) 0 bytes

Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache

13/03/2014 09:25 <JUNCTION> Content.IE5 [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\]

0 File(s) 0 bytes

Directory of C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache

13/03/2014 09:25 <JUNCTION> Content.IE5 [C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\]

0 File(s) 0 bytes

Total Files Listed:

0 File(s) 0 bytes

37 Dir(s) 445,528,715,264 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >

[2013/08/22 16:35:52 | 000,000,148 | -HS- | M] () -- C:\Users\Nathaniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 220 bytes -> C:\Users\Nathaniel\SkyDrive:ms-properties

@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences

< End of report >

---------------------------------------- Second report

OTL Extras logfile created on: 01/04/2014 14:08:45 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Nathaniel\Downloads

64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.16521)

Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

5.90 Gb Total Physical Memory | 4.42 Gb Available Physical Memory | 74.93% Memory free

6.84 Gb Paging File | 5.23 Gb Available in Paging File | 76.46% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 465.42 Gb Total Space | 415.06 Gb Free Space | 89.18% Space Free | Partition Type: NTFS

Computer Name: MA-LAPTOP | User Name: Nathaniel | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]

"UpgradeTime" = [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]

"UpgradeTime" = Reg Error: Unknown registry data type -- File not found

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0802FF42-AFEE-4B53-9002-21507C5B138B}" = lport=138 | protocol=17 | dir=in | app=system |

"{1DD49E78-E3EF-4B1A-AE94-C8254BDE01B9}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{32467AFA-8EE3-41ED-8475-F07557303571}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |

"{4AFE453F-E883-485F-B802-62CC13DC2707}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

"{611F1193-2B13-49CA-96E0-EDE36DFFB771}" = lport=137 | protocol=17 | dir=in | app=system |

"{658E5CAA-EC43-4A95-AC28-E7FBF28C8454}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |

"{6ABEBF77-B933-4F8A-8CA8-4D385E7623B1}" = rport=139 | protocol=6 | dir=out | app=system |

"{7F88D079-514E-4834-BDD2-5ED40FFD5159}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |

"{90469564-1686-4531-875F-4CFE8B5F3CD3}" = rport=137 | protocol=17 | dir=out | app=system |

"{A43B1F65-581B-4373-BDB9-899352691960}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |

"{AD675150-7B63-4E76-AFCD-E70DCFB98593}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe |

"{B3265A00-52CE-416F-BD22-7F46C8346377}" = lport=139 | protocol=6 | dir=in | app=system |

"{B8BFF3C0-EE83-488A-91B4-24B26C6C1220}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{C60CC6B4-2DEE-4C3D-91B8-A0021D2DEEBF}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |

"{DB5D78A5-9705-4FE8-B708-46C48338044D}" = rport=445 | protocol=6 | dir=out | app=system |

"{ECD2D4AB-AB62-4D45-AC9D-E5148B28C012}" = lport=445 | protocol=6 | dir=in | app=system |

"{F4739C79-9559-47E7-89E0-1D40380B2B5F}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |

"{F4BE8E87-206F-4094-88AA-36B810B2B32A}" = rport=138 | protocol=17 | dir=out | app=system |

"{F8DD97B2-F934-4B2D-A5A1-942CD0726DC3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{03A23EB0-F178-4BAF-AA0B-97A8A785B6B7}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |

"{0694F14F-6B5B-40F8-8E06-834DCBC00FF6}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |

"{0874AAB4-270A-4667-88FA-7FCDF5D044CF}" = dir=out | name=@{microsoft.bingtravel_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} |

"{0C5F0C9C-9A88-4583-A032-EAC9F5055FEB}" = dir=in | name=skype |

"{0FC44064-7C43-4A0D-890B-A6698570C07A}" = dir=out | name=@{microsoft.bingnews_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} |

"{174FFFDB-6EF9-41EE-954F-5F075A98108D}" = protocol=6 | dir=in | app=c:\users\nathaniel\appdata\roaming\utorrent\utorrent.exe |

"{18ACB5B1-0812-4D4C-AE7C-4DD1393F259F}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |

"{1B033E4A-5241-4CEE-B51D-BBD3868CBE4C}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |

"{1E3B4AEC-3F60-4450-B372-5A6A5CB3CD76}" = dir=out | name=@{microsoft.bingtravel_3.0.1.202_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} |

"{292E3481-7F9E-4503-99BA-E4908E2A1DAD}" = dir=out | name=@{microsoft.bingsports_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} |

"{2BE19CBB-BA15-40FE-8198-415C73C3A38F}" = dir=out | name=skype |

"{2F9CE3FD-4833-4C85-BCE8-5DE3DACE9EF9}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |

"{30DA1BFA-106F-4C8C-93E9-8F1267877A65}" = dir=out | name=hp all-in-one printer remote |

"{346DD355-AEE0-459F-BF0F-DD77F09C91C2}" = dir=out | name=@{microsoft.bingmaps_2.0.2530.2317_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |

"{37613D43-3772-4295-8F02-48AE7C133717}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |

"{389D377C-8829-4C61-9838-3D6839C9DD0C}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |

"{3C78F542-0C00-47D4-808F-DBC50D377C5F}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |

"{420999E0-3E35-475A-9CEE-225527F34850}" = dir=in | app=c:\program files (x86)\hp\hp laserjet 200 color mfp m276\bin\faxapplications.exe |

"{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn |

"{4E80E86F-EF74-4347-905F-88407D89A4A3}" = dir=in | name=skype |

"{4E8A1A8E-7424-4FD1-A40E-38AFDADF2952}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |

"{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |

"{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect |

"{59FFBE81-65F1-44A8-88B7-370BA3813CA5}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |

"{5DFD4BC2-A892-427D-846C-1AD92B7068B9}" = dir=out | name=@{microsoft.bingnews_3.0.1.321_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/apptitle} |

"{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect |

"{612F4DA4-A8A5-470B-B320-10DA5CA1C257}" = dir=out | name=@{microsoft.bingfinance_3.0.2.234_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} |

"{61E0D2F3-5034-4CE5-919C-12316A053E88}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |

"{62CD7813-91B4-45D1-B481-DC9E09CA25E8}" = dir=in | name=hp all-in-one printer remote |

"{6476DC55-F7BF-4773-B04F-54940BBC3108}" = dir=out | name=@{microsoft.zunemusic_2.2.800.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |

"{6A7A8BB8-4975-4E48-AD76-0A76499CEB90}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |

"{7430C96A-5ED6-4A10-8C10-78A86A91A0BA}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.2.236_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |

"{775B4766-C199-4B0A-9045-67FC6940D2BC}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.1.335_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |

"{8BA1E3BC-4B69-4238-8B3C-DC76C8F5A4BF}" = dir=out | name=@{microsoft.bingweather_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |

"{96B2E5B4-2375-47D3-9342-63B166F9909E}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |

"{97D07F2D-1BAC-4F88-84BD-365ACCE5C573}" = protocol=6 | dir=in | app=c:\users\nathaniel\downloads\utorrent.exe |

"{9A225593-8D9B-4E8B-82F3-2D61ADAF7A3D}" = protocol=17 | dir=in | app=c:\users\nathaniel\appdata\roaming\utorrent\utorrent.exe |

"{9CDB493F-B786-4BD0-B2A8-B61A321F3166}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} |

"{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |

"{A0DB0E6C-B962-4CFC-B4E0-B152125F7A28}" = protocol=17 | dir=in | app=c:\users\nathaniel\appdata\roaming\dropbox\bin\dropbox.exe |

"{A1AF5402-9DE0-414D-B98B-333AF62A536E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |

"{A38D53D7-91A5-467E-84A7-963BDE5711DD}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.1.337_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |

"{AF9EF553-23D6-4B83-9A0F-32967CE9A4D9}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |

"{B24BF179-573E-4941-B60A-FDCC6F428E95}" = dir=out | name=skype |

"{B33BDA67-00BF-47EA-96D9-A486185D9CA4}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

"{B99B5D0B-CBA0-4D57-97F4-A687AD8DA944}" = dir=out | name=@{microsoft.zunevideo_2.2.767.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |

"{BE6D3D26-BC61-4C22-928C-C56035C1B72C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |

"{C2628EDD-FBCE-4D68-9A24-5FE5E9EE1D1D}" = protocol=6 | dir=in | app=c:\users\nathaniel\appdata\roaming\dropbox\bin\dropbox.exe |

"{C5BAE86C-23BE-4582-BBFD-EE31F97414E0}" = dir=in | app=c:\program files (x86)\hp\hp laserjet 200 color mfp m276\bin\ewsproxy.exe |

"{C8B920F6-068A-4532-86F5-4082981F4E7C}" = protocol=17 | dir=in | app=c:\users\nathaniel\downloads\utorrent.exe |

"{C9928375-5D85-42D3-9834-9F766E7155F3}" = dir=out | name=@{microsoft.bingmaps_2.0.2530.2317_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |

"{CBB985D0-98A0-432F-A50B-7472B22C078A}" = dir=out | name=@{microsoft.bingfinance_3.0.1.299_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} |

"{CC1F543E-5268-41AF-B8BA-1A2607887133}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |

"{D04B3FD9-1544-4CF0-8911-372E5780150D}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |

"{D4167A9D-15B7-4A06-83C0-58A79820B2C6}" = dir=out | name=@{microsoft.zunevideo_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |

"{D5CBE5C0-0FA0-4D7C-9E70-675C7493E02C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |

"{D5E8C429-C7AA-4917-8F94-582A8EE46E3A}" = dir=out | name=@{microsoft.bingsports_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} |

"{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn |

"{D7C31EF7-5843-4101-9F90-D71623E98926}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |

"{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn |

"{DFCD8AA7-EE06-4FF3-852D-FE0AD4A1BC25}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20349_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |

"{E3F254E5-5898-4CE0-89CB-2437EBCFA1E1}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.2.233_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |

"{E8A8B7CB-5DEC-418C-9A4A-4AFBC4106913}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |

"{E8BB3E0A-78E2-42D4-9B2D-A670C0AA8F4D}" = dir=in | app=c:\program files (x86)\hp\hp laserjet 200 color mfp m276\bin\hpnetworkcommunicator.exe |

"{EBFE0671-F0D1-402A-8B34-02A4B6A00B60}" = dir=in | app=c:\users\nathaniel\appdata\local\facebook\video\skype\facebookvideocalling.exe |

"{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn |

"{EC7B7733-3C68-4ADF-9EF4-32D58BF1C5CD}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |

"{EFA1D948-9237-40BE-9C6F-170D25E99EC9}" = dir=in | app=c:\program files (x86)\hp\hp laserjet 200 color mfp m276\bin\digitalwizards.exe |

"{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client |

"{F6639817-0A15-4AE0-A679-4053E9451033}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |

"{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client |

"{F864B1AC-8767-4F27-A074-AC0D143DC18F}" = dir=out | name=@{microsoft.bingweather_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} |

"{F8F10F53-77F3-4961-A4DE-BA4B45F1FA19}" = dir=out | name=@{microsoft.zunemusic_2.2.550.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |

"TCP Query User{18531F5A-FE0D-470B-9EA3-72D969FB2586}C:\program files (x86)\tennis elbow 2013\tenniselbow.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tennis elbow 2013\tenniselbow.exe |

"TCP Query User{24C2ED0A-9CD5-4C83-8C4B-52525B118D40}C:\users\nathaniel\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\nathaniel\appdata\roaming\dropbox\bin\dropbox.exe |

"TCP Query User{2A19BA53-BAD0-42AA-82DA-BFB9AD03A25F}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

"TCP Query User{7177F07E-FA87-405E-B95E-562AC9413A14}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

"TCP Query User{9BD154FC-AD6C-487C-B8AA-88CF49C7B90F}C:\program files\onone software\perfect photo suite 8\perfect photo suite 8.exe" = protocol=6 | dir=in | app=c:\program files\onone software\perfect photo suite 8\perfect photo suite 8.exe |

"UDP Query User{2EC98154-5682-4162-8937-1830947F72A2}C:\program files (x86)\tennis elbow 2013\tenniselbow.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tennis elbow 2013\tenniselbow.exe |

"UDP Query User{6D5A28F8-0171-461A-B86F-387E4FA8848A}C:\program files\onone software\perfect photo suite 8\perfect photo suite 8.exe" = protocol=17 | dir=in | app=c:\program files\onone software\perfect photo suite 8\perfect photo suite 8.exe |

"UDP Query User{714C2FAF-8283-4FF8-BA4D-33416D74EA92}C:\users\nathaniel\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\nathaniel\appdata\roaming\dropbox\bin\dropbox.exe |

"UDP Query User{7D4290CF-DB1E-4F74-BF4A-8C9CF2BE854A}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

"UDP Query User{C43FC765-590F-46A1-9ADA-49820C987140}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{90150000-0015-0409-1000-0000000FF1CE}" = Microsoft Access MUI (English) 2013

"{90150000-0016-0409-1000-0000000FF1CE}" = Microsoft Excel MUI (English) 2013

"{90150000-0018-0409-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (English) 2013

"{90150000-0019-0409-1000-0000000FF1CE}" = Microsoft Publisher MUI (English) 2013

"{90150000-001A-0409-1000-0000000FF1CE}" = Microsoft Outlook MUI (English) 2013

"{90150000-001B-0409-1000-0000000FF1CE}" = Microsoft Word MUI (English) 2013

"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English

"{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français

"{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español

"{90150000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2013

"{90150000-0044-0409-1000-0000000FF1CE}" = Microsoft InfoPath MUI (English) 2013

"{90150000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2013

"{90150000-0090-0409-1000-0000000FF1CE}" = Microsoft DCF MUI (English) 2013

"{90150000-00A1-0409-1000-0000000FF1CE}" = Microsoft OneNote MUI (English) 2013

"{90150000-00B4-0409-1000-0000000FF1CE}" = Microsoft Project MUI (English) 2013

"{90150000-00BA-0409-1000-0000000FF1CE}" = Microsoft Groove MUI (English) 2013

"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013

"{90150000-00C1-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2013

"{90150000-00E1-0409-1000-0000000FF1CE}" = Microsoft Office OSM MUI (English) 2013

"{90150000-00E2-0409-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (English) 2013

"{90150000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2013

"{90150000-0117-0409-1000-0000000FF1CE}" = Microsoft Access Setup Metadata MUI (English) 2013

"{90150000-012B-0409-1000-0000000FF1CE}" = Microsoft Lync MUI (English) 2013

"{91150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013

"{91150000-003B-0000-1000-0000000FF1CE}" = Microsoft Project Professional 2013

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 334.89

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 334.89

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 334.89

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.8.2

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 11.10.11

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.13.1220

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 11.10.11

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamC" = GeForce Experience NvStream Client Components

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 11.10.11

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.20

"{BC741628-0AFC-405C-8946-DD46D1005A0A}" = 64 Bit HP CIO Components Installer

"{F4D304D9-7647-4253-957E-44286B8631F4}" = HP Unified IO

"FindRight" = FindRight

"MyPC Backup" = MyPC Backup

"Office15.PRJPROR" = Microsoft Project Professional 2013

"Office15.PROPLUSR" = Microsoft Office Professional Plus 2013

"WinRAR archiver" = WinRAR 5.01 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0C779D9C-FD0F-4A53-86BE-3D53E58B2900}" = HPLJUTCore

"{0F044C7A-6EE1-4F03-90AC-329AAF2FCF12}" = HPLaserJet200color-MFPM276_HelpLearnCenter_SI

"{14CF9AF8-10A6-4FA7-9E57-D22DBD644C77}" = HP Unified IO

"{180D6813-95E0-415C-B58A-5B9493DE2DDA}" = hppLaserJetService

"{1D839376-74B6-452F-BBFF-845F102E8A3A}" = HPDXP

"{26A24AE4-039D-4CA4-87B4-2F83217051FF}" = Java 7 Update 51

"{3611CA6C-5FCA-4900-A329-6A118123CCFC}" = Bing Bar

"{46A99EAE-98DA-4BE5-94C3-D41BA4C266DA}" = hpStatusAlerts

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4B02D3CE-A011-4475-93A5-774E0DA4E27E}" = hpbM276DSService

"{54525107-4C4E-44AC-AC65-806084151057}" = hppSendFaxM276

"{5E4DD8C2-A906-4F1B-94B6-4F6A51D625B2}" = HPLJDXPHelper

"{62022DCB-BA92-4EC2-AE03-9B946E4DBF12}" = hpbDSService

"{6A136292-02AB-428E-8E9A-2628A52FA98E}" = HP LaserJet 200 color MFP M276 Fax

"{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}" = HP Update

"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.13

"{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX

"{88B2E402-DE40-4422-9CCB-D285F8602C93}" = HP Product FWUpdater

"{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}" = Facebook Video Calling 2.0.0.447

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.06)

"{B361ED10-259E-4B76-B35E-E47BB6DDDD74}" = hppFaxDrvM276

"{C97E3F48-DE95-4E00-80AF-32D75C69302D}" = HPLJUTM276

"{CC38C23C-7824-4DBB-AC73-997CD0BBFEC7}" = HP LaserJet 200 color MFP M276

"{D0AA26A2-08B8-4858-BB69-E50A542DC6ED}" = HP LaserJet 200 color MFP M276 HP Device Toolbox

"{D6610387-8E8B-48ED-AB1C-0D38DFE31C55}" = hppM276LaserJetService

"{EA540E75-A545-4C9D-B42E-9C8FC09630C4}" = HP LJ200 M276 HP Scan

"{EAECD0D7-F27D-4F13-8312-A9C0B5C5F1B7}" = LJDXPHelperUI

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics

"{FCB1666A-3488-4E43-A680-A111398C80E9}" = Perfect Photo Suite 8

"{FFD4184D-7EC6-476E-9A72-E83412AB9D3B}" = hpStatusAlertsM276

"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin

"Amazon Kindle" = Amazon Kindle

"Google Chrome" = Google Chrome

"Mozilla Firefox 28.0 (x86 en-US)" = Mozilla Firefox 28.0 (x86 en-US)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"mysearchdial" = Mysearchdial

"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver

"SearchProtect" = Search Protect

"Tennis Elbow 2013" = Tennis Elbow 2013 1.0c

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Dropbox" = Dropbox

"Search Protection" = Search Protection

"UpdaterEX" = Extended Update

========== Last 20 Event Log Errors ==========

[ Application Events ]

Error - 31/03/2014 17:42:52 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:42:52 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:42:52 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:42:53 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:42:54 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:42:54 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:43:03 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:43:04 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:43:56 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

Error - 31/03/2014 17:43:57 | Computer Name = MA-Laptop | Source = SideBySide | ID = 16842787

Description = Activation context generation failed for "C:\Program Files (x86)\DLCleaner\mfc90u.dll".Error

in manifest or policy file "C:\Program Files (x86)\DLCleaner\Microsoft.VC90.MFCLOC.MANIFEST"

on line 4. Component identity found in manifest does not match the identity of the

component requested. Reference is Microsoft.VC90.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".

Definition

is Microsoft.VC90.MFCLOC,processorArchitecture="x86",type="win32",version="9.0.30729.1".

Please

use sxstrace.exe for detailed diagnosis.

[ System Events ]

Error - 06/03/2014 07:01:02 | Computer Name = MA-Laptop | Source = Service Control Manager | ID = 7034

Description = The HP DS Service service terminated unexpectedly. It has done this

1 time(s).

Error - 06/03/2014 07:05:34 | Computer Name = MA-Laptop | Source = Service Control Manager | ID = 7023

Description = The Interactive Services Detection service terminated with the following

error: %%1

Error - 06/03/2014 07:06:12 | Computer Name = MA-Laptop | Source = Service Control Manager | ID = 7023

Description = The Interactive Services Detection service terminated with the following

error: %%1

Error - 08/03/2014 04:12:12 | Computer Name = MA-Laptop | Source = DCOM | ID = 10016

Description =

Error - 27/03/2014 08:51:15 | Computer Name = MA-Laptop | Source = DCOM | ID = 10010

Description =

Error - 29/03/2014 17:27:51 | Computer Name = MA-Laptop | Source = Ntfs | ID = 262281

Description = The default transaction resource manager on volume D: encountered

a non-retryable error and could not start. The data contains the error code.

Error - 31/03/2014 17:42:11 | Computer Name = MA-Laptop | Source = Service Control Manager | ID = 7030

Description = The OutfoxTvService service is marked as an interactive service. However,

the system is configured to not allow interactive services. This service may not

function properly.

Error - 31/03/2014 17:42:15 | Computer Name = MA-Laptop | Source = Service Control Manager | ID = 7030

Description = The OutfoxTvService service is marked as an interactive service. However,

the system is configured to not allow interactive services. This service may not

function properly.

Error - 01/04/2014 02:06:45 | Computer Name = MA-Laptop | Source = Service Control Manager | ID = 7030

Description = The OutfoxTvUpdater service is marked as an interactive service. However,

the system is configured to not allow interactive services. This service may not

function properly.

Error - 01/04/2014 02:24:04 | Computer Name = MA-Laptop | Source = Service Control Manager | ID = 7000

Description = The OutfoxTvService service failed to start due to the following error:

%%2

< End of report >

DDS wouldn't work on my computer, neither link. I hope that is ok.

Thanks in advance.

Edited by Natfrangou, 01 April 2014 - 08:48 AM.

Advertisements

Register to Remove

#2 ----------------

SuperMember

Authentic Member
1,095 posts

Posted 02 April 2014 - 06:18 AM

Hi there,
my name is Marius and I will assist you with your malware related problems.

Before we move on, please read the following points carefully.

First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.
Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

Scan with FRST in normal mode

Please download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure: Start --> Computer (right click) --> properties)

Run FRST.
Don´t change one of the checkboxes and hit Scan.
Logfiles are created on your desktop.
Poste the FRST.txt and (after the first scan only!) the Addition.txt.

Scan with TDSS-Killer

Please read and follow these instructions carefully. We do not want it to fix anything yet (if found), we need to see a report first.

Download TDSSKiller.zip and extract to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Copy to quarantine. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt

Please attach this file to your next reply.

Proud Member of UNITE & TB

#3 Natfrangou

New Member

Authentic Member
7 posts

Posted 02 April 2014 - 07:31 AM

Hi Marius, thank you for your offer of assistance. Since I posted that first message I attempted to use a few programmes to try and clean my computer; HitmanPro, Adwcleaner and Malwarebyte Anti-Malware. Is it ok for me to still follow the steps you laid out above? Or should I provide new logs with hijackthis and OTL?

#4 ----------------

SuperMember

Authentic Member
1,095 posts

Posted 03 April 2014 - 03:45 AM

No, that´s ok. Please run the scans I´ve explained and post up your malwarebytes log fiels as well:

You told us that you removed several items with Malwarebytes´ Antimalware. This tool creates a log on every run and we need to see them.

The logs can be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
Zip any and all of these logs and attach the file to your next reply.

Proud Member of UNITE & TB

#5 Natfrangou

New Member

Authentic Member
7 posts

Posted 03 April 2014 - 06:28 AM

No, that´s ok. Please run the scans I´ve explained and post up your malwarebytes log fiels as well:

You told us that you removed several items with Malwarebytes´ Antimalware. This tool creates a log on every run and we need to see them.

The logs can be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt

Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Zip any and all of these logs and attach the file to your next reply.

I can't find the log from the Malwarebytes scan. There is not a folder called logs in the Malwarebytes folder.

FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014

Ran by Nathaniel (administrator) on MA-LAPTOP on 03-04-2014 13:19:39

Running from C:\Users\Nathaniel\Downloads

Windows 8.1 Pro (X64) OS Language: English(UK)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe

(Microsoft Corporation) C:\Windows\system32\dashost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Outfox Tv Productions Pty Ltd) C:\Program Files\OutfoxTV\OutfoxTvService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Windows\System32\skydrive.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Dropbox, Inc.) C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Hewlett-Packard Company) C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\EXCEL.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\WINWORD.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)

HKLM\...\Run: [HP LaserJet 200 color MFP M276 Series Fax] - C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe [3706424 2011-10-10] (Hewlett-Packard Company)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] - [X]

HKLM-x32\...\Run: [StatusAlerts] - C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [313248 2012-07-18] (Hewlett-Packard Company)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-4197190699-2502681883-4131900191-1003\...\Run: [SearchProtection] - "C:\Users\Nathaniel\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart

HKU\S-1-5-21-4197190699-2502681883-4131900191-1003\...\Run: [Facebook Update] - C:\Users\Nathaniel\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-03-30] (Facebook Inc.)

HKU\S-1-5-21-4197190699-2502681883-4131900191-1003\...\Run: [OutfoxTV] - C:\Program Files\OutfoxTV\OutfoxTV\DesktopContainer.exe

HKU\S-1-5-21-4197190699-2502681883-4131900191-1003\...\Run: [GoogleChromeAutoLaunch_4F6BA42AF0EA495F169444359A24FF26] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-02-08] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148528 2014-02-08] (NVIDIA Corporation)

Startup: C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Nathaniel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.outfox.tv/?referid=

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages =

SearchScopes: HKCU - {F3790D08-4135-48A5-9B70-05BEE3956152} URL = http://uk.search.yah...p={searchTerms}

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll (Microsoft Corporation.)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 194.168.4.123 194.168.8.123

FireFox:

========

FF ProfilePath: C:\Users\Nathaniel\AppData\Roaming\Mozilla\Firefox\Profiles\it1tgkz2.default-1396376725351

FF Homepage: hxxp://www.outfox.tv/?referid=|

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Nathaniel\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

FF Extension: Adblock Plus - C:\Users\Nathaniel\AppData\Roaming\Mozilla\Firefox\Profiles\it1tgkz2.default-1396376725351\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-01]

Chrome:

=======

CHR HomePage: https://www.google.com/

CHR DefaultSearchKeyword: google.co.uk

CHR Extension: (Google Docs) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-17]

CHR Extension: (Google Drive) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-17]

CHR Extension: (YouTube) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-17]

CHR Extension: (Google Search) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-17]

CHR Extension: (ZenMate for Google Chrome™) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2014-02-24]

CHR Extension: (AdBlock) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-24]

CHR Extension: (Google Wallet) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-17]

CHR Extension: (Gmail) - C:\Users\Nathaniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-17]

==================== Services (Whitelisted) =================

S3 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)

R2 OutfoxTvService; C:\Program Files\OutfoxTV\OutfoxTvService.exe [610192 2014-03-25] (Outfox Tv Productions Pty Ltd)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

S2 OutfoxTvUpdater; C:\Program Files\OutfoxTV\OutfoxTvUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows ® Win 7 DDK provider)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)

S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-04-01] ()

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)

S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-22] (Microsoft Corporation)

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-04-03] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-20] (Intel Corporation)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

S3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)

S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-04-03 13:19 - 2014-04-03 13:19 - 00016163 _____ () C:\Users\Nathaniel\Downloads\FRST.txt

2014-04-03 13:19 - 2014-04-03 13:19 - 00000000 ____D () C:\FRST

2014-04-03 13:18 - 2014-04-03 13:18 - 02157056 _____ (Farbar) C:\Users\Nathaniel\Downloads\FRST64.exe

2014-04-01 15:50 - 2014-04-01 19:25 - 00000000 ____D () C:\Users\Nathaniel\Desktop\Old Firefox Data

2014-04-01 15:40 - 2014-04-01 15:40 - 00003146 _____ () C:\Windows\System32\Tasks\{015947C8-201C-4CAC-AC5C-7FB6170FD12D}

2014-04-01 15:37 - 2014-04-01 15:37 - 00583144 _____ () C:\Users\Nathaniel\Downloads\OutfoxTV.exe

2014-04-01 15:16 - 2014-04-03 08:27 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-01 15:16 - 2014-04-01 15:16 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-04-01 15:16 - 2014-04-01 15:16 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-01 15:16 - 2014-04-01 15:16 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-01 15:16 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-04-01 15:16 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-04-01 15:16 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-04-01 15:15 - 2014-04-01 15:15 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Nathaniel\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-01 15:12 - 2014-04-01 15:12 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys

2014-04-01 15:09 - 2014-04-01 15:09 - 00006340 _____ () C:\Windows\system32\.crusader

2014-04-01 15:03 - 2014-04-01 15:03 - 10971424 _____ (SurfRight B.V.) C:\Users\Nathaniel\Downloads\HitmanPro_x64.exe

2014-04-01 15:03 - 2014-04-01 15:03 - 00001909 _____ () C:\Users\Public\Desktop\HitmanPro.lnk

2014-04-01 15:03 - 2014-04-01 15:03 - 00000000 ____D () C:\Program Files\HitmanPro

2014-04-01 15:02 - 2014-04-01 15:10 - 00000000 ____D () C:\ProgramData\HitmanPro

2014-04-01 15:02 - 2014-04-01 15:02 - 10089256 _____ (SurfRight B.V.) C:\Users\Nathaniel\Downloads\HitmanPro.exe

2014-04-01 14:52 - 2014-04-01 14:54 - 00000000 ____D () C:\AdwCleaner

2014-04-01 14:49 - 2014-04-01 14:49 - 01426178 _____ () C:\Users\Nathaniel\Downloads\adwcleaner.exe

2014-04-01 14:44 - 2014-04-01 14:44 - 00000082 _____ () C:\Users\Nathaniel\AppData\Roaming\cert.dat

2014-04-01 14:18 - 2014-04-01 14:19 - 00187850 _____ () C:\Users\Nathaniel\Downloads\OTL.Txt

2014-04-01 14:18 - 2014-04-01 14:19 - 00077364 _____ () C:\Users\Nathaniel\Downloads\Extras.Txt

2014-04-01 13:51 - 2014-04-01 13:51 - 00602112 _____ (OldTimer Tools) C:\Users\Nathaniel\Downloads\OTL.exe

2014-04-01 13:44 - 2014-04-01 13:44 - 00388608 _____ (Trend Micro Inc.) C:\Users\Nathaniel\Downloads\HijackThis.exe

2014-04-01 13:44 - 2014-04-01 13:44 - 00011670 _____ () C:\Users\Nathaniel\Downloads\hijackthis.log

2014-03-31 22:42 - 2014-04-01 15:44 - 00000000 ____D () C:\Program Files\OutfoxTV

2014-03-31 21:30 - 2014-03-31 21:30 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-03-31 21:30 - 2014-03-31 21:30 - 00000000 ____D () C:\Program Files\MSBuild

2014-03-31 21:30 - 2014-03-31 21:30 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-03-31 21:30 - 2014-03-31 21:30 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-03-31 21:29 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll

2014-03-31 21:29 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2014-03-31 21:29 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-03-31 21:29 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll

2014-03-31 21:29 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2014-03-31 21:29 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-03-31 21:11 - 2014-03-31 21:31 - 00000000 ____D () C:\Users\Nathaniel\Documents\My Kindle Content

2014-03-31 21:11 - 2014-03-31 21:11 - 00002014 _____ () C:\Users\Nathaniel\Desktop\Kindle.lnk

2014-03-31 21:11 - 2014-03-31 21:11 - 00000000 ____D () C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2014-03-31 21:11 - 2014-03-31 21:11 - 00000000 ____D () C:\Users\Nathaniel\AppData\Local\Amazon

2014-03-31 21:11 - 2014-03-31 21:11 - 00000000 ____D () C:\Program Files (x86)\Amazon

2014-03-31 21:09 - 2014-03-31 21:09 - 00930952 _____ (CNET Download.com) C:\Users\Nathaniel\Downloads\cbsidlm-cbsi183-Kindle_for_PC-ORG-75185974.exe

2014-03-30 22:05 - 2014-04-03 13:10 - 00000964 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003UA.job

2014-03-30 22:05 - 2014-04-02 22:10 - 00000942 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003Core.job

2014-03-30 22:05 - 2014-03-30 22:05 - 00501248 _____ (Facebook Inc.) C:\Users\Nathaniel\Downloads\FacebookVideoCallSetup_v1.2.205.0.exe

2014-03-30 22:05 - 2014-03-30 22:05 - 00003820 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003UA

2014-03-30 22:05 - 2014-03-30 22:05 - 00003470 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003Core

2014-03-30 22:05 - 2014-03-30 22:05 - 00000000 ____D () C:\Users\Nathaniel\AppData\Local\Facebook

2014-03-29 15:21 - 2014-03-29 15:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-03-22 21:26 - 2014-03-22 21:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-03-22 21:26 - 2014-03-22 21:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-03-22 21:25 - 2014-03-22 21:25 - 13084896 _____ (Microsoft Corporation) C:\Users\Nathaniel\Downloads\Silverlight_x64.exe

2014-03-22 21:25 - 2014-03-22 21:25 - 13084896 _____ (Microsoft Corporation) C:\Users\Nathaniel\Downloads\Silverlight_x64(1).exe

2014-03-18 13:40 - 2014-02-22 13:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-03-18 13:40 - 2014-02-22 12:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-03-18 13:29 - 2014-03-18 13:30 - 00004978 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for MA-LAPTOP-Nathaniel MA-Laptop

2014-03-17 19:05 - 2014-03-17 19:05 - 00000000 ____D () C:\Users\Nathaniel\Downloads\The Hunger Games Catching Fire 2013 720p BluRay x264 AAC - Ozlem

2014-03-17 19:04 - 2014-03-17 19:04 - 00002326 _____ () C:\Users\Nathaniel\Downloads\[kickass.to]the.hunger.games.catching.fire.2013.720p.bluray.x264.aac.ozlem.torrent

2014-03-14 20:49 - 2013-10-31 01:29 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-03-14 20:49 - 2013-10-31 01:29 - 00124760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-03-14 20:49 - 2013-10-31 01:28 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-03-14 20:11 - 2014-03-14 20:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-03-14 20:11 - 2014-03-14 20:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_wpdcomp_01_11_00.Wdf

2014-03-14 07:08 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-03-14 07:08 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-03-14 07:08 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-03-14 07:08 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-03-14 07:08 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-03-14 07:08 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-03-14 07:08 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-03-14 07:08 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-03-14 07:08 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-03-14 07:08 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-03-14 07:08 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-03-14 07:08 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-03-14 07:08 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-03-14 07:08 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-03-14 07:08 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-03-14 07:08 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-03-14 07:08 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-03-14 07:08 - 2014-01-31 17:15 - 00311640 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-03-14 07:08 - 2014-01-31 17:07 - 00233920 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-03-14 07:08 - 2014-01-31 17:06 - 02133208 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-03-14 07:08 - 2014-01-31 14:47 - 02143960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-03-14 07:08 - 2014-01-31 10:06 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2014-03-14 07:08 - 2014-01-29 10:55 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2014-03-14 07:08 - 2014-01-29 09:53 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2014-03-14 07:08 - 2014-01-29 09:53 - 00407024 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll

2014-03-14 07:08 - 2014-01-29 09:49 - 01928144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2014-03-14 07:08 - 2014-01-29 09:47 - 02543960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-03-14 07:08 - 2014-01-29 08:44 - 01371824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2014-03-14 07:08 - 2014-01-29 08:44 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe

2014-03-14 07:08 - 2014-01-29 08:44 - 00369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll

2014-03-14 07:08 - 2014-01-29 07:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll

2014-03-14 07:08 - 2014-01-29 01:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2014-03-14 07:08 - 2014-01-27 20:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll

2014-03-14 07:08 - 2014-01-27 20:06 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-03-14 07:08 - 2014-01-27 20:04 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE

2014-03-14 07:08 - 2014-01-27 19:52 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2014-03-14 07:08 - 2014-01-27 19:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll

2014-03-14 07:08 - 2014-01-27 19:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-03-14 07:08 - 2014-01-27 19:20 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE

2014-03-14 07:08 - 2014-01-27 19:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-03-14 07:08 - 2014-01-27 18:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-03-14 07:08 - 2014-01-27 18:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll

2014-03-14 07:08 - 2014-01-27 18:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll

2014-03-14 07:08 - 2014-01-27 16:58 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-03-14 07:08 - 2014-01-27 16:50 - 06640640 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-03-14 07:08 - 2014-01-27 12:45 - 00386722 _____ () C:\Windows\system32\ApnDatabase.xml

2014-03-14 07:08 - 2014-01-18 00:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-03-14 07:08 - 2014-01-17 22:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-03-14 07:08 - 2013-12-21 15:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe

2014-03-14 07:08 - 2013-12-21 09:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll

2014-03-14 07:08 - 2013-12-20 11:18 - 01643584 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-03-14 07:08 - 2013-12-20 11:18 - 01507704 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-03-14 07:07 - 2014-02-11 04:04 - 04189184 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-03-14 07:07 - 2014-02-11 03:43 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-03-14 07:07 - 2014-02-11 03:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-03-10 09:05 - 2014-03-10 09:06 - 02385464 _____ () C:\Users\Nathaniel\Downloads\Cust_insight_Customers-v19.csv

2014-03-10 09:02 - 2014-03-10 09:02 - 02105296 _____ () C:\Users\Nathaniel\Downloads\Cust_insight_Customers-Product-Regression3.csv

2014-03-10 09:02 - 2014-03-10 09:02 - 01695067 _____ () C:\Users\Nathaniel\Downloads\Cust_insight_Customers-v21.csv

2014-03-08 18:20 - 2014-03-08 18:20 - 00020148 _____ () C:\Users\Nathaniel\Desktop\Issue Boarding Pass.htm

2014-03-08 18:20 - 2014-03-08 18:20 - 00000000 ____D () C:\Users\Nathaniel\Desktop\Issue Boarding Pass_files

2014-03-06 12:06 - 2014-03-06 12:06 - 00003496 _____ () C:\Windows\System32\Tasks\HPLJCustParticipation

2014-03-06 12:06 - 2014-03-06 12:06 - 00001272 _____ () C:\Users\Public\Desktop\HP LJ200 M276 Scan.lnk

2014-03-06 12:06 - 2014-03-06 12:06 - 00000608 ___SH () C:\Windows\system32\winzvprt5.sys

2014-03-06 12:06 - 2014-03-06 12:06 - 00000242 _____ () C:\Windows\system32\hppfaxprinter5.ini

2014-03-06 12:06 - 2014-03-06 12:06 - 00000000 ____D () C:\Users\Public\Documents\HP_LaserJet_Fax_0_6

2014-03-06 12:06 - 2014-03-06 12:06 - 00000000 ____D () C:\Users\Nathaniel\AppData\Roaming\Hewlett-Packard Company

2014-03-06 12:06 - 2011-10-10 00:55 - 00027704 ____N (Hewlett-Packard Company) C:\Windows\system32\hppfaxprintermon5.dll

2014-03-06 12:06 - 2011-10-10 00:55 - 00022072 ____N (Hewlett-Packard Company) C:\Windows\system32\hppfaxprintermonui5.dll

2014-03-06 12:05 - 2014-03-20 13:28 - 00000000 ____D () C:\Users\Nathaniel\AppData\Roaming\HpUpdate

2014-03-06 12:05 - 2014-03-06 12:06 - 00000000 ____D () C:\ProgramData\Hewlett-Packard

2014-03-06 12:05 - 2014-03-06 12:05 - 00001297 _____ () C:\Users\Public\Desktop\HP LaserJet 200 color MFP M276 - Help & Learn Center.lnk

2014-03-06 12:05 - 2014-03-06 12:05 - 00000199 _____ () C:\Windows\SysWOW64\msiexec.log

2014-03-06 12:05 - 2014-03-06 12:05 - 00000168 _____ () C:\Windows\system32\AddPort.ini

2014-03-06 12:05 - 2014-03-06 12:05 - 00000000 ____D () C:\Users\Nathaniel\Desktop\HP

2014-03-06 12:01 - 2011-09-28 10:44 - 00311808 _____ (Hewlett-Packard Corporation) C:\Windows\system32\hpcpn117.dll

2014-03-06 12:01 - 2011-09-28 10:34 - 00316928 _____ () C:\Windows\SysWOW64\hpcc3117.DLL

2014-03-06 12:01 - 2011-04-19 21:57 - 00511488 _____ (HP) C:\Windows\SysWOW64\hpcdmc32.DLL

2014-03-06 12:00 - 2014-03-06 12:06 - 00000000 ____D () C:\ProgramData\HP

2014-03-06 12:00 - 2014-03-06 12:06 - 00000000 ____D () C:\Program Files (x86)\HP

2014-03-06 12:00 - 2012-06-01 16:52 - 00947104 _____ (Hewlett-Packard) C:\Windows\system32\hpptsplj276_x64.dll

2014-03-06 12:00 - 2012-06-01 16:52 - 00776096 _____ (Hewlett-Packard) C:\Windows\SysWOW64\hpptsplj276.dll

2014-03-06 12:00 - 2012-06-01 15:35 - 00522128 _____ (Hewlett-Packard) C:\Windows\system32\hpwia2_lj276.dll

2014-03-06 12:00 - 2011-09-29 20:59 - 00638008 _____ (Hewlett-Packard) C:\Windows\system32\hpzjcd01.dll

2014-03-06 12:00 - 2011-05-13 21:23 - 00217656 _____ (Hewlett Packard) C:\Windows\system32\hppscancoins64.dll

2014-03-06 11:59 - 2014-03-06 12:00 - 00000000 ____D () C:\HP_LaserJet_200_color_MFP_M276

2014-03-06 11:59 - 2011-09-26 20:06 - 00311296 _____ (Hewlett-Packard) C:\Windows\system32\hpbcoins64.dll

2014-03-06 11:56 - 2014-03-06 11:58 - 115599616 _____ () C:\Users\Nathaniel\Downloads\LJ-Pro-200-color-MFP-M276-full-solution-12201.exe

==================== One Month Modified Files and Folders =======

2014-04-03 13:19 - 2014-04-03 13:19 - 00016163 _____ () C:\Users\Nathaniel\Downloads\FRST.txt

2014-04-03 13:19 - 2014-04-03 13:19 - 00000000 ____D () C:\FRST

2014-04-03 13:18 - 2014-04-03 13:18 - 02157056 _____ (Farbar) C:\Users\Nathaniel\Downloads\FRST64.exe

2014-04-03 13:10 - 2014-03-30 22:05 - 00000964 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003UA.job

2014-04-03 13:09 - 2014-02-19 12:20 - 00000000 ____D () C:\Users\Nathaniel\AppData\Roaming\Dropbox

2014-04-03 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru

2014-04-03 12:47 - 2014-02-12 12:59 - 02047705 _____ () C:\Windows\WindowsUpdate.log

2014-04-03 11:24 - 2014-02-24 21:26 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-03 11:21 - 2014-02-12 13:11 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-04-03 10:17 - 2014-02-17 13:12 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4197190699-2502681883-4131900191-1003

2014-04-03 10:17 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-04-03 09:43 - 2014-02-18 21:12 - 00000000 ____D () C:\Users\Nathaniel\Documents\Massive Analytic

2014-04-03 08:27 - 2014-04-01 15:16 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-03 08:27 - 2014-02-19 12:25 - 00000000 ___RD () C:\Users\Nathaniel\Dropbox

2014-04-03 08:26 - 2014-02-17 13:08 - 00000000 __RDO () C:\Users\Nathaniel\SkyDrive

2014-04-03 08:26 - 2014-02-12 13:12 - 00002203 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-04-03 08:26 - 2014-02-12 13:11 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-04-02 23:46 - 2014-02-18 20:55 - 00000000 ____D () C:\Users\Nathaniel\AppData\Roaming\Skype

2014-04-02 22:10 - 2014-03-30 22:05 - 00000942 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4197190699-2502681883-4131900191-1003Core.job

2014-04-02 22:01 - 2014-02-26 20:04 - 00000000 ____D () C:\Program Files (x86)\Tennis Elbow 2013

2014-04-01 19:25 - 2014-04-01 15:50 - 00000000 ____D () C:\Users\Nathaniel\Desktop\Old Firefox Data

2014-04-01 16:53 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache

2014-04-01 16:08 - 2014-02-12 12:58 - 00863592 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-04-01 16:04 - 2014-02-12 13:13 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-04-01 16:04 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-04-01 16:03 - 2013-08-22 14:25 - 00524288 ___SH () C:\Windows\system32\config\BBI

2014-04-01 15:44 - 2014-03-31 22:42 - 00000000 ____D () C:\Program Files\OutfoxTV

2014-04-01 15:44 - 2014-02-12 12:49 - 00013848 _____ () C:\Windows\PFRO.log

2014-04-01 15:40 - 2014-04-01 15:40 - 00003146 _____ () C:\Windows\System32\Tasks\{015947C8-201C-4CAC-AC5C-7FB6170FD12D}

2014-04-01 15:37 - 2014-04-01 15:37 - 00583144 _____ () C:\Users\Nathaniel\Downloads\OutfoxTV.exe

2014-04-01 15:30 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PLA

2014-04-01 15:16 - 2014-04-01 15:16 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-04-01 15:16 - 2014-04-01 15:16 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-01 15:16 - 2014-04-01 15:16 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-01 15:15 - 2014-04-01 15:15 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Nathaniel\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-01 15:12 - 2014-04-01 15:12 - 00032512 _____ () C:\Windows\system32\Drivers\hitmanpro37.sys

2014-04-01 15:10 - 2014-04-01 15:02 - 00000000 ____D () C:\ProgramData\HitmanPro

2014-04-01 15:09 - 2014-04-01 15:09 - 00006340 _____ () C:\Windows\system32\.crusader

2014-04-01 15:03 - 2014-04-01 15:03 - 10971424 _____ (SurfRight B.V.) C:\Users\Nathaniel\Downloads\HitmanPro_x64.exe

2014-04-01 15:03 - 2014-04-01 15:03 - 00001909 _____ () C:\Users\Public\Desktop\HitmanPro.lnk

2014-04-01 15:03 - 2014-04-01 15:03 - 00000000 ____D () C:\Program Files\HitmanPro

2014-04-01 15:02 - 2014-04-01 15:02 - 10089256 _____ (SurfRight B.V.) C:\Users\Nathaniel\Downloads\HitmanPro.exe

2014-04-01 14:54 - 2014-04-01 14:52 - 00000000 ____D () C:\AdwCleaner

2014-04-01 14:49 - 2014-04-01 14:49 - 01426178 _____ () C:\Users\Nathaniel\Downloads\adwcleaner.exe

2014-04-01 14:45 - 2014-02-17 13:06 - 00000000 ____D () C:\Users\Nathaniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-04-01 14:44 - 2014-04-01 14:44 - 00000082 _____ () C:\Users\Nathaniel\AppData\Roaming\cert.dat

2014-04-01 14:19 - 2014-04-01 14:18 - 00187850 _____ () C:\Users\Nathaniel\Downloads\OTL.Txt

2014-04-01 14:19 - 2014-04-01 14:18 - 00077364 _____ () C:\Users\Nathaniel\Downloads\Extras.Txt

2014-04-01 13:57 - 2014-02-24 19:57 - 00000179 _____ () C:\Users\Nathaniel\AppData\Roaming\WB.CFG

2014-04-01 13:51 - 2014-04-01 13:51 - 00602112 _____ (OldTimer Tools) C:\Users\Nathaniel\Downloads\OTL.exe

2014-04-01 13:44 - 2014-04-01 13:44 - 00388608 _____ (Trend Micro Inc.) C:\Users\Nathaniel\Downloads\HijackThis.exe

2014-04-01 13:44 - 2014-04-01 13:44 - 00011670 _____ () C:\Users\Nathaniel\Downloads\hijackthis.log

2014-04-01 13:44 - 2014-02-17 13:06 - 00000000 ____D () C:\Users\Nathaniel\AppData\Local\VirtualStore

2014-04-01 07:23 - 2014-02-24 20:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-04-01 07:23 - 2014-02-19 12:04 - 00000000 ____D () C:\Windows\SysWOW64\NV

2014-04-01 07:23 - 2014-02-19 12:04 - 00000000 ____D () C:\Windows\system32\NV

2014-03-31 21:31 - 2014-03-31 21:11 - 00000000 ____D () C:\Users\Nathaniel\Documents\My Kindle Content