Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
PUP.Optional.Superfish.A keeps coming back, attempts to run proxy server.
Message
<blockquote data-quote="joesushi" data-source="post: 262394" data-attributes="member: 27974"><p>Pre-scan I did take a bit of action on my own and Stopped Proxy service in the Task Manager services tab.</p><p>Here are the contents of the log files:</p><p></p><p>Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014</p><p>Ran by joesushi (administrator) on JOESUSHI-PC on 16-09-2014 08:38:48</p><p>Running from C:\Users\joesushi\Desktop</p><p>Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)</p><p>Internet Explorer Version 9</p><p>Boot Mode: Normal</p><p>Tutorial for Farbar Recovery Scan Tool: <a href="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/" target="_blank">http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/</a></p><p></p><p>==================== Processes (Whitelisted) =================</p><p></p><p>(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)</p><p></p><p>(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe</p><p>(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe</p><p>(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe</p><p>(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe</p><p>(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe</p><p>(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe</p><p>(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe</p><p>() C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe</p><p>(Scarlet.Crush Productions) K:\ScpServer\bin\ScpService.exe</p><p>(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe</p><p>() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe</p><p>(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe</p><p>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe</p><p>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe</p><p>(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe</p><p>(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe</p><p>(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe</p><p>(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe</p><p>(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe</p><p>(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe</p><p>(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe</p><p>(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe</p><p>(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe</p><p>(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe</p><p>(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe</p><p>(Joyent, Inc) C:\Program Files (x86)\Common Files\Diagnostics\node\node.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p>(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</p><p></p><p></p><p>==================== Registry (Whitelisted) ==================</p><p></p><p>(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)</p><p></p><p>HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-09-14] (AVAST Software)</p><p>Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)</p><p>HKU\S-1-5-21-2322799817-1880985190-1667400278-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000</p><p>ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)</p><p></p><p>==================== Internet (Whitelisted) ====================</p><p></p><p>(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)</p><p></p><p>HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch</a></p><p>HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US</p><p>HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank</p><p>StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe</p><p>SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = </p><p>BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)</p><p>BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)</p><p>BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)</p><p>BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)</p><p>BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)</p><p>BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)</p><p>BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)</p><p>Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)</p><p>Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"</p><p>Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"</p><p>Tcpip\..\Interfaces\{A09FC154-BAF3-423A-82C0-273274D5EE8D}: [NameServer] 167.206.245.135,167.206.245.136</p><p></p><p>FireFox:</p><p>========</p><p>FF Plugin: @microsoft.com/GENUINE -> disabled No File</p><p>FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)</p><p>FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File</p><p>FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File</p><p>FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()</p><p>FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)</p><p>FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)</p><p>FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File</p><p>FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)</p><p>FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)</p><p>FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)</p><p>FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)</p><p>FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)</p><p>FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)</p><p>FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)</p><p>FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt</p><p>FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-09-25]</p><p>FF HKLM-x32\...\Thunderbird\Extensions: [<a href="mailto:eplgTb@eset.com">eplgTb@eset.com</a>] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird</p><p></p><p>Chrome: </p><p>=======</p><p>CHR Profile: C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default</p><p>CHR Extension: (Google Slides) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-15]</p><p>CHR Extension: (Google Docs) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-15]</p><p>CHR Extension: (Google Drive) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-15]</p><p>CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-15]</p><p>CHR Extension: (YouTube) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-15]</p><p>CHR Extension: (Google Search) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-15]</p><p>CHR Extension: (Logitech Smooth Scrolling) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2014-09-15]</p><p>CHR Extension: (Google Sheets) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-15]</p><p>CHR Extension: (AdBlock) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-15]</p><p>CHR Extension: (Google Wallet) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-15]</p><p>CHR Extension: (Gmail) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-15]</p><p></p><p>==================== Services (Whitelisted) =================</p><p></p><p>(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p>R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-09-14] (AVAST Software)</p><p>R2 Diagnostics; C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe [154112 2014-09-10] () [File not signed]</p><p>R2 Ds3Service; K:\ScpServer\bin\ScpService.exe [381952 2014-04-02] (Scarlet.Crush Productions) [File not signed]</p><p>R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2011-12-16] ()</p><p>R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)</p><p>R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)</p><p>R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)</p><p>R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)</p><p>R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)</p><p>S2 Proxy; C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe [154112 2014-09-10] () [File not signed]</p><p>S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]</p><p></p><p>==================== Drivers (Whitelisted) ====================</p><p></p><p>(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)</p><p></p><p>R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-09-14] ()</p><p>R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-09-14] (AVAST Software)</p><p>R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-09-14] (AVAST Software)</p><p>R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-09-14] ()</p><p>R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-09-14] (AVAST Software)</p><p>R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-09-14] (AVAST Software)</p><p>R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-09-14] (AVAST Software)</p><p>R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-09-14] ()</p><p>R1 BIOS; C:\Windows\system32\drivers\BIOS64.sys [14136 2011-08-08] (BIOSTAR Group)</p><p>R1 BIOS; C:\Windows\SysWOW64\drivers\BIOS64.sys [14136 2011-08-08] (BIOSTAR Group)</p><p>R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-28] (Disc Soft Ltd)</p><p>S3 hidusbf; C:\Windows\System32\DRIVERS\hidusbf.sys [6784 2012-12-02] (SweetLow) [File not signed]</p><p>S3 MayPro; C:\Windows\System32\Drivers\MayPro.sys [25120 2007-08-13] (TigerGame.,Ltd)</p><p>R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)</p><p>R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-16] (Malwarebytes Corporation)</p><p>R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)</p><p>S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2012-09-10] (Apple Inc.) [File not signed]</p><p>R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)</p><p>R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)</p><p>R3 PciPPorts; C:\Windows\System32\DRIVERS\PciPPorts.sys [96768 2013-06-15] ()</p><p>S3 PPJoyBus; C:\Windows\System32\DRIVERS\PPJoyBus64.sys [20024 2010-02-20] (Deon van der Westhuysen)</p><p>S3 PPortJoystick; C:\Windows\System32\DRIVERS\PPortJoy64.sys [39992 2010-02-20] (Deon van der Westhuysen)</p><p>R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)</p><p></p><p>==================== NetSvcs (Whitelisted) ===================</p><p></p><p>(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)</p><p></p><p></p><p>==================== One Month Created Files and Folders ========</p><p></p><p>(If an entry is included in the fixlist, the file\folder will be moved.)</p><p></p><p>2014-09-16 07:25 - 2014-09-16 07:25 - 00001116 _____ () C:\Windows\PFRO.log</p><p>2014-09-16 07:25 - 2014-09-16 07:25 - 00000168 _____ () C:\Windows\setupact.log</p><p>2014-09-16 07:25 - 2014-09-16 07:25 - 00000000 _____ () C:\Windows\setuperr.log</p><p>2014-09-15 23:05 - 2014-09-15 23:05 - 00000000 ____D () C:\Windows\pss</p><p>2014-09-15 19:31 - 2014-09-15 19:31 - 00115927 _____ () C:\Users\joesushi\.recently-used.xbel</p><p>2014-09-15 18:44 - 2014-09-15 18:44 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\joesushi\Desktop\tdsskiller.exe</p><p>2014-09-15 17:10 - 2014-09-16 08:38 - 00014615 _____ () C:\Users\joesushi\Desktop\FRST.txt</p><p>2014-09-15 17:10 - 2014-09-16 08:38 - 00000000 ____D () C:\FRST</p><p>2014-09-15 17:10 - 2014-09-15 17:11 - 00053912 _____ () C:\Users\joesushi\Desktop\Addition.txt</p><p>2014-09-15 17:09 - 2014-09-15 17:09 - 02105856 _____ (Farbar) C:\Users\joesushi\Desktop\FRST64.exe</p><p>2014-09-15 02:37 - 2014-09-15 02:38 - 00003698 _____ () C:\Users\joesushi\Desktop\Nmc_2014-09-15_02-37-27.log</p><p>2014-09-15 01:58 - 2014-09-13 18:17 - 01373475 _____ () C:\Users\joesushi\Desktop\adwcleaner_3.310.exe</p><p>2014-09-15 01:28 - 2014-09-15 01:28 - 00002918 _____ () C:\HitmanPro_20140915_0128.log</p><p>2014-09-15 01:26 - 2014-09-15 01:26 - 00037074 _____ () C:\ComboFix.txt</p><p>2014-09-15 01:12 - 2014-09-15 01:26 - 00000000 ____D () C:\Qoobox</p><p>2014-09-15 01:12 - 2014-09-15 01:23 - 00000000 ____D () C:\Windows\erdnt</p><p>2014-09-15 01:12 - 2011-06-26 02:45 - 00256000 _____ () C:\Windows\PEV.exe</p><p>2014-09-15 01:12 - 2010-11-07 13:20 - 00208896 _____ () C:\Windows\MBR.exe</p><p>2014-09-15 01:12 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe</p><p>2014-09-15 01:12 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe</p><p>2014-09-15 01:12 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe</p><p>2014-09-15 01:12 - 2000-08-30 20:00 - 00098816 _____ () C:\Windows\sed.exe</p><p>2014-09-15 01:12 - 2000-08-30 20:00 - 00080412 _____ () C:\Windows\grep.exe</p><p>2014-09-15 01:12 - 2000-08-30 20:00 - 00068096 _____ () C:\Windows\zip.exe</p><p>2014-09-15 01:10 - 2014-09-15 01:10 - 05578360 ____R (Swearware) C:\Users\joesushi\Desktop\ComboFix.exe</p><p>2014-09-15 01:04 - 2014-09-16 08:09 - 00000902 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job</p><p>2014-09-15 01:04 - 2014-09-16 07:25 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00003898 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00003646 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00002219 _____ () C:\Users\Public\Desktop\Google Chrome.lnk</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Google</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Program Files (x86)\Google</p><p>2014-09-14 17:45 - 2014-09-14 17:45 - 00001064 _____ () C:\mbamscan.txt</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys</p><p>2014-09-14 01:35 - 2014-09-15 18:41 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update</p><p>2014-09-14 01:35 - 2014-09-14 01:35 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\AVAST Software</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys</p><p>2014-09-14 01:34 - 2014-09-14 01:36 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk</p><p>2014-09-14 01:34 - 2014-09-14 01:34 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1410672877</p><p>2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast</p><p>2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\Program Files\AVAST Software</p><p>2014-09-14 01:33 - 2014-09-14 01:33 - 00000000 ____D () C:\ProgramData\AVAST Software</p><p>2014-09-14 01:11 - 2014-09-14 01:11 - 01016261 _____ (Thisisu) C:\Users\joesushi\Desktop\JRT.exe</p><p>2014-09-14 01:11 - 2014-09-14 01:11 - 00000000 ____D () C:\Windows\ERUNT</p><p>2014-09-13 19:35 - 2014-09-13 19:35 - 00001296 _____ () C:\Windows\system32\.crusader</p><p>2014-09-13 19:17 - 2014-09-13 19:35 - 00000000 ____D () C:\ProgramData\HitmanPro</p><p>2014-09-13 18:27 - 2014-09-16 08:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Malwarebytes</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware</p><p>2014-09-13 18:27 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys</p><p>2014-09-13 18:27 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys</p><p>2014-09-13 18:27 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys</p><p>2014-09-13 18:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll</p><p>2014-09-13 18:17 - 2014-09-15 02:01 - 00000000 ____D () C:\AdwCleaner</p><p>2014-09-13 00:31 - 2014-09-13 00:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group</p><p>2014-09-12 10:08 - 2014-09-12 13:31 - 00000000 ____D () C:\Users\joesushi\Desktop\bl2</p><p>2014-09-12 09:25 - 2014-09-12 09:25 - 00000000 ____D () C:\Users\joesushi\Desktop\saveedit_r237</p><p>2014-09-11 21:18 - 2014-09-11 21:18 - 00000044 _____ () C:\Users\joesushi\AppData\Roaming\WB.CFG</p><p>2014-09-11 20:19 - 2014-09-15 18:14 - 00001024 _____ () C:\.rnd</p><p>2014-09-11 20:13 - 2014-09-11 20:13 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Daring_Development_Inc</p><p>2014-09-11 03:03 - 2014-08-15 11:48 - 17868288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:36 - 10920960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:35 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:31 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:31 - 01384960 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:30 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl</p><p>2014-09-11 03:03 - 2014-08-15 11:30 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:30 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 02156032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:29 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:28 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb</p><p>2014-09-11 03:03 - 2014-08-15 11:28 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll</p><p>2014-09-11 03:03 - 2014-08-15 11:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe</p><p>2014-09-11 03:03 - 2014-08-15 11:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe</p><p>2014-09-11 03:03 - 2014-08-15 10:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb</p><p>2014-09-11 03:03 - 2014-08-15 10:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll</p><p>2014-09-11 03:03 - 2014-08-15 10:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe</p><p>2014-09-11 03:03 - 2014-08-15 10:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe</p><p>2014-09-11 03:00 - 2014-06-26 22:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll</p><p>2014-09-11 03:00 - 2014-06-26 21:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll</p><p>2014-09-11 01:04 - 2014-08-01 07:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll</p><p>2014-09-11 01:04 - 2014-08-01 07:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll</p><p>2014-09-11 01:04 - 2014-07-06 22:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll</p><p>2014-09-11 01:04 - 2014-07-06 22:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll</p><p>2014-09-11 01:04 - 2014-07-06 21:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll</p><p>2014-09-11 01:04 - 2014-07-06 21:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll</p><p>2014-09-11 01:04 - 2014-07-06 21:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll</p><p>2014-09-11 01:04 - 2014-06-23 23:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll</p><p>2014-09-11 01:04 - 2014-06-23 22:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll</p><p>2014-09-10 20:41 - 2013-05-19 03:02 - 00039168 _____ (Scarlet.Crush Productions) C:\Windows\system32\Drivers\ScpVBus.sys</p><p>2014-09-10 20:38 - 2014-09-10 20:38 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories</p><p>2014-09-10 18:37 - 2014-09-10 19:38 - 00000000 ____D () C:\Users\joesushi\AppData\Local\BetterDS3</p><p>2014-09-10 18:30 - 2014-09-10 18:33 - 00000000 ____D () C:\Users\joesushi\Documents\FIFA 15 Demo</p><p>2014-09-10 18:27 - 2014-09-10 18:27 - 00000000 ____D () C:\ProgramData\Package Cache</p><p>2014-09-08 22:53 - 2014-09-09 15:44 - 00000000 ____D () C:\Users\joesushi\Desktop\psych and media</p><p>2014-08-29 12:40 - 2014-09-12 09:12 - 00000000 ____D () C:\Users\joesushi\Desktop\senior capstone</p><p>2014-08-28 01:47 - 2014-08-22 22:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll</p><p>2014-08-28 01:47 - 2014-08-22 21:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll</p><p>2014-08-28 01:47 - 2014-08-22 20:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys</p><p>2014-08-25 20:38 - 2014-09-11 03:48 - 00000000 ____D () C:\Windows\rescache</p><p>2014-08-25 19:49 - 2014-08-25 19:49 - 00000000 ____D () C:\Users\joesushi\Desktop\docus</p><p>2014-08-25 19:48 - 2014-08-25 19:48 - 00000000 _____ () C:\Users\joesushi\Sti_Trace.log</p><p>2014-08-25 19:47 - 2014-08-25 19:48 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Canon</p><p>2014-08-25 19:46 - 2014-08-25 19:46 - 00002016 _____ () C:\Users\Public\Desktop\MP Navigator 3.0.lnk</p><p>2014-08-25 19:46 - 2014-08-25 19:46 - 00000000 ____D () C:\Program Files (x86)\Canon</p><p>2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information</p><p>2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Program Files\CanonBJ</p><p>2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP460</p><p>2014-08-25 19:43 - 2008-04-03 05:00 - 00235520 _____ (CANON INC.) C:\Windows\system32\CNMLM81.DLL</p><p>2014-08-25 19:43 - 2008-01-30 11:14 - 01338368 _____ (CANON INC.) C:\Windows\system32\CNCC460.DLL</p><p>2014-08-25 19:43 - 2008-01-30 11:13 - 00049664 _____ (CANON INC.) C:\Windows\system32\CNCI460.DLL</p><p>2014-08-25 19:43 - 2006-06-29 14:30 - 00017408 _____ (Canon Inc.) C:\Windows\system32\cnco460.dll</p><p>2014-08-25 19:43 - 2006-05-26 16:23 - 00091136 _____ (Canon Inc.) C:\Windows\system32\CNCL460.DLL</p><p>2014-08-25 19:36 - 2014-08-25 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities</p><p>2014-08-21 01:23 - 2014-05-14 12:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe</p><p>2014-08-21 01:23 - 2014-05-14 12:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll</p><p>2014-08-21 01:23 - 2014-05-14 12:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll</p><p>2014-08-21 01:23 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll</p><p>2014-08-21 01:23 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll</p><p>2014-08-21 01:23 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe</p><p>2014-08-21 01:23 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe</p><p>2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StepMania</p><p>2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania</p><p></p><p>==================== One Month Modified Files and Folders =======</p><p></p><p>(If an entry is included in the fixlist, the file\folder will be moved.)</p><p></p><p>2014-09-16 08:38 - 2014-09-15 17:10 - 00014615 _____ () C:\Users\joesushi\Desktop\FRST.txt</p><p>2014-09-16 08:38 - 2014-09-15 17:10 - 00000000 ____D () C:\FRST</p><p>2014-09-16 08:31 - 2014-09-13 18:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys</p><p>2014-09-16 08:09 - 2014-09-15 01:04 - 00000902 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job</p><p>2014-09-16 07:34 - 2012-10-04 15:28 - 01232893 _____ () C:\Windows\WindowsUpdate.log</p><p>2014-09-16 07:32 - 2009-07-14 01:13 - 00796210 _____ () C:\Windows\system32\PerfStringBackup.INI</p><p>2014-09-16 07:32 - 2009-07-14 00:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0</p><p>2014-09-16 07:32 - 2009-07-14 00:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0</p><p>2014-09-16 07:25 - 2014-09-16 07:25 - 00001116 _____ () C:\Windows\PFRO.log</p><p>2014-09-16 07:25 - 2014-09-16 07:25 - 00000168 _____ () C:\Windows\setupact.log</p><p>2014-09-16 07:25 - 2014-09-16 07:25 - 00000000 _____ () C:\Windows\setuperr.log</p><p>2014-09-16 07:25 - 2014-09-15 01:04 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job</p><p>2014-09-16 07:25 - 2013-08-20 20:33 - 00000000 ____D () C:\ProgramData\NVIDIA</p><p>2014-09-16 07:25 - 2012-10-04 15:35 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job</p><p>2014-09-16 07:25 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT</p><p>2014-09-15 23:20 - 2013-11-16 12:24 - 00000000 ____D () C:\ProgramData\Origin</p><p>2014-09-15 23:20 - 2009-07-14 01:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games</p><p>2014-09-15 23:05 - 2014-09-15 23:05 - 00000000 ____D () C:\Windows\pss</p><p>2014-09-15 23:04 - 2012-10-05 23:22 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\foobar2000</p><p>2014-09-15 19:32 - 2012-10-19 13:37 - 00000000 ____D () C:\Users\joesushi\.gimp-2.6</p><p>2014-09-15 19:31 - 2014-09-15 19:31 - 00115927 _____ () C:\Users\joesushi\.recently-used.xbel</p><p>2014-09-15 19:31 - 2012-10-20 00:03 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\gtk-2.0</p><p>2014-09-15 19:31 - 2012-10-04 15:28 - 00000000 ____D () C:\Users\joesushi</p><p>2014-09-15 18:47 - 2014-04-28 14:22 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Dropbox</p><p>2014-09-15 18:44 - 2014-09-15 18:44 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\joesushi\Desktop\tdsskiller.exe</p><p>2014-09-15 18:41 - 2014-09-14 01:35 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update</p><p>2014-09-15 18:14 - 2014-09-11 20:19 - 00001024 _____ () C:\.rnd</p><p>2014-09-15 17:11 - 2014-09-15 17:10 - 00053912 _____ () C:\Users\joesushi\Desktop\Addition.txt</p><p>2014-09-15 17:09 - 2014-09-15 17:09 - 02105856 _____ (Farbar) C:\Users\joesushi\Desktop\FRST64.exe</p><p>2014-09-15 02:38 - 2014-09-15 02:37 - 00003698 _____ () C:\Users\joesushi\Desktop\Nmc_2014-09-15_02-37-27.log</p><p>2014-09-15 02:01 - 2014-09-13 18:17 - 00000000 ____D () C:\AdwCleaner</p><p>2014-09-15 01:28 - 2014-09-15 01:28 - 00002918 _____ () C:\HitmanPro_20140915_0128.log</p><p>2014-09-15 01:26 - 2014-09-15 01:26 - 00037074 _____ () C:\ComboFix.txt</p><p>2014-09-15 01:26 - 2014-09-15 01:12 - 00000000 ____D () C:\Qoobox</p><p>2014-09-15 01:26 - 2009-07-13 23:20 - 00000000 __RHD () C:\Users\Default</p><p>2014-09-15 01:23 - 2014-09-15 01:12 - 00000000 ____D () C:\Windows\erdnt</p><p>2014-09-15 01:19 - 2009-07-13 22:34 - 00000215 _____ () C:\Windows\system.ini</p><p>2014-09-15 01:10 - 2014-09-15 01:10 - 05578360 ____R (Swearware) C:\Users\joesushi\Desktop\ComboFix.exe</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00003898 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00003646 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00002219 _____ () C:\Users\Public\Desktop\Google Chrome.lnk</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Google</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome</p><p>2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Program Files (x86)\Google</p><p>2014-09-15 00:46 - 2012-10-04 15:28 - 00001407 _____ () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk</p><p>2014-09-15 00:46 - 2012-10-04 15:28 - 00001373 _____ () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk</p><p>2014-09-15 00:44 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\Offline Web Pages</p><p>2014-09-14 17:46 - 2012-11-23 14:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\C-Force</p><p>2014-09-14 17:45 - 2014-09-14 17:45 - 00001064 _____ () C:\mbamscan.txt</p><p>2014-09-14 12:20 - 2012-10-05 22:58 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\uTorrent</p><p>2014-09-14 11:17 - 2014-07-10 14:32 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Warframe</p><p>2014-09-14 02:29 - 2012-10-04 22:09 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk</p><p>2014-09-14 02:29 - 2012-10-04 22:09 - 00000000 ____D () C:\Program Files\CCleaner</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys</p><p>2014-09-14 01:36 - 2014-09-14 01:34 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk</p><p>2014-09-14 01:35 - 2014-09-14 01:35 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\AVAST Software</p><p>2014-09-14 01:34 - 2014-09-14 01:34 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1410672877</p><p>2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast</p><p>2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\Program Files\AVAST Software</p><p>2014-09-14 01:33 - 2014-09-14 01:33 - 00000000 ____D () C:\ProgramData\AVAST Software</p><p>2014-09-14 01:11 - 2014-09-14 01:11 - 01016261 _____ (Thisisu) C:\Users\joesushi\Desktop\JRT.exe</p><p>2014-09-14 01:11 - 2014-09-14 01:11 - 00000000 ____D () C:\Windows\ERUNT</p><p>2014-09-14 00:28 - 2012-10-04 22:04 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Deployment</p><p>2014-09-14 00:19 - 2014-03-14 21:42 - 00000000 ____D () C:\Users\joesushi\Desktop\WinSetupFromUSB</p><p>2014-09-13 19:35 - 2014-09-13 19:35 - 00001296 _____ () C:\Windows\system32\.crusader</p><p>2014-09-13 19:35 - 2014-09-13 19:17 - 00000000 ____D () C:\ProgramData\HitmanPro</p><p>2014-09-13 19:31 - 2012-10-04 16:37 - 00001945 _____ () C:\Windows\epplauncher.mif</p><p>2014-09-13 19:05 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\TAPI</p><p>2014-09-13 18:36 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\LiveKernelReports</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Malwarebytes</p><p>2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware</p><p>2014-09-13 18:17 - 2014-09-15 01:58 - 01373475 _____ () C:\Users\joesushi\Desktop\adwcleaner_3.310.exe</p><p>2014-09-13 15:05 - 2012-10-04 15:35 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job</p><p>2014-09-13 00:48 - 2014-09-13 00:31 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group</p><p>2014-09-12 13:31 - 2014-09-12 10:08 - 00000000 ____D () C:\Users\joesushi\Desktop\bl2</p><p>2014-09-12 09:25 - 2014-09-12 09:25 - 00000000 ____D () C:\Users\joesushi\Desktop\saveedit_r237</p><p>2014-09-12 09:25 - 2014-04-13 01:43 - 00000000 ____D () C:\Users\joesushi\Downloads\Video</p><p>2014-09-12 09:12 - 2014-08-29 12:40 - 00000000 ____D () C:\Users\joesushi\Desktop\senior capstone</p><p>2014-09-11 23:07 - 2012-11-17 14:23 - 00000000 ____D () C:\Windows\Minidump</p><p>2014-09-11 23:05 - 2014-01-23 15:02 - 00000000 ____D () C:\Users\joesushi\Desktop\crime films</p><p>2014-09-11 21:18 - 2014-09-11 21:18 - 00000044 _____ () C:\Users\joesushi\AppData\Roaming\WB.CFG</p><p>2014-09-11 20:17 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\Resources</p><p>2014-09-11 20:13 - 2014-09-11 20:13 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Daring_Development_Inc</p><p>2014-09-11 20:13 - 2009-07-13 22:34 - 00000607 _____ () C:\Windows\win.ini</p><p>2014-09-11 03:48 - 2014-08-25 20:38 - 00000000 ____D () C:\Windows\rescache</p><p>2014-09-11 03:04 - 2014-05-04 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013</p><p>2014-09-11 03:04 - 2013-10-04 22:44 - 00000000 ____D () C:\ProgramData\Microsoft Help</p><p>2014-09-11 03:03 - 2013-08-19 21:18 - 00773030 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI</p><p>2014-09-10 20:38 - 2014-09-10 20:38 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories</p><p>2014-09-10 19:38 - 2014-09-10 18:37 - 00000000 ____D () C:\Users\joesushi\AppData\Local\BetterDS3</p><p>2014-09-10 18:33 - 2014-09-10 18:30 - 00000000 ____D () C:\Users\joesushi\Documents\FIFA 15 Demo</p><p>2014-09-10 18:27 - 2014-09-10 18:27 - 00000000 ____D () C:\ProgramData\Package Cache</p><p>2014-09-09 15:44 - 2014-09-08 22:53 - 00000000 ____D () C:\Users\joesushi\Desktop\psych and media</p><p>2014-09-05 13:59 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF</p><p>2014-08-31 13:37 - 2012-10-09 09:14 - 00001893 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk</p><p>2014-08-28 14:48 - 2014-06-08 00:14 - 00004982 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for joesushi-PC-joesushi joesushi-PC</p><p>2014-08-28 08:31 - 2013-09-28 19:08 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\mIRC</p><p>2014-08-28 03:16 - 2009-07-14 00:45 - 05121272 _____ () C:\Windows\system32\FNTCACHE.DAT</p><p>2014-08-28 00:37 - 2013-10-19 00:51 - 00001774 _____ () C:\Users\joesushi\Desktop\MPC-BE x64.lnk</p><p>2014-08-28 00:13 - 2013-12-01 02:40 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\avidemux</p><p>2014-08-25 19:49 - 2014-08-25 19:49 - 00000000 ____D () C:\Users\joesushi\Desktop\docus</p><p>2014-08-25 19:48 - 2014-08-25 19:48 - 00000000 _____ () C:\Users\joesushi\Sti_Trace.log</p><p>2014-08-25 19:48 - 2014-08-25 19:47 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Canon</p><p>2014-08-25 19:46 - 2014-08-25 19:46 - 00002016 _____ () C:\Users\Public\Desktop\MP Navigator 3.0.lnk</p><p>2014-08-25 19:46 - 2014-08-25 19:46 - 00000000 ____D () C:\Program Files (x86)\Canon</p><p>2014-08-25 19:46 - 2009-07-13 23:20 - 00000000 __RSD () C:\Windows\Media</p><p>2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information</p><p>2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Program Files\CanonBJ</p><p>2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP460</p><p>2014-08-25 19:38 - 2012-10-04 15:43 - 00114872 _____ () C:\Users\joesushi\AppData\Local\GDIPFONTCACHEV1.DAT</p><p>2014-08-25 19:36 - 2014-08-25 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities</p><p>2014-08-25 19:31 - 2014-06-26 21:12 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Adobe</p><p>2014-08-25 09:23 - 2012-11-14 20:23 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\HandBrake</p><p>2014-08-25 06:53 - 2010-11-20 23:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe</p><p>2014-08-22 22:07 - 2014-08-28 01:47 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll</p><p>2014-08-22 21:45 - 2014-08-28 01:47 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll</p><p>2014-08-22 20:59 - 2014-08-28 01:47 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys</p><p>2014-08-19 09:04 - 2014-03-11 16:26 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\ACEStream</p><p>2014-08-19 09:04 - 2014-03-11 16:26 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\.ACEStream</p><p>2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StepMania</p><p>2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania</p><p></p><p>Some content of TEMP:</p><p>====================</p><p>C:\Users\joesushi\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplxtvik.dll</p><p>C:\Users\joesushi\AppData\Local\Temp\HitmanPro.exe</p><p>C:\Users\joesushi\AppData\Local\Temp\Quarantine.exe</p><p></p><p></p><p>==================== Bamital & volsnap Check =================</p><p></p><p>(There is no automatic fix for files that do not pass verification.)</p><p></p><p>C:\Windows\System32\winlogon.exe => File is digitally signed</p><p>C:\Windows\System32\wininit.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\wininit.exe => File is digitally signed</p><p>C:\Windows\explorer.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\explorer.exe => File is digitally signed</p><p>C:\Windows\System32\svchost.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\svchost.exe => File is digitally signed</p><p>C:\Windows\System32\services.exe => File is digitally signed</p><p>C:\Windows\System32\User32.dll => File is digitally signed</p><p>C:\Windows\SysWOW64\User32.dll => File is digitally signed</p><p>C:\Windows\System32\userinit.exe => File is digitally signed</p><p>C:\Windows\SysWOW64\userinit.exe => File is digitally signed</p><p>C:\Windows\System32\rpcss.dll => File is digitally signed</p><p>C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed</p><p></p><p></p><p>testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!</p><p></p><p></p><p>LastRegBack: 2014-09-16 08:10</p><p></p><p>==================== End Of Log ============================</p><p></p><p></p><p>Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014</p><p>Ran by joesushi at 2014-09-16 08:39:05</p><p>Running from C:\Users\joesushi\Desktop</p><p>Boot Mode: Normal</p><p>==========================================================</p><p></p><p></p><p>==================== Security Center ========================</p><p></p><p>(If an entry is included in the fixlist, it will be removed.)</p><p></p><p>AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}</p><p>AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}</p><p>AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}</p><p></p><p>==================== Installed Programs ======================</p><p></p><p>(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)</p><p></p><p>µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - )</p><p>7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)</p><p>Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.3.0.3670 - Adobe Systems Incorporated)</p><p>Adobe AIR (x32 Version: 3.3.0.3670 - Adobe Systems Incorporated) Hidden</p><p>Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)</p><p>Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)</p><p>Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)</p><p>Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden</p><p>Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)</p><p>Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden</p><p>Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 2.8.0 - Adobe Systems Incorporated)</p><p>Adobe® Content Viewer (x32 Version: 2.8.0 - Adobe Systems Incorporated) Hidden</p><p>Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)</p><p>Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)</p><p>Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)</p><p>Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)</p><p>AudibleManager (HKLM-x32\...\AudibleManager) (Version: - )</p><p>avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)</p><p>Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5 (64-bit)) (Version: 2.5.6.7716 - )</p><p>AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - )</p><p>bl (x32 Version: 1.0.0 - Your Company Name) Hidden</p><p>Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)</p><p>calibre (HKLM-x32\...\{B704D3AE-4443-40BA-B8B3-F0762ED4E8BC}) (Version: 0.9.42 - Kovid Goyal)</p><p>Canon MP Navigator 3.0 (HKLM-x32\...\MP Navigator 3.0) (Version: - )</p><p>Canon MP460 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP460) (Version: - )</p><p>CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform)</p><p>CL-Eye Driver (HKLM-x32\...\CL-Eye Driver) (Version: 5.3.0.0341 - Code Laboratories, Inc.)</p><p>DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0337 - Disc Soft Ltd)</p><p>dBpoweramp [Calculate Audio CRC] Codec (HKLM-x32\...\dBpoweramp [Calculate Audio CRC] Codec) (Version: - )</p><p>dBpoweramp [Multi Encoder] Codec (HKLM-x32\...\dBpoweramp [Multi Encoder] Codec) (Version: - )</p><p>dBpoweramp Dalet Codec (HKLM-x32\...\dBpoweramp Dalet Codec) (Version: - )</p><p>dBpoweramp DirectShow Decoder (HKLM-x32\...\dBpoweramp DirectShow Decoder) (Version: Release 2 - Illustrate)</p><p>dBpowerAMP DirectShow Decoder Codec (HKLM-x32\...\dBpowerAMP DirectShow Decoder Codec) (Version: - )</p><p>dBpoweramp DSP Effects (HKLM-x32\...\dBpoweramp DSP Effects) (Version: - )</p><p>dBpoweramp FLAC Codec (HKLM-x32\...\dBpoweramp FLAC Codec) (Version: Release 10 (FLAC 1.2.0) - Illustrate)</p><p>dBpoweramp Monkeys Audio Codec (HKLM-x32\...\dBpoweramp Monkeys Audio Codec) (Version: - )</p><p>dBpoweramp Mp2 and BwfMp2 codec (HKLM-x32\...\dBpoweramp Mp2 and BwfMp2 codec) (Version: - )</p><p>dBpoweramp mp3 (Fraunhofer IIS) Codec (HKLM-x32\...\dBpoweramp mp3 (Fraunhofer IIS) Codec) (Version: Release 2a (v4.0.3) - Illustrate)</p><p>dBpoweramp Music Converter (HKLM-x32\...\dBpoweramp Music Converter) (Version: Release 12.4 - )</p><p>dBpoweramp Ogg Vorbis Codec (HKLM-x32\...\dBpoweramp Ogg Vorbis Codec) (Version: - )</p><p>dBpoweramp Real Audio (Helix) Encoder (HKLM-x32\...\dBpoweramp Real Audio (Helix) Encoder) (Version: - )</p><p>dBPoweramp tooLame MP2 codec (HKLM-x32\...\dBPoweramp tooLame MP2 codec) (Version: - )</p><p>dBpoweramp Wave64 Codec (HKLM-x32\...\dBpoweramp Wave64 Codec) (Version: - )</p><p>dBpoweramp WavPack Codec (HKLM-x32\...\dBpoweramp WavPack Codec) (Version: - )</p><p>Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9719DFA1-7CB0-422E-98AE-C77FD3426BE8}) (Version: - Microsoft)</p><p>DiscJuggler (HKLM-x32\...\DiscJuggler) (Version: 6.0.0.1400 - Padus Incorporated)</p><p>Dropbox (HKCU\...\Dropbox) (Version: 2.10.27 - Dropbox, Inc.)</p><p>DVD Decrypter (Remove Only) (HKLM-x32\...\DVD Decrypter) (Version: - )</p><p>Elsword version v4.0514.5.1 (HKLM-x32\...\{E655DDFC-24DB-4FC3-8474-271E911309B4}_is1) (Version: v4.0514.5.1 - Kill3rCombo)</p><p>eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden</p><p>Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)</p><p>FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)</p><p>foobar2000 v1.3.1 (HKLM-x32\...\foobar2000) (Version: 1.3.1 - Peter Pawlowski)</p><p>GEAR Drivers (HKLM-x32\...\GEARDrivers) (Version: - )</p><p>GIMP 2.6.10 (HKLM\...\GIMP-2_is1) (Version: 2.6.10 - The GIMP Team)</p><p>GoldWave v5.06 (HKLM-x32\...\GoldWave v5.06) (Version: - )</p><p>Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2150.5 - Google Inc.)</p><p>Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden</p><p>HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - )</p><p>HxD Hex Editor version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Ma・ Hz)</p><p>ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)</p><p>Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35132 - Intel Corporation)</p><p>Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)</p><p>Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)</p><p>Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)</p><p>Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)</p><p>IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)</p><p>iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)</p><p>LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )</p><p>Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)</p><p>Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)</p><p>Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)</p><p>Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden</p><p>Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)</p><p>Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden</p><p>Microsoft Access MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden</p><p>Microsoft DCF MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Excel MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Groove MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Lync MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)</p><p>Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office Proofing (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft OneNote MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Outlook MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Publisher MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft VC9 runtime libraries (x32 Version: 2.0.0 - AOL Inc.) Hidden</p><p>Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)</p><p>Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden</p><p>Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden</p><p>Microsoft Word MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)</p><p>Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden</p><p>Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden</p><p>mIRC (HKLM-x32\...\mIRC) (Version: 7.32 - mIRC Co. Ltd.)</p><p>MosChip PCI Multi-IO Controller (HKLM\...\MosChip Semiconductor Technology Ltd) (Version: - )</p><p>MPC-BE x64 1.4.3.5033 (HKLM\...\{FE09AF6D-78B2-4093-B012-FCDAF78693CE}_is1) (Version: 1.4.3.5033 - MPC-BE Team)</p><p>MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)</p><p>MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)</p><p>MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)</p><p>Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.2 - Notepad++ Team)</p><p>NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)</p><p>NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)</p><p>NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden</p><p>NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)</p><p>NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)</p><p>NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)</p><p>NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden</p><p>NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden</p><p>NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden</p><p>NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden</p><p>NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)</p><p>NVIDIA ShadowPlay 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden</p><p>NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden</p><p>NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden</p><p>NVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) Hidden</p><p>NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden</p><p>Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden</p><p>PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden</p><p>ph (x32 Version: 1.0.0 - Your Company Name) Hidden</p><p>PHANTASY STAR ONLINE 2 (HKLM-x32\...\<a href="http://pso2.jp/appid/release_is1" target="_blank">http://pso2.jp/appid/release_is1</a>) (Version: - SEGA)</p><p>PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.70.1 - PS3 Media Server)</p><p>Puyo Puyo Sun (HKLM-x32\...\Puyo Puyo Sun) (Version: - )</p><p>Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.50.1123.2011 - Realtek)</p><p>SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden</p><p>Speccy (HKLM\...\Speccy) (Version: 1.21 - Piriform)</p><p>Spotify (HKCU\...\Spotify) (Version: 0.9.11.27.g2b1a638c - Spotify AB)</p><p>StepMania (remove only) (HKLM-x32\...\StepMania) (Version: - )</p><p>StepMania v5.0 beta 3 (remove only) (HKLM-x32\...\StepMania 5) (Version: - StepMania Team)</p><p>SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 2.5.2 - Krzysztof Kowalczyk)</p><p>swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden</p><p>Thumbnail me 3.0 (HKCU\...\Thumbnail me 3.0) (Version: - )</p><p>TigerGame PS/PS2 Game Controller Adapter series to pc USB Drive (HKLM-x32\...\TigerGame PS/PS2 Game Controller Adapter series_is1) (Version: - )</p><p>TP-LINK Wireless Client Utility (HKLM-x32\...\{71BF8787-A67D-4CBC-9155-22927199F4BB}) (Version: 7.0 - TP-LINK)</p><p>Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)</p><p>Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)</p><p>Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)</p><p>Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)</p><p>Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)</p><p>Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)</p><p>Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)</p><p>Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation)</p><p>Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (HKLM\...\{90150000-0015-0409-1000-0000000FF1CE}_Office15.PROPLUS_{D5412C67-998B-4246-A668-AB522D9F63FE}) (Version: - Microsoft)</p><p>Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{614E655F-A0ED-435A-8E0C-A81EE4BA7BC7}) (Version: - Microsoft)</p><p>Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft)</p><p>Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft)</p><p>Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft)</p><p>Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft)</p><p>Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E759A69-FA72-4B3C-BE2F-D1194764D31E}) (Version: - Microsoft)</p><p>Update for Microsoft Lync 2013 (KB2881083) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8260F0BF-F234-41FC-AB11-218A9925F77B}) (Version: - Microsoft)</p><p>Update for Microsoft Lync 2013 (KB2889860) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{75FECCEB-66B8-4376-8A25-6137D30D3C93}) (Version: - Microsoft)</p><p>Update for Microsoft Lync 2013 (KB2889860) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{75FECCEB-66B8-4376-8A25-6137D30D3C93}) (Version: - Microsoft)</p><p>Update for Microsoft Lync 2013 (KB2889860) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{75FECCEB-66B8-4376-8A25-6137D30D3C93}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FEFF9FF6-FF61-455E-A8CC-3A1311A657AD}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3FF4EA9F-3505-4726-A974-6593A968FFCC}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9406D70B-2D9C-4613-A75A-F35B66BA8AFA}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760249) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7A4AB8E1-C091-4BD3-B308-844BA6EE752A}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CA390537-AA88-450F-A240-5FB4648A124A}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C8D57F4A-0824-4043-89E7-3C6280B67A47}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{AC4470FB-8011-4F16-B5D4-E0A34DE10C87}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D8B3D175-48B8-413F-8484-4D81E744B51C}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{39E58ED8-B687-49BD-88F9-968563F51F8E}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{856D47BC-036C-4692-8702-D6CCA8F428D0}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CA0554C4-62FE-4F66-BC87-1EE1EAC675EF}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CA0554C4-62FE-4F66-BC87-1EE1EAC675EF}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2A286156-257B-4528-9DB5-B4D4D53211BC}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F2187E8D-C68A-4655-8551-1932878A5581}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9353CD85-4B19-45C4-8DBA-1391926351F6}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9353CD85-4B19-45C4-8DBA-1391926351F6}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2881001) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{DF1B7B95-4A86-4605-A628-556394B5580A}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2881039) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C675FC43-E413-49A7-B3DC-44967B4FE22D}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2881081) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3BE27413-9FFE-4AB1-9013-344E111E718F}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUS_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{6E2862B8-C10A-4FD0-9B82-8D9761301AAA}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2889862) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CC0535B0-340B-4740-A63D-DBBE389DC83A}) (Version: - Microsoft)</p><p>Update for Microsoft Office 2013 (KB2889862) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CC0535B0-340B-4740-A63D-DBBE389DC83A}) (Version: - Microsoft)</p><p>Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft)</p><p>Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft)</p><p>Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft)</p><p>Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft)</p><p>Update for Microsoft OneNote 2013 (KB2880458) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D2CD59AB-CA83-44D4-AEF8-E49A3FE8FD7F}) (Version: - Microsoft)</p><p>Update for Microsoft OneNote 2013 (KB2880458) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D2CD59AB-CA83-44D4-AEF8-E49A3FE8FD7F}) (Version: - Microsoft)</p><p>Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version: - Microsoft)</p><p>Update for Microsoft Outlook 2013 (KB2881011) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{679E6BE6-50D5-4D94-A10E-CB4FE1C5695B}) (Version: - Microsoft)</p><p>Update for Microsoft Outlook 2013 (KB2881011) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{679E6BE6-50D5-4D94-A10E-CB4FE1C5695B}) (Version: - Microsoft)</p><p>Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft)</p><p>Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft)</p><p>Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BBD4F4CE-65D4-4CEB-AE19-E5296A57AA6C}) (Version: - Microsoft)</p><p>Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft)</p><p>Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft)</p><p>Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F16E7B82-23FE-4054-AB73-EAE53965251C}) (Version: - Microsoft)</p><p>Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft)</p><p>Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft)</p><p>Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version: - Microsoft)</p><p>Warframe (HKLM-x32\...\{781C9ED7-5AFE-42A0-AFA8-8603C68447AF}) (Version: 1.0.0 - Digital Extremes)</p><p>東方心綺楼 Ver1.20 (HKLM-x32\...\{B641E348-377C-4819-B92F-03F1D35A7EE3}_is1) (Version: - 黄昏フロンティア)</p><p></p><p>==================== Custom CLSID (selected items): ==========================</p><p></p><p>(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)</p><p></p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p>CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)</p><p></p><p>==================== Restore Points =========================</p><p></p><p>15-09-2014 21:03:40 Checkpoint by HitmanPro</p><p></p><p>==================== Hosts content: ==========================</p><p></p><p>(If needed Hosts: directive could be included in the fixlist to reset Hosts.)</p><p></p><p>2009-07-13 22:34 - 2014-09-15 23:17 - 00000002 ____A C:\Windows\system32\Drivers\etc\hosts</p><p></p><p></p><p>==================== Scheduled Tasks (whitelisted) =============</p><p></p><p>(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)</p><p></p><p>Task: {1C0484B8-563D-483E-9860-2831D7AECD80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-15] (Google Inc.)</p><p>Task: {31039FB2-0936-45BA-8DD6-7992789355F0} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)</p><p>Task: {399F7611-0F70-4ECA-AAA4-DB25CDA74F0F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-09-14] (AVAST Software)</p><p>Task: {4F1DF7CA-F348-4786-8F4D-C61AEB7F264C} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)</p><p>Task: {56486211-9875-40ED-951A-A8C2205158AD} - \AutoKMS No Task File <==== ATTENTION</p><p>Task: {5A85F398-4A7A-4F16-AFE6-6D08F97CA797} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-08-21] (Piriform Ltd)</p><p>Task: {620ECEFF-E0F2-4F1C-8519-1CC9DE9C3000} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)</p><p>Task: {6B71BC8A-212F-44E1-BDA2-26512F1D4462} - System32\Tasks\Microsoft Office 15 Sync Maintenance for joesushi-PC-joesushi joesushi-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-07-27] (Microsoft Corporation)</p><p>Task: {8BF5B0BD-CD73-48DC-B691-6A6C60E682B9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-15] (Google Inc.)</p><p>Task: {B5E7E1EF-B4D6-4AF4-8651-D965D787BB7C} - \TidyNetwork Update No Task File <==== ATTENTION</p><p>Task: {D7EC855C-0164-4AB8-8584-075DAB72AEC7} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)</p><p>Task: {F9194C73-6D94-4A7C-BC42-836F87CD3FE4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)</p><p>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe</p><p>Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe</p><p>Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe</p><p>Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe</p><p></p><p>==================== Loaded Modules (whitelisted) =============</p><p></p><p>2013-08-20 20:31 - 2014-07-02 14:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll</p><p>2014-09-10 20:48 - 2014-09-10 20:48 - 00154112 _____ () C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe</p><p>2012-10-04 15:35 - 2011-12-16 11:02 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe</p><p>2014-08-12 09:54 - 2014-08-12 09:54 - 08894120 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll</p><p>2012-06-18 11:24 - 2012-06-18 11:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll</p><p>2010-01-02 10:42 - 2010-01-02 10:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll</p><p>2014-09-15 01:04 - 2014-09-10 07:32 - 01391432 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\libglesv2.dll</p><p>2014-09-15 01:04 - 2014-09-10 07:32 - 00204616 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\libegl.dll</p><p>2014-09-15 01:04 - 2014-09-10 07:32 - 10629448 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\pdf.dll</p><p>2014-09-15 01:04 - 2014-09-10 07:32 - 01854792 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\ffmpegsumo.dll</p><p>2014-09-15 01:04 - 2014-09-10 07:32 - 26697032 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\PepperFlash\pepflashplayer.dll</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll</p><p>2014-09-15 17:00 - 2014-09-15 17:00 - 02862592 _____ () C:\Program Files\AVAST Software\Avast\defs\14091501\algo.dll</p><p>2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll</p><p>2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll</p><p>2014-08-12 09:55 - 2014-08-12 09:55 - 08894120 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll</p><p>2014-09-14 01:36 - 2014-09-14 01:36 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll</p><p>2014-09-11 03:31 - 2014-09-11 03:31 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\4361e26af57c86003751ac77cce1c827\IsdiInterop.ni.dll</p><p>2012-10-04 15:39 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll</p><p>2012-10-04 15:34 - 2011-12-16 10:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll</p><p></p><p>==================== Alternate Data Streams (whitelisted) =========</p><p></p><p>(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)</p><p></p><p></p><p>==================== Safe Mode (whitelisted) ===================</p><p></p><p>(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)</p><p></p><p>HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\91715813.sys => ""="Driver"</p><p>HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\91715813.sys => ""="Driver"</p><p></p><p>==================== EXE Association (whitelisted) =============</p><p></p><p>(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)</p><p></p><p></p><p>==================== MSCONFIG/TASK MANAGER disabled items =========</p><p></p><p>(Currently there is no automatic fix for this section.)</p><p></p><p>MSCONFIG\Services: MMCSS => 2</p><p>MSCONFIG\startupfolder: C:^Users^joesushi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup</p><p>MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"</p><p>MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin</p><p>MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"</p><p>MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun</p><p>MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming</p><p>MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe</p><p>MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"</p><p>MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"</p><p>MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart</p><p>MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\joesushi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"</p><p>MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe</p><p>MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"</p><p>MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun</p><p></p><p>==================== Faulty Device Manager Devices =============</p><p></p><p>Name: Microsoft ISATAP Adapter</p><p>Description: Microsoft ISATAP Adapter</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: tunnel</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: TP-LINK 11b/g Wireless Adapter</p><p>Description: TP-LINK 11b/g Wireless Adapter</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: TP-LINK</p><p>Service: athr</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: Microsoft ISATAP Adapter #2</p><p>Description: Microsoft ISATAP Adapter</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: tunnel</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: Microsoft ISATAP Adapter #4</p><p>Description: Microsoft ISATAP Adapter</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: tunnel</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (IKEv2)</p><p>Description: WAN Miniport (IKEv2)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: RasAgileVpn</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (L2TP)</p><p>Description: WAN Miniport (L2TP)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: Rasl2tp</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (Network Monitor)</p><p>Description: WAN Miniport (Network Monitor)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: NdisWan</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (IP)</p><p>Description: WAN Miniport (IP)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: NdisWan</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (IPv6)</p><p>Description: WAN Miniport (IPv6)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: NdisWan</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (PPPOE)</p><p>Description: WAN Miniport (PPPOE)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: RasPppoe</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (PPTP)</p><p>Description: WAN Miniport (PPTP)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: PptpMiniport</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p>Name: WAN Miniport (SSTP)</p><p>Description: WAN Miniport (SSTP)</p><p>Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}</p><p>Manufacturer: Microsoft</p><p>Service: RasSstp</p><p>Problem: : This device is disabled. (Code 22)</p><p>Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.</p><p></p><p></p><p>==================== Event log errors: =========================</p><p></p><p>Application errors:</p><p>==================</p><p>Error: (09/16/2014 07:27:05 AM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 11:08:28 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 06:48:20 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 06:43:35 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 05:02:31 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 02:18:22 AM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p></p><p>System errors:</p><p>=============</p><p>Error: (09/16/2014 07:25:18 AM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: </p><p>%%1068</p><p></p><p>Error: (09/16/2014 07:25:18 AM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: </p><p>%%0</p><p></p><p>Error: (09/15/2014 11:06:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: </p><p>%%1068</p><p></p><p>Error: (09/15/2014 11:06:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: </p><p>%%0</p><p></p><p>Error: (09/15/2014 06:46:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: </p><p>%%1068</p><p></p><p>Error: (09/15/2014 06:46:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: </p><p>%%0</p><p></p><p>Error: (09/15/2014 06:41:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: </p><p>%%1068</p><p></p><p>Error: (09/15/2014 06:41:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )</p><p>Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: </p><p>%%0</p><p></p><p>Error: (09/15/2014 06:40:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )</p><p>Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.</p><p></p><p>Error: (09/15/2014 06:40:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )</p><p>Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).</p><p></p><p></p><p>Microsoft Office Sessions:</p><p>=========================</p><p>Error: (09/16/2014 07:27:05 AM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 11:08:28 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 06:48:20 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 06:43:35 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 05:02:31 PM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p>Error: (09/15/2014 02:18:22 AM) (Source: WinMgmt) (EventID: 10) (User: )</p><p>Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003</p><p></p><p></p><p>CodeIntegrity Errors:</p><p>===================================</p><p> Date: 2014-09-15 01:17:29.158</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-09-15 01:17:29.127</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-08-08 22:32:31.614</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-08-08 22:32:31.592</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-07-24 23:47:32.140</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-07-24 23:47:32.094</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-07-14 15:54:27.704</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-07-14 15:54:27.688</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-07-14 12:28:22.359</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p> Date: 2014-07-14 12:28:22.328</p><p> Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.</p><p></p><p></p><p>==================== Memory info =========================== </p><p></p><p>Processor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz</p><p>Percentage of memory in use: 26%</p><p>Total physical RAM: 8157.02 MB</p><p>Available physical RAM: 6020.67 MB</p><p>Total Pagefile: 16312.21 MB</p><p>Available Pagefile: 13790.13 MB</p><p>Total Virtual: 8192 MB</p><p>Available Virtual: 8191.84 MB</p><p></p><p>==================== Drives ================================</p><p></p><p>Drive c: () (Fixed) (Total:59.53 GB) (Free:7.03 GB) NTFS</p><p>Drive f: (Yoshitron) (Fixed) (Total:931.51 GB) (Free:7.95 GB) NTFS</p><p>Drive i: (LEAPFROG_GRS) (CDROM) (Total:2.59 GB) (Free:0 GB) UDF</p><p>Drive j: (NeoSushi) (Fixed) (Total:2794.39 GB) (Free:2577.73 GB) NTFS</p><p>Drive k: (Argon) (Fixed) (Total:1863.01 GB) (Free:22.92 GB) NTFS</p><p></p><p>==================== MBR & Partition Table ==================</p><p></p><p>========================================================</p><p>Disk: 0 (MBR Code: Windows 7 or 8) (Size: 59.6 GB) (Disk ID: E890D8C4)</p><p>Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)</p><p>Partition 2: (Not Active) - (Size=59.5 GB) - (Type=07 NTFS)</p><p></p><p>========================================================</p><p>Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B918F798)</p><p>Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)</p><p></p><p>========================================================</p><p>Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 74B04938)</p><p>Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)</p><p></p><p>========================================================</p><p>Disk: 3 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000)</p><p></p><p>Partition: GPT Partition Type.</p><p></p><p>==================== End Of Log ============================</p></blockquote><p></p>
[QUOTE="joesushi, post: 262394, member: 27974"] Pre-scan I did take a bit of action on my own and Stopped Proxy service in the Task Manager services tab. Here are the contents of the log files: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014 Ran by joesushi (administrator) on JOESUSHI-PC on 16-09-2014 08:38:48 Running from C:\Users\joesushi\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 9 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: [url]http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/[/url] ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe (Scarlet.Crush Productions) K:\ScpServer\bin\ScpService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Joyent, Inc) C:\Program Files (x86)\Common Files\Diagnostics\node\node.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-09-14] (AVAST Software) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\S-1-5-21-2322799817-1880985190-1667400278-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000 ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [url]http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch[/url] HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Tcpip\..\Interfaces\{A09FC154-BAF3-423A-82C0-273274D5EE8D}: [NameServer] 167.206.245.135,167.206.245.136 FireFox: ======== FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-09-25] FF HKLM-x32\...\Thunderbird\Extensions: [[email]eplgTb@eset.com[/email]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird Chrome: ======= CHR Profile: C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-15] CHR Extension: (Google Docs) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-15] CHR Extension: (Google Drive) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-15] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-15] CHR Extension: (YouTube) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-15] CHR Extension: (Google Search) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-15] CHR Extension: (Logitech Smooth Scrolling) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2014-09-15] CHR Extension: (Google Sheets) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-15] CHR Extension: (AdBlock) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-15] CHR Extension: (Google Wallet) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-15] CHR Extension: (Gmail) - C:\Users\joesushi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-15] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-09-14] (AVAST Software) R2 Diagnostics; C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe [154112 2014-09-10] () [File not signed] R2 Ds3Service; K:\ScpServer\bin\ScpService.exe [381952 2014-04-02] (Scarlet.Crush Productions) [File not signed] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2011-12-16] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation) S2 Proxy; C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe [154112 2014-09-10] () [File not signed] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-09-14] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-09-14] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-09-14] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-09-14] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-09-14] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-09-14] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-09-14] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-09-14] () R1 BIOS; C:\Windows\system32\drivers\BIOS64.sys [14136 2011-08-08] (BIOSTAR Group) R1 BIOS; C:\Windows\SysWOW64\drivers\BIOS64.sys [14136 2011-08-08] (BIOSTAR Group) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-28] (Disc Soft Ltd) S3 hidusbf; C:\Windows\System32\DRIVERS\hidusbf.sys [6784 2012-12-02] (SweetLow) [File not signed] S3 MayPro; C:\Windows\System32\Drivers\MayPro.sys [25120 2007-08-13] (TigerGame.,Ltd) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-16] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2012-09-10] (Apple Inc.) [File not signed] R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) R3 PciPPorts; C:\Windows\System32\DRIVERS\PciPPorts.sys [96768 2013-06-15] () S3 PPJoyBus; C:\Windows\System32\DRIVERS\PPJoyBus64.sys [20024 2010-02-20] (Deon van der Westhuysen) S3 PPortJoystick; C:\Windows\System32\DRIVERS\PPortJoy64.sys [39992 2010-02-20] (Deon van der Westhuysen) R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-16 07:25 - 2014-09-16 07:25 - 00001116 _____ () C:\Windows\PFRO.log 2014-09-16 07:25 - 2014-09-16 07:25 - 00000168 _____ () C:\Windows\setupact.log 2014-09-16 07:25 - 2014-09-16 07:25 - 00000000 _____ () C:\Windows\setuperr.log 2014-09-15 23:05 - 2014-09-15 23:05 - 00000000 ____D () C:\Windows\pss 2014-09-15 19:31 - 2014-09-15 19:31 - 00115927 _____ () C:\Users\joesushi\.recently-used.xbel 2014-09-15 18:44 - 2014-09-15 18:44 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\joesushi\Desktop\tdsskiller.exe 2014-09-15 17:10 - 2014-09-16 08:38 - 00014615 _____ () C:\Users\joesushi\Desktop\FRST.txt 2014-09-15 17:10 - 2014-09-16 08:38 - 00000000 ____D () C:\FRST 2014-09-15 17:10 - 2014-09-15 17:11 - 00053912 _____ () C:\Users\joesushi\Desktop\Addition.txt 2014-09-15 17:09 - 2014-09-15 17:09 - 02105856 _____ (Farbar) C:\Users\joesushi\Desktop\FRST64.exe 2014-09-15 02:37 - 2014-09-15 02:38 - 00003698 _____ () C:\Users\joesushi\Desktop\Nmc_2014-09-15_02-37-27.log 2014-09-15 01:58 - 2014-09-13 18:17 - 01373475 _____ () C:\Users\joesushi\Desktop\adwcleaner_3.310.exe 2014-09-15 01:28 - 2014-09-15 01:28 - 00002918 _____ () C:\HitmanPro_20140915_0128.log 2014-09-15 01:26 - 2014-09-15 01:26 - 00037074 _____ () C:\ComboFix.txt 2014-09-15 01:12 - 2014-09-15 01:26 - 00000000 ____D () C:\Qoobox 2014-09-15 01:12 - 2014-09-15 01:23 - 00000000 ____D () C:\Windows\erdnt 2014-09-15 01:12 - 2011-06-26 02:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-09-15 01:12 - 2010-11-07 13:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-09-15 01:12 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-09-15 01:12 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-09-15 01:12 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-09-15 01:12 - 2000-08-30 20:00 - 00098816 _____ () C:\Windows\sed.exe 2014-09-15 01:12 - 2000-08-30 20:00 - 00080412 _____ () C:\Windows\grep.exe 2014-09-15 01:12 - 2000-08-30 20:00 - 00068096 _____ () C:\Windows\zip.exe 2014-09-15 01:10 - 2014-09-15 01:10 - 05578360 ____R (Swearware) C:\Users\joesushi\Desktop\ComboFix.exe 2014-09-15 01:04 - 2014-09-16 08:09 - 00000902 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-15 01:04 - 2014-09-16 07:25 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-15 01:04 - 2014-09-15 01:04 - 00003898 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-09-15 01:04 - 2014-09-15 01:04 - 00003646 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-09-15 01:04 - 2014-09-15 01:04 - 00002219 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Google 2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-14 17:45 - 2014-09-14 17:45 - 00001064 _____ () C:\mbamscan.txt 2014-09-14 01:36 - 2014-09-14 01:36 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-09-14 01:36 - 2014-09-14 01:36 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-09-14 01:36 - 2014-09-14 01:36 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-09-14 01:35 - 2014-09-15 18:41 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-09-14 01:35 - 2014-09-14 01:35 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\AVAST Software 2014-09-14 01:34 - 2014-09-14 01:36 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-09-14 01:34 - 2014-09-14 01:36 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-09-14 01:34 - 2014-09-14 01:36 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-09-14 01:34 - 2014-09-14 01:36 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-09-14 01:34 - 2014-09-14 01:36 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-09-14 01:34 - 2014-09-14 01:36 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-09-14 01:34 - 2014-09-14 01:36 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-09-14 01:34 - 2014-09-14 01:36 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-09-14 01:34 - 2014-09-14 01:34 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1410672877 2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\Program Files\AVAST Software 2014-09-14 01:33 - 2014-09-14 01:33 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-09-14 01:11 - 2014-09-14 01:11 - 01016261 _____ (Thisisu) C:\Users\joesushi\Desktop\JRT.exe 2014-09-14 01:11 - 2014-09-14 01:11 - 00000000 ____D () C:\Windows\ERUNT 2014-09-13 19:35 - 2014-09-13 19:35 - 00001296 _____ () C:\Windows\system32\.crusader 2014-09-13 19:17 - 2014-09-13 19:35 - 00000000 ____D () C:\ProgramData\HitmanPro 2014-09-13 18:27 - 2014-09-16 08:31 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-13 18:27 - 2014-09-13 18:27 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-09-13 18:27 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-13 18:27 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-13 18:27 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-13 18:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-13 18:17 - 2014-09-15 02:01 - 00000000 ____D () C:\AdwCleaner 2014-09-13 00:31 - 2014-09-13 00:48 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-09-12 10:08 - 2014-09-12 13:31 - 00000000 ____D () C:\Users\joesushi\Desktop\bl2 2014-09-12 09:25 - 2014-09-12 09:25 - 00000000 ____D () C:\Users\joesushi\Desktop\saveedit_r237 2014-09-11 21:18 - 2014-09-11 21:18 - 00000044 _____ () C:\Users\joesushi\AppData\Roaming\WB.CFG 2014-09-11 20:19 - 2014-09-15 18:14 - 00001024 _____ () C:\.rnd 2014-09-11 20:13 - 2014-09-11 20:13 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Daring_Development_Inc 2014-09-11 03:03 - 2014-08-15 11:48 - 17868288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-11 03:03 - 2014-08-15 11:36 - 10920960 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-11 03:03 - 2014-08-15 11:35 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-11 03:03 - 2014-08-15 11:31 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-11 03:03 - 2014-08-15 11:31 - 01384960 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-11 03:03 - 2014-08-15 11:30 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-11 03:03 - 2014-08-15 11:30 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-09-11 03:03 - 2014-08-15 11:30 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 02156032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-11 03:03 - 2014-08-15 11:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-11 03:03 - 2014-08-15 11:29 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-09-11 03:03 - 2014-08-15 11:28 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-11 03:03 - 2014-08-15 11:28 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-11 03:03 - 2014-08-15 11:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-09-11 03:03 - 2014-08-15 11:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-09-11 03:03 - 2014-08-15 10:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-11 03:03 - 2014-08-15 10:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-11 03:03 - 2014-08-15 10:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-11 03:03 - 2014-08-15 10:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-11 03:03 - 2014-08-15 10:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-11 03:03 - 2014-08-15 10:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-11 03:03 - 2014-08-15 10:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-11 03:03 - 2014-08-15 10:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-11 03:03 - 2014-08-15 10:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-09-11 03:03 - 2014-08-15 10:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-11 03:03 - 2014-08-15 10:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-09-11 03:03 - 2014-08-15 10:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-11 03:03 - 2014-08-15 10:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-09-11 03:03 - 2014-08-15 10:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-09-11 03:00 - 2014-06-26 22:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-11 03:00 - 2014-06-26 21:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-09-11 01:04 - 2014-08-01 07:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-11 01:04 - 2014-08-01 07:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-09-11 01:04 - 2014-07-06 22:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-11 01:04 - 2014-07-06 22:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-11 01:04 - 2014-07-06 21:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-09-11 01:04 - 2014-07-06 21:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-09-11 01:04 - 2014-07-06 21:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-09-11 01:04 - 2014-06-23 23:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-11 01:04 - 2014-06-23 22:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-10 20:41 - 2013-05-19 03:02 - 00039168 _____ (Scarlet.Crush Productions) C:\Windows\system32\Drivers\ScpVBus.sys 2014-09-10 20:38 - 2014-09-10 20:38 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-09-10 18:37 - 2014-09-10 19:38 - 00000000 ____D () C:\Users\joesushi\AppData\Local\BetterDS3 2014-09-10 18:30 - 2014-09-10 18:33 - 00000000 ____D () C:\Users\joesushi\Documents\FIFA 15 Demo 2014-09-10 18:27 - 2014-09-10 18:27 - 00000000 ____D () C:\ProgramData\Package Cache 2014-09-08 22:53 - 2014-09-09 15:44 - 00000000 ____D () C:\Users\joesushi\Desktop\psych and media 2014-08-29 12:40 - 2014-09-12 09:12 - 00000000 ____D () C:\Users\joesushi\Desktop\senior capstone 2014-08-28 01:47 - 2014-08-22 22:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 01:47 - 2014-08-22 21:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-28 01:47 - 2014-08-22 20:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-25 20:38 - 2014-09-11 03:48 - 00000000 ____D () C:\Windows\rescache 2014-08-25 19:49 - 2014-08-25 19:49 - 00000000 ____D () C:\Users\joesushi\Desktop\docus 2014-08-25 19:48 - 2014-08-25 19:48 - 00000000 _____ () C:\Users\joesushi\Sti_Trace.log 2014-08-25 19:47 - 2014-08-25 19:48 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Canon 2014-08-25 19:46 - 2014-08-25 19:46 - 00002016 _____ () C:\Users\Public\Desktop\MP Navigator 3.0.lnk 2014-08-25 19:46 - 2014-08-25 19:46 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP460 2014-08-25 19:43 - 2008-04-03 05:00 - 00235520 _____ (CANON INC.) C:\Windows\system32\CNMLM81.DLL 2014-08-25 19:43 - 2008-01-30 11:14 - 01338368 _____ (CANON INC.) C:\Windows\system32\CNCC460.DLL 2014-08-25 19:43 - 2008-01-30 11:13 - 00049664 _____ (CANON INC.) C:\Windows\system32\CNCI460.DLL 2014-08-25 19:43 - 2006-06-29 14:30 - 00017408 _____ (Canon Inc.) C:\Windows\system32\cnco460.dll 2014-08-25 19:43 - 2006-05-26 16:23 - 00091136 _____ (Canon Inc.) C:\Windows\system32\CNCL460.DLL 2014-08-25 19:36 - 2014-08-25 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-08-21 01:23 - 2014-05-14 12:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-21 01:23 - 2014-05-14 12:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-21 01:23 - 2014-05-14 12:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-21 01:23 - 2014-05-14 12:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-21 01:23 - 2014-05-14 12:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-21 01:23 - 2014-05-14 12:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-21 01:23 - 2014-05-14 12:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-08-21 01:23 - 2014-05-14 12:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-21 01:23 - 2014-05-14 12:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-21 01:23 - 2014-05-14 12:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-21 01:23 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-21 01:23 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-21 01:23 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-21 01:23 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StepMania 2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-16 08:38 - 2014-09-15 17:10 - 00014615 _____ () C:\Users\joesushi\Desktop\FRST.txt 2014-09-16 08:38 - 2014-09-15 17:10 - 00000000 ____D () C:\FRST 2014-09-16 08:31 - 2014-09-13 18:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-16 08:09 - 2014-09-15 01:04 - 00000902 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-16 07:34 - 2012-10-04 15:28 - 01232893 _____ () C:\Windows\WindowsUpdate.log 2014-09-16 07:32 - 2009-07-14 01:13 - 00796210 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-16 07:32 - 2009-07-14 00:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-16 07:32 - 2009-07-14 00:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-16 07:25 - 2014-09-16 07:25 - 00001116 _____ () C:\Windows\PFRO.log 2014-09-16 07:25 - 2014-09-16 07:25 - 00000168 _____ () C:\Windows\setupact.log 2014-09-16 07:25 - 2014-09-16 07:25 - 00000000 _____ () C:\Windows\setuperr.log 2014-09-16 07:25 - 2014-09-15 01:04 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-16 07:25 - 2013-08-20 20:33 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-09-16 07:25 - 2012-10-04 15:35 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2014-09-16 07:25 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-15 23:20 - 2013-11-16 12:24 - 00000000 ____D () C:\ProgramData\Origin 2014-09-15 23:20 - 2009-07-14 01:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-09-15 23:05 - 2014-09-15 23:05 - 00000000 ____D () C:\Windows\pss 2014-09-15 23:04 - 2012-10-05 23:22 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\foobar2000 2014-09-15 19:32 - 2012-10-19 13:37 - 00000000 ____D () C:\Users\joesushi\.gimp-2.6 2014-09-15 19:31 - 2014-09-15 19:31 - 00115927 _____ () C:\Users\joesushi\.recently-used.xbel 2014-09-15 19:31 - 2012-10-20 00:03 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\gtk-2.0 2014-09-15 19:31 - 2012-10-04 15:28 - 00000000 ____D () C:\Users\joesushi 2014-09-15 18:47 - 2014-04-28 14:22 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Dropbox 2014-09-15 18:44 - 2014-09-15 18:44 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\joesushi\Desktop\tdsskiller.exe 2014-09-15 18:41 - 2014-09-14 01:35 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-09-15 18:14 - 2014-09-11 20:19 - 00001024 _____ () C:\.rnd 2014-09-15 17:11 - 2014-09-15 17:10 - 00053912 _____ () C:\Users\joesushi\Desktop\Addition.txt 2014-09-15 17:09 - 2014-09-15 17:09 - 02105856 _____ (Farbar) C:\Users\joesushi\Desktop\FRST64.exe 2014-09-15 02:38 - 2014-09-15 02:37 - 00003698 _____ () C:\Users\joesushi\Desktop\Nmc_2014-09-15_02-37-27.log 2014-09-15 02:01 - 2014-09-13 18:17 - 00000000 ____D () C:\AdwCleaner 2014-09-15 01:28 - 2014-09-15 01:28 - 00002918 _____ () C:\HitmanPro_20140915_0128.log 2014-09-15 01:26 - 2014-09-15 01:26 - 00037074 _____ () C:\ComboFix.txt 2014-09-15 01:26 - 2014-09-15 01:12 - 00000000 ____D () C:\Qoobox 2014-09-15 01:26 - 2009-07-13 23:20 - 00000000 __RHD () C:\Users\Default 2014-09-15 01:23 - 2014-09-15 01:12 - 00000000 ____D () C:\Windows\erdnt 2014-09-15 01:19 - 2009-07-13 22:34 - 00000215 _____ () C:\Windows\system.ini 2014-09-15 01:10 - 2014-09-15 01:10 - 05578360 ____R (Swearware) C:\Users\joesushi\Desktop\ComboFix.exe 2014-09-15 01:04 - 2014-09-15 01:04 - 00003898 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-09-15 01:04 - 2014-09-15 01:04 - 00003646 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-09-15 01:04 - 2014-09-15 01:04 - 00002219 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Google 2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-09-15 01:04 - 2014-09-15 01:04 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-15 00:46 - 2012-10-04 15:28 - 00001407 _____ () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-15 00:46 - 2012-10-04 15:28 - 00001373 _____ () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-09-15 00:44 - 2009-07-14 01:32 - 00000000 ____D () C:\Windows\Offline Web Pages 2014-09-14 17:46 - 2012-11-23 14:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\C-Force 2014-09-14 17:45 - 2014-09-14 17:45 - 00001064 _____ () C:\mbamscan.txt 2014-09-14 12:20 - 2012-10-05 22:58 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\uTorrent 2014-09-14 11:17 - 2014-07-10 14:32 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Warframe 2014-09-14 02:29 - 2012-10-04 22:09 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-09-14 02:29 - 2012-10-04 22:09 - 00000000 ____D () C:\Program Files\CCleaner 2014-09-14 01:36 - 2014-09-14 01:36 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-09-14 01:36 - 2014-09-14 01:36 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-09-14 01:36 - 2014-09-14 01:36 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-09-14 01:36 - 2014-09-14 01:34 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-09-14 01:36 - 2014-09-14 01:34 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-09-14 01:36 - 2014-09-14 01:34 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-09-14 01:36 - 2014-09-14 01:34 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-09-14 01:36 - 2014-09-14 01:34 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-09-14 01:36 - 2014-09-14 01:34 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-09-14 01:36 - 2014-09-14 01:34 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-09-14 01:36 - 2014-09-14 01:34 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-09-14 01:35 - 2014-09-14 01:35 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\AVAST Software 2014-09-14 01:34 - 2014-09-14 01:34 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1410672877 2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-09-14 01:34 - 2014-09-14 01:34 - 00000000 ____D () C:\Program Files\AVAST Software 2014-09-14 01:33 - 2014-09-14 01:33 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-09-14 01:11 - 2014-09-14 01:11 - 01016261 _____ (Thisisu) C:\Users\joesushi\Desktop\JRT.exe 2014-09-14 01:11 - 2014-09-14 01:11 - 00000000 ____D () C:\Windows\ERUNT 2014-09-14 00:28 - 2012-10-04 22:04 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Deployment 2014-09-14 00:19 - 2014-03-14 21:42 - 00000000 ____D () C:\Users\joesushi\Desktop\WinSetupFromUSB 2014-09-13 19:35 - 2014-09-13 19:35 - 00001296 _____ () C:\Windows\system32\.crusader 2014-09-13 19:35 - 2014-09-13 19:17 - 00000000 ____D () C:\ProgramData\HitmanPro 2014-09-13 19:31 - 2012-10-04 16:37 - 00001945 _____ () C:\Windows\epplauncher.mif 2014-09-13 19:05 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\TAPI 2014-09-13 18:36 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-09-13 18:27 - 2014-09-13 18:27 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-13 18:27 - 2014-09-13 18:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-09-13 18:17 - 2014-09-15 01:58 - 01373475 _____ () C:\Users\joesushi\Desktop\adwcleaner_3.310.exe 2014-09-13 15:05 - 2012-10-04 15:35 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2014-09-13 00:48 - 2014-09-13 00:31 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-09-12 13:31 - 2014-09-12 10:08 - 00000000 ____D () C:\Users\joesushi\Desktop\bl2 2014-09-12 09:25 - 2014-09-12 09:25 - 00000000 ____D () C:\Users\joesushi\Desktop\saveedit_r237 2014-09-12 09:25 - 2014-04-13 01:43 - 00000000 ____D () C:\Users\joesushi\Downloads\Video 2014-09-12 09:12 - 2014-08-29 12:40 - 00000000 ____D () C:\Users\joesushi\Desktop\senior capstone 2014-09-11 23:07 - 2012-11-17 14:23 - 00000000 ____D () C:\Windows\Minidump 2014-09-11 23:05 - 2014-01-23 15:02 - 00000000 ____D () C:\Users\joesushi\Desktop\crime films 2014-09-11 21:18 - 2014-09-11 21:18 - 00000044 _____ () C:\Users\joesushi\AppData\Roaming\WB.CFG 2014-09-11 20:17 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\Resources 2014-09-11 20:13 - 2014-09-11 20:13 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Daring_Development_Inc 2014-09-11 20:13 - 2009-07-13 22:34 - 00000607 _____ () C:\Windows\win.ini 2014-09-11 03:48 - 2014-08-25 20:38 - 00000000 ____D () C:\Windows\rescache 2014-09-11 03:04 - 2014-05-04 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-09-11 03:04 - 2013-10-04 22:44 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-09-11 03:03 - 2013-08-19 21:18 - 00773030 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-09-10 20:38 - 2014-09-10 20:38 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories 2014-09-10 19:38 - 2014-09-10 18:37 - 00000000 ____D () C:\Users\joesushi\AppData\Local\BetterDS3 2014-09-10 18:33 - 2014-09-10 18:30 - 00000000 ____D () C:\Users\joesushi\Documents\FIFA 15 Demo 2014-09-10 18:27 - 2014-09-10 18:27 - 00000000 ____D () C:\ProgramData\Package Cache 2014-09-09 15:44 - 2014-09-08 22:53 - 00000000 ____D () C:\Users\joesushi\Desktop\psych and media 2014-09-05 13:59 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-08-31 13:37 - 2012-10-09 09:14 - 00001893 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk 2014-08-28 14:48 - 2014-06-08 00:14 - 00004982 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for joesushi-PC-joesushi joesushi-PC 2014-08-28 08:31 - 2013-09-28 19:08 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\mIRC 2014-08-28 03:16 - 2009-07-14 00:45 - 05121272 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-28 00:37 - 2013-10-19 00:51 - 00001774 _____ () C:\Users\joesushi\Desktop\MPC-BE x64.lnk 2014-08-28 00:13 - 2013-12-01 02:40 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\avidemux 2014-08-25 19:49 - 2014-08-25 19:49 - 00000000 ____D () C:\Users\joesushi\Desktop\docus 2014-08-25 19:48 - 2014-08-25 19:48 - 00000000 _____ () C:\Users\joesushi\Sti_Trace.log 2014-08-25 19:48 - 2014-08-25 19:47 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Canon 2014-08-25 19:46 - 2014-08-25 19:46 - 00002016 _____ () C:\Users\Public\Desktop\MP Navigator 3.0.lnk 2014-08-25 19:46 - 2014-08-25 19:46 - 00000000 ____D () C:\Program Files (x86)\Canon 2014-08-25 19:46 - 2009-07-13 23:20 - 00000000 __RSD () C:\Windows\Media 2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ___HD () C:\Program Files\CanonBJ 2014-08-25 19:43 - 2014-08-25 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP460 2014-08-25 19:38 - 2012-10-04 15:43 - 00114872 _____ () C:\Users\joesushi\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-25 19:36 - 2014-08-25 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2014-08-25 19:31 - 2014-06-26 21:12 - 00000000 ____D () C:\Users\joesushi\AppData\Local\Adobe 2014-08-25 09:23 - 2012-11-14 20:23 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\HandBrake 2014-08-25 06:53 - 2010-11-20 23:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-08-22 22:07 - 2014-08-28 01:47 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-22 21:45 - 2014-08-28 01:47 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-22 20:59 - 2014-08-28 01:47 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-19 09:04 - 2014-03-11 16:26 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\ACEStream 2014-08-19 09:04 - 2014-03-11 16:26 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\.ACEStream 2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\Users\joesushi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StepMania 2014-08-18 12:53 - 2014-08-18 12:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania Some content of TEMP: ==================== C:\Users\joesushi\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplxtvik.dll C:\Users\joesushi\AppData\Local\Temp\HitmanPro.exe C:\Users\joesushi\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION! LastRegBack: 2014-09-16 08:10 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-09-2014 Ran by joesushi at 2014-09-16 08:39:05 Running from C:\Users\joesushi\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.3.0.3670 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.3.0.3670 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.) Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 2.8.0 - Adobe Systems Incorporated) Adobe® Content Viewer (x32 Version: 2.8.0 - Adobe Systems Incorporated) Hidden Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team) AudibleManager (HKLM-x32\...\AudibleManager) (Version: - ) avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software) Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5 (64-bit)) (Version: 2.5.6.7716 - ) AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - ) bl (x32 Version: 1.0.0 - Your Company Name) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre (HKLM-x32\...\{B704D3AE-4443-40BA-B8B3-F0762ED4E8BC}) (Version: 0.9.42 - Kovid Goyal) Canon MP Navigator 3.0 (HKLM-x32\...\MP Navigator 3.0) (Version: - ) Canon MP460 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP460) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform) CL-Eye Driver (HKLM-x32\...\CL-Eye Driver) (Version: 5.3.0.0341 - Code Laboratories, Inc.) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0337 - Disc Soft Ltd) dBpoweramp [Calculate Audio CRC] Codec (HKLM-x32\...\dBpoweramp [Calculate Audio CRC] Codec) (Version: - ) dBpoweramp [Multi Encoder] Codec (HKLM-x32\...\dBpoweramp [Multi Encoder] Codec) (Version: - ) dBpoweramp Dalet Codec (HKLM-x32\...\dBpoweramp Dalet Codec) (Version: - ) dBpoweramp DirectShow Decoder (HKLM-x32\...\dBpoweramp DirectShow Decoder) (Version: Release 2 - Illustrate) dBpowerAMP DirectShow Decoder Codec (HKLM-x32\...\dBpowerAMP DirectShow Decoder Codec) (Version: - ) dBpoweramp DSP Effects (HKLM-x32\...\dBpoweramp DSP Effects) (Version: - ) dBpoweramp FLAC Codec (HKLM-x32\...\dBpoweramp FLAC Codec) (Version: Release 10 (FLAC 1.2.0) - Illustrate) dBpoweramp Monkeys Audio Codec (HKLM-x32\...\dBpoweramp Monkeys Audio Codec) (Version: - ) dBpoweramp Mp2 and BwfMp2 codec (HKLM-x32\...\dBpoweramp Mp2 and BwfMp2 codec) (Version: - ) dBpoweramp mp3 (Fraunhofer IIS) Codec (HKLM-x32\...\dBpoweramp mp3 (Fraunhofer IIS) Codec) (Version: Release 2a (v4.0.3) - Illustrate) dBpoweramp Music Converter (HKLM-x32\...\dBpoweramp Music Converter) (Version: Release 12.4 - ) dBpoweramp Ogg Vorbis Codec (HKLM-x32\...\dBpoweramp Ogg Vorbis Codec) (Version: - ) dBpoweramp Real Audio (Helix) Encoder (HKLM-x32\...\dBpoweramp Real Audio (Helix) Encoder) (Version: - ) dBPoweramp tooLame MP2 codec (HKLM-x32\...\dBPoweramp tooLame MP2 codec) (Version: - ) dBpoweramp Wave64 Codec (HKLM-x32\...\dBpoweramp Wave64 Codec) (Version: - ) dBpoweramp WavPack Codec (HKLM-x32\...\dBpoweramp WavPack Codec) (Version: - ) Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9719DFA1-7CB0-422E-98AE-C77FD3426BE8}) (Version: - Microsoft) DiscJuggler (HKLM-x32\...\DiscJuggler) (Version: 6.0.0.1400 - Padus Incorporated) Dropbox (HKCU\...\Dropbox) (Version: 2.10.27 - Dropbox, Inc.) DVD Decrypter (Remove Only) (HKLM-x32\...\DVD Decrypter) (Version: - ) Elsword version v4.0514.5.1 (HKLM-x32\...\{E655DDFC-24DB-4FC3-8474-271E911309B4}_is1) (Version: v4.0514.5.1 - Kill3rCombo) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff) FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse) foobar2000 v1.3.1 (HKLM-x32\...\foobar2000) (Version: 1.3.1 - Peter Pawlowski) GEAR Drivers (HKLM-x32\...\GEARDrivers) (Version: - ) GIMP 2.6.10 (HKLM\...\GIMP-2_is1) (Version: 2.6.10 - The GIMP Team) GoldWave v5.06 (HKLM-x32\...\GoldWave v5.06) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2150.5 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - ) HxD Hex Editor version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Ma・ Hz) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35132 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan) iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech) Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Access MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft DCF MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Excel MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Groove MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Lync MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft OneNote MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Outlook MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Publisher MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft VC9 runtime libraries (x32 Version: 2.0.0 - AOL Inc.) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Word MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden mIRC (HKLM-x32\...\mIRC) (Version: 7.32 - mIRC Co. Ltd.) MosChip PCI Multi-IO Controller (HKLM\...\MosChip Semiconductor Technology Ltd) (Version: - ) MPC-BE x64 1.4.3.5033 (HKLM\...\{FE09AF6D-78B2-4093-B012-FCDAF78693CE}_is1) (Version: 1.4.3.5033 - MPC-BE Team) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.2 - Notepad++ Team) NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation) NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation) NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation) NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden NVIDIA Update 15.3.33 (Version: 15.3.33 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 15.3.33 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden ph (x32 Version: 1.0.0 - Your Company Name) Hidden PHANTASY STAR ONLINE 2 (HKLM-x32\...\[url]http://pso2.jp/appid/release_is1[/url]) (Version: - SEGA) PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.70.1 - PS3 Media Server) Puyo Puyo Sun (HKLM-x32\...\Puyo Puyo Sun) (Version: - ) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.50.1123.2011 - Realtek) SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden Speccy (HKLM\...\Speccy) (Version: 1.21 - Piriform) Spotify (HKCU\...\Spotify) (Version: 0.9.11.27.g2b1a638c - Spotify AB) StepMania (remove only) (HKLM-x32\...\StepMania) (Version: - ) StepMania v5.0 beta 3 (remove only) (HKLM-x32\...\StepMania 5) (Version: - StepMania Team) SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 2.5.2 - Krzysztof Kowalczyk) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Thumbnail me 3.0 (HKCU\...\Thumbnail me 3.0) (Version: - ) TigerGame PS/PS2 Game Controller Adapter series to pc USB Drive (HKLM-x32\...\TigerGame PS/PS2 Game Controller Adapter series_is1) (Version: - ) TP-LINK Wireless Client Utility (HKLM-x32\...\{71BF8787-A67D-4CBC-9155-22927199F4BB}) (Version: 7.0 - TP-LINK) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation) Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (HKLM\...\{90150000-0015-0409-1000-0000000FF1CE}_Office15.PROPLUS_{D5412C67-998B-4246-A668-AB522D9F63FE}) (Version: - Microsoft) Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{614E655F-A0ED-435A-8E0C-A81EE4BA7BC7}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft) Update for Microsoft Excel 2013 (KB2889861) 64-Bit Edition (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6A34D28A-A780-405D-BF1A-F054542A37C8}) (Version: - Microsoft) Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E759A69-FA72-4B3C-BE2F-D1194764D31E}) (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2881083) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8260F0BF-F234-41FC-AB11-218A9925F77B}) (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2889860) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{75FECCEB-66B8-4376-8A25-6137D30D3C93}) (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2889860) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{75FECCEB-66B8-4376-8A25-6137D30D3C93}) (Version: - Microsoft) Update for Microsoft Lync 2013 (KB2889860) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{75FECCEB-66B8-4376-8A25-6137D30D3C93}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{43EB1F58-DAA0-4F61-A4EE-C5651F85A047}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{76CACE05-7A19-4EAC-87D7-5BFF63AF7CDF}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FEFF9FF6-FF61-455E-A8CC-3A1311A657AD}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3FF4EA9F-3505-4726-A974-6593A968FFCC}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9406D70B-2D9C-4613-A75A-F35B66BA8AFA}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760249) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7A4AB8E1-C091-4BD3-B308-844BA6EE752A}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CA390537-AA88-450F-A240-5FB4648A124A}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C8D57F4A-0824-4043-89E7-3C6280B67A47}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{AC4470FB-8011-4F16-B5D4-E0A34DE10C87}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D8B3D175-48B8-413F-8484-4D81E744B51C}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{39E58ED8-B687-49BD-88F9-968563F51F8E}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{856D47BC-036C-4692-8702-D6CCA8F428D0}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CA0554C4-62FE-4F66-BC87-1EE1EAC675EF}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CA0554C4-62FE-4F66-BC87-1EE1EAC675EF}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2A286156-257B-4528-9DB5-B4D4D53211BC}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F2187E8D-C68A-4655-8551-1932878A5581}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9353CD85-4B19-45C4-8DBA-1391926351F6}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9353CD85-4B19-45C4-8DBA-1391926351F6}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2881001) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{DF1B7B95-4A86-4605-A628-556394B5580A}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2881039) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C675FC43-E413-49A7-B3DC-44967B4FE22D}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2881081) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3BE27413-9FFE-4AB1-9013-344E111E718F}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUS_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{6E2862B8-C10A-4FD0-9B82-8D9761301AAA}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2889862) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CC0535B0-340B-4740-A63D-DBBE389DC83A}) (Version: - Microsoft) Update for Microsoft Office 2013 (KB2889862) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{CC0535B0-340B-4740-A63D-DBBE389DC83A}) (Version: - Microsoft) Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft) Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft) Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft) Update for Microsoft OneDrive for Business (KB2889866) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{6666C6C6-4AC6-4475-887E-5874B69EB414}) (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2880458) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D2CD59AB-CA83-44D4-AEF8-E49A3FE8FD7F}) (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2880458) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D2CD59AB-CA83-44D4-AEF8-E49A3FE8FD7F}) (Version: - Microsoft) Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version: - Microsoft) Update for Microsoft Outlook 2013 (KB2881011) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{679E6BE6-50D5-4D94-A10E-CB4FE1C5695B}) (Version: - Microsoft) Update for Microsoft Outlook 2013 (KB2881011) 64-Bit Edition (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}_Office15.PROPLUS_{679E6BE6-50D5-4D94-A10E-CB4FE1C5695B}) (Version: - Microsoft) Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft) Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}_Office15.PROPLUS_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft) Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BBD4F4CE-65D4-4CEB-AE19-E5296A57AA6C}) (Version: - Microsoft) Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft) Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft) Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{F16E7B82-23FE-4054-AB73-EAE53965251C}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft) Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version: - Microsoft) Warframe (HKLM-x32\...\{781C9ED7-5AFE-42A0-AFA8-8603C68447AF}) (Version: 1.0.0 - Digital Extremes) 東方心綺楼 Ver1.20 (HKLM-x32\...\{B641E348-377C-4819-B92F-03F1D35A7EE3}_is1) (Version: - 黄昏フロンティア) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2322799817-1880985190-1667400278-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\joesushi\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 15-09-2014 21:03:40 Checkpoint by HitmanPro ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 22:34 - 2014-09-15 23:17 - 00000002 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1C0484B8-563D-483E-9860-2831D7AECD80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-15] (Google Inc.) Task: {31039FB2-0936-45BA-8DD6-7992789355F0} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {399F7611-0F70-4ECA-AAA4-DB25CDA74F0F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-09-14] (AVAST Software) Task: {4F1DF7CA-F348-4786-8F4D-C61AEB7F264C} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {56486211-9875-40ED-951A-A8C2205158AD} - \AutoKMS No Task File <==== ATTENTION Task: {5A85F398-4A7A-4F16-AFE6-6D08F97CA797} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-08-21] (Piriform Ltd) Task: {620ECEFF-E0F2-4F1C-8519-1CC9DE9C3000} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {6B71BC8A-212F-44E1-BDA2-26512F1D4462} - System32\Tasks\Microsoft Office 15 Sync Maintenance for joesushi-PC-joesushi joesushi-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-07-27] (Microsoft Corporation) Task: {8BF5B0BD-CD73-48DC-B691-6A6C60E682B9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-15] (Google Inc.) Task: {B5E7E1EF-B4D6-4AF4-8651-D965D787BB7C} - \TidyNetwork Update No Task File <==== ATTENTION Task: {D7EC855C-0164-4AB8-8584-075DAB72AEC7} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {F9194C73-6D94-4A7C-BC42-836F87CD3FE4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe ==================== Loaded Modules (whitelisted) ============= 2013-08-20 20:31 - 2014-07-02 14:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-09-10 20:48 - 2014-09-10 20:48 - 00154112 _____ () C:\Program Files (x86)\Common Files\Diagnostics\node\service.exe 2012-10-04 15:35 - 2011-12-16 11:02 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe 2014-08-12 09:54 - 2014-08-12 09:54 - 08894120 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2012-06-18 11:24 - 2012-06-18 11:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll 2010-01-02 10:42 - 2010-01-02 10:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2014-09-15 01:04 - 2014-09-10 07:32 - 01391432 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\libglesv2.dll 2014-09-15 01:04 - 2014-09-10 07:32 - 00204616 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\libegl.dll 2014-09-15 01:04 - 2014-09-10 07:32 - 10629448 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\pdf.dll 2014-09-15 01:04 - 2014-09-10 07:32 - 01854792 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\ffmpegsumo.dll 2014-09-15 01:04 - 2014-09-10 07:32 - 26697032 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2150.5\PepperFlash\pepflashplayer.dll 2014-09-14 01:36 - 2014-09-14 01:36 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll 2014-09-15 17:00 - 2014-09-15 17:00 - 02862592 _____ () C:\Program Files\AVAST Software\Avast\defs\14091501\algo.dll 2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-08-12 09:55 - 2014-08-12 09:55 - 08894120 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2014-09-14 01:36 - 2014-09-14 01:36 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-09-11 03:31 - 2014-09-11 03:31 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\4361e26af57c86003751ac77cce1c827\IsdiInterop.ni.dll 2012-10-04 15:39 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2012-10-04 15:34 - 2011-12-16 10:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\91715813.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\91715813.sys => ""="Driver" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\Services: MMCSS => 2 MSCONFIG\startupfolder: C:^Users^joesushi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\joesushi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun ==================== Faulty Device Manager Devices ============= Name: Microsoft ISATAP Adapter Description: Microsoft ISATAP Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: TP-LINK 11b/g Wireless Adapter Description: TP-LINK 11b/g Wireless Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: TP-LINK Service: athr Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Microsoft ISATAP Adapter #2 Description: Microsoft ISATAP Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Microsoft ISATAP Adapter #4 Description: Microsoft ISATAP Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (IKEv2) Description: WAN Miniport (IKEv2) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: RasAgileVpn Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (L2TP) Description: WAN Miniport (L2TP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: Rasl2tp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (Network Monitor) Description: WAN Miniport (Network Monitor) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: NdisWan Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (IP) Description: WAN Miniport (IP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: NdisWan Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (IPv6) Description: WAN Miniport (IPv6) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: NdisWan Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (PPPOE) Description: WAN Miniport (PPPOE) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: RasPppoe Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (PPTP) Description: WAN Miniport (PPTP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: PptpMiniport Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: WAN Miniport (SSTP) Description: WAN Miniport (SSTP) Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: RasSstp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/16/2014 07:27:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 11:08:28 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 06:48:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 06:43:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 05:02:31 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 02:18:22 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (09/16/2014 07:25:18 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: %%1068 Error: (09/16/2014 07:25:18 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: %%0 Error: (09/15/2014 11:06:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: %%1068 Error: (09/15/2014 11:06:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: %%0 Error: (09/15/2014 06:46:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: %%1068 Error: (09/15/2014 06:46:37 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: %%0 Error: (09/15/2014 06:41:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error: %%1068 Error: (09/15/2014 06:41:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Remote Access Connection Manager service depends on the Secure Socket Tunneling Protocol Service service which failed to start because of the following error: %%0 Error: (09/15/2014 06:40:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (09/15/2014 06:40:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s). Microsoft Office Sessions: ========================= Error: (09/16/2014 07:27:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 11:08:28 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 06:48:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 06:43:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 05:02:31 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/15/2014 02:18:22 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2014-09-15 01:17:29.158 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-09-15 01:17:29.127 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-08-08 22:32:31.614 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-08-08 22:32:31.592 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-07-24 23:47:32.140 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-07-24 23:47:32.094 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-07-14 15:54:27.704 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-07-14 15:54:27.688 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-07-14 12:28:22.359 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-07-14 12:28:22.328 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hidusbf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz Percentage of memory in use: 26% Total physical RAM: 8157.02 MB Available physical RAM: 6020.67 MB Total Pagefile: 16312.21 MB Available Pagefile: 13790.13 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:59.53 GB) (Free:7.03 GB) NTFS Drive f: (Yoshitron) (Fixed) (Total:931.51 GB) (Free:7.95 GB) NTFS Drive i: (LEAPFROG_GRS) (CDROM) (Total:2.59 GB) (Free:0 GB) UDF Drive j: (NeoSushi) (Fixed) (Total:2794.39 GB) (Free:2577.73 GB) NTFS Drive k: (Argon) (Fixed) (Total:1863.01 GB) (Free:22.92 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 59.6 GB) (Disk ID: E890D8C4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=59.5 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B918F798) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 74B04938) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000) Partition: GPT Partition Type. ==================== End Of Log ============================ [/QUOTE]
Insert quotes…
Verification
Post reply
Top