Logs for MrC

lantern1014 · May 9, 2013

Can Not get past FBI warning screen.

My laptop apparently has a version of this virus that is not responding to any of the options talked about. My laptop responds the same way in safe mode/ safemode with networking as it does it in normal..the FBI screen appears in all modes except safemode command prompt making any of the options listed above impossible to implement.

Can anyone offer any advice????

MrCharlie · May 9, 2013

You're not going into safe mode, carefully follow the instructions, get someone to help you if needed:

Please download Farbar Recovery Scan Tool and save it to a flash drive.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Plug the flash drive into the infected PC.
If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.
If you are using Vista or Windows 7 enter System Recovery Options.
To enter System Recovery Options from the Advanced Boot Options:
- Restart the computer.
- As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
- Use the arrow keys to select the Repair your computer menu item.
- Select US as the keyboard language settings, and then click Next.
- Select the operating system you want to repair, and then click Next.
- Select your user account an click Next.

Note: In case you can not enter System Recovery Options by using F8 method, you can use Windows installation disc, or make a repair disc. Any Windows installation disc or a repair disc made on another computer can be used.

To make a repair disk on Windows 7 consult: http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

To enter System Recovery Options by using Windows installation disc:

Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

[*]On the System Recovery Options menu you will get the following options:

- Startup Repair
  System Restore
  Windows Complete PC Restore
  Windows Memory Diagnostic Tool
  Command Prompt
  Select Command Prompt
  Once in the Command Prompt:

[*]In the command window type in notepad and press Enter.

[*]The notepad opens. Under File menu select Open.

[*]Select "Computer" and find your flash drive letter and close the notepad.

[*]In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter

Note: Replace letter e with the drive letter of your flash drive.

[*]The tool will start to run.

[*]When the tool opens click Yes to disclaimer.

[*]Press Scan button.

[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

MrC

lantern1014 · May 10, 2013

<div>Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-05-2013</div>

<div>Ran by User (administrator) on 09-05-2013 16:58:47</div>

<div>Running from E:\</div>

<div>Windows Vista Home Premium Service Pack 2 (X86) OS Language: English(US)</div>

<div>Internet Explorer Version 9</div>

<div>Boot Mode: Safe Mode (minimal)</div>

<div>==================== Processes (Whitelisted) ===================</div>

<div>(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE</div>

<div>(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe</div>

<div>(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE</div>

<div>(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe</div>

<div>(Microsoft Corporation) C:\Windows\system32\cmd.exe</div>

<div>(Farbar) e:\FRST.exe</div>

<div>==================== Registry (Whitelisted) ==================</div>

<div>HKLM\...\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-20] (Microsoft Corporation)</div>

<div>HKLM\...\Run: [RtHDVCpl] RtHDVCpl.exe [x]</div>

<div>HKLM\...\Run: [skytel] Skytel.exe [x]</div>

<div>HKLM\...\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart [92704 2009-05-26] (NVIDIA Corporation)</div>

<div>HKLM\...\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup [8530464 2009-05-26] (NVIDIA Corporation)</div>

<div>HKLM\...\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit [88608 2009-05-26] (NVIDIA Corporation)</div>

<div>HKLM\...\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart [3739648 2007-01-01] (Google)</div>

<div>HKLM\...\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun [126976 2011-06-08] (Google Inc.)</div>

<div>HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [946352 2012-12-03] (Adobe Systems Incorporated)</div>

<div>HKLM\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4767304 2013-03-06] (AVAST Software)</div>

<div>HKLM\...\Run: [iSBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe" [311296 2007-09-19] (Sony Corporation)</div>

<div>HKLM\...\Run: [AppMon Utility] "C:\Program Files\Sony\AppMonUtil\AppMonUtility.exe" @@@Start [542560 2007-09-20] (Sony Corporation)</div>

<div>HKLM\...\Run: [LWS] C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide [165208 2010-05-07] (Logitech Inc.)</div>

<div>HKLM\...\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [30040 2009-02-26] (Microsoft Corporation)</div>

<div>HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2011-07-05] (Apple Inc.)</div>

<div>HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2516296 2010-03-24] (CANON INC.)</div>

<div>HKLM\...\Run: [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1185112 2010-04-02] (CANON INC.)</div>

<div>HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59240 2011-11-02] (Apple Inc.)</div>

<div>HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [421736 2011-12-08] (Apple Inc.)</div>

<div>HKLM\...\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)</div>

<div>HKLM\...\Run: [searchProtectAll] C:\Program Files\SearchProtect\bin\cltmng.exe [2731296 2013-03-06] (Conduit)</div>

<div>HKLM\...\RunOnce: [*EvtMgr32] C:\Windows\{233F7E35-3B16-0420-3F38-1E091B49DE02}.exe [329728 2013-05-09] (PEERNET Inc.)</div>

<div>HKLM\...\Winlogon: [shell] C:\Windows\{233F7E35-3B16-0420-3F38-1E091B49DE02}.exe [329728 2013-05-09] (PEERNET Inc.)</div>

<div>Winlogon\Notify\VESWinlogon: VESWinlogon.dll (Sony Corporation)</div>

<div>HKCU\...\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter [x]</div>

<div>HKCU\...\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [39408 2011-06-08] (Google Inc.)</div>

<div>HKCU\...\Run: [Google Update] "C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe" /c [136176 2011-06-08] (Google Inc.)</div>

<div>HKCU\...\Run: [searchProtect] C:\Users\User\AppData\Roaming\SearchProtect\bin\cltmng.exe [2731296 2013-03-06] (Conduit)</div>

<div>MountPoints2: {884eb048-a2d3-11e0-8917-001a80f6721f} - G:\setup.exe -a</div>

<div>HKU\Guest\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [ 2011-07-05] (Apple Inc.)</div>

<div>Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HMA Pro VPN 2.0.lnk</div>

<div>ShortcutTarget: HMA Pro VPN 2.0.lnk -> C:\Program Files\HMA! Pro VPN\bin\HMA! Pro VPN.exe (Privax)</div>

<div>==================== Internet (Whitelisted) ====================</div>

<div>HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={C6B3CC60-8B74-11E2-8821-001A80F6721F}</div>

<div>HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/</div>

<div>HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={C6B3CC60-8B74-11E2-8821-001A80F6721F}</div>

<div>URLSearchHook: uTorrentControl_v6 Toolbar - {96f454ea-9d38-474f-b504-56193e00c1a5} - C:\Program Files\uTorrentControl_v6\prxtbuTor.dll (Conduit Ltd.)</div>

<div>HKLM SearchScopes: DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10042&barid={C6B3CC60-8B74-11E2-8821-001A80F6721F}</div>

<div>SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10042&barid={C6B3CC60-8B74-11E2-8821-001A80F6721F}</div>

<div>SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10042&barid={C6B3CC60-8B74-11E2-8821-001A80F6721F}</div>

<div>BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)</div>

<div>BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)</div>

<div>BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)</div>

<div>BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)</div>

<div>BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)</div>

<div>BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)</div>

<div>BHO: uTorrentControl_v6 Toolbar - {96f454ea-9d38-474f-b504-56193e00c1a5} - C:\Program Files\uTorrentControl_v6\prxtbuTor.dll (Conduit Ltd.)</div>

<div>BHO: Search Toolbar - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()</div>

<div>BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)</div>

<div>BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)</div>

<div>BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)</div>

<div>BHO: Updater By SweetPacks - {C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD} - C:\Program Files\Updater By SweetPacks\Extension32.dll ()</div>

<div>BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File</div>

<div>BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)</div>

<div>BHO: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)</div>

<div>BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)</div>

<div>Toolbar: HKLM - Search Toolbar - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()</div>

<div>Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)</div>

<div>Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)</div>

<div>Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" No File</div>

<div>Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)</div>

<div>Toolbar: HKLM - uTorrentControl_v6 Toolbar - {96f454ea-9d38-474f-b504-56193e00c1a5} - C:\Program Files\uTorrentControl_v6\prxtbuTor.dll (Conduit Ltd.)</div>

<div>Toolbar: HKLM - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)</div>

<div>Toolbar: HKCU -Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)</div>

<div>Toolbar: HKCU -Search Toolbar - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()</div>

<div>PDF: {02CF1781-EA91-4FA5-A200-646E8241987C} http://esupport.sony.com/VaioInfo.CAB</div>

<div>PDF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab</div>

<div>Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)</div>

<div>Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)</div>

<div>Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)</div>

<div>Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)</div>

<div>Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)</div>

<div>Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)</div>

<div>Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)</div>

<div>Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)</div>

<div>Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [19968] (Microsoft Corporation)</div>

<div>Winsock: Catalog9 01 C:\Program Files\HMA! Pro VPN\bin\ForceInterfaceLSP.dll [19968] (Microsoft Corporation)</div>

<div>Winsock: Catalog9 02 C:\Program Files\HMA! Pro VPN\bin\ForceInterfaceLSP.dll [19968] (Microsoft Corporation)</div>

<div>Winsock: Catalog9 03 C:\Program Files\HMA! Pro VPN\bin\ForceInterfaceLSP.dll [19968] (Microsoft Corporation)</div>

<div>Winsock: Catalog9 04 C:\Program Files\HMA! Pro VPN\bin\ForceInterfaceLSP.dll [19968] (Microsoft Corporation)</div>

<div>Winsock: Catalog9 05 C:\Program Files\HMA! Pro VPN\bin\ForceInterfaceLSP.dll [19968] (Microsoft Corporation)</div>

<div>Winsock: Catalog9 16 C:\Program Files\HMA! Pro VPN\bin\ForceInterfaceLSP.dll [223232] (Microsoft Corporation)</div>

<div>Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt</div>

<div>Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 75.75.75.75 75.75.76.76</div>

<div>Tcpip\..\Interfaces\{D1A0B3FF-C733-49B9-8BC2-C1978F806AEB}: [NameServer]208.67.222.222 208.67.220.220</div>

<div>FireFox:</div>

<div>FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0</div>

<div>FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()</div>

<div>FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)</div>

<div>FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)</div>

<div>FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)</div>

<div>FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)</div>

<div>FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)</div>

<div>FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)</div>

<div>FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)</div>

<div>FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)</div>

<div>FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)</div>

<div>FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)</div>

<div>FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)</div>

<div>FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)</div>

<div>FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.3 - C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)</div>

<div>FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)</div>

<div>FF Extension: torntv - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions\torntv@torntv.com.xpi</div>

<div>Chrome: </div>

<div>CHR RestoreOnStartup: "hxxp://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={C6B3CC60-8B74-11E2-8821-001A80F6721F}"</div>

<div>CHR DefaultSearchURL: (Bing) - http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10042&barid={C6B3CC60-8B74-11E2-8821-001A80F6721F}</div>

<div>CHR DefaultSuggestURL: (Bing) - "suggest_url": ""</div>

<div>CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File</div>

<div>CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer</div>

<div>CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll ()</div>

<div>CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll ()</div>

<div>CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)</div>

<div>CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File</div>

<div>CHR Plugin: (Java Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File</div>

<div>CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)</div>

<div>CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)</div>

<div>CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)</div>

<div>CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)</div>

<div>CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)</div>

<div>CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)</div>

<div>CHR Plugin: (QuickTime Plug-in 7.7) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)</div>

<div>CHR Plugin: (Google Talk Plugin) - C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)</div>

<div>CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\User\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()</div>

<div>CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)</div>

<div>CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)</div>

<div>CHR Plugin: (Google Updater) - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)</div>

<div>CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File</div>

<div>CHR Plugin: ( Wacom Dynamic Link Library) - C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)</div>

<div>CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)</div>

<div>CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()</div>

<div>CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File</div>

<div>CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)</div>

<div>CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0</div>

<div>CHR Extension: (uTorrentControl_v6) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflheckfmhopnialghigdlggahiomebp\10.15.0.562_0</div>

<div>CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0</div>

<div>CHR Extension: (Updater By SweetPacks) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.566_0</div>

<div>CHR Extension: (avast! WebRep) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0</div>

<div>CHR Extension: (Torntv) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpkiefagocgkmemidfngdkamloieekf\1.1_0</div>

<div>CHR Extension: (Skype Click to Call) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0</div>

<div>CHR Extension: (SweetPacks Chrome Extension) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.3_0</div>

<div>CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1</div>

<div>========================== Services (Whitelisted) =================</div>

<div>S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [45248 2013-03-06] (AVAST Software)</div>

<div>S2 CltMngSvc; C:\Program Files\SearchProtect\bin\CltMngSvc.exe [93984 2013-03-06] (Conduit)</div>

<div>S2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()</div>

<div>S3 OpenVPNService; C:\Program Files\HMA! Pro VPN\bin\openvpnserv.exe [36352 2012-11-19] ()</div>

<div>S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [187792 2010-08-12] (Sony Corporation)</div>

<div>S2 Updater By SweetPacks; C:\Program Files\Updater By SweetPacks\ExtensionUpdaterService.exe [188760 2013-02-28] ()</div>

<div>S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [480624 2009-09-16] (Sony Corporation)</div>

<div>S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [957056 2012-10-26] (Sony Corporation)</div>

<div>S2 WTouchService; C:\Program Files\WTouch\WTouchService.exe [113448 2009-11-23] (Wacom Technology, Corp.)</div>

<div>S3 msiserver; %systemroot%\system32\msiexec /V [x]</div>

<div>==================== Drivers (Whitelisted) ====================</div>

<div>S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-03-06] (AVAST Software)</div>

<div>S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-03-06] (AVAST Software)</div>

<div>S1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [49760 2013-03-06] (AVAST Software)</div>

<div>R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49248 2013-03-06] ()</div>

<div>S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [765736 2013-03-06] (AVAST Software)</div>

<div>S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [368176 2013-03-06] (AVAST Software)</div>

<div>S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [62376 2013-03-06] (AVAST Software)</div>

<div>S3 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [164736 2013-03-06] ()</div>

<div>S3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [20704 2010-05-14] (Logitech Inc.)</div>

<div>S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25824 2010-05-07] ()</div>

<div>S3 OVT511Plus; C:\Windows\System32\Drivers\omcamvid.sys [167816 2001-09-18] (OmniVision Technologies, Inc.)</div>

<div>S3 R5U870FLx86; C:\Windows\System32\Drivers\R5U870FLx86.sys [73472 2008-01-08] (Ricoh)</div>

<div>S3 R5U870FUx86; C:\Windows\System32\Drivers\R5U870FUx86.sys [43904 2008-01-08] (Ricoh)</div>

<div>R0 SI3132; C:\Windows\System32\DRIVERS\SI3132.sys [80424 2007-10-03] (Silicon Image, Inc)</div>

<div>R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [19240 2007-10-03] (Silicon Image, Inc)</div>

<div>R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [15400 2007-10-03] (Silicon Image, Inc)</div>

<div>S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26112 2012-11-19] (The OpenVPN Project)</div>

<div>S3 ti21sony; C:\Windows\System32\drivers\ti21sony.sys [812544 2007-06-05] (Texas Instruments)</div>

<div>R3 WacomVTHid; C:\Windows\System32\DRIVERS\WacomVTHid.sys [13480 2009-07-09] (Wacom Technology)</div>

<div>S3 IpInIp; system32\DRIVERS\ipinip.sys [x]</div>

<div>S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]</div>

<div>S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]</div>

<div>S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [x]</div>

<div>==================== NetSvcs (Whitelisted) ===================</div>

<div>==================== One Month Created Files and Folders ========</div>

<div>2013-05-09 07:37 - 2013-05-09 07:37 - 00035005 ____A C:\Users\User\Downloads\Teachs+-+Timo+Garrett+%26+Brian+Davilla.mp4.torrent</div>

<div>2013-05-09 07:37 - 2013-05-09 07:37 - 00030359 ____A C:\Users\User\Downloads\Sweat+-+Ronny+Howard+%26+Billy+Webster.mov.torrent</div>

<div>2013-05-09 07:37 - 2013-05-09 07:37 - 00017566 ____A C:\Users\User\Downloads\Spritzz+Winks+take.avi.torrent</div>

<div>2013-05-09 07:37 - 2013-05-09 07:37 - 00011426 ____A C:\Users\User\Downloads\%5BBAO+-+Kinky+Angels%5D+Breaking+Trevor%27s+Neck.mp4.torrent</div>

<div>2013-05-09 07:36 - 2013-05-09 07:36 - 00096663 ____A C:\Users\User\Downloads\%5Bo%5D+%5BPunk%5D+Nation+3.mp4.torrent</div>

<div>2013-05-09 07:36 - 2013-05-09 07:36 - 00018865 ____A C:\Users\User\Downloads\%5BBAO+-+Kinky+Angels%5D+The+Other+Side+of+Gino.mp4.torrent</div>

<div>2013-05-09 07:36 - 2013-05-09 07:36 - 00012355 ____A C:\Users\User\Downloads\Corbin+Fisher+-ACM1306-+Ashton%27s+%28Dixon%29+-+Back.mp4.torrent</div>

<div>2013-05-09 07:35 - 2013-05-09 07:35 - 00031677 ____A C:\Users\User\Downloads\Czech+Hunter+88.mp4.torrent</div>

<div>2013-05-09 07:35 - 2013-05-09 07:35 - 00013405 ____A C:\Users\User\Downloads\%5BBAO+-+Kinky+Angels%5D+Adam+Doesn%27t+Hesitate.mp4.torrent</div>

<div>2013-05-09 07:34 - 2013-05-09 07:34 - 00042249 ____A C:\Users\User\Downloads\Sean+Cody+1597+Joel+%26+Troy+BB+540.wmv.torrent</div>

<div>2013-05-09 07:34 - 2013-05-09 07:34 - 00021969 ____A C:\Users\User\Downloads\Blue+Pictures+-+Back.wmv.torrent</div>

<div>2013-05-09 07:34 - 2013-05-09 07:34 - 00018358 ____A C:\Users\User\Downloads\%5BBAO+-+Kinky+Angels%5D+Turbulence+Ahead.mp4.torrent</div>

<div>2013-05-09 07:34 - 2013-05-09 07:34 - 00012178 ____A C:\Users\User\Downloads\%5BBAO+-+Kinky+Angels%5D+Take+Your+Seat.mp4.torrent</div>

<div>2013-05-09 07:32 - 2013-05-09 07:32 - 00020513 ____A C:\Users\User\Downloads\%5BChaos%5D+Bryan+and+Kelton-++Bossy.mp4.torrent</div>

<div>2013-05-09 07:31 - 2013-05-09 07:31 - 00018920 ____A C:\Users\User\Downloads\%5BTony%5D+Jeremy+Stevens+and+Paul+Stack.mp4.torrent</div>

<div>2013-05-09 07:31 - 2013-05-09 07:31 - 00017171 ____A C:\Users\User\Downloads\%5Brobbymendez.com%5D+Jayden+Alexander+%26+Robby+Mendez.torrent</div>

<div>2013-05-09 07:31 - 2013-05-09 07:31 - 00014688 ____A C:\Users\User\Downloads\%5BBatino+Bashin.mov.torrent</div>

<div>2013-05-09 07:31 - 2013-05-09 07:31 - 00013898 ____A C:\Users\User\Downloads\%5BStudio%5D+Just+For+You+-+Guys+Like+Us+-+Sc+3+-+Angel+Rock+and+Wolfie+Blue.mp4.torrent</div>

<div>2013-05-09 07:31 - 2013-05-09 07:31 - 00012110 ____A C:\Users\User\Downloads\%5Brobbymendez.com%5D+Jayden+Alexander+Robby+Mendez.mp4.torrent</div>

<div>2013-05-09 07:30 - 2013-05-09 07:30 - 00017842 ____A C:\Users\User\Downloads\%5BKristen+Bjorn%5D+Reality+%23+1+-+Diesel+O%27+Green+and+Julio+Rey.mp4.torrent</div>

<div>2013-05-09 07:30 - 2013-05-09 07:30 - 00012619 ____A C:\Users\User\Downloads\%5BEric+Videos%5D+Nathan+loaded+on+a+highway+rest+stop.mp4.torrent</div>

<div>2013-05-09 07:29 - 2013-05-09 07:29 - 00030849 ____A C:\Users\User\Downloads\Breakfast+Sex+%28Shane+Frost+Ashton+Webber%29.mp4.torrent</div>

<div>2013-05-09 07:26 - 2013-05-09 07:26 - 00034059 ____A C:\Users\User\Downloads\RandyBlue+-+Austin%2C+Chris%2C+and+Jordan.mp4.torrent</div>

<div>2013-05-09 07:26 - 2013-05-09 07:26 - 00010777 ____A C:\Users\User\Downloads\%5BBAO+-+Kinky+Angels%5D+Perfect+Match.mp4.torrent</div>

<div>2013-05-09 07:25 - 2013-05-09 07:26 - 00012092 ____A C:\Users\User\Downloads\+Shooter.mp4.torrent</div>

<div>2013-05-09 07:25 - 2013-05-09 07:25 - 00027209 ____A C:\Users\User\Downloads\Nation+-+Tim+%26+Fin.mp4.torrent</div>

<div>2013-05-09 07:24 - 2013-05-09 07:23 - 00329728 ___SH (PEERNET Inc.) C:\Windows\{233F7E35-3B16-0420-3F38-1E091B49DE02}.exe</div>

<div>2013-05-09 07:23 - 2013-05-09 07:24 - 00034061 ____A C:\Users\User\Downloads\Club+-+Aaron%2CAdam%2CDerek+%26+Jessy.mp4.torrent</div>

<div>2013-05-07 16:51 - 2013-05-07 16:51 - 00017811 ____A C:\Users\User\Downloads\Roadstrip+Ep+1+-+Boys+-+2013+%28H264.AAC+39m%29.mp4.torrent</div>

<div>2013-05-07 16:51 - 2013-05-07 16:51 - 00011071 ____A C:\Users\User\Downloads\%5BHelix%5D+-+Hayden+Clark+and+Aiden+Summers.mp4.torrent</div>

<div>2013-05-07 16:50 - 2013-05-07 16:50 - 00018458 ____A C:\Users\User\Downloads\Bangover.mp4.torrent</div>

<div>2013-05-07 16:50 - 2013-05-07 16:50 - 00012669 ____A C:\Users\User\Downloads\Jake+Bass+%26+Levi+Karter.mp4.torrent</div>

<div>2013-05-07 16:49 - 2013-05-07 16:49 - 00019367 ____A C:\Users\User\Downloads\Dylan+Lucas+-+Lance+Alexander+Jimmy+Clay.torrent</div>

<div>2013-05-07 16:48 - 2013-05-07 16:49 - 00047139 ____A C:\Users\User\Downloads\%5Bo%5D+%5BDylan+Lucas%5D+Brady+Jensen+Lance+Alexander.mp4.torrent</div>

<div>==================== One Month Modified Files and Folders ========</div>

<div>2013-05-09 16:57 - 2006-11-02 03:33 - 00703388 ____A C:\Windows\System32\PerfStringBackup.INI</div>

<div>2013-05-09 16:42 - 2011-07-26 06:46 - 00000000 ____D C:\Windows\System32\logishrd</div>

<div>2013-05-09 16:42 - 2011-06-08 18:47 - 00000878 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job</div>

<div>2013-05-09 16:42 - 2006-11-02 05:47 - 00003760 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0</div>

<div>2013-05-09 16:42 - 2006-11-02 05:47 - 00003760 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0</div>

<div>2013-05-09 16:41 - 2006-11-02 06:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT</div>

<div>2013-05-09 14:26 - 2009-04-11 05:37 - 01597457 ____A C:\Windows\WindowsUpdate.log</div>

<div>2013-05-09 07:42 - 2008-01-20 19:47 - 00139988 ____A C:\Windows\PFRO.log</div>

<div>2013-05-09 07:41 - 2012-03-05 19:39 - 00000000 ____D C:\Users\User\AppData\Roaming\Azureus</div>

<div>2013-05-09 07:37 - 2013-05-09 07:37 - 00035005 ____A C:\Users\User\Downloads\Teach+-+Timo+Garrett+%26+Brian+Davilla.mp4.torrent</div>