"Spigot" hijacked my home pages

gurpsgm · November 23, 2013

Hi!

I have a new home page I do not want: http://search.yahoo.com/?type=293224&fr=spigot-yhp-ff

which seems to be some type of hijacker, because no matter what I have done on this end, I can't get rid of it.

Can anyone help me get rid of this hitchhiker?

Bruce

kevinf80 · November 23, 2013

Hello and

P2P/Piracy Warning:

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Next,

Download AdwCleaner by Xplode from here: http://www.bleepingcomputer.com/download/adwcleaner/ and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
When it's done you'll see: Pending: Uncheck any elements you don't want removed.
Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
Look over the log especially under Files/Folders for any program you want to save.
If there's a program you want to save, just uncheck it from AdwCleaner.
If you're not sure, post the log for review.
If you're ready to clean it all up.....click the Clean button.
After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.
Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
To restore an item that has been deleted (if necessary):
Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

Next,

Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Kevin...

gurpsgm · November 24, 2013

OK - Just to make sure, I totally deleted all of uTorrent, even the stuff in the "roaming" folder.

I had to break this up, becuase I got a message that said: Post too long.

# AdwCleaner v3.013 - Report created 24/11/2013 at 07:31:24
# Updated 24/11/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : gurpsgm - GURPSGM-PC
# Running from : C:\Users\gurpsgm\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\gurpsgm\AppData\Local\filetypeassistant
Folder Deleted : C:\Users\gurpsgm\AppData\Roaming\DriverCure

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\FLEXnet

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16686

-\\ Mozilla Firefox v25.0.1 (en-US)

[ File : C:\Users\gurpsgm\AppData\Roaming\Mozilla\Firefox\Profiles\8ckfqq5x.default-1384954388521\prefs.js ]

-\\ Google Chrome v31.0.1650.57

[ File : C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [18254 octets] - [20/11/2013 07:39:37]
AdwCleaner[R1].txt - [1092 octets] - [20/11/2013 08:08:12]
AdwCleaner[R2].txt - [1318 octets] - [20/11/2013 17:00:38]
AdwCleaner[R3].txt - [2173 octets] - [24/11/2013 07:30:46]
AdwCleaner[s0].txt - [17869 octets] - [20/11/2013 07:40:31]
AdwCleaner[s1].txt - [1156 octets] - [20/11/2013 08:09:04]
AdwCleaner[s2].txt - [1389 octets] - [20/11/2013 17:01:14]
AdwCleaner[s3].txt - [2069 octets] - [24/11/2013 07:31:24]

########## EOF - C:\AdwCleaner\AdwCleaner[s3].txt - [2129 octets] ##########

More in next post...

gurpsgm · November 24, 2013

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2013 03

Ran by gurpsgm (administrator) on GURPSGM-PC on 24-11-2013 07:46:50

Running from C:\Users\gurpsgm\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 10

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\BBSvc.EXE

(Acer Incorporated) C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe

() C:\Program Files (x86)\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe

(Alcatel-Lucent) C:\Program Files\Verizon\McciTrayApp.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Saitek) C:\Program Files\Saitek\SD6\Software\ProfilerU.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciContextHookShim.exe

(Saitek) C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(FSPro Labs) C:\Program Files\My Lockbox\mylbx.exe

(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciCMService.exe

(DonationCoder) C:\Program Files (x86)\ScreenshotCaptor\ScreenshotCaptor.exe

(Alcatel-Lucent) C:\Program Files\Common Files\Motive\McciCMService.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Management\Engine\3.2.2.12\ccsvchst.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe

(Microsoft Corporation) C:\Program Files (x86)\EMET (Tech Preview)\EMET_notifier.exe

(Google) C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\n360.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

() C:\Program Files (x86)\RegZooka\RegZookaScheduler.exe

(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Zone\Engine\1.0.15.13\NZ.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Management\Engine\3.2.2.12\ccsvchst.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\n360.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Acer Group) C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

() C:\OEM\USBDECTION\USBS3S4Detection.exe

(UC-Logic Technology Corp.) C:\Windows\System32\drivers\WTSrv.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Zone\Engine\1.0.15.13\NZ.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\SeaPort.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Verizon_McciTrayApp] - C:\Program Files\Verizon\McciTrayApp.exe [3432448 2010-03-17] (Alcatel-Lucent)

HKLM\...\Run: [ProfilerU] - C:\Program Files\Saitek\SD6\Software\ProfilerU.exe [310272 2010-07-29] (Saitek)

HKLM\...\Run: [iAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-10-13] (Intel Corporation)

HKLM\...\Run: [saiVolume] - C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe [186880 2009-09-04] (Saitek)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 1999-12-31] (Realtek Semiconductor)

HKLM\...\Run: [mylbx] - C:\Program Files\My Lockbox\mylbx.exe [2584864 2013-07-06] (FSPro Labs)

HKCU\...\Run: [screenshot Captor] - C:\Program Files (x86)\ScreenshotCaptor\ScreenshotCaptor.exe [7941304 2013-09-13] (DonationCoder)

HKCU\...\Run: [steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)

HKCU\...\Policies\Explorer: [NoDesktopCleanupWizard] 1

HKCU\...\Policies\Explorer: [NoInstrumentation] 1

HKCU\...\Policies\Explorer: [NoCDBurning] 1

HKLM-x32\...\Run: [ZoneAlarm] - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73832 2013-10-25] (Check Point Software Technologies LTD)

HKLM-x32\...\Run: [atr.exe] - [x]

HKLM-x32\...\Run: [nmapp] - C:\Program Files (x86)\Pure Networks\Network Magic\nmapp.exe [472112 2009-07-08] (Cisco Systems, Inc.)

HKLM-x32\...\Run: [EMET Notifier] - C:\Program Files (x86)\EMET (Tech Preview)\EMET_notifier.exe [152680 2012-07-19] (Microsoft Corporation)

HKLM-x32\...\Run: [Google Desktop Search] - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2013-06-22] (Google)

HKLM-x32\...\Run: [sDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [RegZooka Scheduler] - C:\Program Files (x86)\RegZooka\RegZookaScheduler.exe [408064 2013-05-28] ()

HKU\Default\...\RunOnce: [scrSav] - C:\Program Files (x86)\Gateway\Screensaver\run_Gateway.exe [154144 2010-01-14] ()

HKU\Default User\...\RunOnce: [scrSav] - C:\Program Files (x86)\Gateway\Screensaver\run_Gateway.exe [154144 2010-01-14] ()

AppInit_DLLs: "C:\PROGRA~2\Google\Google Desktop [ ] ()

Startup: C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AnyTime.lnk

ShortcutTarget: AnyTime.lnk -> C:\Program Files (x86)\AnyTime Organizer Premier\ISI Launcher.exe (Individual Software Inc.)

Startup: C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk

ShortcutTarget: ERUNT AutoBackup.lnk -> C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()

Startup: C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk

ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?type=293224&fr=spigot-yhp-ie

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search

SearchScopes: HKCU - DefaultScope {8293C2B2-E7B8-44BE-82D1-DCEF01778D8C} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=293224&p={searchTerms}

SearchScopes: HKCU - {8293C2B2-E7B8-44BE-82D1-DCEF01778D8C} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=293224&p={searchTerms}

BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)

BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)

BHO: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No File

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\amd64\BingExt.dll (Microsoft Corporation.)

BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File

BHO-x32: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\bh\zonealarm.dll (Check Point Software Technologies LTD)

BHO-x32: Send to MyInfo (Attachment) - {4DBB4D17-C65B-4868-8E9C-7779FB3DDA27} - C:\Program Files (x86)\Milenix\MyInfo 6\SendIEToMyInfoAttachment.dll (Milenix Software Ltd.)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\ips\ipsbho.dll (Symantec Corporation)

BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Send to MyInfo - {A1AD13F3-B8F0-4584-8088-8BCBDB42663F} - C:\Program Files (x86)\Milenix\MyInfo 6\SendIEToMyInfo.dll (Milenix Software Ltd.)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.107.0\amd64\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll (Check Point Software Technologies LTD)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - No File

Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.0.18\coieplg.dll (Symantec Corporation)

DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll

Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll (Cisco Systems, Inc.)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

ShellExecuteHooks-x32: - {EDB0E980-90BD-11D4-8599-0008C7D3B6F8} - No File [ ]

Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll File Not found ()

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\gurpsgm\AppData\Roaming\Mozilla\Firefox\Profiles\8ckfqq5x.default-1384954388521

FF SelectedSearchEngine: Google

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()

FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Motive.com/NpMotive,version=1.0 - C:\Program Files (x86)\Common Files\Motive\npMotive.dll (Alcatel-Lucent)

FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)

FF Plugin-x32: @nosltd.com/getPlus+®,version=1.6.2.91 - C:\Program Files (x86)\NOS\bin\np_gp.dll (NOS Microsystems Ltd.)

FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Users\gurpsgm\Music\Winamp Detect\npwachk.dll (Nullsoft, Inc.)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.5 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)

FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @coreonline.com/run3d,version=1.0 - C:\Users\gurpsgm\AppData\LocalLow\Square Enix\nprun3d.dll (Square Enix)

FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\gurpsgm\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\gurpsgm\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\gurpsgm\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\gurpsgm\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\gurpsgm\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\gurpsgm\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin HKCU: thehappycloud.com/HappyCloudPlugin - C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\googledesktop.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\McSiteAdvisor.xml

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.2.1\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.2.1\coFFPlgn\

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.2.1\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.0.2.1\IPSFF

Chrome:

=======

CHR Extension: (Docs) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0

CHR Extension: (Google Drive) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0

CHR Extension: (YouTube) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0

CHR Extension: (Google Search) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0

CHR Extension: (Command & Conquer Tiberium Alliances) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgaeopgjojikeoiidmfaejkifhgjoooe\1.0.8_0

CHR Extension: (Skype Click to Call) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0

CHR Extension: (Norton Identity Protection) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2014.6.0.27_0

CHR Extension: ( "name":"Advanced SystemCare Surfing Protection",) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0

CHR Extension: (Chrome In-App Payments service) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR Extension: (Space Planet) - C:\Users\gurpsgm\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcocpoeoiajndepaaimnnglicichmbb\1.1_0

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [lipgolpfajiadodbcbljdpmbmbdmfcil] - C:\Users\gurpsgm\AppData\Local\CRE\lipgolpfajiadodbcbljdpmbmbdmfcil.crx

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\Exts\Chrome.crx

CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx

CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-25] (Adobe Systems)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)

S4 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2013-06-22] (Google)

S2 HPSLPSVC; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)

R2 IHA_MessageCenter; C:\Program Files (x86)\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe [151552 2011-06-16] ()

S3 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)

R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1164328 2013-09-09] (iolo technologies, LLC)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)

R2 McciCMService64; C:\Program Files\Common Files\Motive\McciCMService.exe [517632 2010-03-17] (Alcatel-Lucent)

R2 MCLIENT; C:\Program Files (x86)\Norton Management\Engine\3.2.2.12\ccSvcHst.exe [143928 2012-12-04] (Symantec Corporation)

R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.0.18\N360.exe [264360 2013-10-08] (Symantec Corporation)

R2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)

S4 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-05-28] (Nitro PDF Software)

S3 nosGetPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll [66112 2010-09-01] (NOS Microsystems Ltd.)

R2 NZ; C:\Program Files (x86)\Norton Zone\Engine\1.0.15.13\NZ.exe [143856 2013-11-10] (Symantec Corporation)

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc.)

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)

S3 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16000 2013-03-07] (Seagate Technology LLC)

R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025408 2013-10-18] (Enigma Software Group USA, LLC.)

R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()

R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2445816 2013-10-25] (Check Point Software Technologies LTD)

R2 WinTabService; C:\Windows\System32\Drivers\WTSRV.EXE [73728 2011-09-23] (UC-Logic Technology Corp.)

R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [50704 2013-10-15] (Check Point Software Technologies, Ltd.)

S4 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [x]

S3 jswpsapi;

==================== Drivers (Whitelisted) ====================

S2 ASPI32; No ImagePath

S3 bcgame; C:\Windows\System32\drivers\bcgame.sys [35328 2007-08-14] (Belkin Corporation)

R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\BASHDefs\20131114.001\BHDrvx64.sys [1524824 2013-10-22] (Symantec Corporation)

R1 ccSet_MCLIENT; C:\Windows\system32\drivers\MCLIENTx64\0302020.00C\ccSetx64.sys [168096 2012-10-03] (Symantec Corporation)

R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501000.012\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)

R1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DD04000.00A\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 ccSet_NZ; C:\Windows\system32\drivers\NZx64\01000F0.00D\ccSetx64.sys [162392 2013-09-25] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-20] (Symantec Corporation)

R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [31432 2012-04-17] (EldoS Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-20] (Symantec Corporation)

S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)

R0 FSProFilter; C:\Windows\System32\Drivers\FSPFltd.sys [54848 2010-07-22] (FSPro Labs)

R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\IPSDefs\20131122.001\IDSvia64.sys [521816 2013-10-28] (Symantec Corporation)

S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()

S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2010-03-17] (Printing Communications Assoc., Inc. (PCAUSA))

S3 MREMP50a64; No ImagePath

S3 MREMPR5; No ImagePath

S3 MRENDIS5; No ImagePath

S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2010-03-17] (Printing Communications Assoc., Inc. (PCAUSA))

S3 MRESP50a64; No ImagePath

R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131123.001\ENG64.SYS [126040 2013-11-19] (Symantec Corporation)

R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.0.2.1\Definitions\VirusDefs\20131123.001\EX64.SYS [2099288 2013-11-19] (Symantec Corporation)

S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)

S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)

R3 SaiK0728; C:\Windows\System32\DRIVERS\SaiK0728.sys [160264 1999-12-31] (Saitek)

R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [22792 2010-08-10] (Saitek)

R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [50056 2010-08-10] (Saitek)

R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501000.012\SRTSP64.SYS [858200 2013-09-26] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501000.012\SRTSPX64.SYS [36952 2013-07-30] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\N360x64\1501000.012\SYMDS64.SYS [493656 2013-07-31] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501000.012\SYMEFA64.SYS [1147480 2013-09-26] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-09-25] (Symantec Corporation)

R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-08-05] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501000.012\Ironx64.SYS [264280 2013-07-30] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501000.012\SYMNETS.SYS [590936 2013-09-25] (Symantec Corporation)

S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)

R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [454168 2013-10-23] (Check Point Software Technologies LTD)

S3 WinRing0_1_2_0; No ImagePath

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S3 dfg; \??\C:\Windows\system32\drivers\dfg.sys [x]

U3 DfSdkS;

S3 WacomPen; \SystemRoot\system32\DRIVERS\wacompen.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-11-24 07:46 - 2013-11-24 07:47 - 00032027 _____ C:\Users\gurpsgm\Desktop\FRST.txt

2013-11-24 07:40 - 2013-11-24 07:40 - 00000000 ___DC C:\FRST

2013-11-24 07:34 - 2013-11-24 07:34 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\FileTypeAssistant

2013-11-24 07:29 - 2013-11-24 07:29 - 01958396 _____ (Farbar) C:\Users\gurpsgm\Desktop\FRST64.exe

2013-11-24 07:23 - 2013-11-24 07:23 - 01091882 _____ C:\Users\gurpsgm\Desktop\AdwCleaner.exe

2013-11-23 07:02 - 2013-11-23 07:39 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\NPE

2013-11-23 06:36 - 2013-11-24 07:33 - 00000280 _____ C:\Windows\setupact.log

2013-11-23 06:36 - 2013-11-24 07:07 - 00014860 _____ C:\Windows\PFRO.log

2013-11-23 06:36 - 2013-11-23 06:36 - 00000000 _____ C:\Windows\setuperr.log

2013-11-22 17:06 - 2013-11-22 17:06 - 00000927 _____ C:\Users\gurpsgm\Desktop\AIMP3.lnk

2013-11-22 17:01 - 2013-11-22 17:01 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\mIRC

2013-11-22 17:00 - 2013-11-22 17:01 - 00000000 ____D C:\Program Files (x86)\mIRC

2013-11-22 16:52 - 2013-11-22 16:52 - 00002100 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk

2013-11-22 16:49 - 2013-11-22 16:49 - 00000000 ___DC C:\Program Files\Wireshark

2013-11-22 11:46 - 2013-11-22 11:46 - 00000000 _____ C:\Users\gurpsgm\AppData\Local\2046_991.log

2013-11-22 06:52 - 2013-11-22 06:52 - 00000000 ____D C:\Program Files (x86)\ERUNT

2013-11-21 14:00 - 2013-11-21 15:54 - 00000000 ___DC C:\ComboFix

2013-11-21 14:00 - 2011-06-26 01:45 - 00256000 _____ C:\Windows\PEV.exe

2013-11-21 14:00 - 2010-11-07 12:20 - 00208896 _____ C:\Windows\MBR.exe

2013-11-21 14:00 - 2009-04-19 23:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-11-21 14:00 - 2000-08-30 19:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-11-21 14:00 - 2000-08-30 19:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-11-21 14:00 - 2000-08-30 19:00 - 00098816 _____ C:\Windows\sed.exe

2013-11-21 14:00 - 2000-08-30 19:00 - 00080412 _____ C:\Windows\grep.exe

2013-11-21 14:00 - 2000-08-30 19:00 - 00068096 _____ C:\Windows\zip.exe

2013-11-21 13:59 - 2013-11-21 14:00 - 00000000 ___DC C:\Qoobox

2013-11-20 09:52 - 2013-11-22 18:00 - 00000468 _____ C:\Windows\Tasks\SparkTrust Registration3.job

2013-11-20 09:52 - 2013-11-20 09:52 - 00003136 _____ C:\Windows\System32\Tasks\SparkTrust Registration3

2013-11-20 09:51 - 2013-11-24 07:34 - 00000478 _____ C:\Windows\Tasks\SparkTrust Update Version3 Startup Task.job

2013-11-20 09:51 - 2013-11-23 02:46 - 00000426 _____ C:\Windows\Tasks\SparkTrust Update Version3.job

2013-11-20 09:51 - 2013-11-21 05:56 - 00003244 _____ C:\Windows\System32\Tasks\SparkTrust Update Version3

2013-11-20 09:51 - 2013-11-20 17:04 - 00000526 _____ C:\Windows\Tasks\SparkTrust PC Cleaner Plus.job

2013-11-20 09:51 - 2013-11-20 09:51 - 00003448 _____ C:\Windows\System32\Tasks\SparkTrust PC Cleaner Plus

2013-11-20 09:51 - 2013-11-20 09:51 - 00002908 _____ C:\Windows\System32\Tasks\SparkTrust Update Version3 Startup Task

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\SparkTrust

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SparkTrust

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\ProgramData\SparkTrust

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\Program Files (x86)\SparkTrust

2013-11-20 08:45 - 2013-11-20 08:45 - 00000000 ___DC C:\sh4ldr

2013-11-20 08:45 - 2013-11-20 08:45 - 00000000 ___DC C:\Program Files\Enigma Software Group

2013-11-20 08:45 - 2013-11-20 08:45 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2013-11-20 08:45 - 2012-06-22 11:01 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys

2013-11-20 08:43 - 2013-11-20 08:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP

2013-11-20 08:37 - 2013-11-20 17:15 - 00000000 ____D C:\Program Files (x86)\Spigot Removal Tool

2013-11-20 08:37 - 2013-11-05 14:38 - 01122304 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll

2013-11-20 08:37 - 2013-11-05 14:38 - 00274432 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll

2013-11-20 08:37 - 2012-12-10 11:04 - 00356352 _____ (eSellerate Inc.) C:\Windows\eSellerateEngine.dll

2013-11-20 08:37 - 2012-12-10 11:04 - 00081920 _____ (eSellerate Inc.) C:\Windows\eSellerateControl350.dll

2013-11-20 08:23 - 2013-11-20 08:23 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++

2013-11-20 07:52 - 2013-11-20 07:52 - 00000000 ____D C:\Windows\ERUNT

2013-11-20 07:39 - 2013-11-24 07:31 - 00000000 ___DC C:\AdwCleaner

2013-11-19 11:11 - 2013-11-19 11:16 - 00000000 ____D C:\Users\gurpsgm\Documents\My IMS Projects

2013-11-19 11:11 - 2013-11-19 11:11 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Virtual Mechanics

2013-11-19 11:11 - 2013-11-19 11:11 - 00000000 ____D C:\ProgramData\Virtual Mechanics

2013-11-19 11:10 - 2013-11-19 11:10 - 00000000 ____D C:\Program Files (x86)\Virtual Mechanics

2013-11-19 07:43 - 2013-11-19 07:43 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Malwarebytes

2013-11-19 07:43 - 2013-11-19 07:43 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-19 07:43 - 2013-11-19 07:43 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-19 07:43 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-11-19 06:52 - 2013-11-19 07:31 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\LogMeIn Rescue Applet

2013-11-19 06:38 - 2013-11-19 07:39 - 00003874 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_RS

2013-11-19 06:38 - 2013-11-19 07:39 - 00003684 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_UP

2013-11-19 06:38 - 2013-11-19 06:38 - 00003878 _____ C:\Windows\System32\Tasks\PCHB_WaitAndStartAfter

2013-11-19 06:38 - 2013-11-19 06:38 - 00003684 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_RN

2013-11-19 06:38 - 2013-11-19 06:38 - 00003684 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_RM

2013-11-18 23:19 - 2013-11-21 10:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-18 13:22 - 2013-11-18 13:22 - 00001140 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Calendar Wizard 4.lnk

2013-11-13 10:02 - 2013-11-13 10:02 - 00000000 ____D C:\Users\gurpsgm\Documents\Updater

2013-11-13 07:24 - 2013-11-16 13:10 - 00000000 ___DC C:\Vocation

2013-11-13 07:23 - 2013-11-13 07:23 - 00000000 ___DC C:\Transits

2013-11-13 07:23 - 2013-11-13 07:23 - 00000000 ___DC C:\TNA_db

2013-11-13 07:22 - 2013-11-13 07:22 - 00000000 ___DC C:\SE_Triple_Aspects

2013-11-13 07:22 - 2013-11-13 07:22 - 00000000 ___DC C:\SE_Quadruple_Aspects

2013-11-13 07:22 - 2013-11-13 07:22 - 00000000 ___DC C:\SE_Aspectarian

2013-11-13 07:22 - 2006-06-30 13:20 - 00434176 _____ C:\Windows\SysWOW64\swedll32.dll

2013-11-13 07:21 - 2013-11-13 07:22 - 00000000 ___DC C:\AstroWin

2013-11-13 07:21 - 1998-10-15 13:04 - 01355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvbvm50.dll

2013-11-13 07:19 - 2013-11-13 07:21 - 00000000 ___DC C:\Astro123

2013-11-13 07:19 - 2004-08-04 01:30 - 00260880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msflxgrd.ocx

2013-11-12 13:30 - 2013-11-12 13:30 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\WhiteListing

2013-11-12 12:37 - 2013-11-12 12:37 - 00000000 ____D C:\Program Files (x86)\Kyodai Mahjongg 2006

2013-11-12 12:36 - 2013-09-17 12:25 - 01761584 ____N C:\Windows\system32\dmwu.exe_old

2013-11-12 12:36 - 2013-09-17 12:20 - 00033792 ____N (IncrediMail, Ltd.) C:\Windows\system32\ImHttpComm.dll_old

2013-11-12 09:46 - 2013-11-20 05:37 - 00000000 ____D C:\ProgramData\ProductData

2013-11-12 09:46 - 2013-11-12 09:46 - 00002854 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_gurpsgm

2013-11-12 09:46 - 2013-11-12 09:46 - 00001255 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk

2013-11-12 08:11 - 2013-11-12 08:12 - 00000000 ____D C:\Users\gurpsgm\Metacreator

2013-11-12 07:58 - 2013-11-12 07:58 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Metacreator

2013-11-10 22:58 - 2013-11-20 10:00 - 00000000 ____D C:\ProgramData\Alchemy Mindworks

2013-11-10 22:58 - 2013-11-18 13:22 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alchemy Mindworks

2013-11-10 22:58 - 2013-11-18 13:22 - 00000000 ____D C:\Program Files (x86)\Alchemy Mindworks

2013-11-10 22:58 - 2013-11-10 22:58 - 00001160 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Pagan Daybook 4.lnk

2013-11-07 19:51 - 2013-11-07 19:52 - 00000000 ____D C:\Program Files (x86)\Metacreator Demo

2013-11-07 14:23 - 2013-11-07 14:23 - 00001502 _____ C:\Users\gurpsgm\Desktop\Metacreator.lnk

2013-11-07 09:08 - 2013-11-07 11:45 - 00001798 _____ C:\Users\gurpsgm\Desktop\Chrome.lnk

2013-11-07 09:08 - 2013-11-07 09:08 - 00001401 _____ C:\Users\gurpsgm\Desktop\Opera.lnk

2013-11-07 09:07 - 2013-11-07 09:07 - 00001442 _____ C:\Users\gurpsgm\Desktop\CD Burner XP.lnk

2013-11-07 09:02 - 2013-11-07 09:02 - 00001423 _____ C:\Users\gurpsgm\Desktop\HeroLab.lnk

2013-11-07 08:58 - 2013-11-07 08:58 - 00001537 _____ C:\Users\gurpsgm\Desktop\Kindle.lnk

2013-11-07 08:55 - 2013-11-07 08:55 - 00001504 _____ C:\Users\gurpsgm\Desktop\Windows Media Player.lnk

2013-11-07 07:09 - 2013-11-07 07:09 - 00001046 _____ C:\Users\Public\Desktop\Realm Works.lnk

2013-11-06 07:22 - 2013-11-06 07:22 - 00001247 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Campaign Editor.lnk

2013-11-06 07:22 - 2013-11-06 07:22 - 00001230 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk

2013-11-05 13:35 - 2013-11-05 13:35 - 00000000 __SHD C:\ProgramData\DSS

2013-11-05 08:36 - 2013-11-05 08:36 - 00000000 ____D C:\ProgramData\LightScribe

2013-11-04 13:47 - 2013-11-04 13:47 - 00001271 _____ C:\Users\gurpsgm\Desktop\Dark Age of Camelot.lnk

2013-11-04 13:47 - 2013-11-04 13:47 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts

2013-11-02 16:28 - 2013-11-02 16:28 - 00000000 ___DC C:\cc7c692bc60a8fe4f9ebe7f97f

2013-11-02 15:52 - 2013-11-02 16:24 - 00000000 ____D C:\Program Files (x86)\The Witcher 2

2013-11-01 14:18 - 2013-11-03 04:53 - 00000000 ____D C:\Users\gurpsgm\Documents\Print Workshop

2013-11-01 14:17 - 2013-11-01 14:17 - 00000063 _____ C:\Windows\PrintWorkShop.ini

2013-11-01 14:17 - 2013-11-01 14:17 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Print Workshop

2013-11-01 14:15 - 2013-11-08 21:32 - 00000000 ____D C:\Program Files (x86)\Print Workshop

2013-11-01 14:08 - 2013-11-01 14:08 - 00000000 ____D C:\Users\gurpsgm\Documents\Auexsoft

2013-11-01 14:08 - 2013-11-01 14:08 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Auexsoft

2013-11-01 13:58 - 2013-11-01 13:58 - 00000000 ____D C:\Program Files (x86)\AuexSoft

2013-11-01 13:53 - 2013-11-01 13:53 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MS Reader Converter

2013-11-01 13:53 - 2013-11-01 13:53 - 00000000 ____D C:\Program Files (x86)\PDFsvg

2013-11-01 13:37 - 2013-11-12 12:38 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\NativeMessaging

2013-11-01 13:36 - 2013-11-01 13:36 - 00000000 ____D C:\Program Files (x86)\ABC Amber LIT Converter

2013-10-31 19:57 - 2013-10-31 19:57 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\Kingsoft

2013-10-30 22:51 - 2013-09-20 09:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe

2013-10-30 22:40 - 2013-11-22 16:59 - 00000000 ____D C:\Program Files (x86)\SeaMonkey

2013-10-30 22:33 - 2013-11-23 16:58 - 00000378 _____ C:\Windows\Tasks\WpsUpdateTask_gurpsgm.job

2013-10-30 22:33 - 2013-10-30 22:33 - 00003366 _____ C:\Windows\System32\Tasks\WpsUpdateTask_gurpsgm

2013-10-30 22:32 - 2013-10-30 22:32 - 00000000 ____D C:\ProgramData\Kingsoft

2013-10-30 22:31 - 2013-10-30 22:31 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Kingsoft

2013-10-30 22:31 - 2013-10-30 22:31 - 00000000 ____D C:\Program Files (x86)\Kingsoft

2013-10-30 09:00 - 2013-11-08 16:31 - 00001344 _____ C:\Users\gurpsgm\Desktop\Bruce.lnk

2013-10-30 08:53 - 2013-10-30 08:53 - 115441664 _____ C:\Windows\system32\config\software.iobit

2013-10-30 08:53 - 2013-10-30 08:53 - 05488640 _____ C:\Windows\system32\config\default.iobit

2013-10-30 08:53 - 2013-10-30 08:53 - 00061440 _____ C:\Windows\system32\config\sam.iobit

2013-10-30 08:53 - 2013-10-30 08:53 - 00024576 _____ C:\Windows\system32\config\security.iobit

2013-10-28 12:20 - 2013-10-28 12:20 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2013-10-27 10:13 - 2013-10-27 10:13 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Belkin

2013-10-27 10:13 - 2007-08-14 09:37 - 00226288 _____ (Belkin Corporation) C:\Windows\system32\bgcpsp.dll

2013-10-27 10:13 - 2007-08-14 09:36 - 00035328 _____ (Belkin Corporation) C:\Windows\system32\Drivers\bcgame.sys

2013-10-27 10:12 - 2013-10-27 10:12 - 00000000 ____D C:\Program Files (x86)\Belkin

2013-10-25 10:09 - 2013-10-25 10:09 - 00202920 _____ C:\Windows\Pagan Daybook.scr

==================== One Month Modified Files and Folders =======

2013-11-24 07:47 - 2013-11-24 07:46 - 00032027 _____ C:\Users\gurpsgm\Desktop\FRST.txt

2013-11-24 07:46 - 2011-10-17 05:05 - 02083278 _____ C:\Windows\WindowsUpdate.log

2013-11-24 07:43 - 2009-07-13 23:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-24 07:43 - 2009-07-13 23:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-24 07:40 - 2013-11-24 07:40 - 00000000 ___DC C:\FRST

2013-11-24 07:36 - 2013-09-27 05:57 - 00000000 ____D C:\Program Files (x86)\Steam

2013-11-24 07:35 - 2010-11-05 15:27 - 00000896 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-24 07:34 - 2013-11-24 07:34 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\FileTypeAssistant

2013-11-24 07:34 - 2013-11-20 09:51 - 00000478 _____ C:\Windows\Tasks\SparkTrust Update Version3 Startup Task.job

2013-11-24 07:34 - 2013-09-15 16:00 - 00000406 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job

2013-11-24 07:34 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-24 07:33 - 2013-11-23 06:36 - 00000280 _____ C:\Windows\setupact.log

2013-11-24 07:31 - 2013-11-20 07:39 - 00000000 ___DC C:\AdwCleaner

2013-11-24 07:29 - 2013-11-24 07:29 - 01958396 _____ (Farbar) C:\Users\gurpsgm\Desktop\FRST64.exe

2013-11-24 07:28 - 2011-12-01 15:02 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\uTorrent

2013-11-24 07:23 - 2013-11-24 07:23 - 01091882 _____ C:\Users\gurpsgm\Desktop\AdwCleaner.exe

2013-11-24 07:17 - 2011-08-02 10:46 - 00000916 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2751017530-556950238-3992346484-1000UA.job

2013-11-24 07:09 - 2010-11-05 15:27 - 00000900 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-24 07:07 - 2013-11-23 06:36 - 00014860 _____ C:\Windows\PFRO.log

2013-11-23 16:58 - 2013-10-30 22:33 - 00000378 _____ C:\Windows\Tasks\WpsUpdateTask_gurpsgm.job

2013-11-23 16:53 - 2012-04-02 06:27 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-23 16:33 - 2012-08-14 07:05 - 00000000 ____D C:\Program Files (x86)\File Type Assistant

2013-11-23 13:21 - 2013-04-20 07:21 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2013-11-23 08:58 - 2012-02-04 06:35 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\CrashDumps

2013-11-23 07:39 - 2013-11-23 07:02 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\NPE

2013-11-23 07:38 - 2013-08-04 08:21 - 00000000 ____D C:\Program Files (x86)\Norton 360

2013-11-23 07:37 - 2013-04-05 14:30 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\TeraCopy

2013-11-23 07:02 - 2012-07-18 15:32 - 00000000 ____D C:\ProgramData\Norton

2013-11-23 06:36 - 2013-11-23 06:36 - 00000000 _____ C:\Windows\setuperr.log

2013-11-23 06:36 - 2012-06-05 17:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-23 02:46 - 2013-11-20 09:51 - 00000426 _____ C:\Windows\Tasks\SparkTrust Update Version3.job

2013-11-22 18:06 - 2011-07-05 14:18 - 00000000 ____D C:\ProgramData\Hero Lab

2013-11-22 18:05 - 2013-07-05 15:14 - 00000000 ____D C:\Users\gurpsgm\Documents\Hero Lab

2013-11-22 18:00 - 2013-11-20 09:52 - 00000468 _____ C:\Windows\Tasks\SparkTrust Registration3.job

2013-11-22 17:06 - 2013-11-22 17:06 - 00000927 _____ C:\Users\gurpsgm\Desktop\AIMP3.lnk

2013-11-22 17:05 - 2013-04-07 07:38 - 00000000 ____D C:\Program Files (x86)\AIMP3

2013-11-22 17:04 - 2012-08-26 07:05 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Foxit Software

2013-11-22 17:02 - 2013-04-05 11:13 - 00000000 ____D C:\Program Files (x86)\GPU-Z 0.7.4

2013-11-22 17:01 - 2013-11-22 17:01 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\mIRC

2013-11-22 17:01 - 2013-11-22 17:00 - 00000000 ____D C:\Program Files (x86)\mIRC

2013-11-22 16:59 - 2013-10-30 22:40 - 00000000 ____D C:\Program Files (x86)\SeaMonkey

2013-11-22 16:59 - 2012-12-31 23:12 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Skype

2013-11-22 16:56 - 2012-12-31 23:11 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-11-22 16:56 - 2012-12-31 23:11 - 00000000 ____D C:\ProgramData\Skype

2013-11-22 16:54 - 2013-04-05 10:49 - 00000000 ___DC C:\Program Files\Speccy

2013-11-22 16:52 - 2013-11-22 16:52 - 00002100 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk

2013-11-22 16:52 - 2013-04-07 07:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-11-22 16:49 - 2013-11-22 16:49 - 00000000 ___DC C:\Program Files\Wireshark

2013-11-22 12:20 - 2013-09-25 11:40 - 00000458 ____H C:\Windows\Tasks\Norton Security Scan for gurpsgm.job

2013-11-22 11:52 - 2013-08-25 05:55 - 00000000 ____D C:\ProgramData\firebird

2013-11-22 11:46 - 2013-11-22 11:46 - 00000000 _____ C:\Users\gurpsgm\AppData\Local\2046_991.log

2013-11-22 11:45 - 2012-10-25 05:17 - 00000000 ____D C:\Program Files (x86)\Realm Works

2013-11-22 06:52 - 2013-11-22 06:52 - 00000000 ____D C:\Program Files (x86)\ERUNT

2013-11-22 06:52 - 2013-08-19 21:45 - 00000000 ____D C:\Windows\ERDNT

2013-11-22 06:52 - 2010-10-22 18:30 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-11-21 15:54 - 2013-11-21 14:00 - 00000000 ___DC C:\ComboFix

2013-11-21 14:40 - 2009-07-13 21:34 - 00000215 ____C C:\Windows\system.ini

2013-11-21 14:38 - 2012-05-30 06:10 - 00417570 _____ C:\Windows\system32\Drivers\vsconfig.xml

2013-11-21 14:00 - 2013-11-21 13:59 - 00000000 ___DC C:\Qoobox

2013-11-21 11:07 - 2010-10-30 12:52 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-11-21 10:30 - 2013-11-18 23:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-21 10:30 - 2013-10-21 10:57 - 00000000 ____D C:\Users\gurpsgm\Documents\Readiris

2013-11-21 10:30 - 2013-10-04 07:22 - 00000000 ____D C:\Program Files (x86)\jv16 PowerTools 2014

2013-11-21 10:30 - 2013-09-15 13:32 - 00000000 ____D C:\Program Files (x86)\WinPcap

2013-11-21 10:30 - 2013-08-19 13:02 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\The Lord of the Rings Online

2013-11-21 10:30 - 2013-08-19 12:59 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\Turbine

2013-11-21 10:30 - 2013-08-18 21:16 - 00000000 ____D C:\ProgramData\HappyCloud

2013-11-21 10:30 - 2013-08-17 10:36 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Fantasy Grounds II

2013-11-21 10:30 - 2013-06-22 10:43 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\IDM

2013-11-21 10:30 - 2013-06-11 10:49 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RegZooka

2013-11-21 10:30 - 2013-05-17 22:17 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Raptr

2013-11-21 10:30 - 2013-05-17 22:17 - 00000000 ____D C:\Program Files (x86)\Raptr

2013-11-21 10:30 - 2013-05-17 21:28 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\RIFT

2013-11-21 10:30 - 2013-05-17 21:28 - 00000000 ____D C:\Program Files (x86)\RIFT

2013-11-21 10:30 - 2013-05-08 05:57 - 00000000 ____D C:\Program Files (x86)\Interactive Dungeon

2013-11-21 10:30 - 2013-04-11 10:26 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\Greenshot

2013-11-21 10:30 - 2013-03-25 10:44 - 00000000 ____D C:\Users\gurpsgm\Documents\SimCity

2013-11-21 10:30 - 2013-03-11 06:14 - 00000000 ___DC C:\PyMapper8

2013-11-21 10:30 - 2013-02-20 17:15 - 00000000 ____D C:\Program Files (x86)\Notepad++

2013-11-21 10:30 - 2013-01-31 14:37 - 00000000 ____D C:\Program Files (x86)\AnyTime Organizer Premier

2013-11-21 10:30 - 2012-10-18 06:40 - 00000000 ____D C:\Program Files (x86)\Planescape Torment

2013-11-21 10:30 - 2012-06-06 19:50 - 00000000 ____D C:\Program Files (x86)\Guild Wars 2

2013-11-21 10:30 - 2011-10-25 11:40 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\PMB Files

2013-11-21 10:30 - 2010-11-04 09:27 - 00000000 ____D C:\Program Files (x86)\AIM

2013-11-21 10:30 - 2010-10-30 14:11 - 00000000 ____D C:\Users\gurpsgm\Documents\Amanda

2013-11-21 10:30 - 2010-07-29 13:04 - 00000000 ____D C:\Windows\softwaredistribution.bak

2013-11-21 10:30 - 2010-07-27 23:12 - 00000000 ___DC C:\OEM

2013-11-21 05:56 - 2013-11-20 09:51 - 00003244 _____ C:\Windows\System32\Tasks\SparkTrust Update Version3

2013-11-20 17:15 - 2013-11-20 08:37 - 00000000 ____D C:\Program Files (x86)\Spigot Removal Tool

2013-11-20 17:04 - 2013-11-20 09:51 - 00000526 _____ C:\Windows\Tasks\SparkTrust PC Cleaner Plus.job

2013-11-20 14:28 - 2013-03-30 11:42 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\XYplorer

2013-11-20 14:27 - 2010-10-30 14:51 - 00000000 ____D C:\Users\gurpsgm\Documents\Sandra

2013-11-20 10:00 - 2013-11-10 22:58 - 00000000 ____D C:\ProgramData\Alchemy Mindworks

2013-11-20 10:00 - 2013-06-03 01:44 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Nitro PDF

2013-11-20 09:52 - 2013-11-20 09:52 - 00003136 _____ C:\Windows\System32\Tasks\SparkTrust Registration3

2013-11-20 09:51 - 2013-11-20 09:51 - 00003448 _____ C:\Windows\System32\Tasks\SparkTrust PC Cleaner Plus

2013-11-20 09:51 - 2013-11-20 09:51 - 00002908 _____ C:\Windows\System32\Tasks\SparkTrust Update Version3 Startup Task

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\SparkTrust

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SparkTrust

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\ProgramData\SparkTrust

2013-11-20 09:51 - 2013-11-20 09:51 - 00000000 ____D C:\Program Files (x86)\SparkTrust

2013-11-20 09:44 - 2010-10-30 11:58 - 00000000 ___DC C:\Program Files\CheckPoint

2013-11-20 08:52 - 2010-10-30 12:39 - 00000000 ___RD C:\Users\gurpsgm\Documents\Bruce

2013-11-20 08:45 - 2013-11-20 08:45 - 00000000 ___DC C:\sh4ldr

2013-11-20 08:45 - 2013-11-20 08:45 - 00000000 ___DC C:\Program Files\Enigma Software Group

2013-11-20 08:45 - 2013-11-20 08:45 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2013-11-20 08:45 - 2013-11-20 08:43 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP

2013-11-20 08:23 - 2013-11-20 08:23 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++

2013-11-20 07:55 - 2013-06-11 10:49 - 00000000 ____D C:\Program Files (x86)\RegZooka

2013-11-20 07:52 - 2013-11-20 07:52 - 00000000 ____D C:\Windows\ERUNT

2013-11-20 07:40 - 2013-06-20 11:09 - 00000000 ____D C:\ProgramData\Uniblue

2013-11-20 05:37 - 2013-11-12 09:46 - 00000000 ____D C:\ProgramData\ProductData

2013-11-20 04:17 - 2011-08-02 10:46 - 00000864 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2751017530-556950238-3992346484-1000Core.job

2013-11-19 13:43 - 2013-09-16 07:23 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\Apps\2.0

2013-11-19 11:38 - 2013-02-22 06:02 - 00000000 ____D C:\Users\gurpsgm\Documents\My Barnes & Noble eBooks

2013-11-19 11:38 - 2012-03-29 08:20 - 00000000 ____D C:\Users\gurpsgm\Documents\My Kindle Content

2013-11-19 11:16 - 2013-11-19 11:11 - 00000000 ____D C:\Users\gurpsgm\Documents\My IMS Projects

2013-11-19 11:11 - 2013-11-19 11:11 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Virtual Mechanics

2013-11-19 11:11 - 2013-11-19 11:11 - 00000000 ____D C:\ProgramData\Virtual Mechanics

2013-11-19 11:10 - 2013-11-19 11:10 - 00000000 ____D C:\Program Files (x86)\Virtual Mechanics

2013-11-19 08:37 - 2007-07-11 20:49 - 00000000 ____D C:\Windows\Panther

2013-11-19 07:43 - 2013-11-19 07:43 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Malwarebytes

2013-11-19 07:43 - 2013-11-19 07:43 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-19 07:43 - 2013-11-19 07:43 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-11-19 07:39 - 2013-11-19 06:38 - 00003874 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_RS

2013-11-19 07:39 - 2013-11-19 06:38 - 00003684 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_UP

2013-11-19 07:31 - 2013-11-19 06:52 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\LogMeIn Rescue Applet

2013-11-19 06:38 - 2013-11-19 06:38 - 00003878 _____ C:\Windows\System32\Tasks\PCHB_WaitAndStartAfter

2013-11-19 06:38 - 2013-11-19 06:38 - 00003684 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_RN

2013-11-19 06:38 - 2013-11-19 06:38 - 00003684 _____ C:\Windows\System32\Tasks\PCHB_gurpsgm_PCHealthBoost_RM

2013-11-18 13:22 - 2013-11-18 13:22 - 00001140 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Calendar Wizard 4.lnk

2013-11-18 13:22 - 2013-11-10 22:58 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alchemy Mindworks

2013-11-18 13:22 - 2013-11-10 22:58 - 00000000 ____D C:\Program Files (x86)\Alchemy Mindworks

2013-11-18 11:23 - 2010-10-30 12:58 - 00001157 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-11-18 05:54 - 2012-11-05 06:46 - 00449425 _____ C:\Windows\system32\Drivers\etc\hosts_PTbackup2.bak

2013-11-16 19:45 - 2013-04-26 10:30 - 00000000 ____D C:\Users\gurpsgm\Documents\Taxes

2013-11-16 19:45 - 2013-03-18 17:18 - 00000000 ____D C:\Users\gurpsgm\Documents\My ScreenMonkey Campaign

2013-11-16 19:45 - 2010-10-30 14:50 - 00000000 ____D C:\Users\gurpsgm\Documents\My Wallpaper

2013-11-16 19:45 - 2010-10-30 14:46 - 00000000 ____D C:\Users\gurpsgm\Documents\My Computer

2013-11-16 13:47 - 2013-04-05 11:16 - 00000000 ____D C:\Program Files (x86)\SlimComputer

2013-11-16 13:12 - 2013-04-05 11:14 - 00000000 ____D C:\Program Files (x86)\SlimCleaner

2013-11-16 13:10 - 2013-11-13 07:24 - 00000000 ___DC C:\Vocation

2013-11-16 11:52 - 2012-04-02 06:27 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-11-16 11:52 - 2011-11-07 07:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-11-16 11:52 - 2010-10-30 13:44 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\Adobe

2013-11-16 11:00 - 2012-11-01 07:39 - 00000000 ____D C:\Users\gurpsgm\Documents\Realm Works

2013-11-14 16:03 - 2011-12-16 17:43 - 00000000 ____D C:\Program Files (x86)\Origin

2013-11-14 14:26 - 2009-07-14 00:13 - 00779306 _____ C:\Windows\system32\PerfStringBackup.INI

2013-11-13 20:53 - 2013-07-13 11:54 - 00000000 ____D C:\Windows\system32\MRT

2013-11-13 20:48 - 2010-10-22 18:44 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-11-13 20:38 - 2013-06-25 14:13 - 00000000 ____D C:\Windows\System32\Tasks\Norton Zone

2013-11-13 20:32 - 2013-06-25 14:11 - 00000000 ____D C:\Windows\system32\Drivers\NZx64

2013-11-13 20:30 - 2009-07-13 23:45 - 00891408 _____ C:\Windows\system32\FNTCACHE.DAT

2013-11-13 11:48 - 2010-10-30 14:50 - 00000000 ____D C:\Users\gurpsgm\Documents\My PSP8 Files

2013-11-13 10:06 - 2013-09-07 20:40 - 00349192 _____ C:\Users\gurpsgm\AppData\Local\GDIPFONTCACHEV1.DAT

2013-11-13 10:02 - 2013-11-13 10:02 - 00000000 ____D C:\Users\gurpsgm\Documents\Updater

2013-11-13 07:23 - 2013-11-13 07:23 - 00000000 ___DC C:\Transits

2013-11-13 07:23 - 2013-11-13 07:23 - 00000000 ___DC C:\TNA_db

2013-11-13 07:22 - 2013-11-13 07:22 - 00000000 ___DC C:\SE_Triple_Aspects

2013-11-13 07:22 - 2013-11-13 07:22 - 00000000 ___DC C:\SE_Quadruple_Aspects

2013-11-13 07:22 - 2013-11-13 07:22 - 00000000 ___DC C:\SE_Aspectarian

2013-11-13 07:22 - 2013-11-13 07:21 - 00000000 ___DC C:\AstroWin

2013-11-13 07:21 - 2013-11-13 07:19 - 00000000 ___DC C:\Astro123

2013-11-12 14:03 - 2012-01-18 14:30 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\IObit

2013-11-12 13:30 - 2013-11-12 13:30 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\WhiteListing

2013-11-12 12:38 - 2013-11-01 13:37 - 00000000 ____D C:\Users\gurpsgm\AppData\Local\NativeMessaging

2013-11-12 12:37 - 2013-11-12 12:37 - 00000000 ____D C:\Program Files (x86)\Kyodai Mahjongg 2006

2013-11-12 09:51 - 2011-01-17 21:27 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Winamp

2013-11-12 09:46 - 2013-11-12 09:46 - 00002854 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_gurpsgm

2013-11-12 09:46 - 2013-11-12 09:46 - 00001255 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk

2013-11-12 09:46 - 2012-01-18 14:30 - 00000000 ____D C:\ProgramData\IObit

2013-11-12 09:46 - 2012-01-18 14:30 - 00000000 ____D C:\Program Files (x86)\IObit

2013-11-12 08:12 - 2013-11-12 08:11 - 00000000 ____D C:\Users\gurpsgm\Metacreator

2013-11-12 08:11 - 2010-10-22 18:30 - 00000000 ____D C:\Users\gurpsgm

2013-11-12 08:01 - 2013-04-29 14:17 - 00000000 ____D C:\Program Files (x86)\Metacreator

2013-11-12 07:58 - 2013-11-12 07:58 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Metacreator

2013-11-12 06:20 - 2013-04-05 11:14 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers

2013-11-11 07:53 - 2012-01-14 11:49 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\iolo

2013-11-11 05:44 - 2013-10-04 07:23 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools 2014

2013-11-10 22:58 - 2013-11-10 22:58 - 00001160 _____ C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Pagan Daybook 4.lnk

2013-11-10 09:06 - 2013-09-15 06:10 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Flash Video Capture Data

2013-11-08 21:32 - 2013-11-01 14:15 - 00000000 ____D C:\Program Files (x86)\Print Workshop

2013-11-08 16:31 - 2013-10-30 09:00 - 00001344 _____ C:\Users\gurpsgm\Desktop\Bruce.lnk

2013-11-08 15:20 - 2010-10-30 12:58 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Mozilla

2013-11-08 13:50 - 2010-12-29 12:55 - 00000000 ____D C:\Users\gurpsgm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2013-11-07 19:52 - 2013-11-07 19:51 - 00000000 ____D C:\Program Files (x86)\Metacreator Demo

2013-11-07 19:37 - 2013-07-05 15:14 - 00000000 ____D C:\Program Files (x86)\Hero Lab

2013-11-07 14:23 - 2013-11-07 14:23 - 00001502 _____ C:\Users\gurpsgm\Desktop\Metacreator.lnk

2013-11-07 11:45 - 2013-11-07 09:08 - 00001798 _____ C:\Users\gurpsgm\Desktop\Chrome.lnk