Still Infected

KermieDubstep · February 8, 2014

Hello, i have a windows vista hp pavillion media center m8200n PC and i noticed my PC acting unusal a few weeks ago. after the steps you provided malwarebytes completes with no threats found (norton also), but i'm still getting unusual pop ups and malicous attacks blocked. here are the dds logs

thanks

dustin

attach.txt

dds.txt

Maniac · February 9, 2014

Hello Dustin and :welcome: ! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
Make sure you read all of the instructions and fixes thoroughly before continuing with them.
Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Step 1

Please uninstall the following applications:

Ask Toolbar

Ask Toolbar Updater

AVG SafeGuard toolbar

EasyLife Search 1.74

EasyLife Updater

Optimizer Pro v3.0

QuickShare

saavennshare

SaveShare 1.74

Search Protect

Viewpoint Media Player

WhiteSmoke New Toolbar

Yontoo Layers Runtime 1.10.01

Step 2

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Step 3

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Scan button. Wait until is finished.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner\AdwCleaner[s0].txt as well.

Step 4

Launch Malwarebytes' Anti-Malware
Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
Go to Scanner tab and select Perform Quick Scan, then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

In your next reply, post the following log files:

Junkware Removal Tool log
AdwCleaner log
Malwarebytes' Anti-Malware log

KermieDubstep · February 9, 2014

hello again mate, here are the logs you requested, PC is running much better now.. but i am having trouble removing QuickShare by Linkury INC. it says that window installer service could not be accessed. i try to search for the app and windows search does not find it??? let me know whats up Please and thank you

Kermie

JRT.txt

mbam-log-2014-02-09 (15-17-25).txt

AdwCleanerS0.txt

Maniac · February 9, 2014

Please read my instructions carefully.

Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.

Post the contents of JRT.txt into your next message.

Please post the content of that logfile with your next answer.

Copy&Paste the entire report in your next reply.

KermieDubstep · February 9, 2014

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.1 (02.04.2014:1)

OS: Windows Vista Home Premium x86

Ran by Jamie and Dustin on Sun 02/09/2014 at 15:02:27.14

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

Successfully stopped: [service] viewpoint manager service

Successfully deleted: [service] viewpoint manager service

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\privdogservice

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113}

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\dnu.exe

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\genericasktoolbar.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\yontooieclient.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1BB8B3AE-757D-443F-B3A4-0629E709B0D9}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\igearsettings

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\mywebsearch

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\pc optimizer pro

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbar

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbarbackup

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbarlog

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\compete

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\freecause

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\fun web products

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\funwebproducts

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\mywebsearch

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\toolbar

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\freeze.com

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\funwebproducts

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installiq

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\mywebsearch

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\conduit.engine

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdate

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloaduibrowser

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloaduibrowser.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloadupdcontroller

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloadupdcontroller.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iesmartbar.bandobjectattribute

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iesmartbar.dockingpanel

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iesmartbar.iesmartbar

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iesmartbar.iesmartbarbandobject

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iesmartbar.smartbardisplaystate

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iesmartbar.smartbarmenuform

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\s

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\yontooieclient.api

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\yontooieclient.api.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1BB8B3AE-757D-443F-B3A4-0629E709B0D9}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3036959

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3289847

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\appid\{9b0cb95c-933a-4b8c-b6d4-edcd19a43874}"

Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\typelib\{2996f0e7-292b-4cae-893f-47b8b1c05b56}"

~~~ Files

Successfully deleted: [File] "C:\end"

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\adtrustmedia"

Successfully deleted: [Folder] "C:\ProgramData\premium"

Successfully deleted: [Folder] "C:\ProgramData\softsafe"

Successfully deleted: [Folder] "C:\ProgramData\trymedia"

Successfully deleted: [Folder] "C:\ProgramData\viewpoint"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\AppData\Roaming\24x7 help"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\AppData\Roaming\iwin"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\local\defineext"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\local\filetypeassistant"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\local\searchprotect"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\local\swvupdater"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\locallow\conduit"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\locallow\download and sa"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\locallow\funwebproducts"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\locallow\mywebsearch"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\locallow\smartbar"

Successfully deleted: [Folder] "C:\Users\Jamie and Dustin\appdata\locallow\whitesmoke_new"

Successfully deleted: [Folder] "C:\Program Files\adtrustmedia"

Successfully deleted: [Folder] "C:\Program Files\funwebproducts"

Successfully deleted: [Folder] "C:\Program Files\mywebsearch"

Successfully deleted: [Folder] "C:\Program Files\tencent"

Successfully deleted: [Folder] "C:\Program Files\Common Files\freecause"

Successfully deleted: [Folder] "C:\Program Files\Common Files\software update utility"

Successfully deleted: [Folder] "C:\ProgramData\ask"

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Sun 02/09/2014 at 15:04:17.36

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

KermieDubstep · February 9, 2014

# AdwCleaner v3.018 - Report created 09/02/2014 at 15:11:14

# Updated 28/01/2014 by Xplode

# Operating System : Windows Vista Home Premium Service Pack 2 (32 bits)

# Username : Jamie and Dustin - JAMIEANDDUST-PC

# Running from : C:\Users\Jamie and Dustin\Downloads\AdwCleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Searchprotect

Folder Deleted : C:\ProgramData\saavennshare

Folder Deleted : C:\ProgramData\savvenshhare u

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Download and Sa

Folder Deleted : C:\Program Files\BrowseToSave

Folder Deleted : C:\Program Files\Common Files\AVG Secure Search

Folder Deleted : C:\Windows\system32\Searchprotect

Folder Deleted : C:\Users\Jamie and Dustin\AppData\LocalLow\saavennshare

Folder Deleted : C:\Users\Jamie and Dustin\AppData\Roaming\SendSpace

Folder Deleted : C:\Users\Jamie and Dustin\Documents\ShopToWin

Folder Deleted : C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjagnifjocnddgeknajocbkkhlgibem

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bcjagnifjocnddgeknajocbkkhlgibem

Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll

Key Deleted : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_360582d7

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4730EBE-43A6-443E-9776-36915D323AD3}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF6-072E-44CF-8957-5838F569A31D}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48DD-9B6D-7A13A3E42127}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40FD-8DAE-FF14757F60C7}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

Key Deleted : HKCU\Software\TENCENT

Key Deleted : HKCU\Software\AppDataLow\Software\FocusInteractive

Key Deleted : HKLM\Software\AVG Security Toolbar

Key Deleted : HKLM\Software\FocusInteractive

Key Deleted : HKLM\Software\Fun Web Products

Key Deleted : HKLM\Software\SP Global

Key Deleted : HKLM\Software\SProtector

Key Deleted : HKLM\Software\TENCENT

Key Deleted : HKLM\Software\Viewpoint

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{20E7BC40-33F6-4A81-9D52-B58349326206}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A957F04C-49F4-4375-8C8A-D04B769EFE47}_is1

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16526

-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [9490 octets] - [09/02/2014 15:10:29]

AdwCleaner[s0].txt - [9534 octets] - [09/02/2014 15:11:14]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [9594 octets] ##########

KermieDubstep · February 9, 2014

lwarebytes Anti-Malware (Trial) 1.75.0.1300

www.malwarebytes.org

Database version: v2014.02.09.06

Windows Vista Service Pack 2 x86 NTFS (Safe Mode/Networking)

Internet Explorer 9.0.8112.16421

Jamie and Dustin :: JAMIEANDDUST-PC [administrator]

Protection: Disabled

2/9/2014 3:17:25 PM

mbam-log-2014-02-09 (15-17-25).txt

Scan type: Quick scan

Scan options disabled: P2P

Objects scanned: 228992

Time elapsed: 7 minute(s), 1 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

KermieDubstep · February 10, 2014

here are the logs... still having trouble deleting quick share by linkury inc. and still getting pop ups from jolly wallet, better surf, and updater soft. here is a web page i keep getting along with popups

http://rvzr-a.akamaihd.net/sd/cpops-1.2.0.html?u=http%3A%2F%2Frvzr-a.akamaihd.net%2Fsd%2Fapps%2Ffusionx%2F0.0.4.html%3Faff%3D4300-1009&p=Media%20Player

Maniac · February 10, 2014

I work on them.

Download OTL to your Desktop

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Please tick the Scan All users. Next, click the Quick Scan button. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

KermieDubstep · February 11, 2014

here are the scan logs you requested

OTL logfile created on: 2/10/2014 5:58:09 PM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jamie and Dustin\Downloads

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.87 Gb Total Physical Memory | 1.20 Gb Available Physical Memory | 41.63% Memory free

5.95 Gb Paging File | 4.51 Gb Available in Paging File | 75.85% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 456.88 Gb Total Space | 243.15 Gb Free Space | 53.22% Space Free | Partition Type: NTFS

Drive D: | 8.88 Gb Total Space | 0.98 Gb Free Space | 11.01% Space Free | Partition Type: NTFS

Computer Name: JAMIEANDDUST-PC | User Name: Jamie and Dustin | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/02/10 17:57:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jamie and Dustin\Downloads\OTL.exe

PRC - [2014/02/01 17:42:39 | 000,866,632 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

PRC - [2013/12/05 21:54:06 | 000,223,112 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe

PRC - [2013/10/31 11:35:46 | 000,070,880 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe

PRC - [2013/10/31 11:35:30 | 000,449,760 | ---- | M] (Sony) -- C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe

PRC - [2013/09/06 11:30:16 | 000,273,296 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe

PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

PRC - [2011/08/05 11:29:56 | 000,159,456 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Zune\ZuneLauncher.exe

PRC - [2011/04/16 18:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\18.7.1.3\ccsvchst.exe

PRC - [2011/02/25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE

PRC - [2009/12/03 10:12:12 | 000,976,320 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe

PRC - [2009/04/11 00:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2008/01/19 01:38:38 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe

PRC - [2008/01/15 10:26:18 | 004,874,240 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe

PRC - [2007/04/18 09:01:34 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe

PRC - [2007/02/15 05:59:00 | 000,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe

PRC - [2006/12/19 18:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe

========== Modules (No Company Name) ==========

MOD - [2014/02/06 00:52:52 | 000,073,544 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

MOD - [2014/02/06 00:52:32 | 001,044,808 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

MOD - [2014/02/01 17:42:37 | 013,616,456 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll

MOD - [2014/02/01 17:42:37 | 000,399,688 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\32.0.1700.107\ppgooglenaclpluginchrome.dll

MOD - [2014/02/01 17:42:35 | 004,055,368 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\32.0.1700.107\pdf.dll

MOD - [2014/02/01 17:41:43 | 001,634,632 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll

MOD - [2013/10/31 11:35:46 | 000,070,880 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe

MOD - [2013/09/13 10:02:30 | 000,208,896 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\MExplorer.dll

MOD - [2013/05/20 11:58:08 | 000,620,718 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\sqlite3.dll

MOD - [2012/04/30 10:57:42 | 000,039,936 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\TMonitorAPI.dll

MOD - [2011/07/07 13:54:36 | 000,233,984 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\Report.dll

MOD - [2010/01/11 15:44:54 | 000,053,248 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\VObject.dll

========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe -- (vToolbarUpdater17.1.3)

SRV - [2014/02/06 21:43:38 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013/12/17 20:32:35 | 000,227,904 | ---- | M] (WildTangent) [On_Demand | Stopped] -- C:\Program Files\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService)

SRV - [2013/09/06 11:29:38 | 000,235,216 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe -- (McComponentHostService)

SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2013/02/04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)

SRV - [2011/08/05 11:30:02 | 000,444,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)

SRV - [2011/08/05 11:30:02 | 000,268,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm)

SRV - [2011/08/05 11:29:56 | 006,363,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)

SRV - [2011/04/16 18:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton AntiVirus\Engine\18.7.1.3\ccSvcHst.exe -- (NAV)

SRV - [2011/02/28 17:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)

SRV - [2011/02/25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)

SRV - [2010/10/12 11:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)

SRV - [2008/01/19 01:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2006/12/19 18:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NAV\1008000.029\SYMNDISV.SYS -- (SYMNDISV)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NAV\1008000.029\SYMFW.SYS -- (SYMFW)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11113.sys -- (EraserUtilDrv11113)

DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)

DRV - File not found [Kernel | System | Stopped] -- C:\Windows\system32\drivers\avgtpx86.sys -- (avgtp)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\WG11TND5.sys -- (AR5523)

DRV - [2014/02/05 23:19:39 | 001,612,376 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20140210.001\NAVEX15.SYS -- (NAVEX15)

DRV - [2014/02/05 23:19:39 | 000,108,120 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2014/02/05 23:19:39 | 000,093,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20140210.001\NAVENG.SYS -- (NAVENG)

DRV - [2014/01/18 17:26:02 | 000,394,456 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20140207.001\IDSvix86.sys -- (IDSVix86)

DRV - [2013/12/17 18:32:11 | 001,098,968 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20140121.001\BHDrvx86.sys -- (BHDrvx86)

DRV - [2013/11/20 23:10:09 | 000,376,920 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2011/05/09 16:50:36 | 000,126,584 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2011/04/20 19:37:49 | 000,331,384 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1207010.003\symtdiv.sys -- (SYMTDIv)

DRV - [2011/03/30 21:00:09 | 000,516,216 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\NAV\1207010.003\srtsp.sys -- (SRTSP)

DRV - [2011/03/30 21:00:09 | 000,050,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1207010.003\srtspx.sys -- (SRTSPX)

DRV - [2011/03/14 20:31:23 | 000,744,568 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NAV\1207010.003\symefa.sys -- (SymEFA)

DRV - [2011/01/27 00:47:10 | 000,340,088 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NAV\1207010.003\symds.sys -- (SymDS)

DRV - [2011/01/26 23:07:05 | 000,136,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1207010.003\ironx86.sys -- (SymIRON)

DRV - [2009/07/13 17:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUSB)

DRV - [2008/06/10 12:04:28 | 000,033,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\point32k.sys -- (Point32)

DRV - [2008/05/22 13:49:00 | 007,465,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)

DRV - [2008/05/08 04:05:18 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)

DRV - [2008/05/08 04:03:18 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DP.sys -- (HSF_DP)

DRV - [2008/02/20 02:47:44 | 000,765,440 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)

DRV - [2007/10/26 17:51:24 | 000,110,624 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)

DRV - [2007/10/18 06:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)

DRV - [2007/06/11 03:49:22 | 000,968,064 | ---- | M] (Hauppauge Computer Works) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HCW85BDA.sys -- (HCW85BDA)

DRV - [2007/05/03 12:29:10 | 001,065,384 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmfdx32.sys -- (NVENETFD)

DRV - [2007/04/03 12:59:42 | 000,099,080 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s616unic.sys -- (s616unic)

DRV - [2007/04/03 12:59:42 | 000,098,568 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s616obex.sys -- (s616obex)

DRV - [2007/04/03 12:59:40 | 000,100,360 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s616mgmt.sys -- (s616mgmt)

DRV - [2007/04/03 12:59:38 | 000,108,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s616mdm.sys -- (s616mdm)

DRV - [2007/04/03 12:59:36 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s616mdfl.sys -- (s616mdfl)

DRV - [2007/04/03 12:59:30 | 000,083,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s616bus.sys -- (s616bus)

DRV - [2007/04/03 11:59:42 | 000,023,176 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s616nd5.sys -- (s616nd5)

DRV - [2005/12/12 11:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A}: "URL" = http://us.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll (Oberon-Media )

FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: File not found

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll ()

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\sony.com/MediaGoDetector: C:\Program Files\Sony\Media Go\npMediaGoDetector.dll (Sony Network Entertainment International LLC)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFF [2013/10/09 12:11:15 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010/11/30 03:02:34 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\12x3q@3244516.com: C:\Program Files\Better-Surf\ff

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@bettersurfplus.com: C:\Program Files\BetterSurf\BetterSurfPlus\ff

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta413.net: C:\Program Files\VideoPlayerV3\VideoPlayerV3beta413\ff

[2010/11/18 00:47:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jamie and Dustin\AppData\Roaming\Mozilla\Extensions

[2010/11/18 00:47:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jamie and Dustin\AppData\Roaming\Mozilla\Extensions\songbird@songbirdnest.com

File not found (No name found) -- C:\PROGRAM FILES\BETTERSURF\BETTERSURFPLUS\FF

File not found (No name found) -- C:\PROGRAM FILES\MEDIAPLAYERV1\MEDIAPLAYERV1ALPHA777\FF

File not found (No name found) -- C:\PROGRAM FILES\VIDEOPLAYERV3\VIDEOPLAYERV3BETA413\FF

File not found (No name found) -- C:\PROGRAM FILES\WEBEXPENHANCEDV1\WEBEXPENHANCEDV1ALPHA409\FF

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - Extension: Google Drive = C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: YouTube = C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: Google Search = C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: Media Player = C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihjnijfgbbhnacijdhbfgknanhmfmif\1.1_0\

CHR - Extension: Google Wallet = C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\

CHR - Extension: Gmail = C:\Users\Jamie and Dustin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2006/09/18 15:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: ::1 localhost

O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)

O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.7.1.3\ips\ipsbho.dll (Symantec Corporation)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)

O2 - BHO: (Video Player) - {d00f73eb-3b83-4977-ae6f-f0c698e67321} - C:\Program Files\VideoPlayerV3\VideoPlayerV3beta413\ie\VideoPlayerV3beta413.dll File not found

O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)

O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

O3 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

O3 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.

O3 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [ComodoFSChrome] "C:\Program Files\AdTrustMedia\PrivDog\FinalizeSetup.exe" /c File not found

O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)

O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)

O4 - HKLM..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler File not found

O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)

O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [sunJavaUpdateReg] C:\Windows\System32\jureg.exe (Sun Microsystems, Inc.)

O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

O4 - HKLM..\Run: [Zune Launcher] c:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation)

O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000..\Run: [sony PC Companion] C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe (Sony)

O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)

O4 - HKU\.DEFAULT..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" File not found

O4 - HKU\S-1-5-18..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" File not found

O4 - Startup: C:\Users\Jamie and Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Epson all-in-one Registration.lnk = File not found

O7 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1

O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O13 - gopher Prefix: missing

O15 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..Trusted Domains: localhost ([]http in Local intranet)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.51.2)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.51.2)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1EC309B9-FD60-4618-AA2B-5827AA9AF525}: DhcpNameServer = 192.168.0.1

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Users\Jamie and Dustin\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg

O24 - Desktop BackupWallPaper: C:\Users\Jamie and Dustin\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2007/08/28 22:31:47 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O33 - MountPoints2\{35705e2d-f2de-11df-85bd-001bb9ba017a}\Shell\AutoRun\command - "" = J:\setup.exe

O33 - MountPoints2\{79f0ea67-b31a-11e0-b92d-001bb9ba017a}\Shell - "" = Autorun

O33 - MountPoints2\{79f0ea67-b31a-11e0-b92d-001bb9ba017a}\Shell\downloadsb\command - "" = C:\Windows\explorer.exe -- [2009/04/11 00:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)

O33 - MountPoints2\{81ca8406-f2e0-11dc-9774-00146ce74815}\Shell\AutoRun\command - "" = J:\wd_windows_tools\setup.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2014/02/10 16:26:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

[2014/02/10 16:25:08 | 000,000,000 | ---D | C] -- C:\Program Files\iPod

[2014/02/10 16:25:07 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes

[2014/02/10 16:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

[2014/02/09 17:07:55 | 000,075,480 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys

[2014/02/09 15:47:23 | 000,000,000 | ---D | C] -- C:\Users\Jamie and Dustin\AppData\Local\FileTypeAssistant

[2014/02/09 15:10:15 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2014/02/09 15:02:24 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2014/02/07 14:12:59 | 000,000,000 | ---D | C] -- C:\ProgramData\COMODO

[2014/02/07 14:12:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo

[2014/02/07 14:12:14 | 000,000,000 | ---D | C] -- C:\Users\Jamie and Dustin\AppData\Local\Comodo

[2014/02/07 14:12:11 | 000,000,000 | ---D | C] -- C:\first_launch

[2014/02/07 14:12:00 | 000,000,000 | ---D | C] -- C:\Program Files\Comodo

[2014/02/07 12:32:19 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group

[2014/02/07 12:31:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard

[2014/02/07 10:45:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

[2014/02/07 09:58:33 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices

[2014/02/06 20:48:49 | 000,000,000 | ---D | C] -- C:\found.001

[2014/02/06 03:16:25 | 000,107,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\48230029.sys

[2014/02/05 23:51:01 | 000,000,000 | ---D | C] -- C:\982bdfa0041fe5d868

[2014/02/05 22:32:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)

[2014/02/05 22:24:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2014/02/05 22:24:29 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2014/02/05 22:24:29 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2014/02/05 22:17:21 | 000,000,000 | ---D | C] -- C:\Users\Jamie and Dustin\Desktop\mbar

[2014/02/05 07:10:00 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsSearch

[2014/02/04 05:48:24 | 000,000,000 | ---D | C] -- C:\Users\Jamie and Dustin\AppData\Roaming\Malwarebytes

[2014/02/04 05:47:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2014/02/04 04:29:10 | 000,000,000 | ---D | C] -- C:\Users\Jamie and Dustin\AppData\Local\Deployment

[2014/02/04 04:29:10 | 000,000,000 | ---D | C] -- C:\Users\Jamie and Dustin\AppData\Local\Apps

[2014/02/03 19:45:05 | 000,000,000 | ---D | C] -- C:\Windows\System32\eu-ES

[2014/02/03 19:45:05 | 000,000,000 | ---D | C] -- C:\Windows\System32\ca-ES

[2014/02/03 19:45:04 | 000,000,000 | ---D | C] -- C:\Windows\System32\vi-VN

[2014/02/03 19:24:52 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders

[2014/01/25 14:23:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET

[2014/01/24 03:03:13 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell

[2014/01/22 06:19:39 | 000,098,304 | ---- | C] (Realtek Semiconductor) -- C:\Windows\RTKAUDIOSERVICE.EXE

[2014/01/11 22:58:55 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT

[2009/07/31 19:24:57 | 000,207,984 | ---- | C] (Big Fish Games) -- C:\Users\Jamie and Dustin\bigfishgames_p48582747_s1_l1.exe

[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/02/10 17:59:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/02/10 17:43:15 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/02/10 17:41:48 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/02/10 17:41:45 | 000,000,350 | ---- | M] () -- C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job

[2014/02/10 17:19:55 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2014/02/10 17:19:55 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2014/02/10 17:19:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/02/10 16:26:27 | 000,001,666 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/02/10 15:59:53 | 302,325,668 | ---- | M] () -- C:\Windows\MEMORY.DMP

[2014/02/09 17:07:55 | 000,075,480 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys

[2014/02/09 16:49:26 | 000,002,281 | ---- | M] () -- C:\Users\Jamie and Dustin\Desktop\Safari.lnk

[2014/02/09 14:00:04 | 000,604,264 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2014/02/09 14:00:04 | 000,103,964 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2014/02/07 16:13:07 | 000,003,054 | ---- | M] () -- C:\Users\Jamie and Dustin\AppData\Roaming\wklnhst.dat

[2014/02/07 14:22:11 | 000,001,997 | ---- | M] () -- C:\Users\Jamie and Dustin\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2014/02/07 10:45:01 | 000,001,973 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014/02/07 10:04:51 | 000,000,945 | ---- | M] () -- C:\Users\Jamie and Dustin\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2014/02/07 10:01:09 | 000,335,640 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[2014/02/07 09:56:47 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf

[2014/02/07 09:56:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf

[2014/02/06 23:18:47 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat

[2014/02/06 23:18:47 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat

[2014/02/06 23:18:33 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf

[2014/02/06 03:17:30 | 000,107,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\48230029.sys

[2014/02/05 22:24:58 | 000,001,356 | ---- | M] () -- C:\Users\Jamie and Dustin\AppData\Local\d3d9caps.dat

[2014/02/05 22:24:30 | 000,000,932 | ---- | M] () -- C:\Users\Jamie and Dustin\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk

[2014/02/05 22:24:30 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2014/02/05 11:27:06 | 000,002,480 | ---- | M] () -- C:\{BC2E42B3-1444-4935-BFB0-3FCF1ED33BF6}

[2014/02/05 11:22:53 | 000,002,456 | ---- | M] () -- C:\{A11A684C-BEAC-402A-BBDD-6FAFEE928D46}

[2014/02/05 10:33:48 | 000,002,320 | ---- | M] () -- C:\{C4DEED46-1806-402F-98B5-447955F73FA9}

[2014/02/05 09:05:45 | 000,002,296 | ---- | M] () -- C:\{2EA9AF9A-7560-473E-9F82-07C460E80980}

[2014/02/04 04:46:34 | 000,000,656 | ---- | M] () -- C:\Users\Jamie and Dustin\Desktop\Install Browser Update.lnk

[2014/02/02 19:24:04 | 000,000,580 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Jamie and Dustin.job

[2014/01/30 07:22:28 | 000,000,284 | ---- | M] () -- C:\extensions.ini

[2014/01/30 07:22:12 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol

[2014/01/22 06:13:35 | 000,101,888 | ---- | M] (Infineon Technologies AG) -- C:\Windows\System32\ifxcardm.dll

[2014/01/22 06:13:32 | 000,082,432 | ---- | M] (Gemalto, Inc.) -- C:\Windows\System32\axaltocm.dll

[2014/01/14 22:54:23 | 000,001,841 | ---- | M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk

[2014/01/12 22:59:55 | 000,002,928 | ---- | M] () -- C:\{5399AA24-E903-44D7-94C0-48A6A5221858}

[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/02/10 16:26:26 | 000,001,666 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/02/10 15:59:53 | 302,325,668 | ---- | C] () -- C:\Windows\MEMORY.DMP

[2014/02/07 10:45:01 | 000,001,997 | ---- | C] () -- C:\Users\Jamie and Dustin\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2014/02/07 10:45:01 | 000,001,973 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014/02/07 10:04:50 | 000,000,951 | ---- | C] () -- C:\Users\Jamie and Dustin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

[2014/02/07 09:56:47 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf

[2014/02/07 09:56:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf

[2014/02/06 23:18:33 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf

[2014/02/06 23:06:08 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

[2014/02/05 23:44:54 | 000,218,228 | ---- | C] () -- C:\Windows\System32\WFP.TMF

[2014/02/05 22:24:30 | 000,000,932 | ---- | C] () -- C:\Users\Jamie and Dustin\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk

[2014/02/05 22:24:30 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2014/02/05 11:27:02 | 000,002,480 | ---- | C] () -- C:\{BC2E42B3-1444-4935-BFB0-3FCF1ED33BF6}

[2014/02/05 11:22:48 | 000,002,456 | ---- | C] () -- C:\{A11A684C-BEAC-402A-BBDD-6FAFEE928D46}

[2014/02/05 10:33:45 | 000,002,320 | ---- | C] () -- C:\{C4DEED46-1806-402F-98B5-447955F73FA9}

[2014/02/05 09:05:35 | 000,002,296 | ---- | C] () -- C:\{2EA9AF9A-7560-473E-9F82-07C460E80980}

[2014/02/04 04:46:34 | 000,000,656 | ---- | C] () -- C:\Users\Jamie and Dustin\Desktop\Install Browser Update.lnk

[2014/01/30 07:22:08 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2014/01/24 03:00:38 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs

[2014/01/24 03:00:38 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml

[2014/01/24 03:00:38 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl

[2014/01/23 20:46:51 | 000,130,008 | ---- | C] () -- C:\Windows\System32\systemsf.ebd

[2014/01/23 20:46:50 | 000,009,239 | ---- | C] () -- C:\Windows\System32\spcinstrumentation.man

[2014/01/23 20:46:39 | 000,442,788 | ---- | C] () -- C:\Windows\System32\dot3.tmf

[2014/01/23 20:46:35 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll

[2014/01/23 20:46:35 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin

[2014/01/23 20:46:31 | 000,392,170 | ---- | C] () -- C:\Windows\System32\onex.tmf

[2014/01/23 20:46:25 | 000,344,698 | ---- | C] () -- C:\Windows\System32\eaphost.tmf

[2014/01/23 20:46:08 | 000,092,918 | ---- | C] () -- C:\Windows\System32\slmgr.vbs

[2014/01/23 20:45:58 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin

[2014/01/23 20:45:52 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex

[2014/01/23 20:45:16 | 000,009,212 | ---- | C] () -- C:\Windows\System32\RacUR.xml

[2014/01/23 20:45:11 | 000,000,153 | ---- | C] () -- C:\Windows\System32\RacUREx.xml

[2014/01/12 22:59:54 | 000,002,928 | ---- | C] () -- C:\{5399AA24-E903-44D7-94C0-48A6A5221858}

[2012/12/26 11:45:05 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat

[2010/10/05 16:15:38 | 000,001,940 | ---- | C] () -- C:\Users\Jamie and Dustin\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini

[2009/09/09 16:38:50 | 000,001,356 | ---- | C] () -- C:\Users\Jamie and Dustin\AppData\Local\d3d9caps.dat

[2009/06/23 20:53:10 | 000,001,859 | ---- | C] () -- C:\Users\Jamie and Dustin\The Sims™ 3.lnk

[2008/08/29 19:33:55 | 000,003,054 | ---- | C] () -- C:\Users\Jamie and Dustin\AppData\Roaming\wklnhst.dat

[2007/12/28 09:52:27 | 000,036,864 | ---- | C] () -- C:\Users\Jamie and Dustin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2007/12/28 09:36:12 | 000,839,980 | ---- | C] () -- C:\Users\Jamie and Dustin\AppData\Local\rx_image.Cache

========== ZeroAccess Check ==========

[2006/11/02 06:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 11:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 00:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 00:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

========== LOP Check ==========

[2008/12/18 18:02:50 | 000,000,000 | -HSD | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\.#

[2009/04/10 19:51:12 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Alawar

[2008/08/14 22:18:20 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Amaranth Games

[2009/02/11 19:53:39 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Ashtons. Family Resort

[2008/10/12 20:30:17 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\BeachPartyCraze

[2008/03/27 16:24:11 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Bloom

[2009/04/02 01:00:43 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Boolat Games

[2009/09/16 15:35:45 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Camel101

[2011/03/08 06:16:31 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Catalina Marketing Corp

[2009/06/05 13:19:51 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\CupcakeCafe

[2012/01/08 01:43:13 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Deckadance19

[2009/11/16 22:27:33 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\EleFun Games

[2009/07/05 20:40:23 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Enchanted Katya

[2014/02/04 04:04:31 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Epson

[2009/01/24 23:56:45 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Fabulous Finds

[2008/12/10 23:19:28 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Farm Mania

[2009/07/29 23:48:57 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Fever Frenzy

[2010/05/14 17:21:00 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\freshgames

[2008/10/04 19:03:26 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\funkitron

[2008/08/13 19:05:12 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Gaijin Ent

[2008/12/23 03:50:41 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\GameInvest

[2008/11/16 00:36:13 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Gamelab

[2008/08/18 14:44:37 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Go-Go Gourmet Chef of the Year

[2009/06/05 12:00:57 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\GOL_byHasbro

[2009/08/18 11:51:06 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\GraveyardShift

[2007/12/27 20:33:06 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Home Sweet Home

[2008/12/18 18:20:53 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Home Sweet Home Christmas

[2010/06/07 23:27:51 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Hotdog Hotshot

[2009/06/18 11:44:42 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\HuruBeachParty

[2012/01/08 09:57:24 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Image-Line

[2009/10/24 13:40:52 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\iWin_generic

[2011/02/03 03:57:25 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Leadertech

[2008/06/21 20:21:12 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Ludia

[2010/02/09 18:46:20 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Mean Hamster Software

[2009/08/18 16:09:29 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\MegaplexMadnessSummerBlockbuster

[2009/07/30 14:53:56 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Meridian93

[2009/09/16 15:06:05 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Merscom

[2010/11/26 04:47:56 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\MixVibes

[2008/09/14 02:24:28 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Oberon Games

[2013/06/19 23:19:22 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Oberon Media

[2009/05/14 20:16:40 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\PetShowCraze

[2010/11/18 00:51:10 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Philips

[2009/08/19 18:06:46 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Pi Eye Games

[2010/10/17 13:58:13 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\PlayFirst

[2009/10/22 23:56:24 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Playrix Entertainment

[2011/07/14 18:49:14 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Pogo Games

[2008/09/14 02:04:57 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\QQ Games Plugin

[2012/01/12 21:53:48 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Sammsoft

[2008/07/17 19:04:25 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Sandlot Games

[2009/04/07 16:39:01 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Shape games

[2010/04/07 17:23:50 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\ShinyTales

[2013/06/19 23:29:39 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Snapfish

[2012/01/11 23:40:40 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\SongManager

[2013/08/28 18:30:07 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Sony

[2008/08/03 23:27:11 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\StoneLoopsWT

[2010/06/14 13:50:40 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\SulusGames

[2012/01/10 17:30:40 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\SynthMaker

[2008/04/03 12:35:42 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Teleca

[2008/08/29 19:33:57 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Template

[2013/10/06 21:00:22 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Tific

[2008/11/27 13:40:22 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Valusoft

[2008/08/14 01:30:55 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\ViquaSoft

[2009/07/29 23:41:40 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Wildgames JanesZOO

[2008/12/30 20:01:22 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Wildgames_DressUpRush

[2008/09/04 03:55:29 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\Wildgames_JanesRealty

[2012/08/02 19:26:34 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\WildTangent

[2008/04/03 20:27:29 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\WinBatch

[2009/08/17 12:01:14 | 000,000,000 | ---D | M] -- C:\Users\Jamie and Dustin\AppData\Roaming\YoudaGames

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:EB5BDBB0

@Alternate Data Stream - 95 bytes -> C:\ProgramData\TEMP:D1D597D0

@Alternate Data Stream - 94 bytes -> C:\ProgramData\TEMP:6C13E971

@Alternate Data Stream - 314 bytes -> C:\ProgramData\TEMP:6D5196DD

@Alternate Data Stream - 305 bytes -> C:\ProgramData\TEMP:B72729D8

@Alternate Data Stream - 231 bytes -> C:\ProgramData\TEMP:D8F9D810

@Alternate Data Stream - 224 bytes -> C:\ProgramData\TEMP:393F7B1E

@Alternate Data Stream - 219 bytes -> C:\ProgramData\TEMP:EA701346

@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:80E965A3

@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:04BB186B

@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:4E6B8D68

@Alternate Data Stream - 211 bytes -> C:\ProgramData\TEMP:CB0FEE2B

@Alternate Data Stream - 209 bytes -> C:\ProgramData\TEMP:517B507A

@Alternate Data Stream - 209 bytes -> C:\ProgramData\TEMP:0D52F295

@Alternate Data Stream - 207 bytes -> C:\ProgramData\TEMP:E1D818F7

@Alternate Data Stream - 201 bytes -> C:\ProgramData\TEMP:98AE08EA

@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:56C17A93

@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:55C54F7C

@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:373E1720

@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:21F28B00

@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:9AE67195

@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:5C5A503E

@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:895798AD

@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:4A966CC2

@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:5FEFEAEF

@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:5F1019FF

@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:45C55624

@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:2CDB9CA3

@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:13DF9DD1

@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:7CEDF9F3

@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:5D17C178

@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:3BF63E4A

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:B722BCE5

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:93226FE3

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:48FEA089

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:417B6FAC

@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:A688EF17

@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:A6881EE7

@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:A561576B

@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:588B60C7

@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:D708EEF9

@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:A518B662

@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:BBF60A29

@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:37994DBE

@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:706E2910

@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:10F6E97E

@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:0860D6D6

@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:883EDFB5

@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:723E56EC

@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:969C0C96

@Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:D02FBAEC

< End of report >

KermieDubstep · February 11, 2014

OTL Extras logfile created on: 2/10/2014 5:58:09 PM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jamie and Dustin\Downloads

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.87 Gb Total Physical Memory | 1.20 Gb Available Physical Memory | 41.63% Memory free

5.95 Gb Paging File | 4.51 Gb Available in Paging File | 75.85% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 456.88 Gb Total Space | 243.15 Gb Free Space | 53.22% Space Free | Partition Type: NTFS

Drive D: | 8.88 Gb Total Space | 0.98 Gb Free Space | 11.01% Space Free | Partition Type: NTFS

Computer Name: JAMIEANDDUST-PC | User Name: Jamie and Dustin | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

htafile [open] -- "%1" %*

htmlfile [edit] -- Reg Error: Key error.

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- "C:\Program Files\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

"UacDisableNotify" = 1

"InternetSettingsDisableNotify" = 1

"AutoUpdateDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" = C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink -- (EarthLink, Inc.)

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0B0B1151-BAF2-436F-97A8-EBC5F615D7B2}" = protocol=6 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |

"{0B70083C-B5CF-4444-9A5F-10F07CDC0B74}" = dir=in | app=c:\program files\file type assistant\tsassist.exe |

"{1594B7CC-3EE6-4E1C-A8DA-5D0DCBA351AC}" = protocol=17 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |

"{298035E4-00F4-4791-A38F-C16B37C1C677}" = protocol=6 | dir=in | app=c:\program files\epsonnet\epsonnet setup\tool10\eneasyapp.exe |

"{2EF8F807-E8BE-4C39-8824-E076CFD87AFF}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |

"{33D5BE0B-886A-4A69-B39F-04F837BC1A3B}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |

"{397F521B-49DE-4739-8C7F-019D7CEB4701}" = protocol=6 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |

"{3C877316-1F95-4807-8A8C-BF83832B6327}" = dir=in | app=c:\program files\itunes\itunes.exe |

"{3DAA9E07-8131-496E-97C2-4F5B4D49407E}" = protocol=17 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |

"{3DFFDD98-D4F4-46AC-9878-9763F3389D48}" = protocol=17 | dir=in | app=c:\program files\epsonnet\epsonnet setup\tool10\eneasyapp.exe |

"{4A532776-D79D-4EBA-8927-760C47FA1676}" = protocol=17 | dir=in | app=c:\program files\socialribbons lp 1\troubleshooter.exe |

"{4E7669A4-4A3B-40CE-935D-F371CBC2E6E6}" = protocol=17 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |

"{4F76F208-A24D-4AAF-9A1D-16E7CB19124F}" = protocol=17 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe |

"{54718558-03E7-49C5-856C-C0A5524D4D3D}" = protocol=6 | dir=in | app=c:\program files\curse\curseclient.exe |

"{5D267D7E-C354-42F2-BA60-E53B7FA6856A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{64F811F3-C9E6-418F-95B9-2C9870357D70}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{807C7106-8D83-41E6-B403-4A8D855EF369}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |

"{8EB126FE-D78D-488A-9141-9334D5B3DC90}" = dir=in | app=c:\program files\file type assistant\tsassist.exe |

"{9612375C-CC6D-4651-992E-4C6B38DE5EFC}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |

"{A41DE6A9-EEC1-44AE-8BEA-81DF948FA110}" = protocol=6 | dir=in | app=c:\program files\socialribbons lp 1\troubleshooter.exe |

"{B446BFE8-CBEF-47F8-87B7-6D28B7BC4337}" = protocol=6 | dir=in | app=c:\program files\aim6\aim6.exe |

"{B6E91063-EA4A-40C8-9A8F-6CA579549721}" = protocol=17 | dir=in | app=c:\program files\curse\curseclient.exe |

"{D842FA07-ECCE-474D-98E6-E6F40980D714}" = protocol=17 | dir=in | app=c:\program files\aim6\aim6.exe |

"{E6E9A4EE-DDB2-41C3-A6A6-4A33890A7F18}" = dir=in | app=c:\program files\myspace\im\myspaceim.exe |

"{EAE574E0-B210-48D9-9797-567AAE1DF700}" = protocol=6 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |

"{FF8EB354-26A9-460A-A7C0-BEC367217640}" = protocol=6 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe |

"TCP Query User{05A8DBB1-77B7-4D92-8A70-39AD5A570887}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |

"TCP Query User{270DFAEA-0AC6-4534-A55F-046979ABCBB6}C:\program files\aim\aim.exe" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |

"TCP Query User{39039700-0EF0-4811-99B1-F387F52632E0}C:\program files\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe |

"TCP Query User{72A035A0-0F17-4A87-BCC8-10537912A11C}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |

"TCP Query User{DD4961E3-7759-4DCD-A486-7C9A330248CB}C:\program files\starcraft\starcraft.exe" = protocol=6 | dir=in | app=c:\program files\starcraft\starcraft.exe |

"TCP Query User{F330AED2-42A6-4D75-90E8-C681F5AF652E}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |

"UDP Query User{2B533D37-FED0-464C-991A-7294C1F45F17}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |

"UDP Query User{786DFE23-D50B-4EC3-876F-19A09449A0A2}C:\program files\aim\aim.exe" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |

"UDP Query User{81D06190-8546-405D-9412-0C8AC491A616}C:\program files\starcraft\starcraft.exe" = protocol=17 | dir=in | app=c:\program files\starcraft\starcraft.exe |

"UDP Query User{8F335BB8-7851-45F4-8AD2-750BF6636CEC}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |

"UDP Query User{D731B932-27A1-49E5-825E-7090B2034D4C}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |

"UDP Query User{EEAD09A5-051E-4255-8C28-3EF5081D02FB}C:\program files\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools

"{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}" = Epson Event Manager

"{07EEE598-5F21-4B57-B40B-46592625B3D9}" = Zune Language Pack (PTB)

"{0A2C5854-557E-48C8-835A-3B9F074BDCAA}" = Python 2.5

"{0A47BAFF-D4FF-4BD3-96CA-02A22EA62722}" = HP Active Support Library

"{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}" = WD Diagnostics

"{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}" = Native Instruments Service Center

"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data

"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation®Store

"{10798AE3-DCBB-43C3-9C93-C23512427E25}" = The Sims Deluxe Edition

"{10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}" = Apple Mobile Device Support

"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1

"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive

"{14AF024E-2E3B-49D0-A175-D1C1A06B155A}" = muvee autoProducer 6.0

"{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager

"{209CDA54-D390-46A2-A97C-7BF61734418D}" = WeatherBug Gadget

"{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}" = Apple Application Support

"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library

"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java 6 Update 31

"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 51

"{2A9DFFD8-4E09-4B91-B957-454805B0D7C4}" = Zune Language Pack (CHS)

"{2B0ECB7D-EA9A-422A-9651-FC195136B031}" = QuickShare

"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine

"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update

"{2FA75B40-17C9-4D22-88CA-80A5D52FAB13}" = LightScribe System Software

"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App

"{3018B943-C76C-44B0-B078-790A28CEF67E}" = Microsoft UI Engine

"{3589A659-F732-4E65-A89A-5438C332E59D}" = Zune Language Pack (ELL)

"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Roxio Activation Module

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print

"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend

"{491DF203-7B61-4F0E-BDCB-A1218C4DAFE9}" = Native Instruments Massive

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth

"{51C839E1-2BE4-4E77-A1BA-CCEA5DAFA741}" = Zune Language Pack (KOR)

"{57C51D56-B287-4C11-9192-EC3C46EF76A4}" = Zune Language Pack (RUS)

"{5C93E291-A1CC-4E51-85C6-E194209FCDB4}" = Zune Language Pack (PTG)

"{5DEFD397-4012-46C3-B6DA-E8013E660772}" = Zune Language Pack (NOR)

"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy

"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer

"{61F25370-7465-4404-BE28-4629BF808699}" = LightScribe Applications

"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com

"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3

"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library

"{66A9D30D-1464-4C7F-B2F3-507DADAF2595}" = Microsoft IntelliPoint 6.3

"{6740BCB0-5863-47F4-80F4-44F394DE4FE2}" = Zune Language Pack (NLD)

"{6B33492E-FBBC-4EC3-8738-09E16E395A10}" = Zune Language Pack (ESP)

"{6D3DB611-D5E8-4E4B-8952-0D3F549F9CC6}" = HP Active Support Library 32 bit components

"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works

"{6EB931CD-A7DA-4A44-B74A-89C8EB50086F}" = Zune Language Pack (SVE)

"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App for HP

"{710BF966-43C8-4216-A8EC-BC4E169FF7C1}" = MobileMe Control Panel

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{730E03E4-350E-48E5-9D3E-4329903D454D}" = Itibiti RTC

"{73A43E42-3658-4DD9-8551-FACDA3632538}" = HP Advisor

"{76BA306B-2AA0-47C0-AB6B-F313AB56C136}" = Zune Language Pack (MSL)

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour

"{79BD66B2-4DAE-4C3B-B08E-DC72E507C163}" = iCloud

"{8227BCD8-AA43-B935-7134-2732A298364A}" = Media Go Video Playback Engine 1.120.107.05010

"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01

"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111715607}" = The Poppit! Show

"{83721450-E604-4C37-ABEB-CE7F18C587C8}" = LightScribe Template Labeler

"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01

"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio

"{8960A0A1-BB5A-479E-92CF-65AB9D684B43}" = Zune Language Pack (PLK)

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8B112338-2B08-4851-AF84-E7CAD74CEB32}" = Zune Language Pack (DAN)

"{924EAD66-F854-4605-8493-696DD59A113B}" = RollerCoaster Tycoon Deluxe

"{92ECE3F9-591E-4C12-8A62-B9FCE38BF646}" = Zune Language Pack (IND)

"{938B1CD7-7C60-491E-AA90-1F1888168240}" = Roxio MyDVD Basic v9

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9B75648B-6C30-4A0D-9DE6-0D09D20AF5A5}" = Zune

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback

"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR

"{A5A53EA8-A11E-49F0-BDF5-AE536426A31A}" = Zune Language Pack (CHT)

"{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer

"{A8F2E50B-86E2-4D96-9BD2-9758BCC6F9B3}" = Zune Language Pack (CSY)

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB5E289E-76BF-4251-9F3F-9B763F681AE0}" = HP Customer Experience Enhancements

"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.5

"{B4870774-5F3A-46D9-9DFE-06FB5599E26B}" = Zune Language Pack (FIN)

"{B55B7EAE-C58C-496E-A383-3A6ABDD83A62}" = Media Go

"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime

"{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}" = The Sims™ 3 World Adventures

"{BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}" = Zune Language Pack (DEU)

"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3

"{C4780F70-8F21-4F0C-95FE-32FF3E2F9247}" = iTunes

"{C5D37FFA-7483-410B-982B-91E93FD3B7DA}" = Zune Language Pack (ITA)

"{C68D33B1-0204-4EBE-BC45-A6E432B1D13A}" = Zune Language Pack (FRA)

"{C6BE19C6-B102-4038-B2A6-1C313872DBB4}" = Zune Language Pack (HUN)

"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari

"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator Basic v9

"{C9D8A041-2963-4B31-8FFC-1500F3DB9293}" = EpsonNet Setup 3.2

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D5A9DA4B-E4F9-FB49-017D-769FC540F1F0}" = EA Download Manager UI

"{D8A781C9-3892-4E2E-9320-480CF896CFBB}" = Zune Language Pack (JPN)

"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime

"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.188

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F2CB8C3C-9C9E-4FAB-9067-655601C5F748}" = Windows Mobile Device Updater Component

"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11.5

"AIM Toolbar" = AIM Toolbar

"AIMTunes" = AIMTunes

"Better Surf Plus" = Better Surf Plus

"BFG-Burger Shop 2" = Burger Shop 2

"BFGC" = Big Fish Games: Game Manager

"BFG-Cake Mania - Lights, Camera, Action" = Cake Mania: Lights, Camera, Action!

"BFG-Cake Shop" = Cake Shop

"BFG-Cake Shop 2" = Cake Shop 2

"BFG-Cooking Dash 3 - Thrills and Spills Collector's Edition" = Cooking Dash 3: Thrills and Spills Collector's Edition

"BFG-Fairies" = Fairies

"BFG-Hotdog Hotshot" = Hotdog Hotshot

"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1" = Soft Data Fax Modem with SmartCP

"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com

"com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI

"Digital Editions" = Adobe Digital Editions

"EA Download Manager" = EA Download Manager

"EPSON NX420 Series" = EPSON NX420 Series Printer Uninstall

"EPSON Scanner" = EPSON Scan

"GameHouse" = GameHouse

"Google Chrome" = Google Chrome

"Google Desktop" = Google Desktop

"HP Photosmart Essential" = HP Photosmart Essential 2.01

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300

"McAfee Security Scan" = McAfee Security Scan Plus

"MediaPlayerV1alpha777" = Media Player

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"MixVibes Cross - Discover DJ 1.3.2" = Cross - Discover DJ 1.3.2

"Native Instruments Massive" = Native Instruments Massive

"Native Instruments Service Center" = Native Instruments Service Center

"NAV" = Norton AntiVirus

"NSS" = Norton Security Scan

"NVIDIA Drivers" = NVIDIA Drivers

"OfficeTrial" = Microsoft Office Home and Student 60 day trial

"OsdMaestro" = HP On-Screen Cap/Num/Scroll Lock Indicator

"PC-Doctor 5 for Windows" = Hardware Diagnostic Tools

"Peggle Nights Deluxe 1.0" = Peggle Nights Deluxe 1.0

"Picasa 3" = Picasa 3

"Plants vs. Zombies" = Plants vs. Zombies

"Starcraft" = Starcraft

"Trusted Software Assistant_is1" = File Type Assistant

"WildTangent hp Master Uninstall" = HP Games

"WildTangent wildgames Master Uninstall" = WildTangent Games

"WT084062" = Cat Wash

"WT085955" = Alice's Tea Cup Madness

"WT087085" = Potion Bar

"WT087580" = Jane's Realty 2

"WT087588" = Heartwild Solitaire - Book Two

"WT087878" = My Life Story

"WT087967" = Mall-A-Palooza

"WT088047" = Sparkle

"WT088634" = Outpost Kaloki

"WT088791" = Deadtime Stories

"WT089008" = Ranch Rush 2 - Premium Edition

"WT089027" = Farm Frenzy 3 - Russian Roulette

"WTA-400c45a9-bb16-4b50-821c-e9b3c0ae918c" = Cooking Academy 3: Recipe for Success

"WTA-9f4f9c54-76e6-47a3-853a-85ef570c8ce5" = Delicious: Emily's Childhood Memories Premium Edition

"WTA-a62947c2-57ef-4f9c-9e4b-659784eaa53d" = Pizza Chef 2

"WTA-ab586379-0912-4fee-91b9-31e3174a7495" = Cake Mania: To the Max

"WTA-b125f8ea-18b5-44f3-a23b-be3f9125b37b" = Gwen The Magic Nanny

"WTA-b33b2efc-3666-4aa5-9d49-454faa2ffccf" = Diner Dash - Flo Through Time

"WTA-e0e14fb9-2f98-48c3-9fb7-6ed51ff8db10" = FunPark Beach Blast

"Yahoo! Companion" = Yahoo! Toolbar

"Yahoo! Search Defender" = Yahoo! Search Protection

"Yahoo! Toolbar" = Yahoo! Toolbar

"Zune" = Zune

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Define Ext" = Define Ext

========== Last 20 Event Log Errors ==========

[ Application Events ]

Error - 2/9/2014 6:33:34 PM | Computer Name = JamieandDust-PC | Source = Windows Search Service | ID = 9002

Description =

Error - 2/9/2014 6:33:34 PM | Computer Name = JamieandDust-PC | Source = Windows Search Service | ID = 3029

Description =

Error - 2/9/2014 6:33:35 PM | Computer Name = JamieandDust-PC | Source = Windows Search Service | ID = 3029

Description =

Error - 2/9/2014 6:33:35 PM | Computer Name = JamieandDust-PC | Source = Windows Search Service | ID = 3028

Description =

Error - 2/9/2014 6:33:35 PM | Computer Name = JamieandDust-PC | Source = Windows Search Service | ID = 3058

Description =

Error - 2/9/2014 6:33:41 PM | Computer Name = JamieandDust-PC | Source = Windows Search Service | ID = 7040

Description =

Error - 2/9/2014 6:34:33 PM | Computer Name = JamieandDust-PC | Source = ESENT | ID = 494

Description = Catalog Database (1616) Catalog Database: Database recovery failed

with error -1216 because it encountered references to a database, 'C:\Windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb',

which is no longer present. The database was not brought to a Clean Shutdown state

before it was removed (or possibly moved or renamed). The database engine will

not permit recovery to complete for this instance until the missing database is

re-instated. If the database is truly no longer available and no longer required,

procedures for recovering from this error are available in the Microsoft Knowledge

Base or by following the "more information" link at the bottom of this message.

Error - 2/9/2014 6:34:33 PM | Computer Name = JamieandDust-PC | Source = ESENT | ID = 454

Description = Catalog Database (1616) Catalog Database: Database recovery/restore

failed with unexpected error -1216.

Error - 2/9/2014 6:34:33 PM | Computer Name = JamieandDust-PC | Source = Microsoft-Windows-CAPI2 | ID = 131329

Description =

Error - 2/9/2014 7:06:55 PM | Computer Name = JamieandDust-PC | Source = Application Hang | ID = 1002

Description = The program NOTEPAD.EXE version 6.0.6001.18000 stopped interacting

with Windows and was closed. To see if more information about the problem is available,

check the problem history in the Problem Reports and Solutions control panel. Process

ID: e0c Start Time: 01cf25eb7de5700b Termination Time: 0

[ System Events ]

Error - 2/10/2014 5:42:00 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7000

Description =

Error - 2/10/2014 5:42:00 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7026

Description =

Error - 2/10/2014 5:57:13 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7000

Description =

Error - 2/10/2014 5:57:13 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7026

Description =

Error - 2/10/2014 6:00:02 PM | Computer Name = JamieandDust-PC | Source = EventLog | ID = 6008

Description = The previous system shutdown at 3:58:11 PM on 2/10/2014 was unexpected.

Error - 2/10/2014 6:01:35 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7000

Description =

Error - 2/10/2014 6:01:35 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7026

Description =

Error - 2/10/2014 7:21:20 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7000

Description =

Error - 2/10/2014 7:21:20 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7026

Description =

Error - 2/10/2014 7:22:33 PM | Computer Name = JamieandDust-PC | Source = Service Control Manager | ID = 7009

Description =

< End of report >

KermieDubstep · February 11, 2014

here are the logs

Maniac · February 12, 2014

Step 1

Please uninstall the following applications:

QuickShare

AIM Toolbar

Define Ext

Yahoo! Search Protection

Step 2

Run OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL
IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\12x3q@3244516.com: C:\Program Files\Better-Surf\ff
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@bettersurfplus.com: C:\Program Files\BetterSurf\BetterSurfPlus\ff
File not found (No name found) -- C:\PROGRAM FILES\BETTERSURF\BETTERSURFPLUS\FF
File not found (No name found) -- C:\PROGRAM FILES\MEDIAPLAYERV1\MEDIAPLAYERV1ALPHA777\FF
File not found (No name found) -- C:\PROGRAM FILES\VIDEOPLAYERV3\VIDEOPLAYERV3BETA413\FF
File not found (No name found) -- C:\PROGRAM FILES\WEBEXPENHANCEDV1\WEBEXPENHANCEDV1ALPHA409\FF
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
O2 - BHO: (Video Player) - {d00f73eb-3b83-4977-ae6f-f0c698e67321} - C:\Program Files\VideoPlayerV3\VideoPlayerV3beta413\ie\VideoPlayerV3beta413.dll File not found
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
O3 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.
O3 - HKU\S-1-5-21-3649929190-772312064-1106648172-1000\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL Inc.)
O4 - HKU\.DEFAULT..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" File not found
O4 - HKU\S-1-5-18..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" File not found
:files
ipconfig /flushdns /c
:Commands
[emptytemp]
Then click the Run Fix button at the top
Let the program run unhindered, reboot the PC when it is done
Please post the OTL fix log in your next reply.

Note: A copy of an OTL fix log is saved in a text file at C:\_OTL\MovedFiles

KermieDubstep · February 12, 2014

couldn't remove quickshare, it says my "windows installer service could not be accessed, this may occur if windows installer isn't correclty installed. contact your support....."

here's the otl log

KermieDubstep · February 12, 2014

All processes killed

========== OTL ==========

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{03402f96-3dc7-4285-bc50-9e81fefafe43} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03402f96-3dc7-4285-bc50-9e81fefafe43}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\12x3q@3244516.com deleted successfully.

File C:\Program Files\Better-Surf\ff not found.

Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@bettersurfplus.com deleted successfully.

File C:\Program Files\BetterSurf\BetterSurfPlus\ff not found.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b0cda128-b425-4eef-a174-61a11ac5dbf8}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b0cda128-b425-4eef-a174-61a11ac5dbf8}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d00f73eb-3b83-4977-ae6f-f0c698e67321}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d00f73eb-3b83-4977-ae6f-f0c698e67321}\ deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{61539ecd-cc67-4437-a03c-9aaccbd14326} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{61539ecd-cc67-4437-a03c-9aaccbd14326}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry value HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.

Registry value HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C}\ not found.

Registry value HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{61539ECD-CC67-4437-A03C-9AACCBD14326} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{61539ECD-CC67-4437-A03C-9AACCBD14326}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpUninstallDeleteDir deleted successfully.

Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpUninstallDeleteDir not found.

========== FILES ==========

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Users\Jamie and Dustin\Downloads\cmd.bat deleted successfully.

C:\Users\Jamie and Dustin\Downloads\cmd.txt deleted successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33542 bytes

->Flash cache emptied: 41661 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

User: Jamie and Dustin

->Temp folder emptied: 578416608 bytes

->Temporary Internet Files folder emptied: 234006857 bytes

->Java cache emptied: 6319078 bytes

->Google Chrome cache emptied: 71125032 bytes

->Apple Safari cache emptied: 164396032 bytes

->Flash cache emptied: 2991867 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 1319896 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 1070511200 bytes

%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 49247386 bytes

%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 741 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 2,077.00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 02112014_225904

KermieDubstep · February 12, 2014

All processes killed

========== OTL ==========

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{03402f96-3dc7-4285-bc50-9e81fefafe43} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03402f96-3dc7-4285-bc50-9e81fefafe43}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\12x3q@3244516.com deleted successfully.

File C:\Program Files\Better-Surf\ff not found.

Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@bettersurfplus.com deleted successfully.

File C:\Program Files\BetterSurf\BetterSurfPlus\ff not found.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b0cda128-b425-4eef-a174-61a11ac5dbf8}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b0cda128-b425-4eef-a174-61a11ac5dbf8}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d00f73eb-3b83-4977-ae6f-f0c698e67321}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d00f73eb-3b83-4977-ae6f-f0c698e67321}\ deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{61539ecd-cc67-4437-a03c-9aaccbd14326} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{61539ecd-cc67-4437-a03c-9aaccbd14326}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry value HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.

Registry value HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C}\ not found.

Registry value HKEY_USERS\S-1-5-21-3649929190-772312064-1106648172-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{61539ECD-CC67-4437-A03C-9AACCBD14326} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{61539ECD-CC67-4437-A03C-9AACCBD14326}\ not found.

File C:\Program Files\AIM Toolbar\aimtb.dll not found.

Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpUninstallDeleteDir deleted successfully.

Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpUninstallDeleteDir not found.

========== FILES ==========

< ipconfig /flushdns /c >

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Users\Jamie and Dustin\Downloads\cmd.bat deleted successfully.

C:\Users\Jamie and Dustin\Downloads\cmd.txt deleted successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33542 bytes

->Flash cache emptied: 41661 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

User: Jamie and Dustin

->Temp folder emptied: 578416608 bytes

->Temporary Internet Files folder emptied: 234006857 bytes

->Java cache emptied: 6319078 bytes

->Google Chrome cache emptied: 71125032 bytes

->Apple Safari cache emptied: 164396032 bytes

->Flash cache emptied: 2991867 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 1319896 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 1070511200 bytes

%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 49247386 bytes

%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 741 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 2,077.00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 02112014_225904

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Maniac · February 12, 2014

How are things now?

KermieDubstep · February 13, 2014

thanks alot man, much better now! but quick share still shows up in programs and features. when you uninstall it says the feature you are trying to use is on a network resource that is unavailable, the installation source is unavailable. could this be damaged caused by the adware? or the adware hiding? also cant remove media player 1.1 from google extentions. sorry for troubling you! but i am going to buy the software. thanks for getting my comp back!

let me know what you think about the 2 problems i am having removing quickshare and media player (extentions - Media Player 1.1

Media Player. Permissions

ID: mihjnijfgbbhnacijdhbfgknanhmfmif

(This extension is managed and cannot be removed or disabled.)

Allow in incognito)

Maniac · February 13, 2014

Please generate a new fresh OTL log file, I will take care.

KermieDubstep · February 14, 2014

OTL logfile created on: 2/13/2014 8:02:30 PM - Run 2

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jamie and Dustin\Downloads

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.87 Gb Total Physical Memory | 1.35 Gb Available Physical Memory | 46.99% Memory free

5.95 Gb Paging File | 4.33 Gb Available in Paging File | 72.76% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 456.88 Gb Total Space | 240.66 Gb Free Space | 52.67% Space Free | Partition Type: NTFS

Drive D: | 8.88 Gb Total Space | 0.87 Gb Free Space | 9.81% Space Free | Partition Type: NTFS

Computer Name: JAMIEANDDUST-PC | User Name: Jamie and Dustin | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/02/12 23:59:39 | 000,223,112 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe

PRC - [2014/02/11 22:39:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jamie and Dustin\Downloads\OTL.exe