Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: Something happened, need help please

  1. #1
    Member
    Join Date
    Nov 2007
    Posts
    30

    Default Something happened, need help please

    It's been many years now since I came here looking for help. Once again, something has happened and my laptop is now infected by something. Lots of pop-ups and re-directions. The top right of Firefox or Chrome has a corner that "peels down", clicking on it to close opens up other windows etc. System crashed once last night, unstable Netflix etc.

    As per instructions, here are the logs,

    frst.txt

    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-10-2014 01
    Ran by Brassington (administrator) on BRASSINGTON on 09-10-2014 10:16:07
    Running from C:\Users\Brassington\Desktop
    Loaded Profile: Brassington (Available profiles: Brassington)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 11
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Microsoft Corporation) C:\Windows\System32\wlanext.exe
    (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
    (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
    (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
    (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
    (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
    (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
    (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
    (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
    (Microsoft Corporation) C:\Windows\System32\rundll32.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
    (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
    (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
    () C:\Program Files (x86)\AVG Secure Search\vprot.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
    (Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
    (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
    (Microsoft Corporation) C:\Windows\System32\vds.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277992 2011-11-15] (Realtek Semiconductor)
    HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2283816 2010-11-18] (Synaptics Incorporated)
    HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-11-02] (Intel(R) Corporation)
    HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277992 2011-11-15] (Realtek Semiconductor)
    HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
    HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673168 2010-11-17] (Sony Corporation)
    HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-12-07] (cyberlink)
    HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)
    HKLM-x32\...\Run: [AVG_TRAY] => C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
    HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Secure Search\vprot.exe [2640408 2014-09-11] ()
    HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [PPort11reminder] => C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SHTtray.exe] => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [99696 2010-09-10] (Sony Corporation)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [AdobeBridge] => "C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe" -stealth
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [Elbserver] => C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe [83344 2010-11-30] (Sony Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [VRLPHelper] => C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe [186768 2010-11-30] (Sony Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\MountPoints2: {550e0f97-b181-11e0-a296-f0bf9717eb0a} - D:\LaunchU3.exe
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
    ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
    BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restartsdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ca.search.yahoo.com/?type=994...=spigot-yhp-ie
    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://sony.msn.com
    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.sonystyle.ca/vaio
    URLSearchHook: HKLM-x32 - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
    URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.6\vuzeToolbarIE64.dll (Spigot, Inc.)
    URLSearchHook: HKCU - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.6\vuzeToolbarIE.dll (Spigot, Inc.)
    URLSearchHook: HKCU - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
    SearchScopes: HKLM-x32 - {0A89EC6C-1016-4FDB-A001-51E61D7163C4} URL = http://startsear.ch/?aff=1&src=sp&cf=a1107abb-f2db-11e0-bc13-f0bf9717eb0a&q={searchTerms}
    SearchScopes: HKCU - DefaultScope {EB3A11D5-9F87-44FC-A2B2-AD0735BF3915} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}
    SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKCU - {0A89EC6C-1016-4FDB-A001-51E61D7163C4} URL = http://startsear.ch/?aff=1&src=sp&cf=a1107abb-f2db-11e0-bc13-f0bf9717eb0a&q={searchTerms}
    SearchScopes: HKCU - {451746CE-E390-4804-905A-AFDBE610F4AA} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
    SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={BFE06E46-7905-4230-AD39-D905797D146D}&mid=827a0ed2890f47d181ab4149087f7746-1ac21e85a59e0d819fcb68fe1f4b8824a81d7909&lang=us&ds=AVG&pr=fr&d=2012-01-12 07:37:04&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
    SearchScopes: HKCU - {EB3A11D5-9F87-44FC-A2B2-AD0735BF3915} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}
    BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
    BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    BHO-x32: Vuze Remote Toolbar -> {05478A66-EDB6-4A22-A870-A5987F80A7DA} -> C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.6\vuzeToolbarIE.dll (Spigot, Inc.)
    BHO-x32: Conduit Engine -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
    BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO-x32: AVG Security Toolbar -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll (AVG Secure Search)
    BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
    BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO-x32: Vuze Remote Toolbar -> {ba14329e-9550-4989-b3f2-9732e92d17cc} -> C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    Toolbar: HKLM - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.6\vuzeToolbarIE64.dll (Spigot, Inc.)
    Toolbar: HKLM-x32 - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
    Toolbar: HKLM-x32 - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
    Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
    Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll (AVG Secure Search)
    Toolbar: HKLM-x32 - Vuze Remote Toolbar - {05478A66-EDB6-4A22-A870-A5987F80A7DA} - C:\Program Files (x86)\Vuze Remote Toolbar\IE\9.6\vuzeToolbarIE.dll (Spigot, Inc.)
    Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    Toolbar: HKCU - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
    Toolbar: HKCU - No Name - {BA14329E-9550-4989-B3F2-9732E92D17CC} - No File
    Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
    Toolbar: HKCU - No Name - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No File
    Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
    Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
    Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll (AVG Secure Search)
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 64.178.142.10 24.207.0.167

    FireFox:
    ========
    FF ProfilePath: C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
    FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
    FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll No File
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml
    FF Extension: skip_compatibility_checksdrockingcom - C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303\Extensions\skip_compatibility_check@sdrocking.com [2014-10-08]
    FF Extension: skip_compatibility_checksdrockingcom - C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\kztrwi7h.default-1406780185987\Extensions\skip_compatibility_check@sdrocking.com [2014-10-08]
    FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-28]
    FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4
    FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-06-15]
    FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.9.799
    FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.9.799 [2014-09-11]

    Chrome:
    =======
    CHR Profile: C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Slides) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-07]
    CHR Extension: (Google Docs) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-07]
    CHR Extension: (Google Drive) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-07]
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-08]
    CHR Extension: (YouTube) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-07]
    CHR Extension: (Google Search) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-07]
    CHR Extension: (Google Sheets) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-07]
    CHR Extension: (Hola Better Internet) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-10-07]
    CHR Extension: (Slick Savings) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk [2014-10-07]
    CHR Extension: (nioihlfoddilijjjeknopfcbglallkce) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioihlfoddilijjjeknopfcbglallkce [2014-10-08]
    CHR Extension: (Google Wallet) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-07]
    CHR Extension: (Gmail) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-07]
    CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx []
    CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx []
    CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx [2012-07-26]
    CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\Brassington\AppData\Local\Slick Savings\coupons.crx [2014-02-15]
    CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\17.3.0.49\avg.crx [2014-02-15]
    CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2014-02-15]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
    R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43112 2012-02-15] (ArcSoft Inc.)
    S3 AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
    R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5175856 2013-10-16] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
    R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
    S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [248304 2012-01-19] (CyberLink)
    S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-11-02] ()
    R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
    S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
    R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
    R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
    R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [864000 2010-09-27] (Sony Corporation)
    R2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [1820184 2014-08-12] (AVG Secure Search)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
    R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
    R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
    R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
    R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
    R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
    R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
    R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
    R2 risdsnpe; C:\Windows\system32\drivers\risdsnxc64.sys [98816 2010-12-26] (REDC)
    U2 MSSQL$DDNI; No ImagePath

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-10-09 10:16 - 2014-10-09 10:16 - 04751360 _____ () C:\Users\Brassington\Downloads\aswMBR.exe.part
    2014-10-09 10:16 - 2014-10-09 10:16 - 00028749 _____ () C:\Users\Brassington\Desktop\FRST.txt
    2014-10-09 10:16 - 2014-10-09 10:16 - 00000000 _____ () C:\Users\Brassington\Downloads\aswMBR.exe
    2014-10-09 10:15 - 2014-10-09 10:16 - 00000000 ____D () C:\FRST
    2014-10-09 10:13 - 2014-10-09 10:14 - 02109952 _____ (Farbar) C:\Users\Brassington\Desktop\FRST64.exe
    2014-10-09 09:45 - 2014-10-09 09:45 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-BRASSINGTON-Microsoft-Windows-7-Home-Premium-(64-bit).dat
    2014-10-09 09:44 - 2014-10-09 09:44 - 00000000 ____D () C:\RegBackup
    2014-10-09 09:43 - 2014-10-09 09:43 - 00002239 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
    2014-10-09 09:43 - 2014-10-09 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2014-10-09 09:43 - 2014-10-09 09:43 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
    2014-10-09 09:42 - 2014-10-09 09:42 - 04215184 _____ () C:\Users\Brassington\Downloads\tweaking.com_registry_backup_setup.exe
    2014-10-09 05:06 - 2014-10-09 05:06 - 00000000 ____D () C:\Users\Brassington\AppData\Local\{63E9E4D8-01EE-4CA2-897B-32021A7161C0}
    2014-10-09 05:02 - 2014-10-09 05:03 - 00376896 _____ () C:\Windows\Minidump\100914-57689-01.dmp
    2014-10-07 20:28 - 2014-10-07 20:28 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2014-10-07 20:28 - 2014-10-07 20:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2014-10-05 23:43 - 2014-10-05 23:43 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2014-10-05 23:43 - 2014-10-05 23:43 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
    2014-10-05 23:43 - 2014-10-05 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2014-10-05 23:43 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
    2014-10-05 23:42 - 2014-10-05 23:46 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
    2014-10-05 12:15 - 2014-10-05 12:16 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Brassington\Downloads\spybot-2.4.exe
    2014-10-04 21:59 - 2014-10-04 22:09 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
    2014-10-04 21:59 - 2014-10-04 21:59 - 00000000 ____D () C:\Users\Brassington\AppData\Local\globalUpdate
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 ____D () C:\3467cf07-ac61-4a99-8ec5-94d8391322dd
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458C.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457C.tmp
    2014-10-04 21:50 - 2014-10-04 21:50 - 00349760 _____ () C:\Users\Brassington\Downloads\Setup.exe
    2014-10-02 23:25 - 2014-10-02 23:26 - 00000000 ____D () C:\Users\Brassington\AppData\Local\{9F89BAB7-7496-4DC4-AA49-446A5DEB3C16}
    2014-09-30 15:47 - 2014-09-24 20:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2014-09-30 15:47 - 2014-09-24 19:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
    2014-09-28 19:54 - 2014-09-28 19:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2014-09-23 15:44 - 2014-09-09 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2014-09-23 15:44 - 2014-09-09 15:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2014-09-11 03:33 - 2014-09-11 15:34 - 00000000 ____D () C:\Users\Brassington\AppData\Local\{ECE5F347-AC04-4092-9F05-3CBB84DEA888}
    2014-09-11 03:08 - 2014-08-19 12:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-09-11 03:08 - 2014-08-19 11:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-09-11 03:08 - 2014-08-18 17:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-09-11 03:08 - 2014-08-18 16:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2014-09-11 03:08 - 2014-08-18 16:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2014-09-11 03:08 - 2014-08-18 16:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-09-11 03:08 - 2014-08-18 16:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-09-11 03:08 - 2014-08-18 16:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-09-11 03:08 - 2014-08-18 16:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-09-11 03:08 - 2014-08-18 16:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-09-11 03:08 - 2014-08-18 16:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-09-11 03:08 - 2014-08-18 16:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-09-11 03:08 - 2014-08-18 16:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-09-11 03:08 - 2014-08-18 16:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-09-11 03:08 - 2014-08-18 16:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-09-11 03:08 - 2014-08-18 16:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-09-11 03:08 - 2014-08-18 15:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2014-09-11 03:08 - 2014-08-18 15:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2014-09-11 03:08 - 2014-08-18 15:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-09-11 03:08 - 2014-08-18 15:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-09-11 03:08 - 2014-08-18 15:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-09-11 03:08 - 2014-08-18 15:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-09-11 03:08 - 2014-08-18 15:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-09-11 03:08 - 2014-08-18 15:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-09-11 03:08 - 2014-08-18 15:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-09-11 03:08 - 2014-08-18 15:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-09-11 03:08 - 2014-08-18 15:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-09-11 03:08 - 2014-08-18 15:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-09-11 03:08 - 2014-08-18 15:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-09-11 03:08 - 2014-08-18 15:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-09-11 03:08 - 2014-08-18 15:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-09-11 03:08 - 2014-08-18 15:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-09-11 03:08 - 2014-08-18 15:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-09-11 03:08 - 2014-08-18 15:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-09-11 03:08 - 2014-08-18 15:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2014-09-11 03:08 - 2014-08-18 15:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-09-11 03:08 - 2014-08-18 15:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-09-11 03:08 - 2014-08-18 15:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-09-11 03:08 - 2014-08-18 15:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-09-11 03:08 - 2014-08-18 15:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-09-11 03:08 - 2014-08-18 15:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-09-11 03:08 - 2014-08-18 15:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-09-11 03:08 - 2014-08-18 15:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-09-11 03:08 - 2014-08-18 15:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-09-11 03:08 - 2014-08-18 15:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2014-09-11 03:08 - 2014-08-18 14:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-09-11 03:08 - 2014-08-18 14:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-09-11 03:08 - 2014-08-18 14:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-09-11 03:08 - 2014-08-18 14:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-09-11 03:08 - 2014-08-18 14:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-09-11 03:02 - 2014-06-26 20:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
    2014-09-11 03:02 - 2014-06-26 19:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
    2014-09-10 20:47 - 2014-08-01 05:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
    2014-09-10 20:47 - 2014-08-01 05:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
    2014-09-10 20:46 - 2014-09-04 20:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2014-09-10 20:46 - 2014-09-04 20:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2014-09-10 20:46 - 2014-07-06 20:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2014-09-10 20:46 - 2014-07-06 20:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2014-09-10 20:46 - 2014-07-06 19:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2014-09-10 20:46 - 2014-07-06 19:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2014-09-10 20:46 - 2014-07-06 19:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2014-09-10 20:46 - 2014-06-23 21:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
    2014-09-10 20:46 - 2014-06-23 20:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-10-09 09:43 - 2012-04-22 11:17 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2014-10-09 09:30 - 2011-06-14 20:07 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
    2014-10-09 06:23 - 2011-10-15 18:24 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2014-10-09 05:57 - 2011-04-09 15:38 - 01503108 _____ () C:\Windows\WindowsUpdate.log
    2014-10-09 05:43 - 2012-04-22 11:17 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2014-10-09 05:43 - 2012-04-22 11:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2014-10-09 05:43 - 2012-04-22 11:17 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2014-10-09 05:38 - 2011-06-14 19:01 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{CFF740F3-2E3C-4916-9B51-B06DC6402A0B}
    2014-10-09 05:16 - 2009-07-13 22:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2014-10-09 05:16 - 2009-07-13 22:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2014-10-09 05:03 - 2013-06-02 22:13 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
    2014-10-09 05:03 - 2012-02-14 15:48 - 00000212 _____ () C:\Windows\Tasks\AutoKMS.job
    2014-10-09 05:03 - 2009-07-13 22:51 - 00196893 _____ () C:\Windows\setupact.log
    2014-10-09 05:02 - 2011-11-20 10:35 - 569954366 _____ () C:\Windows\MEMORY.DMP
    2014-10-09 05:02 - 2011-11-20 10:35 - 00000000 ____D () C:\Windows\Minidump
    2014-10-09 05:02 - 2011-03-03 19:13 - 00511756 _____ () C:\Windows\PFRO.log
    2014-10-09 05:02 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-10-08 22:04 - 2011-06-22 17:30 - 00000000 ____D () C:\Users\Brassington\AppData\Local\CrashDumps
    2014-10-08 17:48 - 2012-02-14 15:48 - 00000212 _____ () C:\Windows\Tasks\AutoKMSDaily.job
    2014-10-07 20:28 - 2011-10-15 18:24 - 00000000 ____D () C:\Users\Brassington\AppData\Local\Google
    2014-10-07 20:27 - 2011-10-15 18:24 - 00000000 ____D () C:\Program Files (x86)\Google
    2014-10-07 06:26 - 2014-07-30 22:58 - 00040399 _____ () C:\Windows\wininit.ini
    2014-10-07 06:26 - 2011-08-14 18:30 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
    2014-10-06 00:14 - 2009-07-13 20:34 - 00450811 ____R () C:\Windows\system32\Drivers\etc\hosts.20141008-222417.backup
    2014-10-05 23:42 - 2011-08-14 18:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
    2014-10-03 16:03 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
    2014-10-03 13:59 - 2011-07-18 16:08 - 00074426 _____ () C:\test.xml
    2014-10-02 23:22 - 2012-08-27 21:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2014-10-01 10:45 - 2011-06-22 17:30 - 00000000 ____D () C:\Users\Brassington\AppData\Roaming\Azureus
    2014-09-30 15:36 - 2014-04-25 10:06 - 00138752 ___SH () C:\Users\Brassington\Desktop\Thumbs.db
    2014-09-11 06:30 - 2012-01-12 09:37 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search
    2014-09-11 03:08 - 2012-02-14 15:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2014-09-11 03:06 - 2013-08-12 02:16 - 00000000 ____D () C:\Windows\system32\MRT
    2014-09-11 03:03 - 2011-11-13 21:08 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2014-09-11 03:02 - 2014-05-06 03:02 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2014-09-10 04:13 - 2014-08-31 18:19 - 00000348 _____ () C:\Windows\Tasks\0814tbUpdateInfo.job
    2014-09-10 04:13 - 2014-08-31 18:19 - 00000000 ____D () C:\ProgramData\Avg_Update_0814tb

    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2014-08-29 22:58

    ==================== End Of Log ============================



    addition.txt

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2014 01
    Ran by Brassington at 2014-10-09 10:17:11
    Running from C:\Users\Brassington\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    AS: AVG Anti-Virus Free Edition 2012 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
    Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden
    Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.5.23 - Adobe Systems Incorporated.)
    Adobe Community Help (x32 Version: 3.5.23 - Adobe Systems Incorporated.) Hidden
    Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.0.6 - Adobe Systems Incorporated)
    Adobe Download Assistant (x32 Version: 1.0.6 - Adobe Systems Incorporated) Hidden
    Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
    Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
    Adobe Photoshop Lightroom 3.5 64-bit (HKLM\...\{44713725-8CC8-4710-B727-DC13A3665F9C}) (Version: 3.5.1 - Adobe)
    Adobe Reader XI (11.0.03) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.03 - Adobe Systems Incorporated)
    ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.134 - ArcSoft)
    ArcSoft MediaConverter 7.5 (HKLM-x32\...\{69039A13-9ABB-4264-A570-0023FB2D4F18}) (Version: 7.5.0.114 - ArcSoft, Inc.)
    ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.369 - ArcSoft)
    ATI Catalyst Install Manager (HKLM\...\{A8F6C30C-65C0-C71A-9844-93BC37BDE1FE}) (Version: 3.0.808.0 - ATI Technologies, Inc.)
    AVG 2012 (HKLM\...\AVG) (Version: 2012.1.2247 - AVG Technologies)
    AVG 2012 (Version: 12.0.4031 - AVG Technologies) Hidden
    AVG 2012 (Version: 12.1.2247 - AVG Technologies) Hidden
    AVG Security Toolbar (HKLM-x32\...\AVG Secure Search) (Version: 18.1.9.799 - AVG Technologies)
    Brother MFL-Pro Suite MFC-J415W (HKLM-x32\...\{FB83EAC4-E3F6-4666-B45B-44522F2344B6}) (Version: 1.0.3.0 - Brother Industries, Ltd.)
    Canon MX860 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX860_series) (Version: - )
    Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0127.629.11510 - ATI) Hidden
    Catalyst Control Center InstallProxy (x32 Version: 2011.0127.629.11510 - ATI Technologies, Inc.) Hidden
    Catalyst Control Center Localization All (x32 Version: 2011.0127.629.11510 - ATI) Hidden
    CCC Help Chinese Standard (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Chinese Traditional (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Czech (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Danish (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Dutch (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help English (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Finnish (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help French (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help German (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Greek (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Hungarian (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Italian (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Japanese (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Korean (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Norwegian (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Polish (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Portuguese (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Russian (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Spanish (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Swedish (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    CCC Help Thai (x32 Version: 2011.0127.0628.11510 - ATI) Hidden
    ccc-core-static (x32 Version: 2011.0127.629.11510 - ATI) Hidden
    ccc-utility64 (Version: 2011.0127.629.11510 - ATI) Hidden
    Conduit Engine (HKLM-x32\...\conduitEngine) (Version: - Conduit Ltd.) <==== ATTENTION
    CyberLink PowerDVD (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.5009.52 - CyberLink Corp.)
    CyberLink PowerDVD (x32 Version: 9.0.5009.52 - CyberLink Corp.) Hidden
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version: - Microsoft)
    Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.7.2910 - Evernote Corp.)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.101 - Google Inc.)
    Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
    Intel PROSet Wireless (Version: - ) Hidden
    Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
    Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{AF162E20-417F-4946-A06D-65734984957F}) (Version: 14.00.0000 - Intel Corporation)
    Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
    Java Auto Updater (x32 Version: 2.0.2.4 - Sun Microsystems, Inc.) Hidden
    Java(TM) 6 Update 22 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416022FF}) (Version: 6.0.220 - Oracle)
    Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.220 - Oracle)
    Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Kobo (HKLM-x32\...\Kobo) (Version: 3.1.5 - Kobo Inc.)
    McAfee Security Scan Plus (HKLM-x32\...\McAfee Security Scan) (Version: 2.0.181.2 - McAfee, Inc.)
    Media Gallery (Version: 1.4.0.11300 - Your Company Name) Hidden
    Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
    Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
    Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
    Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
    Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
    Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
    Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
    Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
    Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
    Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
    Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
    Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
    Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
    Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
    Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
    Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
    Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
    Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
    Mobipocket Reader 6.2 (HKLM-x32\...\{342126E1-173C-4585-BFBE-3EBDD20E3E9E}) (Version: 6.2.608 - Mobipocket.com)
    Mozilla Firefox 32.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 en-US)) (Version: 32.0.3 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
    MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
    MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
    MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
    MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
    MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
    MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
    NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation)
    OOBE (HKLM-x32\...\{1B500D37-E7CF-480B-8054-8A563594EC4E}) (Version: 3.20.1018 - Sony Corporation)
    OpenAL (HKLM-x32\...\OpenAL) (Version: - )
    PaperPort Image Printer 64-bit (HKLM\...\{ABA4FAF1-6389-45F9-92CE-3914A4E5C471}) (Version: 1.00.0000 - Nuance Communications, Inc.)
    PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.00.11260 - Sony Corporation)
    PMB VAIO Edition Guide (x32 Version: 1.4.00.10090 - Sony Corporation) Hidden
    PMB VAIO Edition Plug-in (Version: 1.4.00.11290 - Sony Corporation) Hidden
    PMB VAIO Edition Plug-in (x32 Version: 1.4.00.09190 - Sony Corporation) Hidden
    PMB VAIO Edition Plug-in (x32 Version: 1.4.00.11300 - Sony Corporation) Hidden
    Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6526 - Realtek Semiconductor Corp.)
    Remote Keyboard (x32 Version: 1.1.0.12170 - Sony Corporation) Hidden
    Remote Play with PlayStation 3 (x32 Version: 1.0.2.06210 - Sony Corporation) Hidden
    Remote Play with PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.0.2.06210 - Sony Corporation)
    Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation)
    Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
    ScanSoft PaperPort 11 (HKLM-x32\...\{02570AE0-BEE0-4A6C-BE3F-D806E9F2EA17}) (Version: 11.2.0000 - Nuance Communications, Inc.)
    Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
    Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
    Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8312 - Skype Technologies S.A.)
    Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
    Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
    Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.8.0 - Synaptics Incorporated)
    The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: - )
    Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 1.10.0 - Tweaking.com)
    Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
    Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version: - Microsoft)
    Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
    Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
    Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft)
    Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{794A0574-4E2F-4D58-B2A0-D7460ACDC85C}) (Version: - Microsoft)
    Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
    Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
    Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{DCE104A1-1875-4469-A83D-A5BFA6C4640F}) (Version: - Microsoft)
    Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
    Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{334AA0A1-2BB1-4D74-B66A-2B2C4D9C2C87}) (Version: - Microsoft)
    Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
    Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
    Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
    Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
    Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft)
    VAIO - Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.4.0.11300 - Sony Corporation)
    VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{FF1FC66F-536F-46BD-98E3-D8DA127A810E}) (Version: 1.4.00.10090 - Sony Corporation)
    VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}) (Version: 1.4.00.11300 - Sony Corporation)
    VAIO - Remote Keyboard (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.0.0.12170 - Sony Corporation)
    VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.1.05290 - Sony Corporation)
    VAIO Care (x32 Version: 6.4.1.05290 - Sony Corporation) Hidden
    VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.4.0.11260 - Sony Corporation)
    VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.5.0.10140 - Sony Corporation)
    VAIO Data Restore Tool (x32 Version: 1.5.0.10140 - Sony Corporation) Hidden
    VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.3.0.11090 - Sony Corporation)
    VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.3.0.11220 - Sony Corporation)
    VAIO Hardware Diagnostics (x32 Version: 4.1.0.10120 - Sony Corporation) Hidden
    VAIO Help and Support (HKLM-x32\...\{884A242B-BE5C-4F9F-9177-F44156A5D081}) (Version: 13.00.0927 - Sony Corporation)
    VAIO Manual (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.2.0.11040 - Sony Corporation)
    VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.23300 - Sony Corporation)
    VAIO Media plus (Version: 2.1.0.23300 - Your Company Name) Hidden
    VAIO Media plus Opening Movie (HKLM-x32\...\{6BF03C88-C06A-48DC-B9A1-FE72B24E5FA9}) (Version: 2.1.0.14080 - Sony Corporation)
    VAIO Messenger (HKLM-x32\...\VAIO Messenger) (Version: 2.0.291.0 - DDNi)
    VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.4.3 - Sony Corporation)
    VAIO Quick Web Access (x32 Version: 1.4.4.3 - Sony Corporation) Hidden
    VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.0.09010 - Sony Corporation)
    VAIO Satisfaction Survey. (HKLM-x32\...\VAIO Satisfaction Survey.3.0) (Version: 3.0 - Sony Electronics Inc.)
    VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.4.0.12090 - Sony Corporation)
    VAIO Transfer Support (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.3.0.11250 - Sony Corporation)
    VAIO Update (HKLM-x32\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.6.1.02150 - Sony Corporation)
    VAIO Update Merge Module x64 (Version: 5.6.10270 - Sony Corporation) Hidden
    VAIO Update Merge Module x64 (Version: 5.7.13130 - Sony Corporation) Hidden
    VAIO Wireless Wizard (HKLM-x32\...\{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 4.0.0.02180 - Sony)
    Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
    VU5x64 (Version: 1.0.0 - Sony Corporation ) Hidden
    VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
    Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.3.0.0 - Azureus Software, Inc.)
    Vuze Remote Toolbar (HKLM-x32\...\Vuze_Remote Toolbar) (Version: 6.3.3.3 - Vuze Remote) <==== ATTENTION
    Vuze Remote Toolbar v9.6 (HKLM-x32\...\{873B2B61-0363-42EB-A573-52D1CE9996F0}) (Version: 9.6 - Spigot, Inc.) <==== ATTENTION
    WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.6300 - Broadcom Corporation)
    Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
    Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
    Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
    Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
    Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
    Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
    Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
    Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
    Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    WinRAR 4.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH)
    Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


    ==================== Restore Points =========================

    18-09-2014 10:23:04 Scheduled Checkpoint
    24-09-2014 09:00:14 Windows Update
    01-10-2014 09:00:14 Windows Update
    05-10-2014 03:57:25 Speed Cleaner
    05-10-2014 04:05:06 Speed Cleaner

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 20:34 - 2014-10-08 22:24 - 00450875 ____R C:\Windows\system32\Drivers\etc\hosts
    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com
    127.0.0.1 www.0scan.com
    127.0.0.1 0scan.com
    127.0.0.1 1000gratisproben.com
    127.0.0.1 www.1000gratisproben.com
    127.0.0.1 1001namen.com
    127.0.0.1 www.1001namen.com
    127.0.0.1 100888290cs.com
    127.0.0.1 www.100888290cs.com
    127.0.0.1 www.100sexlinks.com
    127.0.0.1 100sexlinks.com
    127.0.0.1 10sek.com
    127.0.0.1 www.10sek.com
    127.0.0.1 www.1-2005-search.com
    127.0.0.1 1-2005-search.com
    127.0.0.1 123fporn.info
    127.0.0.1 www.123fporn.info
    127.0.0.1 123haustiereundmehr.com
    127.0.0.1 www.123haustiereundmehr.com
    127.0.0.1 123moviedownload.com

    There are 1000 more lines.


    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {00919217-D341-4884-9707-328D7F8B43A9} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-12-06] (Sony Corporation)
    Task: {094BF456-5D32-451A-ADB6-CC4516178DFD} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{2AEE5DB7-EE78-4E41-AC99-BCAA3AE9F18D}.exe
    Task: {0AEE235D-D6D8-41C7-B7DB-7B6F072308E5} - System32\Tasks\SONY\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient
    Task: {0F078AB3-C3A0-4A10-9313-FA7584E352EF} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music Brassington => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2010-11-05] (Sony Corporation)
    Task: {15CC5B59-A206-4257-BC8E-33215B3D67C3} - System32\Tasks\dd061bac => C:\Users\BRASSI~1\AppData\Local\Temp\\setup3183765036.exe <==== ATTENTION
    Task: {16B5F230-DCE4-4194-9F25-B795400AA7ED} - System32\Tasks\68a2d7bc => C:\Users\BRASSI~1\AppData\Local\Temp\\setup4057634452.exe <==== ATTENTION
    Task: {2088B15F-140E-4C31-86E7-557ED3F0D3B5} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-12-06] (Sony Corporation)
    Task: {3E618079-877C-40C5-A640-45B202F4F8D9} - System32\Tasks\AutoKMSDaily => C:\Windows\AutoKMS.exe
    Task: {4078A2C0-56FA-4949-9D28-5CFF4FDCE1AA} - System32\Tasks\170ff18 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup24182552.exe <==== ATTENTION
    Task: {4C9D9EE0-368A-4767-A855-8EDF25D5F47D} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2011-03-04] (Sony Corporation)
    Task: {4E7EF08B-01DB-471B-B9CF-7A12E5EC2DCA} - System32\Tasks\b3e77c40 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup2493892288.exe <==== ATTENTION
    Task: {4EB6AC92-0CD3-4466-AF4F-9072784391E0} - System32\Tasks\4c3ad18 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup3556835992.exe <==== ATTENTION
    Task: {5B4BA378-35A6-4B8D-822B-EF81BEAE3DB7} - System32\Tasks\4d065a8c => C:\Users\BRASSI~1\AppData\Local\Temp\\setup1292262028.exe <==== ATTENTION
    Task: {63EDF59C-FA36-4213-81F7-541EC586C966} - System32\Tasks\0814tbUpdateInfo => C:\ProgramData\Avg_Update_0814tb\0814tb_{EB09082A-896A-4226-A6DD-C1B92C88E005}.exe [2014-08-31] ()
    Task: {64DAADF1-D81E-449C-90E1-7989AE9F0E50} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-11-16] (Sony Corporation)
    Task: {744475B8-7D30-48CD-B4CE-390BA16F8E0E} - System32\Tasks\Sony\ATI Catalyst => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-27] (Advanced Micro Devices, Inc.)
    Task: {786E4473-4958-4096-9EFE-99278E12D45A} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-11-16] (Sony Corporation)
    Task: {7F7E6A8A-AC40-4E8E-B00D-087932784072} - System32\Tasks\d5aaf7c => C:\Users\BRASSI~1\AppData\Local\Temp\\setup224046972.exe <==== ATTENTION
    Task: {812EF9BC-CCEC-4CE2-A7CB-461AF82297EB} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
    Task: {81A7EB67-4C54-45D6-ABD1-A7EF4E308476} - System32\Tasks\998e0174 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup940087288.exe <==== ATTENTION
    Task: {8D009563-56CF-45A9-87C7-776410EF2273} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
    Task: {9015928F-178A-46DD-B3E3-36ABF4F918E6} - System32\Tasks\Sony\Java Update => C:\Program Files\Java\jre6\bin\jusched.exe
    Task: {909D569F-9B1F-43C3-83AA-F28E6B7255D6} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
    Task: {90FBD0BB-BCD8-4814-ABFE-6B4C83421D4A} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
    Task: {9974F2FF-FBCE-4A0D-BD32-F3A40BBA80BC} - System32\Tasks\e31830ec => C:\Users\BRASSI~1\AppData\Local\Temp\\setup2991949420.exe <==== ATTENTION
    Task: {AAE1EAF2-EB5F-438C-8EDD-7B3BBAE7B456} - System32\Tasks\9c7a215c => C:\Users\BRASSI~1\AppData\Local\Temp\\setup989121628.exe <==== ATTENTION
    Task: {B2738E54-1A7F-4B36-B05F-64B5C8E93B00} - System32\Tasks\ec945e64 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup3444746468.exe <==== ATTENTION
    Task: {B5CD221A-ECE0-4E60-B45E-E0331A84E79B} - System32\Tasks\3753ee4c => C:\Users\BRASSI~1\AppData\Local\Temp\\setup928247372.exe <==== ATTENTION
    Task: {B7FB2A9F-D766-487D-98CC-0F7742D20294} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-12-06] (Sony Corporation)
    Task: {BBE8C191-2EBB-4104-BEE8-BA841F501147} - System32\Tasks\bfdaba88 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup3218782856.exe <==== ATTENTION
    Task: {C14C7B9B-D697-4C4A-A3A6-EF662A2CDDD4} - System32\Tasks\Sony Corporation\VAIO Update\Launch Application => C:\Program Files\SONY\VAIO Update Common\ShellExeProxy.exe [2012-01-13] (Sony Corporation)
    Task: {C8E4D1E4-35AA-4F2B-AC13-16C84F183048} - System32\Tasks\217100a4 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup4037957156.exe <==== ATTENTION
    Task: {CBEFFAC3-2C64-4077-B31C-8CB842FBB14E} - System32\Tasks\70c19cb0 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup1073667508.exe <==== ATTENTION
    Task: {D0BA0CFE-1572-4486-A845-E57BCDF90713} - System32\Tasks\VAIO® Messenger (Brassington) => C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe
    Task: {D7302D5E-5832-45DB-A0CC-532B4A58462E} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2011-03-04] (Sony Corporation)
    Task: {E456D98C-5C8C-4132-9FEE-0787C1E61D0D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-15] (Google Inc.)
    Task: {E7E106CD-DDFD-4802-96EA-E17E9069C763} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
    Task: {F00EBDE9-06F7-42B8-AF65-0B919E512E40} - System32\Tasks\49362f24 => C:\Users\BRASSI~1\AppData\Local\Temp\\setup1228287780.exe <==== ATTENTION
    Task: {F42AC765-0049-4A27-A44E-4F76B50CF458} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2012-01-17] (Sony Corporation)
    Task: {F7126705-A907-414E-8F47-DA715E818474} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
    Task: {FB426CC3-D90C-49EF-B6DE-2C71DF1294EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-09] (Adobe Systems Incorporated)
    Task: {FC1F2EA9-940B-4A2E-B024-5047A4BE89E9} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
    Task: C:\Windows\Tasks\0814tbUpdateInfo.job => C:\ProgramData\Avg_Update_0814tb\0814tb_{EB09082A-896A-4226-A6DD-C1B92C88E005}.exe
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
    Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\Windows\AutoKMS.exe
    Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{2AEE5DB7-EE78-4E41-AC99-BCAA3AE9F18D}.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==================== Loaded Modules (whitelisted) =============

    2010-11-02 11:58 - 2010-11-02 11:58 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
    2012-02-14 17:27 - 2012-01-09 17:44 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
    2012-02-17 11:22 - 2005-04-21 22:36 - 00143360 ____R () C:\Windows\system32\BrSNMP64.dll
    2014-08-12 00:13 - 2014-08-12 00:13 - 00159768 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe
    2010-11-02 11:58 - 2010-11-02 11:58 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
    2012-01-12 09:37 - 2014-09-11 06:30 - 02640408 _____ () C:\Program Files (x86)\AVG Secure Search\vprot.exe
    2011-06-15 10:32 - 2011-02-25 15:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll
    2011-06-15 10:32 - 2011-02-25 15:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll
    2014-10-05 23:43 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2014-10-05 23:43 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
    2014-10-05 23:43 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
    2010-09-10 07:47 - 2010-09-10 07:47 - 00135168 _____ () C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\Extension\MrsMpegParser.dll
    2011-03-03 18:26 - 2010-12-23 15:24 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
    2014-08-12 00:13 - 2014-08-12 00:13 - 00519704 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\log4cplusU.dll
    2012-02-17 11:22 - 2009-02-27 14:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
    2014-09-11 03:43 - 2014-09-11 03:43 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\e39f250f44c042610b447ddce43d1aa2\IsdiInterop.ni.dll
    2011-03-03 18:04 - 2010-09-13 17:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
    2014-09-28 19:54 - 2014-09-28 19:54 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (whitelisted) =============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== MSCONFIG/TASK MANAGER disabled items =========

    (Currently there is no automatic fix for this section.)


    ========================= Accounts: ==========================

    Administrator (S-1-5-21-4272480943-3451767055-1814136413-500 - Administrator - Disabled)
    Brassington (S-1-5-21-4272480943-3451767055-1814136413 - Administrator - Enabled)
    Guest (S-1-5-21-4272480943-3451767055-1814136413-501 - Limited - Enabled)
    HomeGroupUser$ (S-1-5-21-4272480943-3451767055-1814136413-1002 - Limited - Enabled)

    ==================== Faulty Device Manager Devices =============

    Name: Canon MX860 ser Network
    Description: Canon MX860 ser Network
    Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
    Manufacturer: Canon
    Service: StillCam
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

    Name: udfs
    Description: udfs
    Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Manufacturer:
    Service: udfs
    Problem: : A driver (service) for this device has been disabled. An alternate driver may be providing this functionality (Code 32)
    Resolution: The start type for this driver is set to disabled in the registry.
    Uninstall the driver from Device Manager, and then scan for new hardware to install the driver again. If this does not work, you might have to change the device start type parameter in the registry.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (10/09/2014 05:09:56 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

    Error: (10/09/2014 05:09:48 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

    Error: (10/09/2014 05:06:13 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

    Error: (10/09/2014 00:06:47 AM) (Source: SideBySide) (EventID: 75) (User: )
    Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
    Multiple requestedPrivileges elements are not allowed in manifest.

    Error: (10/08/2014 11:15:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

    Error: (10/08/2014 11:15:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

    Error: (10/08/2014 11:15:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

    Error: (10/08/2014 10:04:04 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: plugin-container.exe, version: 32.0.3.5379, time stamp: 0x54224e6b
    Faulting module name: mozalloc.dll, version: 32.0.3.5379, time stamp: 0x54221b67
    Exception code: 0x80000003
    Fault offset: 0x0000141b
    Faulting process id: 0x1588
    Faulting application start time: 0xplugin-container.exe0
    Faulting application path: plugin-container.exe1
    Faulting module path: plugin-container.exe2
    Report Id: plugin-container.exe3

    Error: (10/08/2014 03:11:32 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

    Error: (10/08/2014 03:11:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.


    System errors:
    =============
    Error: (10/09/2014 09:43:08 AM) (Source: NetBT) (EventID: 4321) (User: )
    Description: The name "BRASSINGTON :0" could not be registered on the interface with IP address 192.168.0.13.
    The computer with the IP address 192.168.0.4 did not allow the name to be claimed by
    this computer.

    Error: (10/09/2014 05:10:45 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
    Description: The Windows Update service hung on starting.

    Error: (10/09/2014 05:09:59 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
    Description: The WMI Performance Adapter service terminated with the following error:
    %%-2147467259

    Error: (10/09/2014 05:09:51 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
    Description: The WMI Performance Adapter service terminated with the following error:
    %%-2147467259

    Error: (10/09/2014 05:06:16 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
    Description: The WMI Performance Adapter service terminated with the following error:
    %%-2147467259

    Error: (10/09/2014 05:04:47 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Spybot-S&D 2 Scanner Service service failed to start due to the following error:
    %%1053

    Error: (10/09/2014 05:04:46 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D 2 Scanner Service service to connect.

    Error: (10/09/2014 05:04:14 AM) (Source: NetBT) (EventID: 4321) (User: )
    Description: The name "BRASSINGTON :20" could not be registered on the interface with IP address 192.168.0.13.
    The computer with the IP address 192.168.0.4 did not allow the name to be claimed by
    this computer.

    Error: (10/09/2014 05:04:14 AM) (Source: Server) (EventID: 2505) (User: )
    Description: The server could not bind to the transport \Device\NetBT_Tcpip_{A6A9CD57-31C8-474B-A6BE-561C58D1BC2B} because another computer on the network has the same name. The server could not start.

    Error: (10/09/2014 05:03:56 AM) (Source: BugCheck) (EventID: 1001) (User: )
    Description: 0x00000116 (0xfffffa8009c2d010, 0xfffff880045392ec, 0x0000000000000000, 0x0000000000000002)C:\Windows\MEMORY.DMP100914-57689-01


    Microsoft Office Sessions:
    =========================
    Error: (10/09/2014 05:09:56 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000

    Error: (10/09/2014 05:09:48 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000

    Error: (10/09/2014 05:06:13 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000

    Error: (10/09/2014 00:06:47 AM) (Source: SideBySide) (EventID: 75) (User: )
    Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2

    Error: (10/08/2014 11:15:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000

    Error: (10/08/2014 11:15:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000

    Error: (10/08/2014 11:15:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000

    Error: (10/08/2014 10:04:04 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: plugin-container.exe32.0.3.537954224e6bmozalloc.dll32.0.3.537954221b67800000030000141b158801cfe357aa664676C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll4e85fa64-4f69-11e4-a4d2-f0bf9717eb0a

    Error: (10/08/2014 03:11:32 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000

    Error: (10/08/2014 03:11:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
    Description: 1600000000194B0000194B0000980B0000


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
    Percentage of memory in use: 55%
    Total physical RAM: 4077.28 MB
    Available physical RAM: 1811.04 MB
    Total Pagefile: 8152.74 MB
    Available Pagefile: 5159.81 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.81 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:585.17 GB) (Free:204.42 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 07AF376D)
    Partition 1: (Not Active) - (Size=10.9 GB) - (Type=27)
    Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=585.2 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================


    aswMBR version 1.0.1.2041 Copyright(c) 2014 AVAST Software
    Run date: 2014-10-09 12:39:10
    -----------------------------
    12:39:10.054 OS Version: Windows x64 6.1.7601 Service Pack 1
    12:39:10.054 Number of processors: 4 586 0x2A07
    12:39:10.055 ComputerName: BRASSINGTON UserName: Brassington
    12:39:12.431 Initialze error C000010E - driver not loaded
    12:41:18.140 AVAST engine defs: 14100900
    12:41:20.667 Service scanning
    12:41:53.817 Modules scanning
    12:41:53.826 Disk 0 trace - called modules:
    12:41:53.831
    12:41:57.693 AVAST engine scan C:\Windows
    12:42:01.535 AVAST engine scan C:\Windows\system32
    12:46:51.607 AVAST engine scan C:\Windows\system32\drivers
    12:47:06.152 AVAST engine scan C:\Users\Brassington
    12:54:03.378 The log file has been saved successfully to "C:\Users\Brassington\Desktop\aswMBR.txt"

  2. #2
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi beuford23,

    My name is OCD. I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
    • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
    • The fixes are specific to your problem and should only be used for the issues on this machine.
    • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
    • It's often worth reading through these instructions and printing them for ease of reference.
    • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
    • Please reply to this thread. Do not start a new topic.
    • Copy and Paste logs directly into the reply window. DO NOT attach the logs unless specifically instructed to do so.

    IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.

    DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

    Please stay with this topic until I let you know that your system appears to be "All Clear"

    Important: All tools MUST be run from the Desktop.

    =========================

    AdwCleaner v3: Scan & Clean
      • Windows XP : Double click on the icon to run it.
      • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
    • Click on the Scan button.
    • AdwCleaner will begin to scan your computer like it did before.
    • After the scan has finished...
    • Click on the Clean button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a log file report (AdwCleaner[S0].txt) will open automatically.
    • Copy and paste the contents of that log file in your next reply.
    • A copy of that log file will also be saved in the C:\AdwCleaner folder.

    =========================

    Junkware Removal Tool

    Download Junkware Removal Tool to your desktop.
      • Windows XP : Double click on the icon to run it.
      • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
    • Shut down your protection software now to avoid potential conflicts.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.

    =========================

    Malwarebytes Anti-Rootkit
    • Download Malwarebytes Anti-Rootkit
    • Once the file has been downloaded, right click on the downloaded file and select the Extract all menu option.
    • Follow the instructions to extract the ZIP file to a folder called mbar-versionnumber on your desktop.
    • Once the ZIP file has been extracted, open the folder and when that folder opens, double-click on the mbar folder.
      • Windows XP : Double click on the icon to run it.
      • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
    • Double-click on the mbar.exe file to launch Malwarebytes Anti-Rootkit.
    • After you double-click on the mbar.exe file, you may receive a User Account Control (UAC) message if you are sure you wish to allow the program to run. Please allow to start Malwarebytes Anti-Rootkit correctly.
    • Malwarebytes Anti-Rootkit will now install necessary drivers that are required for the program to operate correctly.
    • If you receive a DDA driver message like could not load DDA driver, click on the Yes button and Malwarebytes Anti-Rootkit will now restart your computer and will start automatically.


    • Please click by the introduction screen on the Next button to continue.


    • Next you will see the Update Database screen.
    • Click on the Update button so Malwarebytes Anti-Rootkit can download the latest definition updates.


    • When the update has finished, click on the Next button.


    • Next you can select some basic scanning options. Make sure the Drivers, Sectors, and System scan targets are selected before you click on the Scan button.
    • Malwarebytes Anti-Rootkit will now start scanning your computer for rootkits. This scan can take some time, so please be patient.


    • When the scan with Malwarebytes Anti-Rootkit is finished, the program will display a screen with the results from the scan.
    • Make sure everything is selected and that the option to create a restore point is checked.
    • Next click on the Cleanup button. Malwarebytes Anti-Rootkit will then prompt you to reboot your computer.
    • Click on Yes button to restart your computer.
    • There will now be two log files created in the mbar folder called system-log.txt and one that starts with mbar-log.
    • The mbar-log file will always start with mbar-log, but the rest will be named using a timestamp indicating the time it was run.
      • For example, mbar-log-2012-11-12 (19-13-32).txt corresponds to mbar-log-year-month-day (hour-minute-second).txt.
    • The system-log.txt contains information about each time you have run MBAR and contains diagnostic information from the program.

    =========================

    Reboot

    =========================

    Re-run Farbar Recovery Scan Tool it should be on your desktop.
      • Windows XP : Double click on the icon to run it.
      • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.

    =========================

    In your next post please provide the following:
    • AdwCleaner[S0].txt
    • JRT.txt
    • system-log.txt
    • mbar-log
    • New FRST.txt
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  3. #3
    Member
    Join Date
    Nov 2007
    Posts
    30

    Default

    # AdwCleaner v3.311 - Report created 09/10/2014 at 22:00:00
    # Updated 30/09/2014 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Brassington - BRASSINGTON
    # Running from : C:\Users\Brassington\Desktop\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio

    ***** [ Scheduled Tasks ] *****


    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****


    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17280


    -\\ Mozilla Firefox v32.0.3 (x86 en-US)

    [ File : C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303\prefs.js ]


    [ File : C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\kztrwi7h.default-1406780185987\prefs.js ]


    -\\ Google Chrome v38.0.2125.101

    [ File : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\preferences ]


    *************************

    AdwCleaner[R0].txt - [18602 octets] - [09/10/2014 21:21:57]
    AdwCleaner[R1].txt - [1349 octets] - [09/10/2014 21:59:08]
    AdwCleaner[S0].txt - [16698 octets] - [09/10/2014 21:32:24]
    AdwCleaner[S1].txt - [1272 octets] - [09/10/2014 22:00:00]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1332 octets] ##########




    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.3.2 (10.09.2014:1)
    OS: Windows 7 Home Premium x64
    Ran by Brassington on 09/10/2014 at 22:18:24.58
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services



    ~~~ Registry Values



    ~~~ Registry Keys

    Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0A89EC6C-1016-4FDB-A001-51E61D7163C4}
    Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0A89EC6C-1016-4FDB-A001-51E61D7163C4}



    ~~~ Files

    Successfully deleted: [File] "C:\Windows\wininit.ini"



    ~~~ Folders

    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{000EAAA1-E577-4D4C-BFF4-474DB21C5F35}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{00839F23-3150-4264-B5C5-0CCE24C4FE48}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{0108F4B4-D273-47A4-B45A-88AC0F55199C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{010B895B-0415-4428-962C-F9AFEF0D1812}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{020F7C9C-3022-4006-A831-9AA47A373D8B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{036608C5-1807-450E-9478-3D6FD51FAB92}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{03F386CF-BF1F-4E11-9853-4EC587198533}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{046E5FAA-2558-4EA2-BFCB-06269F9735EB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{04C65E81-0F48-4B4C-9644-BF0EFC38C27C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{05CFEF47-8712-45A4-921C-4BC5B634AE5A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{067EA3D8-EED6-4AFF-851F-59E6691BC2A9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{07622AE7-8F5F-46FE-8FB7-4F045E3015FC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{079D609D-9BF0-421C-BCAB-141D7BCDA537}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{07BF8B88-2115-490E-B73A-38784A8B46A1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{07CF76F7-37F4-4366-B6AA-51D218D2D45E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{08366F53-7753-47CF-8D23-4B0A17A8A3A5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{089560AD-075D-464F-818B-424E3CA8F2D0}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{08EDFE34-997B-4C52-AA10-50E94E84556C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{09F793BC-997E-4B92-BE49-0D9E0B8A9DB2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{0D65CBC3-3B17-4F2A-A94A-954ADFDB3A25}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{0E44C43C-0E66-47AD-8496-9490DBF04272}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{0E462913-460D-4D7B-B148-35AAB31A3A30}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1168A918-468A-4218-9B4C-E124154292F2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1341A1DE-A340-407D-8FD1-63D6271327A8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{13B7FAFD-DC62-4660-91B6-082FB7E298A8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1405718B-E1ED-4A78-B0E8-D3C8B4CE608D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{14B0DCFD-6DA5-4E0F-869D-75DACEA97C56}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{14D2393B-9111-446E-AC4F-5A616963A8CC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{158E011C-6ACD-4D39-AF80-6AE273782F36}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1603BD67-C963-41CE-B492-BC8A6DF01221}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{160F5A66-0D3D-43BA-ADDE-11CFE05BE21E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{16B9D779-AC12-4D63-8C3F-53582835F2AF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{179F5516-CA6F-44F6-9878-3DC0158DB12A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1860D2F0-F286-4DAA-931F-D436458F1063}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{18BBBB84-C1EE-47E2-9817-5A2883BDA1B2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{19AD35D8-A641-4BC5-81F3-3921B00600C4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1A82BD83-5CDB-49DC-8C50-CAB816A92553}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1AA563B7-105B-42F0-965D-DD41A95851B4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1B9EFA6E-54A1-46FB-B6A8-708FF60F6B31}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1BA212DF-C71E-44A8-A677-1B6EC5388320}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1C4586E9-91BB-4FE8-8008-EA2747A416D4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1D756423-817E-4A1C-B849-37AD6693E4BF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1E1408B7-69DB-4D8E-9525-8BA1D121B958}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1E45A426-58F3-460E-BAB9-5DC112738C92}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1E58FFB9-65EE-46D9-933C-1D9DD4BFFE26}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1E878967-C18F-4E66-B14C-801BC14BB11C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1F096A1B-9AD7-44DA-BDCF-D1ADF53E65C9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{1F74AC82-D860-4B51-8F32-E8DAA527EE02}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{20E05987-7F96-4EE5-A890-3C61EACA7321}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{20E4AE86-C24E-4DC8-9768-258CE79D0043}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2114BCCC-377A-4F03-BC01-01022ACA45D2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2131817D-3B5F-476F-86F3-C52607C18730}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{224FCE96-AAD1-46EE-9C09-1F1BB7652DD3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{243C5B61-D92A-4E3A-98A0-87AAA98419D1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{24F3FB9D-2F6E-4751-8FC9-489FE168EE62}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{267E8885-6AC1-4D85-8AD8-F6CD6FEFB575}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{26BD9D02-63DE-4B1D-ABBC-2C995B1610C1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2706E6F5-4B7B-496D-86CE-47D9E28FC4C1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2783042A-D43E-4A01-B397-983E503FEE39}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{27B4FF7E-94E4-43CC-8340-68CE10009877}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{27D7FCBE-7A23-4941-9054-CBB58B1C1562}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{281775B8-0B35-4199-83F1-2F3644148FE1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{284A7145-F2AB-4F10-BBD3-45A343028C97}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{28583EA9-6768-499C-BF2F-59597BAD1156}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{29AE0937-5351-4278-9147-4EE4424F2713}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2A7035D2-575D-444F-86C5-524CB6A78C4A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2B5E8E86-A055-4FE2-99CC-1E0B34FF4645}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2BD391A9-8A51-40DC-808C-A913E77BB4B3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2C1EF740-4B12-49E4-B5CA-521FCEFEABF1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2C406810-B56B-4A8C-823F-207347250D4A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2C5C7CC1-7E5E-4CEB-90B3-8EE433D4078F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2CE0A41F-CBDA-4BB6-8790-EC59BFA638DB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2E546164-3810-4B08-A01D-700353117628}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2F042B69-D9AF-475B-817D-EC5DCD253D9C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2F76D08D-F779-411A-87F2-7905423BDDB8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2F7AB179-1DCD-486B-9A25-722FD028D008}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2F887008-3706-4694-B326-A47B629E12F8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{2FA14D4C-9744-4BFA-B6D6-1557F4A51983}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{302F00C9-5CCD-410E-8500-AB88C71600E6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{3097D400-CCE2-40C5-AE13-A317738DB733}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{30F43D20-2301-41D0-941C-89513533AD0E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{312B7C88-0A97-436C-8607-CBD1AF3C340F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{313D1981-72D1-4A2E-862E-CCEF988B99E9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{3162B650-DBA3-4EEC-97FF-ABB6BE2D642F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{318AD1DA-91BF-4208-848A-D6A03DFEF1D2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{31FDD9DA-0CA1-48E2-A358-E0BC4E49FE25}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{32EAE9DE-25AF-489F-94E7-718B9FE9E676}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{3452C174-78E1-4F4A-92D7-E506387B0DE2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{35EBE906-72E7-41FE-AD3D-00D89ED86472}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{36C33784-6796-45D0-839F-E759387E2943}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{375DF251-B11F-468E-8C3A-82FB6EEF0838}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{380F0F9A-6CA9-488F-A7EA-206D6AE37B44}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{38AB84F9-A695-45EF-87ED-652CEAC40B34}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{38D4D1FB-D415-4B49-A025-419223930B57}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{38DD5BD8-B9A6-4555-ABFA-A86D1FBA8D75}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{394FB997-93A1-46DE-95C1-3CAAB3EA8C40}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{39C78BFA-BFC2-4428-A9FA-D275AAACE386}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{39CD7B25-3020-4F96-BC1C-BFF2259EA339}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{3BE43044-DE0F-478D-8AE5-2BDF106D5CDA}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{3CFA82DC-E521-40B3-B2BB-422FA20FCCA9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{3DE3F664-9AD4-49FD-8A15-4BADA7492C5A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{3EC0FE99-4CDC-454E-828B-98265202BC10}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{40042F8B-12E0-4288-A16C-B8E86D67C18A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{40401D12-747D-4332-9795-5A8D1AA83196}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{40C23006-D7F8-41B4-97E8-13669A9DD63E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{411A623F-A24A-4C29-9FAE-E9E9C22A893D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{411DCC05-8735-4096-99F7-3E7D3CB0A31D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{412D7311-ACEA-4302-82E5-0E5651412E0B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{415AE143-494C-4E54-8848-13BCF1280059}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{41C4ECA0-0F1F-420C-BE9A-77C5FD7D5C06}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{41DAB78E-A029-45BD-942F-655831EF1E6F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{41DC9C93-2F4E-4A85-9BB4-F6D9651866C0}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4214E1F7-4442-444D-B760-60BF8C767DC2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{429AA0CB-3F51-4F66-89C1-845FBE5DDDD3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4469902F-9827-49D5-BF08-5D928C8E0CDE}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{452F4D96-F44F-41B8-85C0-989FE5AACCEC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{453065DF-A26E-471D-A60C-439CEC81C321}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{45D3D370-006A-4CFD-B12C-B0FF0B614B48}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{45D48977-0913-41CA-AD53-A88C4410FE68}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4623D294-AC13-45B2-9AB1-91251A2558A1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{46D60431-69BE-4BF6-AEA0-814111A69541}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{47141F87-9A32-4755-9E54-070DEA2DBA32}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{472610FE-A59C-4A55-AC30-908BEA46826F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{480787A1-1C28-4B7F-8E55-12DC146EE225}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{480A1150-D081-41A9-9BE3-458D94F97F08}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4823A99F-13A4-4662-AA2A-4483AEC431A1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4850422E-1B36-48F4-877B-E177E255E686}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{49083321-1CCB-480E-83DF-4F60FA42E73C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4ACD6816-E9A4-4C8D-BF1B-A515DD0861D2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4AD0B882-1BF9-4387-9471-66EC3938905D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4AD4860C-40B1-443E-AC89-4EBB4245CA23}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4C14CAA6-FA6D-4DC1-AEC8-696CDB86FCD2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4C507178-C130-45B4-81AA-65BDB8CA70C6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4C87DACF-8075-49D9-AD65-E92AB321952A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4D5DE67B-21CD-4E7F-8ADD-9D4DE79FE27D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4E744B6B-A908-4538-BB54-0714CCC5F4FA}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4E90E850-0AFF-4BD2-84BC-B9F4E478F2DF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4EA009F9-3C12-432B-8CC9-91A0E30E13B5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4F032CDB-D7E8-4721-B4C3-110CD956763A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{4FF869CF-56BE-4485-96F7-D7DED1D57829}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5134DDF3-74B4-4E1F-B36B-0A7F8B43BC44}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{521142F8-497D-4D58-B725-340F2A1C3420}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5331FDD4-0816-47B2-BCBE-4A4036DB17D4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{534C48A8-D6A3-4B43-8AAA-517B79F75777}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{53A871BE-9B46-4F1D-B480-45563BBCE3E7}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{542B264A-2C51-475F-8E39-0F420AA9EC78}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{548A1DCF-F067-4E45-856D-A8A676802D71}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{54EAB25C-09BB-4F2D-A259-35938421F0FB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{563D5FC4-643C-4E4E-A206-45B8A111C669}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5763600B-D4A5-4D4D-B492-3ABC323599B9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{57E0B54E-3946-4A41-BAF5-F1AB914F2693}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{589C9B5D-0FCF-4851-886F-0C576C0F0B26}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{599E2363-D8BC-4249-B4EA-FE9C25CA1B56}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{59CA2965-3EF9-4E71-B75F-C01B7237184F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5A1B32CA-4841-41DA-A6AE-8816F3B42FBF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5B58FA8E-D793-4A14-847E-17CDA4BF6AAF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5B6E9DBD-D374-430D-ACF5-7454FE1557D5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5BE222E9-A81B-484A-A961-F206E9FD1A4B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5C3D3700-5A42-465B-8009-A543BB18CD17}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5C930329-3C0C-489D-B939-3A3FA1F72F32}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5CE4D517-CECD-49DA-9865-BD080BED057C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5DB2F9AC-1E81-4DE5-8F06-24F901E4F1AB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5EB0DCEC-3BDA-4AB6-9FD9-152F3E0B14DB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{5F2FD867-D777-4767-AB43-A55957CBD44B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{60761CD0-086E-4158-B325-65581CE9C541}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{607A7BED-AF20-4F74-974A-C614D38A3027}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{60F172E1-FD48-4EC1-9647-F350657312F6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{611B2400-A8CF-4A04-A6B5-37A59899D34A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{62565F88-7626-4DCA-98BC-C062AB068893}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6264275E-BB5C-495B-AABC-D37D90ACE18E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{62776502-BBE8-4CA8-9755-A28E6CB539E3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6345B291-5835-440E-9552-8A2745B7AD1B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{63627CAC-10C0-4EE2-99B7-1E51B00FC716}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{63E9E4D8-01EE-4CA2-897B-32021A7161C0}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{64E0D5BD-C239-43B7-8B2C-1D923974876E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{66416B0C-87BF-42E3-B735-FFC3AA81202D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{665C8013-E2CC-4BF8-BFB7-75A139727CFC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6712A8F7-C79A-4375-9AC2-DE7DEEBA79BC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6746A9E9-3327-4741-B3B6-3C198CE1A2A7}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{684B6403-553B-46D4-A60B-D6A16A545649}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6854DCAD-14F6-434A-BE8D-2C0D88685AC2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{69DB23A8-F8D2-4EE7-8592-FE9A5BD07AE4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{69E0CCA3-0E02-43F0-B89C-CAF4ADEA0CDC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6A46AF63-FECC-449A-907C-0440428ADBF4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6A99696F-B0A3-4C69-B30B-EB3478971265}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6B1B2BF4-E085-4D29-AF4D-2842507DC96C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6B80D58E-8451-4592-8AC3-665F8DCA03F4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6C4E0C0B-AD9C-4854-BE8C-9A462453418C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6C7E0BAC-9EE1-4DC8-BE7B-63E72E4E6296}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6D390FEC-8BED-4896-90FC-CFFA1D8071E3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6E5751CC-F330-49FA-9A83-E92E663DAAA4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6E6D3F29-0525-4E47-8632-3A02B081B13A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{6F3F5DC0-C191-4CC0-90D0-F9B56801A2D3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{70D1CFFC-8900-46E7-AC9D-9794D002EECF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{71BE6F96-3057-4966-8896-ABC7F880B3E7}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7225DCA0-4E9E-4B1B-97B0-6BD2DD101B3A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{75E9A2FC-71C9-4708-9733-E8A1AFFE1A87}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{774ED2B9-00E1-4788-8DE6-BF064602D09A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{776CD0DA-5E0E-45C9-B8ED-5A6FCF5FEB59}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{77DFB4CF-26BA-4C0D-851E-39F89CA1D40F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{77F46D11-013A-42CE-B1C1-6DFB1E91CFDC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{78AF05FC-C0B8-429C-9A2C-DB95601F5F12}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{78F71C11-535C-4DB8-86A0-2A4CABC7BE22}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{793C20F8-37FE-484A-BD56-05589956EE3E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7965468D-71B6-42BF-8686-35288311609E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7965C9AC-04F9-4F45-A43D-03838A2B7DE4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{79782B9A-5388-47EB-9298-0295D82C5812}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{79B99EB7-1C48-4CDF-A411-3FF0250510F0}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{79EA5830-8E82-4300-AA2E-8B65B0855696}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{79F6D598-7784-4A70-8BF8-19A92B991988}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7AE7293D-647F-4664-B137-9E9DE5B22EAB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7AEE8488-8311-4F73-BA4D-9FBAF23B2E55}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7B286796-814D-46F1-B407-05AA0E2B02EF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7B743312-D389-4BAD-8347-B8374F21A5E8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7BA7A979-1130-48A1-969A-3FB77BD22F58}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7C4AEF7D-426E-4113-826F-A1191E4399D8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7D404A01-7CE8-4F77-A63A-E2FC3A091293}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7FA54243-74F9-4B80-93CB-66C890DBE6B4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{7FD92CFA-D6E2-4BDA-928B-D3E8BBFE72C4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{800630D8-E1B6-4724-A2ED-AE1D42DCDC67}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{80F2C9E7-7336-4CC6-A231-7C22E961D679}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{81EC3FE9-DE2C-444F-A20E-FB049107C284}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8314C86F-0181-4D5B-A2AB-74420C8BAB5C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8357607D-68BF-47A9-BF42-88BD6EEF9F83}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{83A2759A-8374-4C99-8663-8B4D8E5F6331}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{83F2ADEE-2F18-432A-A141-8FA87DE8FC4C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8422035B-0214-4B55-A682-C9FA1D1264C7}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{84F2D742-AF4E-4FC0-8A72-C28BEE449F3E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{851210A1-46E7-429E-AFA9-133AFA23AB55}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{85C7D5B1-5D46-4713-83B2-7A6E33D72F49}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{86C294D3-2842-4526-B9CE-97C8BB380CBB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{87E67419-C194-40C6-ACD5-1AACE10DDC75}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{884080DD-6A3D-4258-8755-43474168D215}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{88BD8AF8-BEB1-4621-9D63-11AF7D8FEEDF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8B24A40B-2B64-41AB-9C46-3B840E48D3B5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8B77E573-C7F0-41F7-9492-D89C70324CA9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8C65E3E7-FBB9-4835-A4A7-2E612B7DFB03}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8E1BD71D-0113-4F32-929B-03F9BA406F96}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8E2016EE-7AE1-4927-97AE-4F0F3D0DF43A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8E7FF779-3571-4B7C-950D-66D35E9BD25F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8EF39923-6E09-4065-87A8-402BEC8388FB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{8F9E5EB2-04FE-4DF3-A55E-994D08E9D492}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{91064AE4-241D-45D2-84A4-430679870912}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9169D721-DAA0-4EA4-B956-FB79F207E710}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{91B4F302-5BA2-4F67-9271-AE180C61D56D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{91D01208-4B5A-497D-BFA8-6EA19720A9B5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{93A5C524-AA43-4A08-94BA-1F8488527D84}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{94A0417B-D264-42E7-BD1A-B85E277DBBE7}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{94CB93DE-28D8-4E08-AD8B-1E9246E4E9B1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{95C62141-290F-4C1A-B74C-509AEA0ADD18}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{95F19820-F2A2-4D0F-B6FD-229A842AC2B3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{97373A60-B0C2-4F26-AE14-FD163C8BFE0A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9814928E-C876-4009-A86F-6A7A550C16D3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9933E2B6-7C38-4738-B70D-775457EE94E4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{99D73550-C6A7-4305-8E67-CB342CC1A986}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{99E0EEB8-9C7E-441A-9EDC-72C71C1C3FC4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9A669C2F-245B-48B0-82F9-EE794B0B82C5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9AC3D89D-88B3-4407-8DF2-6287703799CF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9D5CC932-B090-4B11-9DE9-909083124E4D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9D9A40B1-0608-4B33-93BA-338951839789}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9DA11182-BFBF-4E7A-A0DA-0D66DB9A9490}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9E49A17F-214C-432E-B4C3-C9B6F54C2471}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9E5BE167-FDB4-4C39-81E6-104AD7821F1A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9ECECB68-5A8C-467E-9EF8-34B55019284D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9F07C5E4-1B70-44D8-9E65-C317839976B5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9F28CCE6-1F97-4972-B491-CDBE8AF7EA51}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9F89BAB7-7496-4DC4-AA49-446A5DEB3C16}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{9FC7F9D5-0BBD-4B4A-826F-516A4090C216}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A139B61E-4C24-472D-B471-8CA45A3A0B85}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A18D5894-8A59-4026-A06C-919A664E1652}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A2AB492A-8A65-424E-9D3E-8911FAC3E726}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A2D43AC5-0638-4631-B554-C5193A7175B6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A31E0AFF-D15B-4F0B-B571-BEABB24AE23C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A487F3D8-FCF0-4F84-9CA6-B35E4924F45A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A5DF63A3-6DE7-4855-BB37-379EB82961A4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A6EF5BCF-D5ED-4116-AA9E-33A3748063CF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A7A5B1D5-813E-47C2-B8D6-304835DADDAF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A880243E-85C6-42B8-936B-1095C90C9241}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A95B7332-FB38-4BCF-B5E0-5B074EFF8F19}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A976A4E2-F5C8-4F48-8C94-393B5958911E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{A9B5722D-8DCD-4F05-8E23-4E63E3C866A9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AA99E3CD-1AC5-4830-843B-384A08586084}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AAF72D84-63AC-414C-A14E-10BB435662E8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AB5F4816-688B-4E28-93E7-99B4E022AB76}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{ABBB3EDB-365D-432E-A55E-BF64091E9CBF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AD5703BF-B469-4914-A414-054E10FA6A81}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AD9BC95C-6C57-4B8B-B4D4-FFB7C5E92DC7}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{ADBF2997-344E-4D00-AE27-18B47E58FF3C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AEBD908C-0193-4FC5-A2F3-7890E1518DB1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AEC7F37B-53FA-4222-A04F-869BDACEFB50}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AF6CE519-9381-4665-8356-3717625055A2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{AF7DDCA9-52ED-4A2F-9F86-7F1FBAD745FD}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B0D7DD38-02D5-42B8-846D-29A3A5A03A4F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B1062C20-C561-467F-BB9E-3461CF8F44F5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B1E28E27-337D-4CF5-A03A-90A3C5FF7E71}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B3ED3361-31B8-415F-9FF5-0A72FDC93DD7}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B4350009-1057-414D-B297-28C29745B08F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B440D049-8438-4636-A5E5-7595BCC1B4CB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B4B36054-9412-4F75-A751-CC50B3FF70D6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B4F54C14-5E41-4216-9165-C60A64E05631}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B6168AD4-D37B-4028-8A5E-D9AD2E91F1D4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B6E4B07C-332A-4F5E-8189-D52F1932671F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B7038F41-88B8-4163-AA5A-B9DBC6067301}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B7B137CA-F017-43F9-948A-EE1298951F95}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B7D2033C-7B24-4386-A476-C4373AC5792E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B93B1203-D20B-4CAD-AA81-B5A63DA51A8D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B93FD2D3-B722-4ECC-BA88-F9CDABC2681F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B9D467FE-AB01-423D-BD83-430F0154FC68}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{B9ED5C97-7946-4102-8BC8-AD64A0AB9FDE}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{BA8083E9-2345-45F6-86B3-A4118A3B7572}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{BC31BF94-25C9-4E2D-86C5-1EA9E0C7ACEC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{BD6F2D0D-3C40-44F5-9710-116D66BF0DAF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C0372DBF-E4C1-46E1-A1FE-BE9BEF126758}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C0D48D2D-10C7-4E35-A46E-3AE86342FE39}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C1592AA8-3168-49FC-8A76-DFD9051775EE}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C21A2722-28AD-4FD2-902B-E03909D82282}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C4CB45C3-CFDF-4011-82EE-51E167DDCC40}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C4E57C47-BCE9-438E-A0A1-84DC9DB8E9E8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C5217E1E-4F55-4B83-824C-EF8FA66D23BC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C5F001E3-4873-400D-B9E3-F3D5B3597C42}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C60D6DB1-A65B-4C13-AB75-2DEFA569E832}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C6E0F003-9E5A-4604-A845-BCD2431DB466}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C740CC79-3505-487B-A9F4-A52811D97EAF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C8C52BF0-0D5B-4F04-8806-1E93202E25C8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{C900341D-0930-476D-8E71-CB5F8B09DE40}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{CA41A7BB-5D18-4E05-9FBE-5D839F549E68}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{CA8E00F3-4D21-4B15-B55B-ABB4839719A1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{CAB05F03-DA72-4EAB-BE98-2C92E2109B7B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{CBEBB1AB-8395-48B5-9FB2-8EBC41395A63}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{CC76FD0A-66B5-4681-8C07-0FE023FB04B8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{CC99800B-3D4B-4E8C-8B33-F4ED66CB06E6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{CD84ECBD-2558-4ACC-A5DF-CC7D8962EE0E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D0106638-C71D-4270-AFE3-D82C4002C63A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D0526573-47EC-4000-9BFD-3502BC166143}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D0C1438A-49B7-43CD-881C-DF0696655B1F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D3C13F31-8791-49EF-83D6-17B04910366B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D3E908E8-F157-4FC5-9EC1-A96BAAFDB365}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D46BD8DC-7C78-4FA8-965D-EF84AEED61AD}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D4AA230B-E30C-444C-A822-C540F76A64C9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D4F3378D-A703-4C30-932B-9E5E8D729CCF}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D542E09A-7FAF-4187-A903-084CB189D37E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D6FD684A-0C30-4440-96FE-F13230552ACC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D7478DFF-AEEB-4B5F-93DB-16AA3E19D439}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D79A77FA-1109-4CCD-8462-4C75C5666EE9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{D85D5894-B523-4FBD-A0B8-D7D64F3E0FB1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DB026CF4-1CD3-46DF-B5E9-8882A1FDFEB6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DBA575AC-74EE-4C21-BAE5-D50003384CF8}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DC12B49A-BFBF-4C2E-BED2-1D6B5CF6BE9C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DCD38C34-536E-4F2D-9E9F-B9FB262C8C15}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DDC2F301-4D1A-45FA-A2C4-0F129B047C19}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DFA09B5D-0195-46C1-A198-39342FD13156}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DFDB50AF-CEA9-470C-AB7B-1945DBB72C8F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{DFFCA440-DA6C-41AA-9113-C69BF97355E1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E0B5B333-35A1-4B4E-9996-B04AC01D672E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E0B8ED41-FAF6-4B82-BD2D-A8B058E5A0B1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E0DE9CE6-ACBE-4CC8-A0BD-851EBA520A0D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E162044A-FEFA-4E26-9E51-0D2075CCBE7F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E25579F3-EF7D-424E-BE7A-521ED01C659A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E29FD8C9-30D7-4941-B237-05B633BFFE01}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E577F7B4-25D7-46AB-BC6C-691D145643A6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E5C27D2D-540E-496A-9EF7-9EEB78274F03}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E7EB8C53-ACAB-4EFE-BB57-E8C92646A052}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E9609695-6452-42AF-B52E-4130932F92C0}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E9A05F5A-30B1-4851-902C-40CE6393B0A5}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{E9D739C2-00FA-4127-9EB4-793E8269D937}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{EADA6983-91BC-4B53-A9ED-869B13D6DB63}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{EB205AD2-060A-44D7-9D6D-124126925FFB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{EB482536-125D-45BD-9519-4D3ACF9086D1}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{EBE32FB4-537D-4E51-927A-5700B75EE28B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{ECC30214-0632-471F-B257-6C5D081928C3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{ECE5F347-AC04-4092-9F05-3CBB84DEA888}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{ED916B3D-B9E7-4BE5-B12F-9DD6AADF05F4}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{EE98B61C-9745-4FF8-AA0B-A8130A81BC97}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{EFB66C5E-1F05-4157-A52F-7735E4FDF63C}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{EFFFA623-6317-4C6F-95C6-603EE8C51A41}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F0707958-2826-4BE0-9CBE-713BC453BEA3}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F074EC0A-C154-4EA7-82A6-3863243B7BB2}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F0C8C0DA-CB66-4AA7-AE78-45CE0685485B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F16D1D86-4951-403E-85B5-EED6E968764A}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F2B9A2C4-A417-4DBC-923C-B3FB871E88E9}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F2F1D609-9D07-4765-9290-9803AF53EE3B}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F38BD045-B26F-4A60-8549-E776A365BD7E}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F3C08C28-97E4-482A-BB61-8367E0DBBBB6}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F3DD00E4-6292-42EC-ADFE-52F815313528}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F5AA5B81-CC4D-4260-847C-DE4E49BDC00F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F5E14BA2-FCE5-4D78-A2CB-2C01248D0042}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F60D8604-1D66-4E08-B57A-0FAB17D980FC}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F8A8BB9A-6EAA-40DA-955E-136577C9118F}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{F9F2ED15-3BE2-4C91-B952-A75D514882CD}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FAF00477-66AD-4142-ABDA-924461901796}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FB03ADCC-9FD8-4636-AF54-4EF82871201D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FB46CED6-A667-4F58-9DE6-18F925876720}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FBF0728D-954C-484D-9FFD-B6782B77E1FB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FC1C5698-F685-4249-99B1-A8E0FE57DFC0}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FC8019CC-2919-49B2-93CD-FBFC11BDDC8D}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FC995C70-27CE-462F-8867-C954A65CAEEB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FCEF5FFF-B24F-476E-86C2-BC641E4AA9FB}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FDDF5371-DB88-4C2D-BEA6-9EB853690922}
    Successfully deleted: [Empty Folder] C:\Users\Brassington\appdata\local\{FF448F1D-C43F-466D-A636-78F4E3240B91}



    ~~~ FireFox

    Emptied folder: C:\Users\Brassington\AppData\Roaming\mozilla\firefox\profiles\cwams0dh.default-1398958773303\minidumps [16 files]



    ~~~ Event Viewer Logs were cleared





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 09/10/2014 at 22:21:06.51
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~





    ---------------------------------------
    Malwarebytes Anti-Rootkit BETA 1.07.0.1012

    (c) Malwarebytes Corporation 2011-2012

    OS version: 6.1.7601 Windows 7 Service Pack 1 x64

    Account is Administrative

    Internet Explorer version: 11.0.9600.17280

    Java version: 1.6.0_22

    File system is: NTFS
    Disk drives: C:\ DRIVE_FIXED, Q:\ DRIVE_FIXED
    CPU speed: 2.294000 GHz
    Memory total: 4275339264, free: 2217750528

    Downloaded database version: v2014.10.10.03
    Downloaded database version: v2014.10.08.01
    =======================================
    Initializing...
    ------------ Kernel report ------------
    10/09/2014 22:55:00
    ------------ Loaded modules -----------
    \SystemRoot\system32\ntoskrnl.exe
    \SystemRoot\system32\hal.dll
    \SystemRoot\system32\kdcom.dll
    \SystemRoot\system32\mcupdate_GenuineIntel.dll
    \SystemRoot\system32\PSHED.dll
    \SystemRoot\system32\CLFS.SYS
    \SystemRoot\system32\CI.dll
    \SystemRoot\system32\drivers\Wdf01000.sys
    \SystemRoot\system32\drivers\WDFLDR.SYS
    \SystemRoot\system32\drivers\ACPI.sys
    \SystemRoot\system32\drivers\WMILIB.SYS
    \SystemRoot\system32\drivers\msisadrv.sys
    \SystemRoot\system32\drivers\pci.sys
    \SystemRoot\system32\drivers\vdrvroot.sys
    \SystemRoot\System32\drivers\partmgr.sys
    \SystemRoot\system32\drivers\compbatt.sys
    \SystemRoot\system32\drivers\BATTC.SYS
    \SystemRoot\system32\drivers\volmgr.sys
    \SystemRoot\System32\drivers\volmgrx.sys
    \SystemRoot\System32\drivers\mountmgr.sys
    \SystemRoot\system32\drivers\iaStor.sys
    \SystemRoot\system32\drivers\amdxata.sys
    \SystemRoot\system32\drivers\fltmgr.sys
    \SystemRoot\system32\drivers\fileinfo.sys
    \SystemRoot\System32\Drivers\Ntfs.sys
    \SystemRoot\System32\Drivers\msrpc.sys
    \SystemRoot\System32\Drivers\ksecdd.sys
    \SystemRoot\System32\Drivers\cng.sys
    \SystemRoot\System32\drivers\pcw.sys
    \SystemRoot\System32\Drivers\Fs_Rec.sys
    \SystemRoot\system32\drivers\ndis.sys
    \SystemRoot\system32\drivers\NETIO.SYS
    \SystemRoot\System32\Drivers\ksecpkg.sys
    \SystemRoot\System32\drivers\tcpip.sys
    \SystemRoot\System32\drivers\fwpkclnt.sys
    \SystemRoot\system32\drivers\volsnap.sys
    \SystemRoot\System32\Drivers\spldr.sys
    \SystemRoot\System32\drivers\rdyboost.sys
    \SystemRoot\System32\Drivers\mup.sys
    \SystemRoot\System32\drivers\hwpolicy.sys
    \SystemRoot\System32\DRIVERS\fvevol.sys
    \SystemRoot\system32\drivers\disk.sys
    \SystemRoot\system32\drivers\CLASSPNP.SYS
    \SystemRoot\system32\DRIVERS\avgrkx64.sys
    \SystemRoot\system32\DRIVERS\avgidsha.sys
    \SystemRoot\system32\DRIVERS\cdrom.sys
    \SystemRoot\system32\DRIVERS\avgmfx64.sys
    \SystemRoot\System32\Drivers\Null.SYS
    \SystemRoot\System32\Drivers\Beep.SYS
    \??\C:\Windows\system32\drivers\avgtpx64.sys
    \SystemRoot\System32\drivers\vga.sys
    \SystemRoot\System32\drivers\VIDEOPRT.SYS
    \SystemRoot\System32\drivers\watchdog.sys
    \SystemRoot\System32\DRIVERS\RDPCDD.sys
    \SystemRoot\system32\drivers\rdpencdd.sys
    \SystemRoot\system32\drivers\rdprefmp.sys
    \SystemRoot\System32\Drivers\Msfs.SYS
    \SystemRoot\System32\Drivers\Npfs.SYS
    \SystemRoot\system32\DRIVERS\tdx.sys
    \SystemRoot\system32\DRIVERS\TDI.SYS
    \SystemRoot\system32\DRIVERS\avgtdia.sys
    \SystemRoot\System32\DRIVERS\netbt.sys
    \SystemRoot\system32\drivers\afd.sys
    \SystemRoot\system32\DRIVERS\wfplwf.sys
    \SystemRoot\system32\DRIVERS\pacer.sys
    \SystemRoot\system32\DRIVERS\vwififlt.sys
    \SystemRoot\system32\DRIVERS\netbios.sys
    \SystemRoot\system32\DRIVERS\wanarp.sys
    \SystemRoot\system32\drivers\termdd.sys
    \SystemRoot\system32\DRIVERS\rdbss.sys
    \SystemRoot\system32\drivers\nsiproxy.sys
    \SystemRoot\system32\drivers\mssmbios.sys
    \SystemRoot\System32\drivers\discache.sys
    \SystemRoot\System32\Drivers\dfsc.sys
    \SystemRoot\system32\drivers\blbdrive.sys
    \SystemRoot\system32\DRIVERS\avgldx64.sys
    \SystemRoot\system32\DRIVERS\tunnel.sys
    \SystemRoot\system32\DRIVERS\atikmpag.sys
    \SystemRoot\system32\DRIVERS\atikmdag.sys
    \SystemRoot\System32\drivers\dxgkrnl.sys
    \SystemRoot\System32\drivers\dxgmms1.sys
    \SystemRoot\system32\drivers\HDAudBus.sys
    \SystemRoot\system32\drivers\HECIx64.sys
    \SystemRoot\system32\drivers\usbehci.sys
    \SystemRoot\system32\drivers\USBPORT.SYS
    \SystemRoot\system32\DRIVERS\NETwNs64.sys
    \SystemRoot\system32\DRIVERS\vwifibus.sys
    \SystemRoot\system32\drivers\risdsnxc64.sys
    \SystemRoot\system32\drivers\rimssne64.sys
    \SystemRoot\system32\drivers\nusb3xhc.sys
    \SystemRoot\system32\drivers\USBD.SYS
    \SystemRoot\system32\DRIVERS\L1C62x64.sys
    \SystemRoot\system32\drivers\i8042prt.sys
    \SystemRoot\system32\drivers\kbdclass.sys
    \SystemRoot\system32\drivers\SynTP.sys
    \SystemRoot\system32\DRIVERS\mouclass.sys
    \SystemRoot\system32\drivers\SFEP.sys
    \SystemRoot\system32\drivers\intelppm.sys
    \SystemRoot\system32\drivers\CmBatt.sys
    \SystemRoot\system32\drivers\CompositeBus.sys
    \SystemRoot\system32\drivers\serscan.sys
    \SystemRoot\system32\drivers\ksthunk.sys
    \SystemRoot\system32\drivers\ks.sys
    \SystemRoot\system32\DRIVERS\ArcSoftKsUFilter.sys
    \SystemRoot\system32\DRIVERS\AgileVpn.sys
    \SystemRoot\system32\DRIVERS\rasl2tp.sys
    \SystemRoot\system32\DRIVERS\ndistapi.sys
    \SystemRoot\system32\DRIVERS\ndiswan.sys
    \SystemRoot\system32\DRIVERS\raspppoe.sys
    \SystemRoot\system32\DRIVERS\raspptp.sys
    \SystemRoot\system32\DRIVERS\rassstp.sys
    \SystemRoot\system32\drivers\swenum.sys
    \SystemRoot\system32\drivers\umbus.sys
    \SystemRoot\system32\DRIVERS\usbhub.sys
    \SystemRoot\system32\drivers\nusb3hub.sys
    \SystemRoot\System32\Drivers\NDProxy.SYS
    \SystemRoot\system32\drivers\RtHDMIVX.sys
    \SystemRoot\system32\drivers\portcls.sys
    \SystemRoot\system32\drivers\drmk.sys
    \SystemRoot\system32\drivers\RTKVHD64.sys
    \SystemRoot\system32\DRIVERS\usbccgp.sys
    \SystemRoot\System32\Drivers\usbvideo.sys
    \SystemRoot\system32\drivers\hidusb.sys
    \SystemRoot\system32\drivers\HIDCLASS.SYS
    \SystemRoot\system32\drivers\HIDPARSE.SYS
    \SystemRoot\system32\DRIVERS\mouhid.sys
    \SystemRoot\System32\Drivers\crashdmp.sys
    \SystemRoot\System32\Drivers\dump_iaStor.sys
    \SystemRoot\System32\Drivers\dump_dumpfve.sys
    \SystemRoot\System32\win32k.sys
    \SystemRoot\System32\drivers\Dxapi.sys
    \SystemRoot\system32\DRIVERS\monitor.sys
    \SystemRoot\System32\TSDDD.dll
    \SystemRoot\System32\cdd.dll
    \SystemRoot\System32\ATMFD.DLL
    \SystemRoot\system32\drivers\luafv.sys
    \SystemRoot\system32\DRIVERS\Sftvollh.sys
    \SystemRoot\system32\DRIVERS\lltdio.sys
    \SystemRoot\system32\DRIVERS\nwifi.sys
    \SystemRoot\system32\DRIVERS\ndisuio.sys
    \SystemRoot\system32\DRIVERS\rspndr.sys
    \SystemRoot\system32\drivers\HTTP.sys
    \SystemRoot\system32\DRIVERS\bowser.sys
    \SystemRoot\System32\drivers\mpsdrv.sys
    \SystemRoot\system32\DRIVERS\mrxsmb.sys
    \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    \SystemRoot\system32\DRIVERS\avgidsfiltera.sys
    \??\C:\Windows\system32\Drivers\rikvm_9EC60124.sys
    \SystemRoot\system32\drivers\peauth.sys
    \SystemRoot\system32\DRIVERS\vwifimp.sys
    \SystemRoot\System32\Drivers\secdrv.SYS
    \SystemRoot\system32\DRIVERS\Sftfslh.sys
    \SystemRoot\system32\DRIVERS\Sftplaylh.sys
    \SystemRoot\System32\DRIVERS\srvnet.sys
    \SystemRoot\System32\drivers\tcpipreg.sys
    \SystemRoot\system32\DRIVERS\avgidsdrivera.sys
    \SystemRoot\System32\DRIVERS\srv2.sys
    \SystemRoot\system32\DRIVERS\Sftredirlh.sys
    \SystemRoot\System32\DRIVERS\srv.sys
    \??\C:\Windows\system32\drivers\mbamchameleon.sys
    \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
    \Windows\System32\ntdll.dll
    \Windows\System32\smss.exe
    \Windows\System32\apisetschema.dll
    ----------- End -----------
    Done!
    <<<1>>>
    Upper Device Name: \Device\Harddisk0\DR0
    Upper Device Object: 0xfffffa8005ff0060
    Upper Device Driver Name: \Driver\Disk\
    Lower Device Name: \Device\Ide\IAAStorageDevice-1\
    Lower Device Object: 0xfffffa8004203050
    Lower Device Driver Name: \Driver\iaStor\
    <<<2>>>
    Physical Sector Size: 512
    Drive: 0, DevicePointer: 0xfffffa8005ff0060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    --------- Disk Stack ------
    DevicePointer: 0xfffffa8005ff0b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xfffffa8005ff0060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    DevicePointer: 0xfffffa80041ff5c0, DeviceName: Unknown, DriverName: \Driver\ACPI\
    DevicePointer: 0xfffffa8004203050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\
    ------------ End ----------
    Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    Upper DeviceData: 0x0, 0x0, 0x0
    Lower DeviceData: 0x0, 0x0, 0x0
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    <<<2>>>
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
    Done!
    Drive 0
    This is a System drive
    Scanning MBR on drive 0...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: 7AF376D

    Partition information:

    Partition 0 type is Other (0x27)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 2048 Numsec = 22861824

    Partition 1 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 22863872 Numsec = 204800
    Partition file system is NTFS
    Partition is bootable

    Partition 2 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 23068672 Numsec = 1227193008

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0 Numsec = 0

    Disk Size: 640135028736 bytes
    Sector size: 512 bytes

    Scanning physical sectors of unpartitioned space on drive 0 (1-2047-1250243728-1250263728)...
    Done!
    Infected: C:\Users\Brassington\AppData\Roaming\Adobe\plugs\mmc137888191.txt --> [Trojan.FakeAlert]
    Infected: C:\Windows\KMSEmulator.exe --> [RiskWare.Tool.CK]
    Infected: C:\Users\Brassington\AppData\Roaming\Adobe\shed\thr1.chm --> [Malware.Trace]
    Scan finished
    Creating System Restore point...
    Cleaning up...
    Removal scheduling successful. System shutdown needed.
    System shutdown occurred
    =======================================


    Removal queue found; removal started
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-22863872-i.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
    Removal finished



    Malwarebytes Anti-Rootkit BETA 1.07.0.1012
    www.malwarebytes.org

    Database version: v2014.10.10.03

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 11.0.9600.17280
    Brassington :: BRASSINGTON [administrator]

    09/10/2014 10:55:09 PM
    mbar-log-2014-10-09 (22-55-09).txt

    Scan type: Quick scan
    Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
    Scan options disabled:
    Objects scanned: 321279
    Time elapsed: 11 minute(s), 50 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 3
    C:\Users\Brassington\AppData\Roaming\Adobe\plugs\mmc137888191.txt (Trojan.FakeAlert) -> Delete on reboot. [a6a2c2503f3df93d8444384725dbc43c]
    C:\Windows\KMSEmulator.exe (RiskWare.Tool.CK) -> Delete on reboot. [96b270a2611bb0863d05a18d09f9b050]
    C:\Users\Brassington\AppData\Roaming\Adobe\shed\thr1.chm (Malware.Trace) -> Delete on reboot. [113759b956263cfa1b6db43e877c32ce]

    Physical Sectors Detected: 0
    (No malicious items detected)

    (end)





    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-10-2014 01
    Ran by Brassington (administrator) on BRASSINGTON on 09-10-2014 23:45:14
    Running from C:\Users\Brassington\Desktop
    Loaded Profile: Brassington (Available profiles: Brassington)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 11
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (Microsoft Corporation) C:\Windows\System32\wlanext.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
    (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
    (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
    (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
    (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
    (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESGfxMgr.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
    (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
    (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
    (Microsoft Corporation) C:\Windows\System32\rundll32.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
    (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
    (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
    (Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
    (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277992 2011-11-15] (Realtek Semiconductor)
    HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2283816 2010-11-18] (Synaptics Incorporated)
    HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-11-02] (Intel(R) Corporation)
    HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277992 2011-11-15] (Realtek Semiconductor)
    HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
    HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673168 2010-11-17] (Sony Corporation)
    HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-12-07] (cyberlink)
    HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)
    HKLM-x32\...\Run: [AVG_TRAY] => C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
    HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [PPort11reminder] => C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SHTtray.exe] => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [99696 2010-09-10] (Sony Corporation)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [AdobeBridge] => "C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe" -stealth
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [Elbserver] => C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe [83344 2010-11-30] (Sony Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [VRLPHelper] => C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe [186768 2010-11-30] (Sony Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\MountPoints2: {550e0f97-b181-11e0-a296-f0bf9717eb0a} - D:\LaunchU3.exe
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
    ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
    BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restartsdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://sony.msn.com
    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.sonystyle.ca/vaio
    SearchScopes: HKCU - {451746CE-E390-4804-905A-AFDBE610F4AA} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
    SearchScopes: HKCU - {EB3A11D5-9F87-44FC-A2B2-AD0735BF3915} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}
    BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
    BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
    Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
    Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 64.178.142.10 24.207.0.167

    FireFox:
    ========
    FF ProfilePath: C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
    FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
    FF Extension: skip_compatibility_checksdrockingcom - C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303\Extensions\skip_compatibility_check@sdrocking.com [2014-10-08]
    FF Extension: skip_compatibility_checksdrockingcom - C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\kztrwi7h.default-1406780185987\Extensions\skip_compatibility_check@sdrocking.com [2014-10-08]
    FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-28]
    FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4
    FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-06-15]

    Chrome:
    =======
    CHR HomePage: Default ->
    CHR Profile: C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Slides) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-07]
    CHR Extension: (Google Docs) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-07]
    CHR Extension: (Google Drive) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-07]
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-08]
    CHR Extension: (YouTube) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-07]
    CHR Extension: (Google Search) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-07]
    CHR Extension: (Google Sheets) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-07]
    CHR Extension: (nioihlfoddilijjjeknopfcbglallkce) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioihlfoddilijjjeknopfcbglallkce [2014-10-08]
    CHR Extension: (Google Wallet) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-07]
    CHR Extension: (Gmail) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-07]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
    R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43112 2012-02-15] (ArcSoft Inc.)
    S3 AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
    R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5175856 2013-10-16] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
    R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
    S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [248304 2012-01-19] (CyberLink)
    S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-11-02] ()
    R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
    R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
    R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
    R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
    R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [864000 2010-09-27] (Sony Corporation)
    S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
    R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
    R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
    R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
    R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
    R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
    R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
    R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
    R2 risdsnpe; C:\Windows\system32\drivers\risdsnxc64.sys [98816 2010-12-26] (REDC)
    U2 MSSQL$DDNI; No ImagePath

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-10-09 22:55 - 2014-10-09 23:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
    2014-10-09 22:55 - 2014-10-09 22:55 - 00128728 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2014-10-09 22:55 - 2014-10-09 22:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
    2014-10-09 22:53 - 2014-10-09 22:53 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
    2014-10-09 22:52 - 2014-10-09 22:52 - 00000000 ____D () C:\Users\Brassington\Desktop\mbar-1.07.0.1012
    2014-10-09 22:50 - 2014-10-09 22:50 - 14349744 _____ (Malwarebytes Corp.) C:\Users\Brassington\Desktop\mbar-1.07.0.1012.exe
    2014-10-09 22:49 - 2014-10-09 22:49 - 00045823 _____ () C:\Users\Brassington\Desktop\JRT1.txt
    2014-10-09 22:21 - 2014-10-09 22:21 - 00045823 _____ () C:\Users\Brassington\Desktop\JRT.txt
    2014-10-09 22:18 - 2014-10-09 22:18 - 00000000 ____D () C:\Windows\ERUNT
    2014-10-09 22:17 - 2014-10-09 22:17 - 01705755 _____ (Thisisu) C:\Users\Brassington\Desktop\JRT.exe
    2014-10-09 22:16 - 2014-10-09 22:16 - 00001412 _____ () C:\Users\Brassington\Desktop\AdwCleaner[S1].txt
    2014-10-09 21:22 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
    2014-10-09 21:21 - 2014-10-09 22:00 - 00000000 ____D () C:\AdwCleaner
    2014-10-09 21:21 - 2014-10-09 21:21 - 01375089 _____ () C:\Users\Brassington\Desktop\AdwCleaner.exe
    2014-10-09 12:54 - 2014-10-09 12:54 - 00000872 _____ () C:\Users\Brassington\Desktop\aswMBR.txt
    2014-10-09 10:17 - 2014-10-09 10:18 - 00053112 _____ () C:\Users\Brassington\Desktop\Addition.txt
    2014-10-09 10:16 - 2014-10-09 23:45 - 00022707 _____ () C:\Users\Brassington\Desktop\FRST.txt
    2014-10-09 10:16 - 2014-10-09 10:17 - 05185536 _____ (AVAST Software) C:\Users\Brassington\Desktop\aswMBR.exe
    2014-10-09 10:15 - 2014-10-09 23:45 - 00000000 ____D () C:\FRST
    2014-10-09 10:13 - 2014-10-09 10:14 - 02109952 _____ (Farbar) C:\Users\Brassington\Desktop\FRST64.exe
    2014-10-09 09:45 - 2014-10-09 09:45 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-BRASSINGTON-Microsoft-Windows-7-Home-Premium-(64-bit).dat
    2014-10-09 09:44 - 2014-10-09 09:44 - 00000000 ____D () C:\RegBackup
    2014-10-09 09:43 - 2014-10-09 09:43 - 00002239 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
    2014-10-09 09:43 - 2014-10-09 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2014-10-09 09:43 - 2014-10-09 09:43 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
    2014-10-09 09:42 - 2014-10-09 09:42 - 04215184 _____ () C:\Users\Brassington\Downloads\tweaking.com_registry_backup_setup.exe
    2014-10-09 05:02 - 2014-10-09 05:03 - 00376896 _____ () C:\Windows\Minidump\100914-57689-01.dmp
    2014-10-07 20:28 - 2014-10-07 20:28 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2014-10-07 20:28 - 2014-10-07 20:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2014-10-05 23:43 - 2014-10-05 23:43 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2014-10-05 23:43 - 2014-10-05 23:43 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
    2014-10-05 23:43 - 2014-10-05 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2014-10-05 23:43 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
    2014-10-05 23:42 - 2014-10-05 23:46 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
    2014-10-05 12:15 - 2014-10-05 12:16 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Brassington\Downloads\spybot-2.4.exe
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 ____D () C:\3467cf07-ac61-4a99-8ec5-94d8391322dd
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458C.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457C.tmp
    2014-10-04 21:50 - 2014-10-04 21:50 - 00349760 _____ () C:\Users\Brassington\Downloads\Setup.exe
    2014-09-30 15:47 - 2014-09-24 20:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2014-09-30 15:47 - 2014-09-24 19:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
    2014-09-28 19:54 - 2014-09-28 19:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2014-09-23 15:44 - 2014-09-09 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2014-09-23 15:44 - 2014-09-09 15:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2014-09-11 03:08 - 2014-08-19 12:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-09-11 03:08 - 2014-08-19 11:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-09-11 03:08 - 2014-08-18 17:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-09-11 03:08 - 2014-08-18 16:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2014-09-11 03:08 - 2014-08-18 16:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2014-09-11 03:08 - 2014-08-18 16:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-09-11 03:08 - 2014-08-18 16:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-09-11 03:08 - 2014-08-18 16:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-09-11 03:08 - 2014-08-18 16:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-09-11 03:08 - 2014-08-18 16:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-09-11 03:08 - 2014-08-18 16:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-09-11 03:08 - 2014-08-18 16:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-09-11 03:08 - 2014-08-18 16:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-09-11 03:08 - 2014-08-18 16:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-09-11 03:08 - 2014-08-18 16:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-09-11 03:08 - 2014-08-18 16:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-09-11 03:08 - 2014-08-18 15:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2014-09-11 03:08 - 2014-08-18 15:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2014-09-11 03:08 - 2014-08-18 15:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-09-11 03:08 - 2014-08-18 15:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-09-11 03:08 - 2014-08-18 15:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-09-11 03:08 - 2014-08-18 15:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-09-11 03:08 - 2014-08-18 15:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-09-11 03:08 - 2014-08-18 15:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-09-11 03:08 - 2014-08-18 15:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-09-11 03:08 - 2014-08-18 15:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-09-11 03:08 - 2014-08-18 15:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-09-11 03:08 - 2014-08-18 15:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-09-11 03:08 - 2014-08-18 15:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-09-11 03:08 - 2014-08-18 15:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-09-11 03:08 - 2014-08-18 15:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-09-11 03:08 - 2014-08-18 15:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-09-11 03:08 - 2014-08-18 15:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-09-11 03:08 - 2014-08-18 15:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-09-11 03:08 - 2014-08-18 15:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2014-09-11 03:08 - 2014-08-18 15:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-09-11 03:08 - 2014-08-18 15:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-09-11 03:08 - 2014-08-18 15:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-09-11 03:08 - 2014-08-18 15:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-09-11 03:08 - 2014-08-18 15:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-09-11 03:08 - 2014-08-18 15:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-09-11 03:08 - 2014-08-18 15:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-09-11 03:08 - 2014-08-18 15:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-09-11 03:08 - 2014-08-18 15:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-09-11 03:08 - 2014-08-18 15:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2014-09-11 03:08 - 2014-08-18 14:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-09-11 03:08 - 2014-08-18 14:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-09-11 03:08 - 2014-08-18 14:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-09-11 03:08 - 2014-08-18 14:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-09-11 03:08 - 2014-08-18 14:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-09-11 03:02 - 2014-06-26 20:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
    2014-09-11 03:02 - 2014-06-26 19:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
    2014-09-10 20:47 - 2014-08-01 05:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
    2014-09-10 20:47 - 2014-08-01 05:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
    2014-09-10 20:46 - 2014-09-04 20:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2014-09-10 20:46 - 2014-09-04 20:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2014-09-10 20:46 - 2014-07-06 20:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2014-09-10 20:46 - 2014-07-06 20:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2014-09-10 20:46 - 2014-07-06 19:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2014-09-10 20:46 - 2014-07-06 19:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2014-09-10 20:46 - 2014-07-06 19:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2014-09-10 20:46 - 2014-06-23 21:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
    2014-09-10 20:46 - 2014-06-23 20:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-10-09 23:42 - 2009-07-13 22:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2014-10-09 23:42 - 2009-07-13 22:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2014-10-09 23:40 - 2011-04-09 15:38 - 01524187 _____ () C:\Windows\WindowsUpdate.log
    2014-10-09 23:36 - 2011-06-14 19:01 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{CFF740F3-2E3C-4916-9B51-B06DC6402A0B}
    2014-10-09 23:32 - 2013-06-02 22:13 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
    2014-10-09 23:32 - 2012-02-14 15:48 - 00000212 _____ () C:\Windows\Tasks\AutoKMS.job
    2014-10-09 23:32 - 2011-10-15 18:24 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2014-10-09 23:32 - 2011-03-03 19:13 - 00513580 _____ () C:\Windows\PFRO.log
    2014-10-09 23:32 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-10-09 23:32 - 2009-07-13 22:51 - 00197677 _____ () C:\Windows\setupact.log
    2014-10-09 22:19 - 2011-06-22 17:30 - 00000000 ____D () C:\Users\Brassington\AppData\Local\CrashDumps
    2014-10-09 20:43 - 2012-04-22 11:17 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2014-10-09 17:48 - 2012-02-14 15:48 - 00000212 _____ () C:\Windows\Tasks\AutoKMSDaily.job
    2014-10-09 09:30 - 2011-06-14 20:07 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
    2014-10-09 05:43 - 2012-04-22 11:17 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2014-10-09 05:43 - 2012-04-22 11:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2014-10-09 05:43 - 2012-04-22 11:17 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2014-10-09 05:02 - 2011-11-20 10:35 - 569954366 _____ () C:\Windows\MEMORY.DMP
    2014-10-09 05:02 - 2011-11-20 10:35 - 00000000 ____D () C:\Windows\Minidump
    2014-10-07 20:28 - 2011-10-15 18:24 - 00000000 ____D () C:\Users\Brassington\AppData\Local\Google
    2014-10-07 20:27 - 2011-10-15 18:24 - 00000000 ____D () C:\Program Files (x86)\Google
    2014-10-07 06:26 - 2011-08-14 18:30 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
    2014-10-06 00:14 - 2009-07-13 20:34 - 00450811 ____R () C:\Windows\system32\Drivers\etc\hosts.20141008-222417.backup
    2014-10-05 23:42 - 2011-08-14 18:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
    2014-10-03 16:03 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
    2014-10-03 13:59 - 2011-07-18 16:08 - 00074426 _____ () C:\test.xml
    2014-10-02 23:22 - 2012-08-27 21:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2014-10-01 10:45 - 2011-06-22 17:30 - 00000000 ____D () C:\Users\Brassington\AppData\Roaming\Azureus
    2014-09-30 15:36 - 2014-04-25 10:06 - 00138752 ___SH () C:\Users\Brassington\Desktop\Thumbs.db
    2014-09-11 03:08 - 2012-02-14 15:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2014-09-11 03:06 - 2013-08-12 02:16 - 00000000 ____D () C:\Windows\system32\MRT
    2014-09-11 03:03 - 2011-11-13 21:08 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2014-09-11 03:02 - 2014-05-06 03:02 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2014-09-10 04:13 - 2014-08-31 18:19 - 00000348 _____ () C:\Windows\Tasks\0814tbUpdateInfo.job
    2014-09-10 04:13 - 2014-08-31 18:19 - 00000000 ____D () C:\ProgramData\Avg_Update_0814tb

    Some content of TEMP:
    ====================
    C:\Users\Brassington\AppData\Local\Temp\Quarantine.exe


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2014-08-29 22:58

    ==================== End Of Log ============================


    Hope this is all correct

    B

  4. #4
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi beuford23,

    I need to see this AdwCleaner log - AdwCleaner[S0].txt - [16698 octets] - [09/10/2014 21:32:24]
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  5. #5
    Member
    Join Date
    Nov 2007
    Posts
    30

    Default

    # AdwCleaner v3.311 - Report created 09/10/2014 at 22:00:00
    # Updated 30/09/2014 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Brassington - BRASSINGTON
    # Running from : C:\Users\Brassington\Desktop\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio

    ***** [ Scheduled Tasks ] *****


    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****


    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17280


    -\\ Mozilla Firefox v32.0.3 (x86 en-US)

    [ File : C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303\prefs.js ]


    [ File : C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\kztrwi7h.default-1406780185987\prefs.js ]


    -\\ Google Chrome v38.0.2125.101

    [ File : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\preferences ]


    *************************

    AdwCleaner[R0].txt - [18602 octets] - [09/10/2014 21:21:57]
    AdwCleaner[R1].txt - [1349 octets] - [09/10/2014 21:59:08]
    AdwCleaner[S0].txt - [16698 octets] - [09/10/2014 21:32:24]
    AdwCleaner[S1].txt - [1272 octets] - [09/10/2014 22:00:00]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1332 octets] ##########

  6. #6
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi beuford32,

    Did you run AdwCleaner twice? The log you posted is from the second scan.

    EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1332 octets] [09/10/2014 22:00:00]

    Please try and locate the log from the first scan. It should be located here: C:\AdwCleaner. The octets also show a larger file was generated on the first scan

    AdwCleaner[S0].txt - [16698 octets] - [09/10/2014 21:32:24]

    The numbers change sequentially with each scan, starting at "0"
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  7. #7
    Member
    Join Date
    Nov 2007
    Posts
    30

    Default

    Sorry about that, just off to take my son for his vaccine boosts. Be back shortly

    # AdwCleaner v3.311 - Report created 09/10/2014 at 21:32:24
    # Updated 30/09/2014 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Brassington - BRASSINGTON
    # Running from : C:\Users\Brassington\Desktop\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData\AVG Secure Search
    Folder Deleted : C:\ProgramData\AVG Security Toolbar
    Folder Deleted : C:\Program Files (x86)\AVG Secure Search
    Folder Deleted : C:\Program Files (x86)\Conduit
    Folder Deleted : C:\Program Files (x86)\ConduitEngine
    Folder Deleted : C:\Program Files (x86)\globalUpdate
    Folder Deleted : C:\Program Files (x86)\Vuze Remote toolbar
    Folder Deleted : C:\Program Files (x86)\Vuze_Remote
    Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
    Folder Deleted : C:\Users\Brassington\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Brassington\AppData\Local\globalUpdate
    Folder Deleted : C:\Users\Brassington\AppData\Local\PackageAware
    Folder Deleted : C:\Users\Brassington\AppData\Local\Slick Savings
    Folder Deleted : C:\Users\BRASSI~1\AppData\Local\Temp\Spigot
    Folder Deleted : C:\Users\Brassington\AppData\LocalLow\AVG Secure Search
    Folder Deleted : C:\Users\Brassington\AppData\LocalLow\AVG Security Toolbar
    Folder Deleted : C:\Users\Brassington\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Brassington\AppData\LocalLow\ConduitEngine
    Folder Deleted : C:\Users\Brassington\AppData\LocalLow\Search Settings
    Folder Deleted : C:\Users\Brassington\AppData\LocalLow\Vuze_Remote
    Folder Deleted : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio
    Folder Deleted : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
    [!] Folder Deleted : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
    File Deleted : C:\Windows\System32\roboot64.exe
    File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
    File Deleted : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
    File Deleted : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

    ***** [ Scheduled Tasks ] *****


    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\Applications\iMesh_V11_en_Setup.exe
    Key Deleted : HKLM\SOFTWARE\Classes\Applications\iMeshV11.exe
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
    Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
    Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
    Key Deleted : HKLM\SOFTWARE\Classes\S
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_V11_en_Setup_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_kmplayer[1]_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_kmplayer[1]_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{05478A66-EDB6-4A22-A870-A5987F80A7DA}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8119043A-B100-4280-A8D4-711765581712}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05478A66-EDB6-4A22-A870-A5987F80A7DA}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8119043A-B100-4280-A8D4-711765581712}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0B3F0D45-63ED-422D-AA04-298B8F8404FB}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{217773AB-5BF8-429E-9E88-729245E3331B}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EC3CBB0-476D-4C23-8469-B86C62F859E7}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{05478A66-EDB6-4A22-A870-A5987F80A7DA}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05478A66-EDB6-4A22-A870-A5987F80A7DA}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{05478A66-EDB6-4A22-A870-A5987F80A7DA}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{05478A66-EDB6-4A22-A870-A5987F80A7DA}]
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\AVG Secure Search
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\GlobalUpdate
    Key Deleted : HKCU\Software\Imesh
    Key Deleted : HKCU\Software\Search Settings
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\StartSearch
    Key Deleted : HKCU\Software\vShare.tv
    Key Deleted : HKCU\Software\AppDataLow\Toolbar
    Key Deleted : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
    Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
    Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
    Key Deleted : HKCU\Software\AppDataLow\Software\Vuze_Remote
    Key Deleted : HKLM\SOFTWARE\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
    Key Deleted : HKLM\SOFTWARE\Conduit
    Key Deleted : HKLM\SOFTWARE\conduitEngine
    Key Deleted : HKLM\SOFTWARE\DeviceVM
    Key Deleted : HKLM\SOFTWARE\EZ Software Updater
    Key Deleted : HKLM\SOFTWARE\GlobalUpdate
    Key Deleted : HKLM\SOFTWARE\Search Settings
    Key Deleted : HKLM\SOFTWARE\Vuze_Remote
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Conduit Engine
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vuze_Remote Toolbar
    Key Deleted : [x64] HKLM\SOFTWARE\DeviceVM
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044

    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17280

    Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

    -\\ Mozilla Firefox v32.0.3 (x86 en-US)

    [ File : C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303\prefs.js ]

    Line Deleted : user_pref("extensions.crossrider.bic", "148de7be6902a9531a142a76b2cee867");

    [ File : C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\kztrwi7h.default-1406780185987\prefs.js ]


    -\\ Google Chrome v38.0.2125.101

    [ File : C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

    *************************

    AdwCleaner[R0].txt - [18602 octets] - [09/10/2014 21:21:57]
    AdwCleaner[S0].txt - [16504 octets] - [09/10/2014 21:32:24]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16565 octets] ##########

  8. #8
    Member
    Join Date
    Nov 2007
    Posts
    30

    Default

    Just trying to read CNN news article today and the computer crashed (blue screen followed by a reboot)

  9. #9
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi beuford23,

    Just trying to read CNN news article today and the computer crashed (blue screen followed by a reboot)
    What browser were you using?
    Did you receive an type of error code?

    If it happens again try and write down any information that might be displayed.

    =========================

    P2P - (Peer to Peer)

    I see you have/had P2P software Vuze / Azureus installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections and possibly Identity Theft. It likely contributed to your current situation. This page will give you further information.

    Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

    I would strongly recommend that you uninstall this now.

    Click Start > Control Panel > Programs and Features. Locate and select the following that are present on the list and click the Remove button:
    • Vuze
    If you choose to not remove this programs please refrain from using it until we have finished cleaning your computer.

    =========================

    Security Check

    Download Security Check by screen317 from here or here.
    • Save it to your Desktop.
      • Windows XP : Double click on the icon to run it.
      • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
    • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

    =========================

    FRST Fix Script

    Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it on the desktop as fixlist.txt

    Code:
    Start
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\MountPoints2: {550e0f97-b181-11e0-a296-f0bf9717eb0a} - D:\LaunchU3.exe
    Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-06-15]
    S3 AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
    S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458C.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457C.tmp
    2014-10-09 23:32 - 2013-06-02 22:13 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
    2014-10-01 10:45 - 2011-06-22 17:30 - 00000000 ____D () C:\Users\Brassington\AppData\Roaming\Azureus
    CMD: ipconfig /flushdns
    Hosts:
    EmptyTemp:
    End
    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Run FRST and press the Fix button just once and wait.
    The tool will make a log (Fixlog.txt) please post it to your reply.

    =========================

    Reboot

    =========================

    Re-run Farbar Recovery Scan Tool it should be on your desktop.
      • Windows XP : Double click on the icon to run it.
      • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.

    =========================

    In your next post please provide the following:
    • checkup.txt
    • Fixlog.txt
    • new FRST.txt
    • How is the computer running at the moment?
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  10. #10
    Member
    Join Date
    Nov 2007
    Posts
    30

    Default

    Uninstalled Vuze. There's still an ad pop up on this screen as I type citing "Your download manager might be outdated. Click here to download the upgrade" (Yeah, I don't think so)

    Results of screen317's Security Check version 0.99.88
    Windows 7 Service Pack 1 x64 (UAC is enabled)
    Internet Explorer 11
    ``````````````Antivirus/Firewall Check:``````````````
    Windows Firewall Enabled!
    AVG Anti-Virus Free Edition 2012
    Antivirus up to date!
    `````````Anti-malware/Other Utilities Check:`````````
    MVPS Hosts File
    Spybot - Search & Destroy
    Java(TM) 6 Update 22
    Java version out of Date!
    Adobe Flash Player 15.0.0.152
    Adobe Reader XI
    Mozilla Firefox (32.0.3)
    Google Chrome 38.0.2125.101
    ````````Process Check: objlist.exe by Laurent````````
    Spybot Teatimer.exe is disabled!
    AVG avgwdsvc.exe
    AVG avgtray.exe
    `````````````````System Health check`````````````````
    Total Fragmentation on Drive C: 0%
    ````````````````````End of Log``````````````````````




    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-10-2014 01
    Ran by Brassington at 2014-10-10 20:24:48 Run:1
    Running from C:\Users\Brassington\Desktop
    Loaded Profile: Brassington (Available profiles: Brassington)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************
    Start
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\MountPoints2: {550e0f97-b181-11e0-a296-f0bf9717eb0a} - D:\LaunchU3.exe
    Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-06-15]
    S3 AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
    S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL458C.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457E.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457D.tmp
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 _____ () C:\LIL457C.tmp
    2014-10-09 23:32 - 2013-06-02 22:13 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
    2014-10-01 10:45 - 2011-06-22 17:30 - 00000000 ____D () C:\Users\Brassington\AppData\Roaming\Azureus
    CMD: ipconfig /flushdns
    Hosts:
    EmptyTemp:
    End
    *****************

    "HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{550e0f97-b181-11e0-a296-f0bf9717eb0a}" => Key deleted successfully.
    "HKCR\CLSID\{550e0f97-b181-11e0-a296-f0bf9717eb0a}" => Key not found.
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully.
    "HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" => Key not found.
    C:\Program Files (x86)\AVG\AVG2012\Firefox4 => Moved successfully.
    AVG Security Toolbar Service => Service deleted successfully.
    vToolbarUpdater18.1.9 => Service deleted successfully.
    C:\LIL458E.tmp => Moved successfully.
    C:\LIL458D.tmp => Moved successfully.
    C:\LIL458C.tmp => Moved successfully.
    C:\LIL457E.tmp => Moved successfully.
    C:\LIL457D.tmp => Moved successfully.
    C:\LIL457C.tmp => Moved successfully.
    C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => Moved successfully.
    C:\Users\Brassington\AppData\Roaming\Azureus => Moved successfully.

    ========= ipconfig /flushdns =========


    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.

    ========= End of CMD: =========

    C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
    Hosts was reset successfully.
    EmptyTemp: => Removed 873.6 MB temporary data.


    The system needed a reboot.

    ==== End of Fixlog ====



    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-10-2014 01
    Ran by Brassington (administrator) on BRASSINGTON on 10-10-2014 20:35:06
    Running from C:\Users\Brassington\Desktop
    Loaded Profile: Brassington (Available profiles: Brassington)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 11
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (Microsoft Corporation) C:\Windows\System32\wlanext.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
    (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
    (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
    (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
    (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
    (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
    (Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
    (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
    (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
    (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESGfxMgr.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
    (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
    (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
    (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
    (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
    (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
    (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
    (Microsoft Corporation) C:\Windows\System32\vds.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277992 2011-11-15] (Realtek Semiconductor)
    HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2283816 2010-11-18] (Synaptics Incorporated)
    HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-11-02] (Intel(R) Corporation)
    HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277992 2011-11-15] (Realtek Semiconductor)
    HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
    HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673168 2010-11-17] (Sony Corporation)
    HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-12-07] (cyberlink)
    HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)
    HKLM-x32\...\Run: [AVG_TRAY] => C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
    HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [PPort11reminder] => C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.)
    HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SHTtray.exe] => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [99696 2010-09-10] (Sony Corporation)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [AdobeBridge] => "C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe" -stealth
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [Elbserver] => C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe [83344 2010-11-30] (Sony Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [VRLPHelper] => C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe [186768 2010-11-30] (Sony Corporation)
    HKU\S-1-5-21-4272480943-3451767055-1814136413-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
    ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
    BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restartsdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://sony.msn.com
    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.sonystyle.ca/vaio
    SearchScopes: HKCU - {451746CE-E390-4804-905A-AFDBE610F4AA} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
    SearchScopes: HKCU - {EB3A11D5-9F87-44FC-A2B2-AD0735BF3915} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}
    BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
    BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
    Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
    Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    Tcpip\Parameters: [DhcpNameServer] 64.178.142.10 24.207.0.167

    FireFox:
    ========
    FF ProfilePath: C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
    FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
    FF Extension: skip_compatibility_checksdrockingcom - C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\cwams0dh.default-1398958773303\Extensions\skip_compatibility_check@sdrocking.com [2014-10-08]
    FF Extension: skip_compatibility_checksdrockingcom - C:\Users\Brassington\AppData\Roaming\Mozilla\Firefox\Profiles\kztrwi7h.default-1406780185987\Extensions\skip_compatibility_check@sdrocking.com [2014-10-08]
    FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-09-28]
    FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4

    Chrome:
    =======
    CHR Profile: C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Slides) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-07]
    CHR Extension: (Google Docs) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-07]
    CHR Extension: (Google Drive) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-07]
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-08]
    CHR Extension: (YouTube) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-07]
    CHR Extension: (Google Search) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-07]
    CHR Extension: (Google Sheets) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-07]
    CHR Extension: (nioihlfoddilijjjeknopfcbglallkce) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioihlfoddilijjjeknopfcbglallkce [2014-10-08]
    CHR Extension: (Google Wallet) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-07]
    CHR Extension: (Gmail) - C:\Users\Brassington\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-07]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
    R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43112 2012-02-15] (ArcSoft Inc.)
    R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5175856 2013-10-16] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
    R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
    S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [248304 2012-01-19] (CyberLink)
    S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-11-02] ()
    R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
    R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
    R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
    R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
    R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [864000 2010-09-27] (Sony Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
    R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
    R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
    R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
    R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
    R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
    R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
    R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-12] (AVG Technologies)
    R2 risdsnpe; C:\Windows\system32\drivers\risdsnxc64.sys [98816 2010-12-26] (REDC)
    U2 MSSQL$DDNI; No ImagePath

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-10-10 20:35 - 2014-10-10 20:35 - 00022264 _____ () C:\Users\Brassington\Desktop\FRST.txt
    2014-10-10 20:22 - 2014-10-10 20:22 - 00000959 _____ () C:\Users\Brassington\Desktop\checkup.txt
    2014-10-10 20:21 - 2014-10-10 20:22 - 00000000 ____D () C:\Users\Brassington\Desktop\first fix day
    2014-10-10 20:18 - 2014-10-10 20:18 - 00854436 _____ () C:\Users\Brassington\Desktop\SecurityCheck.exe
    2014-10-10 17:12 - 2014-10-10 17:12 - 00000000 ____D () C:\Users\Brassington\AppData\Local\{D7711BB9-1621-45D5-BD0B-61658C768D3F}
    2014-10-10 17:08 - 2014-10-10 17:08 - 01704184 _____ () C:\Windows\Minidump\101014-44241-01.dmp
    2014-10-09 22:55 - 2014-10-10 17:08 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
    2014-10-09 22:55 - 2014-10-09 22:55 - 00128728 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2014-10-09 22:55 - 2014-10-09 22:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
    2014-10-09 22:53 - 2014-10-09 22:53 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
    2014-10-09 22:52 - 2014-10-09 22:52 - 00000000 ____D () C:\Users\Brassington\Desktop\mbar-1.07.0.1012
    2014-10-09 22:50 - 2014-10-09 22:50 - 14349744 _____ (Malwarebytes Corp.) C:\Users\Brassington\Desktop\mbar-1.07.0.1012.exe
    2014-10-09 22:18 - 2014-10-09 22:18 - 00000000 ____D () C:\Windows\ERUNT
    2014-10-09 22:17 - 2014-10-09 22:17 - 01705755 _____ (Thisisu) C:\Users\Brassington\Desktop\JRT.exe
    2014-10-09 21:22 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
    2014-10-09 21:21 - 2014-10-09 22:00 - 00000000 ____D () C:\AdwCleaner
    2014-10-09 21:21 - 2014-10-09 21:21 - 01375089 _____ () C:\Users\Brassington\Desktop\AdwCleaner.exe
    2014-10-09 10:16 - 2014-10-09 10:17 - 05185536 _____ (AVAST Software) C:\Users\Brassington\Desktop\aswMBR.exe
    2014-10-09 10:15 - 2014-10-10 20:35 - 00000000 ____D () C:\FRST
    2014-10-09 10:13 - 2014-10-09 10:14 - 02109952 _____ (Farbar) C:\Users\Brassington\Desktop\FRST64.exe
    2014-10-09 09:45 - 2014-10-09 09:45 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-BRASSINGTON-Microsoft-Windows-7-Home-Premium-(64-bit).dat
    2014-10-09 09:44 - 2014-10-09 09:44 - 00000000 ____D () C:\RegBackup
    2014-10-09 09:43 - 2014-10-09 09:43 - 00002239 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
    2014-10-09 09:43 - 2014-10-09 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2014-10-09 09:43 - 2014-10-09 09:43 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
    2014-10-09 09:42 - 2014-10-09 09:42 - 04215184 _____ () C:\Users\Brassington\Downloads\tweaking.com_registry_backup_setup.exe
    2014-10-09 05:02 - 2014-10-09 05:03 - 00376896 _____ () C:\Windows\Minidump\100914-57689-01.dmp
    2014-10-07 20:28 - 2014-10-07 20:28 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2014-10-07 20:28 - 2014-10-07 20:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2014-10-05 23:43 - 2014-10-05 23:43 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2014-10-05 23:43 - 2014-10-05 23:43 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
    2014-10-05 23:43 - 2014-10-05 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2014-10-05 23:43 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
    2014-10-05 23:42 - 2014-10-05 23:46 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
    2014-10-05 12:15 - 2014-10-05 12:16 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Brassington\Downloads\spybot-2.4.exe
    2014-10-04 21:51 - 2014-10-04 21:51 - 00000000 ____D () C:\3467cf07-ac61-4a99-8ec5-94d8391322dd
    2014-10-04 21:50 - 2014-10-04 21:50 - 00349760 _____ () C:\Users\Brassington\Downloads\Setup.exe
    2014-09-30 15:47 - 2014-09-24 20:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2014-09-30 15:47 - 2014-09-24 19:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
    2014-09-28 19:54 - 2014-09-28 19:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2014-09-23 15:44 - 2014-09-09 16:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2014-09-23 15:44 - 2014-09-09 15:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2014-09-11 03:08 - 2014-08-19 12:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-09-11 03:08 - 2014-08-19 11:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-09-11 03:08 - 2014-08-18 17:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-09-11 03:08 - 2014-08-18 16:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2014-09-11 03:08 - 2014-08-18 16:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2014-09-11 03:08 - 2014-08-18 16:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-09-11 03:08 - 2014-08-18 16:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-09-11 03:08 - 2014-08-18 16:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-09-11 03:08 - 2014-08-18 16:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-09-11 03:08 - 2014-08-18 16:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-09-11 03:08 - 2014-08-18 16:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-09-11 03:08 - 2014-08-18 16:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-09-11 03:08 - 2014-08-18 16:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-09-11 03:08 - 2014-08-18 16:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-09-11 03:08 - 2014-08-18 16:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-09-11 03:08 - 2014-08-18 16:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-09-11 03:08 - 2014-08-18 16:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-09-11 03:08 - 2014-08-18 15:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2014-09-11 03:08 - 2014-08-18 15:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2014-09-11 03:08 - 2014-08-18 15:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-09-11 03:08 - 2014-08-18 15:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-09-11 03:08 - 2014-08-18 15:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-09-11 03:08 - 2014-08-18 15:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-09-11 03:08 - 2014-08-18 15:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-09-11 03:08 - 2014-08-18 15:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-09-11 03:08 - 2014-08-18 15:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-09-11 03:08 - 2014-08-18 15:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-09-11 03:08 - 2014-08-18 15:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-09-11 03:08 - 2014-08-18 15:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-09-11 03:08 - 2014-08-18 15:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-09-11 03:08 - 2014-08-18 15:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-09-11 03:08 - 2014-08-18 15:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-09-11 03:08 - 2014-08-18 15:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-09-11 03:08 - 2014-08-18 15:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-09-11 03:08 - 2014-08-18 15:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-09-11 03:08 - 2014-08-18 15:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-09-11 03:08 - 2014-08-18 15:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2014-09-11 03:08 - 2014-08-18 15:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-09-11 03:08 - 2014-08-18 15:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-09-11 03:08 - 2014-08-18 15:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-09-11 03:08 - 2014-08-18 15:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-09-11 03:08 - 2014-08-18 15:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-09-11 03:08 - 2014-08-18 15:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-09-11 03:08 - 2014-08-18 15:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-09-11 03:08 - 2014-08-18 15:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-09-11 03:08 - 2014-08-18 15:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-09-11 03:08 - 2014-08-18 15:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2014-09-11 03:08 - 2014-08-18 14:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-09-11 03:08 - 2014-08-18 14:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-09-11 03:08 - 2014-08-18 14:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-09-11 03:08 - 2014-08-18 14:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-09-11 03:08 - 2014-08-18 14:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-09-11 03:02 - 2014-06-26 20:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
    2014-09-11 03:02 - 2014-06-26 19:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
    2014-09-10 20:47 - 2014-08-01 05:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
    2014-09-10 20:47 - 2014-08-01 05:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
    2014-09-10 20:46 - 2014-09-04 20:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2014-09-10 20:46 - 2014-09-04 20:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2014-09-10 20:46 - 2014-07-06 20:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2014-09-10 20:46 - 2014-07-06 20:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2014-09-10 20:46 - 2014-07-06 19:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2014-09-10 20:46 - 2014-07-06 19:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2014-09-10 20:46 - 2014-07-06 19:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2014-09-10 20:46 - 2014-06-23 21:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
    2014-09-10 20:46 - 2014-06-23 20:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-10-10 20:35 - 2009-07-13 22:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2014-10-10 20:35 - 2009-07-13 22:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2014-10-10 20:31 - 2011-04-09 15:38 - 01550073 _____ () C:\Windows\WindowsUpdate.log
    2014-10-10 20:27 - 2012-02-14 15:48 - 00000212 _____ () C:\Windows\Tasks\AutoKMS.job
    2014-10-10 20:27 - 2011-10-15 18:24 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2014-10-10 20:27 - 2011-06-14 19:01 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{CFF740F3-2E3C-4916-9B51-B06DC6402A0B}
    2014-10-10 20:27 - 2011-03-03 19:13 - 00526200 _____ () C:\Windows\PFRO.log
    2014-10-10 20:27 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2014-10-10 20:27 - 2009-07-13 22:51 - 00198349 _____ () C:\Windows\setupact.log
    2014-10-10 20:24 - 2011-06-22 17:30 - 00000000 ____D () C:\Users\Brassington\AppData\Local\CrashDumps
    2014-10-10 20:18 - 2011-06-22 17:28 - 00000000 ____D () C:\Program Files (x86)\Vuze
    2014-10-10 17:48 - 2012-02-14 15:48 - 00000212 _____ () C:\Windows\Tasks\AutoKMSDaily.job
    2014-10-10 17:08 - 2011-11-20 10:35 - 598905074 _____ () C:\Windows\MEMORY.DMP
    2014-10-10 17:08 - 2011-11-20 10:35 - 00000000 ____D () C:\Windows\Minidump
    2014-10-10 15:53 - 2011-10-09 12:23 - 00007594 _____ () C:\Users\Brassington\AppData\Local\Resmon.ResmonCfg
    2014-10-10 09:26 - 2011-06-14 20:07 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
    2014-10-09 20:43 - 2012-04-22 11:17 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2014-10-09 05:43 - 2012-04-22 11:17 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2014-10-09 05:43 - 2012-04-22 11:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2014-10-09 05:43 - 2012-04-22 11:17 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2014-10-07 20:28 - 2011-10-15 18:24 - 00000000 ____D () C:\Users\Brassington\AppData\Local\Google
    2014-10-07 20:27 - 2011-10-15 18:24 - 00000000 ____D () C:\Program Files (x86)\Google
    2014-10-07 06:26 - 2011-08-14 18:30 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
    2014-10-06 00:14 - 2009-07-13 20:34 - 00450811 ____R () C:\Windows\system32\Drivers\etc\hosts.20141008-222417.backup
    2014-10-05 23:42 - 2011-08-14 18:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
    2014-10-03 16:03 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
    2014-10-03 13:59 - 2011-07-18 16:08 - 00074426 _____ () C:\test.xml
    2014-10-02 23:22 - 2012-08-27 21:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2014-09-30 15:36 - 2014-04-25 10:06 - 00138752 ___SH () C:\Users\Brassington\Desktop\Thumbs.db
    2014-09-11 03:08 - 2012-02-14 15:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2014-09-11 03:06 - 2013-08-12 02:16 - 00000000 ____D () C:\Windows\system32\MRT
    2014-09-11 03:03 - 2011-11-13 21:08 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2014-09-11 03:02 - 2014-05-06 03:02 - 00000000 ___SD () C:\Windows\system32\CompatTel
    2014-09-10 04:13 - 2014-08-31 18:19 - 00000348 _____ () C:\Windows\Tasks\0814tbUpdateInfo.job
    2014-09-10 04:13 - 2014-08-31 18:19 - 00000000 ____D () C:\ProgramData\Avg_Update_0814tb

    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2014-08-29 22:58

    ==================== End Of Log ============================

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •