Page 3 of 5 FirstFirst 12345 LastLast
Results 21 to 30 of 42

Thread: Win 7 desktop - AVG keeps flagging trojan

  1. #21
    Junior Member
    Join Date
    Jan 2014
    Posts
    27

    Default Post-fix OTL report

    Once again, too big to paste. Attached.
    Attached Files Attached Files

  2. #22
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    When you say owner, how are you related to this computer ?
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  3. #23
    Junior Member
    Join Date
    Jan 2014
    Posts
    27

    Default

    Helping a fiend - I am a little more computer-savvy than he is.

  4. #24
    Junior Member
    Join Date
    Jan 2014
    Posts
    27

    Default

    I meant friend, although he can be a fiend sometimes, too. :-)

  5. #25
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    OK, listen, there is a lot to remove, and somewhat restricted on the forum as to how much I can add to the fix, if after the fix the log shows all removed than just let me know, no need right now for another OTL scan, we can do that when where at the very end


    Open OTL.exe
    • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

      Code:
      :OTL
      [2014/01/23 00:55:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoilall
      [2014/01/23 00:54:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dityucwa
      [2014/01/23 00:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sytoyq
      [2014/01/23 00:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saozqi
      [2014/01/23 00:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypuykyl
      [2014/01/23 00:51:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zetucyw
      [2014/01/23 00:51:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sywyqayz
      [2014/01/23 00:50:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zacaes
      [2014/01/23 00:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Expiytr
      [2014/01/23 00:49:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seedadvo
      [2014/01/23 00:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evagleu
      [2014/01/23 00:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahheav
      [2014/01/23 00:47:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuurpe
      [2014/01/23 00:46:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reevipp
      [2014/01/23 00:46:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waomxiw
      [2014/01/23 00:45:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyfaib
      [2014/01/23 00:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uglean
      [2014/01/23 00:44:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixqype
      [2014/01/23 00:43:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irzuze
      [2014/01/23 00:42:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wexoym
      [2014/01/23 00:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycacmu
      [2014/01/23 00:41:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igygalz
      [2014/01/23 00:40:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Horual
      [2014/01/23 00:01:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poagpi
      [2014/01/23 00:00:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evibol
      [2014/01/23 00:00:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nesyybq
      [2014/01/22 23:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixiqnix
      [2014/01/22 23:58:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kootkiiv
      [2014/01/22 23:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taogik
      [2014/01/22 23:57:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efagxui
      [2014/01/22 23:56:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opfage
      [2014/01/22 23:56:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ennaeg
      [2014/01/22 23:55:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cihozut
      [2014/01/22 23:54:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patoikp
      [2014/01/22 23:54:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyecynbo
      [2014/01/22 23:53:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozodip
      [2014/01/22 23:52:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atgaeqn
      [2014/01/22 23:52:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbaunze
      [2014/01/22 23:51:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cybourw
      [2014/01/22 23:50:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taicifa
      [2014/01/22 23:50:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuwocaw
      [2014/01/22 23:49:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuigsu
      [2014/01/22 23:48:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoyqyz
      [2014/01/22 23:48:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufnaam
      [2014/01/22 23:47:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyvenu
      [2014/01/22 23:46:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bymoem
      [2014/01/22 23:46:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ungazuoh
      [2014/01/22 23:45:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naxykure
      [2014/01/22 23:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Heodgaih
      [2014/01/22 23:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ercaewep
      [2014/01/22 23:43:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Niryez
      [2014/01/22 23:42:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzweoqza
      [2014/01/22 23:42:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymypigaz
      [2014/01/22 23:41:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gunyfy
      [2014/01/22 23:41:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypihpua
      [2014/01/22 23:40:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixufuwr
      [2014/01/22 23:39:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tulezy
      [2014/01/22 23:38:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giexfy
      [2014/01/22 23:38:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avzuob
      [2014/01/22 23:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agamte
      [2014/01/22 23:37:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofhegye
      [2014/01/22 23:36:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqeaspi
      [2014/01/22 23:35:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifynyn
      [2014/01/22 23:34:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxehifa
      [2014/01/22 23:34:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vikaqy
      [2014/01/22 23:33:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keovofte
      [2014/01/22 23:33:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyeqha
      [2014/01/22 23:32:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyybxy
      [2014/01/22 23:31:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydozulbi
      [2014/01/22 23:31:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lasyzalu
      [2014/01/22 23:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyhafoq
      [2014/01/22 23:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lybyid
      [2014/01/22 23:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usmoquod
      [2014/01/22 23:28:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzalynk
      [2014/01/22 23:27:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xesyot
      [2014/01/22 23:27:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulynos
      [2014/01/22 23:26:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaovykq
      [2014/01/22 23:25:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keyxeb
      [2014/01/22 23:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Finosy
      [2014/01/22 23:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alyvywb
      [2014/01/22 23:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihotyl
      [2014/01/22 23:23:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Puuwepeh
      [2014/01/22 23:22:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynacacag
      [2014/01/22 23:22:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwvoly
      [2014/01/22 23:21:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foipted
      [2014/01/22 23:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovezfiav
      [2014/01/22 23:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buoxyta
      [2014/01/22 23:19:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imxeax
      [2014/01/22 23:18:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyniot
      [2014/01/22 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acakcouv
      [2014/01/22 23:17:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawawy
      [2014/01/22 23:16:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abkoele
      [2014/01/22 23:16:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqykyfaq
      [2014/01/22 23:15:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qainsa
      [2014/01/22 23:14:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diziby
      [2014/01/22 23:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuvyakr
      [2014/01/22 23:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowyigq
      [2014/01/22 23:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofagni
      [2014/01/22 23:12:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apqeza
      [2014/01/22 23:11:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Anuxxad
      [2014/01/22 23:11:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bufuohoc
      [2014/01/22 23:10:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nihehoic
      [2014/01/22 23:09:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bofyqe
      [2014/01/22 22:05:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acebry
      [2014/01/22 22:04:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rakedy
      [2014/01/22 22:03:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucarolar
      [2014/01/22 22:03:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzinoqoz
      [2014/01/22 22:02:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymasyh
      [2014/01/22 22:01:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaykgode
      [2014/01/22 22:01:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buikmoa
      [2014/01/22 22:00:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sasuer
      [2014/01/22 21:59:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqpapif
      [2014/01/22 21:59:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikzysoo
      [2014/01/22 21:58:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azdahesa
      [2014/01/22 21:58:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saehykot
      [2014/01/22 21:57:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akesquup
      [2014/01/22 21:56:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upqyzea
      [2014/01/22 21:55:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pydyavx
      [2014/01/22 21:55:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edaglyv
      [2014/01/22 21:54:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytvieho
      [2014/01/22 21:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yquwyt
      [2014/01/22 21:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imosez
      [2014/01/22 21:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiumaxw
      [2014/01/22 21:51:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogitnyyz
      [2014/01/22 21:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suykihip
      [2014/01/22 21:50:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Garyqu
      [2014/01/22 21:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikdyiri
      [2014/01/22 21:49:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fetehe
      [2014/01/22 21:48:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koezwu
      [2014/01/22 21:47:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diakegem
      [2014/01/22 21:47:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuuzaget
      [2014/01/22 21:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibunvo
      [2014/01/22 21:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pilead
      [2014/01/22 21:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxapoza
      [2014/01/22 21:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erkysen
      [2014/01/22 21:43:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowacad
      [2014/01/22 21:43:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylceyged
      [2014/01/22 21:42:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwardu
      [2014/01/22 21:42:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edduro
      [2014/01/22 21:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaciloa
      [2014/01/22 21:40:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfleqoso
      [2014/01/22 21:39:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hahedum
      [2014/01/22 21:39:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysawmuc
      [2014/01/22 21:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Haivuwox
      [2014/01/22 21:39:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehedpifu
      [2014/01/22 21:38:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pexuawo
      [2014/01/22 21:38:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erlyne
      [2014/01/22 21:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduhwu
      [2014/01/22 21:38:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tivozuf
      [2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uknitiiz
      [2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saogutz
      [2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seviwe
      [2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fasaxyar
      [2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seufyp
      [2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ansyizuw
      [2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycozehez
      [2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exytzogu
      [2014/01/22 21:34:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elyvavg
      [2014/01/22 21:34:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yngibeq
      [2014/01/22 21:34:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypuxozaf
      [2014/01/22 21:34:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xayhluy
      [2014/01/22 21:33:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abgyuv
      [2014/01/22 21:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efhaabyf
      [2014/01/22 21:32:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exakuxa
      [2014/01/22 21:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezgyuh
      [2014/01/22 21:32:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvobdy
      [2014/01/22 21:32:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koarobz
      [2014/01/22 21:31:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vygokone
      [2014/01/22 21:31:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvyquzew
      [2014/01/22 21:30:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vawabya
      [2014/01/22 21:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patiuwo
      [2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lupyuxel
      [2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqzeyvvu
      [2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhewakb
      [2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udlyimig
      [2014/01/22 21:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okeniqfy
      [2014/01/22 21:28:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvuzwiq
      [2014/01/22 21:28:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kimayn
      [2014/01/22 21:27:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feibfa
      [2014/01/22 21:27:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esvyuz
      [2014/01/22 21:27:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daefodi
      [2014/01/22 21:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyheugfy
      [2014/01/22 21:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odarqexu
      [2014/01/22 21:26:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sedobet
      [2014/01/22 21:26:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qigypiy
      [2014/01/22 21:25:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxofodr
      [2014/01/22 21:25:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loiwfeky
      [2014/01/22 21:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cefeuket
      [2014/01/22 21:24:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bebazuu
      [2014/01/22 21:24:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awyvfy
      [2014/01/22 21:23:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azufsopi
      [2014/01/22 21:23:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idysaten
      [2014/01/22 21:23:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Subomin
      [2014/01/22 21:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qyogopo
      [2014/01/22 21:22:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zucowo
      [2014/01/22 21:22:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuzaitlo
      [2014/01/22 21:22:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Timoar
      [2014/01/22 21:21:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbeal
      [2014/01/22 21:21:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awefevre
      [2014/01/22 21:20:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qouronv
      [2014/01/22 21:20:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhukomco
      [2014/01/22 21:19:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaadfoi
      [2014/01/22 21:19:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuakceh
      [2014/01/22 21:19:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peusihgu
      [2014/01/22 21:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maitowow
      [2014/01/22 21:18:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riobsa
      [2014/01/22 21:18:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuapegd
      [2014/01/22 21:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sofifu
      [2014/01/22 21:18:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuenweuf
      [2014/01/22 21:17:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gidusy
      [2014/01/22 21:17:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyenukx
      [2014/01/22 21:16:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykeluhe
      [2014/01/22 21:16:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kocyciw
      [2014/01/22 21:15:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Baamkieg
      [2014/01/22 21:15:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epqyitku
      [2014/01/22 21:15:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qodaziop
      [2014/01/22 21:15:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tegiruim
      [2014/01/22 21:14:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igwuvo
      [2014/01/22 21:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ximigaep
      [2014/01/22 21:14:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozilyga
      [2014/01/22 21:13:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meuqce
      [2014/01/22 21:13:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqubek
      [2014/01/22 21:13:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebryag
      [2014/01/22 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rietku
      [2014/01/22 21:12:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iblowawi
      [2014/01/22 21:11:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyehny
      [2014/01/22 21:11:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kumaokp
      [2014/01/22 21:10:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elylebz
      [2014/01/22 21:10:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyisodof
      [2014/01/22 21:09:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obubbis
      [2014/01/22 21:08:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rinyci
      [2014/01/22 21:07:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etgirize
      [2014/01/22 21:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iriwgou
      [2014/01/22 21:06:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abtiva
      [2014/01/22 21:06:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Amnuny
      [2014/01/22 21:05:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gileheev
      [2014/01/22 21:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyguhi
      [2014/01/22 21:03:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mubaowqe
      [2014/01/22 21:03:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olraecix
      [2014/01/22 21:02:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deidgyyx
      [2014/01/22 21:02:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otxyuxd
      [2014/01/22 21:01:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Detywon
      [2014/01/22 21:00:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyvuko
      [2014/01/22 20:59:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebwiykon
      [2014/01/22 20:59:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pebyaly
      [2014/01/22 20:58:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebuxfut
      [2014/01/22 20:57:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rayxicu
      [2014/01/22 20:56:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udreto
      [2014/01/22 20:56:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Risuxyx
      [2014/01/22 20:55:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dolianyk
      [2014/01/22 20:54:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egabaxew
      [2014/01/22 20:54:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afukreha
      [2014/01/22 20:53:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixebegu
      [2014/01/22 20:52:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qibylan
      [2014/01/22 20:52:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahviqi
      [2014/01/22 20:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dywiycky
      [2014/01/22 20:50:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oritxy
      [2014/01/22 20:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aztoatyp
      [2014/01/22 20:49:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abguitc
      [2014/01/22 20:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifaxtawa
      [2014/01/22 20:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gibomi
      [2014/01/22 20:47:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeinre
      [2014/01/22 20:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woulxion
      [2014/01/22 20:08:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arerufxu
      [2014/01/22 20:08:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyyrru
      [2014/01/22 20:07:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layllezu
      [2014/01/22 20:06:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xozayke
      [2014/01/22 20:06:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhupumoq
      [2014/01/22 20:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fiahahm
      [2014/01/22 20:04:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byhige
      [2014/01/22 20:04:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoluoxcu
      [2014/01/22 20:03:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nybaloin
      [2014/01/22 20:02:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydurez
      [2014/01/22 20:02:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymytkoiw
      [2014/01/22 20:01:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posiuso
      [2014/01/22 20:00:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wehimew
      [2014/01/22 20:00:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxiwzy
      [2014/01/22 19:59:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muypzior
      [2014/01/22 19:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xegyit
      [2014/01/22 19:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eppigobu
      [2014/01/22 19:57:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wanywuu
      [2014/01/22 19:56:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icxyqig
      [2014/01/22 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Segera
      [2014/01/22 19:55:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toedbuwi
      [2014/01/22 19:54:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igzyaf
      [2014/01/22 19:54:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buezyqiw
      [2014/01/22 19:53:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hygiduno
      [2014/01/22 19:52:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhyqeho
      [2014/01/22 19:52:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuypavri
      [2014/01/22 19:51:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufysza
      [2014/01/22 19:50:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fifimaxi
      [2014/01/22 19:50:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akafmi
      [2014/01/22 19:49:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byeqamil
      [2014/01/22 19:48:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiofovy
      [2014/01/22 19:48:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piuszao
      [2014/01/22 19:47:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afkoub
      [2014/01/22 19:46:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irhituwa
      [2014/01/22 19:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewsypa
      [2014/01/22 19:45:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hagiti
      [2014/01/22 19:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bohaaqw
      [2014/01/22 19:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awnyeg
      [2014/01/22 19:43:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mabadua
      [2014/01/22 19:42:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reduytno
      [2014/01/22 19:42:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zixave
      [2014/01/22 19:41:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awunmeu
      [2014/01/22 19:40:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teezak
      [2014/01/22 19:40:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ilmuezo
      [2014/01/22 19:39:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Miategz
      [2014/01/22 19:38:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuquew
      [2014/01/22 19:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxepigy
      [2014/01/22 19:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyitwaos
      [2014/01/22 19:36:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydumyp
      [2014/01/22 19:36:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaumyvat
      [2014/01/22 19:35:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyasar
      [2014/01/22 19:34:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abonap
      [2014/01/22 19:33:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypwypi
      [2014/01/22 19:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agxusupo
      [2014/01/22 19:32:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezmyhie
      [2014/01/22 19:31:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqcayni
      [2014/01/22 19:31:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axydgyan
      [2014/01/22 19:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebolah
      [2014/01/22 19:29:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Algaqew
      [2014/01/22 19:29:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyaftyi
      [2014/01/22 19:28:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kemyexw
      [2014/01/22 19:27:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Angeanna
      [2014/01/22 19:27:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waleomwa
      [2014/01/22 19:26:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahgufi
      [2014/01/22 19:25:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lofyucg
      [2014/01/22 19:25:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paweepny
      [2014/01/22 19:24:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rytopaib
      [2014/01/22 19:23:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynohqeby
      [2014/01/22 19:22:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hecyufwi
      [2014/01/22 19:22:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceokycra
      [2014/01/22 19:21:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evotyspo
      [2014/01/22 19:21:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voefykug
      [2014/01/22 19:20:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dateip
      [2014/01/22 19:19:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feynuw
      [2014/01/22 19:18:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaokzu
      [2014/01/22 19:18:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efnaipk
      [2014/01/22 19:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otygta
      [2014/01/22 19:17:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kiozfi
      [2014/01/22 19:16:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efurobb
      [2014/01/22 19:15:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceaqafs
      [2014/01/22 17:14:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liyqmib
      [2014/01/22 17:13:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexpyzo
      [2014/01/22 17:12:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqceysa
      [2014/01/22 17:12:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sydocey
      [2014/01/22 17:11:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzfeypgu
      [2014/01/22 17:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyhxiqa
      [2014/01/22 17:10:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoevgiu
      [2014/01/22 17:09:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pufapizi
      [2014/01/22 17:08:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aspeel
      [2014/01/22 17:08:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyoluzq
      [2014/01/22 17:07:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Femahuw
      [2014/01/22 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gienwyh
      [2014/01/22 17:06:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xionvoru
      [2014/01/22 17:05:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nauliha
      [2014/01/22 17:04:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeevzyu
      [2014/01/22 17:04:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeebqii
      [2014/01/22 17:03:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuedzeu
      [2014/01/22 17:03:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfodaca
      [2014/01/22 17:02:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sikoyq
      [2014/01/22 17:01:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibhyhu
      [2014/01/22 17:00:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bezaad
      [2014/01/22 17:00:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwhysoo
      [2014/01/22 16:59:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhtyqua
      [2014/01/22 16:59:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaboqeas
      [2014/01/22 16:58:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piyxepo
      [2014/01/22 16:57:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egasawba
      [2014/01/22 16:57:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikizmuih
      [2014/01/22 16:56:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doowce
      [2014/01/22 16:55:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nabyocw
      [2014/01/22 16:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voodyrhi
      [2014/01/22 16:54:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qadoep
      [2014/01/22 16:53:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osowycz
      [2014/01/22 16:53:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icucuf
      [2014/01/22 16:52:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifwyduiz
      [2014/01/22 16:51:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nivivura
      [2014/01/22 16:51:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziqaopw
      [2014/01/22 16:50:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydvium
      [2014/01/22 16:49:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icawuq
      [2014/01/22 16:49:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biatxo
      [2014/01/22 16:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaewezf
      [2014/01/22 16:47:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Linake
      [2014/01/22 16:47:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeynaw
      [2014/01/22 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaakfyr
      [2014/01/22 16:45:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ririho
      [2014/01/22 16:45:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usohokes
      [2014/01/22 16:45:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okabybod
      [2014/01/22 16:44:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zozegyu
      [2014/01/22 16:44:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqohute
      [2014/01/22 16:43:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bodyucyp
      [2014/01/22 16:43:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inqoby
      [2014/01/22 16:43:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyzybuny
      [2014/01/22 16:43:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feguequg
      [2014/01/22 16:42:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ataqusi
      [2014/01/22 16:42:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Marauq
      [2014/01/22 16:42:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doedodv
      [2014/01/22 16:41:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoopisiw
      [2014/01/22 16:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyzu
      [2014/01/22 16:41:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tibebyyp
      [2014/01/22 16:40:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiulkuf
      [2014/01/22 16:40:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybgydi
      [2014/01/22 16:39:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubeproda
      [2014/01/22 16:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onuwodte
      [2014/01/22 16:38:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pudetud
      [2014/01/22 16:38:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qefepuf
      [2014/01/22 16:37:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qybyyco
      [2014/01/22 16:36:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocisyg
      [2014/01/22 16:35:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucpeceos
      [2014/01/22 16:35:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewuggyra
      [2014/01/22 16:34:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epcitiu
      [2014/01/22 16:33:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiugsy
      [2014/01/22 16:33:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiiqfi
      [2014/01/22 16:32:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igykevyg
      [2014/01/22 16:31:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rolyiqw
      [2014/01/22 16:31:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocraip
      [2014/01/22 16:30:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywnixe
      [2014/01/22 16:29:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caynsoxa
      [2014/01/22 16:29:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oscolip
      [2014/01/22 16:28:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uchiqo
      [2014/01/22 16:27:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idihymep
      [2014/01/22 16:27:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udaricap
      [2014/01/22 16:26:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaoqix
      [2014/01/22 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igpylu
      [2014/01/22 16:25:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edyqon
      [2014/01/22 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enbatu
      [2014/01/22 16:23:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ryynkyo
      [2014/01/22 16:23:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paxuicx
      [2014/01/22 16:22:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esawik
      [2014/01/22 16:21:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uncauhy
      [2014/01/22 16:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irezkoax
      [2014/01/22 16:20:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zerowosy
      [2014/01/22 16:19:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xenuguel
      [2014/01/22 16:19:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduniba
      [2014/01/22 16:18:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zifequ
      [2014/01/22 16:17:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epytedeh
      [2014/01/22 16:17:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syibutqo
      [2014/01/22 16:16:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yciqicmi
      [2014/01/22 16:15:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Texuhui
      [2014/01/22 16:15:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utbelyce
      [2014/01/22 16:14:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otydire
      [2014/01/22 16:13:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixugok
      [2014/01/22 16:13:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exocuw
      [2014/01/22 16:12:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibinal
      [2014/01/22 16:11:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liizovr
      [2014/01/22 16:11:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emohisot
      [2014/01/22 16:10:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iguvekq
      [2014/01/22 16:09:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hypaadt
      [2014/01/22 16:08:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gyobki
      [2014/01/22 16:08:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyikwady
      [2014/01/22 16:07:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukruqufi
      [2014/01/22 16:07:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qylara
      [2014/01/22 15:15:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuewukym
      [2014/01/22 15:14:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Invyyq
      [2014/01/22 15:14:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faloubd
      [2014/01/22 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azibcewo
      [2014/01/22 15:12:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Coavicag
      [2014/01/22 15:12:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhte
      [2014/01/22 15:11:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qufuva
      [2014/01/22 15:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owhoidcy
      [2014/01/22 15:10:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meodsai
      [2014/01/22 15:09:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pobuzu
      [2014/01/22 14:03:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofuqekyd
      [2014/01/22 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hueqwei
      [2014/01/22 14:02:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woacimr
      [2014/01/22 14:01:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexamt
      [2014/01/22 14:00:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vyinxa
      [2014/01/22 14:00:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hihiasca
      [2014/01/22 13:59:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nearavf
      [2014/01/22 13:59:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ettiupz
      [2014/01/22 13:58:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyzeml
      [2014/01/22 13:57:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Supeabu
      [2014/01/22 13:56:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diohulka
      [2014/01/22 13:56:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoodma
      [2014/01/22 13:55:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygekymip
      [2014/01/22 13:55:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urutuki
      [2014/01/22 13:54:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Huoxewi
      [2014/01/22 13:53:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyoxanuc
      [2014/01/22 13:53:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agwayfr
      [2014/01/22 13:52:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywceew
      [2014/01/22 13:51:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikliysup
      [2014/01/22 13:51:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foygisd
      [2014/01/22 13:50:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hemeycb
      [2014/01/22 13:49:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocuqvy
      [2014/01/22 13:49:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydniiw
      [2014/01/22 13:48:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyliwyq
      [2014/01/22 13:47:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sycogifo
      [2014/01/22 13:47:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuivozy
      [2014/01/22 13:46:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekxuigc
      [2014/01/22 13:46:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wutybi
      [2014/01/22 13:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elunzoo
      [2014/01/22 13:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Facyik
      [2014/01/22 13:43:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekmiceuk
      [2014/01/22 13:43:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypadun
      [2014/01/22 13:42:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oferguek
      [2014/01/22 13:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tobayd
      [2014/01/22 13:41:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agsexi
      [2014/01/22 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hasopo
      [2014/01/22 13:40:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Geoftiig
      [2014/01/22 13:39:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inegni
      [2014/01/22 13:38:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roacmoe
      [2014/01/22 13:38:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozxioxuk
      [2014/01/22 13:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sadohazi
      [2014/01/22 13:37:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaafinpe
      [2014/01/22 13:36:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibzayfer
      [2014/01/22 13:35:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubgyve
      [2014/01/22 13:34:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usidikg
      [2014/01/22 13:34:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utunixed
      [2014/01/22 13:33:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eciwiv
      [2014/01/22 13:33:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pitabyug
      [2014/01/22 13:32:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyypep
      [2014/01/22 13:31:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuagku
      [2014/01/22 13:31:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Boyqce
      [2014/01/22 13:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alosdi
      [2014/01/22 13:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fituidso
      [2014/01/22 13:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gipatayr
      [2014/01/22 13:28:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gixuirt
      [2014/01/22 13:27:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etwigoak
      [2014/01/22 13:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biibhyos
      [2014/01/22 13:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqroxe
      [2014/01/22 13:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqoreb
      [2014/01/22 13:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xawufi
      [2014/01/22 13:24:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hiqymola
      [2014/01/22 13:24:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edkyuvv
      [2014/01/22 13:23:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqapfoix
      [2014/01/22 13:22:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibiapgi
      [2014/01/22 13:22:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muisuha
      [2014/01/22 13:21:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meokxuar
      [2014/01/22 13:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypaza
      [2014/01/22 13:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etabniq
      [2014/01/22 13:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebohuq
      [2014/01/22 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Unziybah
      [2014/01/22 13:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydlaemo
      [2014/01/22 13:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylnyilo
      [2014/01/22 13:16:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuoqim
      [2014/01/22 13:16:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yginixy
      [2014/01/22 13:15:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biufkuow
      [2014/01/22 13:14:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulfuyte
      [2014/01/22 13:14:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owcagy
      [2014/01/22 13:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teryfy
      [2014/01/22 13:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewbiobf
      [2014/01/22 13:12:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oribew
      [2014/01/22 12:47:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezuqofo
      [2014/01/22 12:47:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyecpuel
      [2014/01/22 11:53:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Memyqy
      [2014/01/22 11:52:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liidle
      [2014/01/22 11:52:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykysusqa
      [2014/01/22 11:51:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohenuv
      [2014/01/22 11:50:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxuqy
      [2014/01/22 11:50:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akbiuc
      [2014/01/22 11:49:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apsouh
      [2014/01/22 11:48:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muepbuo
      [2014/01/22 11:48:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhkixayk
      [2014/01/22 11:47:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Penumu
      [2014/01/22 11:46:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teowxio
      [2014/01/22 11:46:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izpaaf
      [2014/01/22 11:45:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqveoguz
      [2014/01/22 11:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyrhiah
      [2014/01/22 11:44:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozuwal
      [2014/01/22 11:43:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebilanwa
      [2014/01/22 11:42:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noefohu
      [2014/01/22 11:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seehheko
      [2014/01/22 11:41:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuwiuby
      [2014/01/22 11:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utsoik
      [2014/01/22 11:40:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osyqny
      [2014/01/22 11:39:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaambibe
      [2014/01/22 11:38:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysnuso
      [2014/01/22 11:38:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxipaxl
      [2014/01/22 11:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usonipq
      [2014/01/22 11:36:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvehif
      [2014/01/22 11:36:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yswied
      [2014/01/22 11:35:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arehsoiw
      [2014/01/22 11:35:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyyqbel
      [2014/01/22 11:34:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysobuxqy
      [2014/01/22 11:33:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyyskeo
      [2014/01/22 11:33:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odovneuw
      [2014/01/22 11:32:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syifyneg
      [2014/01/22 11:31:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ascuiquv
      [2014/01/22 11:31:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fanipuaq
      [2014/01/22 11:30:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arfaysin
      [2014/01/22 11:29:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apfavoga
      [2014/01/22 11:29:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posyet
      [2014/01/22 11:28:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eglecacu
      [2014/01/22 11:27:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufpuutfa
      [2014/01/22 11:27:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obvelao
      [2014/01/22 11:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giulva
      [2014/01/22 11:26:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xasitan
      [2014/01/22 11:25:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyxyze
      [2014/01/22 11:24:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuulabi
      [2014/01/22 11:23:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iginiwud
      [2014/01/22 11:23:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evfaizo
      [2014/01/22 11:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Athian
      [2014/01/22 11:22:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mokyif
      [2014/01/22 11:21:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawyara
      [2014/01/22 11:20:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toremawa
      [2014/01/22 11:20:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kinolu
      [2014/01/22 11:19:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewolas
      [2014/01/22 11:18:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tedyyn
      [2014/01/22 11:18:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Operpaa
      [2014/01/22 11:17:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Verauki
      [2014/01/22 11:16:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubytyzr
      [2014/01/22 11:16:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etehvuro
      [2014/01/22 11:15:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siodqile
      [2014/01/22 11:14:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suwuiwa
      [2014/01/22 11:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhzaidqi
      [2014/01/22 11:13:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layppae
      [2014/01/22 11:12:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owqaocu
      
      
      :Services
      
      :Reg
      
      :Files
      
      
      
      :Commands
      
      [emptytemp]
      [start explorer]
      [Reboot]
    • Then click the Run Fix button at the top. <--Not run Scan
    • Let the program run unhindered, reboot when it is done
    • Then post the results of the log it produces
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  6. #26
    Junior Member
    Join Date
    Jan 2014
    Posts
    27

    Default Run Fix report

    All processes killed
    ========== OTL ==========
    C:\Users\Greg\AppData\Roaming\Hoilall folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Dityucwa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sytoyq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Saozqi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nypuykyl folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zetucyw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sywyqayz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zacaes folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Expiytr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Seedadvo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Evagleu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ahheav folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vuurpe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Reevipp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Waomxiw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wyfaib folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uglean folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ixqype folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Irzuze folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wexoym folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ycacmu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Igygalz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Horual folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Poagpi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Evibol folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nesyybq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ixiqnix folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kootkiiv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Taogik folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Efagxui folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Opfage folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ennaeg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Cihozut folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Patoikp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lyecynbo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ozodip folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Atgaeqn folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ahbaunze folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Cybourw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Taicifa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xuwocaw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xuigsu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zoyqyz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ufnaam folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wyvenu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bymoem folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ungazuoh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Naxykure folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Heodgaih folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ercaewep folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Niryez folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yzweoqza folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ymypigaz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gunyfy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ypihpua folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ixufuwr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tulezy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Giexfy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Avzuob folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Agamte folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ofhegye folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Egqeaspi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ifynyn folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yxehifa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vikaqy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Keovofte folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Izvyeqha folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wyybxy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ydozulbi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lasyzalu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ipyhafoq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lybyid folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Usmoquod folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yzalynk folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xesyot folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ulynos folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zaovykq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Keyxeb folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Finosy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Alyvywb folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ihotyl folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Puuwepeh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ynacacag folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iwvoly folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Foipted folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ovezfiav folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Buoxyta folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Imxeax folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tyniot folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Acakcouv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tawawy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Abkoele folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yqykyfaq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qainsa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Diziby folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zuvyakr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xowyigq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ofagni folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Apqeza folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Anuxxad folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bufuohoc folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nihehoic folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bofyqe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Acebry folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Rakedy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ucarolar folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uzinoqoz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ymasyh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gaykgode folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Buikmoa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sasuer folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iqpapif folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ikzysoo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Azdahesa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Saehykot folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Akesquup folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Upqyzea folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pydyavx folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Edaglyv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ytvieho folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yquwyt folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Imosez folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wiumaxw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ogitnyyz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Suykihip folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Garyqu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ikdyiri folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fetehe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Koezwu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Diakegem folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fuuzaget folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ibunvo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pilead folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ihxapoza folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Erkysen folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xowacad folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ylceyged folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iwardu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Edduro folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kaciloa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yfleqoso folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hahedum folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ysawmuc folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Haivuwox folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ehedpifu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pexuawo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Erlyne folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yduhwu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tivozuf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uknitiiz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Saogutz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Seviwe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fasaxyar folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Seufyp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ansyizuw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ycozehez folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Exytzogu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Elyvavg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yngibeq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ypuxozaf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xayhluy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Abgyuv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Efhaabyf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Exakuxa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ezgyuh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uvobdy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Koarobz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vygokone folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uvyquzew folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vawabya folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Patiuwo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lupyuxel folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Eqzeyvvu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yhewakb folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Udlyimig folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Okeniqfy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uvuzwiq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kimayn folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Feibfa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Esvyuz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Daefodi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kyheugfy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Odarqexu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sedobet folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qigypiy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uxofodr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Loiwfeky folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Cefeuket folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bebazuu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Awyvfy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Azufsopi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Idysaten folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Subomin folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qyogopo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zucowo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kuzaitlo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Timoar folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ahbeal folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Awefevre folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qouronv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yhukomco folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qaadfoi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vuakceh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Peusihgu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Maitowow folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Riobsa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wuapegd folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sofifu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wuenweuf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gidusy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Dyenukx folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ykeluhe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kocyciw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Baamkieg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Epqyitku folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qodaziop folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tegiruim folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Igwuvo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ximigaep folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ozilyga folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Meuqce folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iqubek folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ebryag folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Rietku folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iblowawi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nyehny folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kumaokp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Elylebz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pyisodof folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Obubbis folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Rinyci folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Etgirize folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iriwgou folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Abtiva folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Amnuny folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gileheev folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nyguhi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Mubaowqe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Olraecix folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Deidgyyx folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Otxyuxd folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Detywon folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Viyvuko folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ebwiykon folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pebyaly folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ebuxfut folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Rayxicu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Udreto folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Risuxyx folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Dolianyk folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Egabaxew folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Afukreha folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ixebegu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qibylan folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ahviqi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Dywiycky folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Oritxy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Aztoatyp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Abguitc folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ifaxtawa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gibomi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zeinre folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Woulxion folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Arerufxu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pyyrru folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Layllezu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xozayke folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uhupumoq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fiahahm folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Byhige folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qoluoxcu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nybaloin folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ydurez folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ymytkoiw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Posiuso folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wehimew folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Oxiwzy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Muypzior folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xegyit folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Eppigobu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wanywuu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Icxyqig folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Segera folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Toedbuwi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Igzyaf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Buezyqiw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hygiduno folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yhyqeho folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wuypavri folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ufysza folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fifimaxi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Akafmi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Byeqamil folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qiofovy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Piuszao folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Afkoub folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Irhituwa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ewsypa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hagiti folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bohaaqw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Awnyeg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Mabadua folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Reduytno folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zixave folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Awunmeu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Teezak folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ilmuezo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Miategz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zuquew folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Oxepigy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Cyitwaos folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ydumyp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vaumyvat folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nyasar folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Abonap folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ypwypi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Agxusupo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ezmyhie folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Oqcayni folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Axydgyan folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ebolah folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Algaqew folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wyaftyi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kemyexw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Angeanna folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Waleomwa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ahgufi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lofyucg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Paweepny folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Rytopaib folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ynohqeby folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hecyufwi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ceokycra folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Evotyspo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Voefykug folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Dateip folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Feynuw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qaokzu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Efnaipk folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Otygta folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kiozfi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Efurobb folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ceaqafs folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Liyqmib folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ynexpyzo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iqceysa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sydocey folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uzfeypgu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Viyhxiqa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zoevgiu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pufapizi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Aspeel folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lyoluzq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Femahuw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gienwyh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xionvoru folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nauliha folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zeevzyu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zeebqii folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fuedzeu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yfodaca folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sikoyq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ibhyhu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bezaad folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uwhysoo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yhtyqua folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vaboqeas folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Piyxepo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Egasawba folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ikizmuih folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Doowce folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nabyocw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Voodyrhi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qadoep folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Osowycz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Icucuf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ifwyduiz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nivivura folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ziqaopw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ydvium folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Icawuq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Biatxo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gaewezf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Linake folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xeynaw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xaakfyr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ririho folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Usohokes folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Okabybod folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zozegyu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Egqohute folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bodyucyp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Inqoby folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hyzybuny folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Feguequg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ataqusi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Marauq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Doedodv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hoopisiw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nicyzu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tibebyyp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qiulkuf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ybgydi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ubeproda folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Onuwodte folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pudetud folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qefepuf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qybyyco folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ocisyg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ucpeceos folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ewuggyra folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Epcitiu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wiugsy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qiiqfi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Igykevyg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Rolyiqw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ocraip folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ywnixe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Caynsoxa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Oscolip folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uchiqo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Idihymep folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Udaricap folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zaoqix folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Igpylu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Edyqon folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Enbatu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ryynkyo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Paxuicx folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Esawik folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uncauhy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Irezkoax folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zerowosy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xenuguel folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yduniba folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zifequ folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Epytedeh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Syibutqo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yciqicmi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Texuhui folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Utbelyce folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Otydire folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ixugok folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Exocuw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vibinal folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Liizovr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Emohisot folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iguvekq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hypaadt folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gyobki folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zyikwady folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ukruqufi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qylara folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fuewukym folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Invyyq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Faloubd folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Azibcewo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Coavicag folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yluhte folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Qufuva folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Owhoidcy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Meodsai folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pobuzu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ofuqekyd folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hueqwei folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Woacimr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ynexamt folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vyinxa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hihiasca folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nearavf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ettiupz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ipyzeml folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Supeabu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Diohulka folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zoodma folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ygekymip folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Urutuki folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Huoxewi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fyoxanuc folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Agwayfr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ywceew folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ikliysup folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Foygisd folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hemeycb folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ocuqvy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ydniiw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pyliwyq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sycogifo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fuivozy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ekxuigc folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wutybi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Elunzoo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Facyik folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ekmiceuk folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ypadun folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Oferguek folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tobayd folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Agsexi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hasopo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Geoftiig folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Inegni folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Roacmoe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ozxioxuk folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sadohazi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xaafinpe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ibzayfer folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ubgyve folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Usidikg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Utunixed folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Eciwiv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pitabyug folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hyypep folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tuagku folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Boyqce folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Alosdi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fituidso folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gipatayr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Gixuirt folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Etwigoak folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Biibhyos folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yqroxe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yqoreb folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xawufi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hiqymola folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Edkyuvv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yqapfoix folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vibiapgi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Muisuha folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Meokxuar folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nypaza folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Etabniq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ebohuq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Unziybah folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ydlaemo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ylnyilo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fuoqim folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yginixy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Biufkuow folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ulfuyte folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Owcagy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Teryfy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ewbiobf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Oribew folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ezuqofo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hyecpuel folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Memyqy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Liidle folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ykysusqa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ohenuv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ihxuqy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Akbiuc folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Apsouh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Muepbuo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yhkixayk folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Penumu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Teowxio folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Izpaaf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Eqveoguz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yqyrhiah folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ozuwal folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ebilanwa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Noefohu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Seehheko folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kuwiuby folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Utsoik folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Osyqny folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vaambibe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ysnuso folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uxipaxl folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Usonipq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uvehif folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yswied folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Arehsoiw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tyyqbel folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ysobuxqy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xyyskeo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Odovneuw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Syifyneg folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ascuiquv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Fanipuaq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Arfaysin folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Apfavoga folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Posyet folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Eglecacu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ufpuutfa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Obvelao folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Giulva folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xasitan folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nicyxyze folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tuulabi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iginiwud folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Evfaizo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Athian folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Mokyif folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tawyara folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Toremawa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kinolu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ewolas folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tedyyn folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Operpaa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Verauki folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ubytyzr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Etehvuro folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Siodqile folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Suwuiwa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uhzaidqi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Layppae folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Owqaocu folder moved successfully.
    ========== SERVICES/DRIVERS ==========
    ========== REGISTRY ==========
    ========== FILES ==========
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Greg
    ->Temp folder emptied: 6109266 bytes
    ->Temporary Internet Files folder emptied: 556841686 bytes
    ->Java cache emptied: 0 bytes
    ->Google Chrome cache emptied: 7701348 bytes
    ->Apple Safari cache emptied: 0 bytes
    ->Flash cache emptied: 12986 bytes

    User: LogMeInRemoteUser
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: LogMeInRemoteUser.GREG
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Public
    ->Temp folder emptied: 0 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 270667 bytes
    %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 11338735 bytes
    %systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 753 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 555.00 mb


    OTL by OldTimer - Version 3.2.69.0 log created on 02022014_161234

    Files\Folders moved on Reboot...
    File\Folder C:\Users\Greg\AppData\Local\Temp\fla7F27.tmp not found!
    File\Folder C:\Users\Greg\AppData\Local\Temp\fla7FE4.tmp not found!
    File\Folder C:\Users\Greg\AppData\Local\Temp\fla80EE.tmp not found!
    File\Folder C:\Users\Greg\AppData\Local\Temp\fla80EF.tmp not found!
    File\Folder C:\Users\Greg\AppData\Local\Temp\fla80FF.tmp not found!
    File\Folder C:\Users\Greg\AppData\Local\Temp\fla8258.tmp not found!
    C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\0REoKIo0Pr_803142420[1].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[4].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[5].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[6].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[7].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[1].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[2].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[3].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[4].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\if[4].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\if[6].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLgB4LJGAN7.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLgSHET3FXE.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[10].gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[6].gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[7].gif not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\ttj[2].js moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\ttj[3].js moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatch09YODTJE.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchNH2ESNW4.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchNK9E1EYE.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchP8PRXUA2.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchQYHNI3W2.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchZCC54NKH.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchZP8WSPAQ.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatch[10].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\0RUSuwZ15J_622351915[1].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\120x600[1].js moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\160x600[1].js moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\4cbd1b0c9f6f42058c6bc64c7199a699[1].js moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\ab[1].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\ad[1].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[4].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[5].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[6].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[7].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[8].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\cs[1].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\html[2].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[5].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[6].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[9].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg0GBJI8IH.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg75XA2CIC.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLgOBMH534T.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLgZ2BSJS7E.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg[10].gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg[8].gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\pixel[1].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\RzoNiRR1p2Mqyyz2RwqSMw[1].woff moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\usermatchI4RTTC6K.htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\yVHpdQrmTj9Kax1tmFSx2j8E0i7KZn-EPnyo3HZu7kw[1].woff moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\0Rg44tLOjg_1295652532[1].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\beacon[2].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\BY89I4PQ.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\if[5].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[2].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[3].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[4].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[5].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[6].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[7].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[8].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[3].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[4].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[5].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[7].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[8].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beaconAXSYYN8Y.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beaconGXL94CTA.htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[10].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[3].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[6].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[8].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[9].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\if[3].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\if[4].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLg6PA9UHTU.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLgMWORQPW2.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLgU2EGJJLB.gif not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\serv[1].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\serv[2].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\tt[1].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[2].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[4].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[5].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[6].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[7].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\vj[1].js not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS026C4T\p-01-0VIaSjnOLg[6].gif not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\beacon[2].htm moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\beacon[5].htm not found!
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3W8ZAJ8QP.htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[10].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[4].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[6].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[7].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[3].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[8].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[9].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgK95C4AYI.gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgOR6D2AXI.gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgVOQ2VJRR.gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgW4G080A4.gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[10].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[7].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[8].gif moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[9].gif moved successfully.
    File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\pd[1].htm not found!
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIQS7DTC\handshake[4].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIQS7DTC\vpixel[2].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKIVQ94C\the-more-show[1].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\87Y3HPU0\vpixel[1].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31H33TJT\vpixel[1].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31H33TJT\vpixel[2].htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2UM641HX\html[1].htm moved successfully.
    File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
    File\Folder C:\Windows\temp\hsperfdata_GREG$\2168 not found!
    File\Folder C:\Windows\temp\jna6499668670523374915.dll not found!
    File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...

  7. #27
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Now after this fix post the log from the fix and also run a new scan with OTL and post the log

    Open OTL.exe
    • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

      Code:
      :OTL
      [2014/01/22 10:23:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
      [2014/01/22 01:33:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aguwvoqy
      [2014/01/22 01:33:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugefuqb
      [2014/01/22 01:32:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faafulw
      [2014/01/22 01:32:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ergaawl
      [2014/01/22 01:31:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bozyadso
      [2014/01/22 01:30:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hekeekse
      [2014/01/22 01:30:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awytylwe
      [2014/01/22 01:29:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzihohf
      [2014/01/22 01:28:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mecyuxs
      [2014/01/22 01:28:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Firiec
      [2014/01/22 01:27:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuceiffy
      [2014/01/22 01:26:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvangy
      [2014/01/22 01:26:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ishiath
      [2014/01/22 01:25:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xutuiqav
      [2014/01/22 01:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vamumifa
      [2014/01/22 01:24:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzaklie
      [2014/01/22 01:23:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sotyaf
      [2014/01/22 01:22:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwxiihxu
      [2014/01/22 01:22:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erekty
      [2014/01/22 01:21:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhaszu
      [2014/01/22 01:20:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elqyerot
      [2014/01/22 01:20:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuzylyn
      [2014/01/22 01:19:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyzagao
      [2014/01/22 01:19:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isacro
      [2014/01/22 01:18:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyzudos
      [2014/01/22 01:17:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Worupyz
      [2014/01/22 01:16:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siquez
      [2014/01/22 01:16:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyrova
      [2014/01/21 17:39:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xoiregeh
      [2014/01/21 17:39:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kouwolm
      [2014/01/21 17:38:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyqyvyz
      [2014/01/21 17:38:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuiqenle
      [2014/01/21 17:37:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awhaefep
      [2014/01/21 17:36:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suvaeq
      [2014/01/21 17:35:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubyxygke
      [2014/01/21 17:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okolaw
      [2014/01/21 17:34:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulqyiq
      [2014/01/21 17:34:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rudatoi
      [2014/01/21 17:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deokiw
      [2014/01/21 17:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utoqzou
      [2014/01/21 17:31:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubzohaic
      [2014/01/21 17:31:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aciscy
      [2014/01/21 17:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evusufu
      [2014/01/21 17:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olehuh
      [2014/01/21 17:29:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paevrep
      [2014/01/21 17:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyqomez
      [2014/01/21 17:28:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obugego
      [2014/01/21 17:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meibway
      [2014/01/21 17:26:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yloksa
      [2014/01/21 17:26:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buefemob
      [2014/01/21 17:25:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kovofeq
      [2014/01/21 17:24:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poumuz
      [2014/01/21 17:24:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynlyradi
      [2014/01/21 17:23:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyovfyas
      [2014/01/21 17:22:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrloifni
      [2014/01/21 17:22:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydkyla
      [2014/01/21 17:21:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exykku
      [2014/01/21 17:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvgesuqo
      [2014/01/21 17:20:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usygyda
      [2014/01/21 17:19:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywvusoro
      [2014/01/21 17:18:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqmiiv
      [2014/01/21 17:18:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biowwam
      [2014/01/21 17:17:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weugho
      [2014/01/21 17:17:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugebaqp
      [2014/01/21 17:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybomvo
      [2014/01/21 17:15:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hogoafh
      [2014/01/21 17:15:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owacbeab
      [2014/01/21 17:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voahrucy
      [2014/01/21 17:13:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nalevo
      [2014/01/21 17:13:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afmazo
      [2014/01/21 17:12:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irtoyro
      [2014/01/21 17:11:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibinhe
      [2014/01/21 17:11:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Octoqeog
      [2014/01/21 17:10:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Danaker
      [2014/01/21 17:09:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynysxa
      [2014/01/21 17:09:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xahuerpa
      [2014/01/21 17:08:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Levabapi
      [2014/01/21 17:08:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adtiybny
      [2014/01/21 17:07:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epguvyif
      [2014/01/21 17:06:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yckabi
      [2014/01/21 17:05:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igrysuf
      [2014/01/21 17:05:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqfuur
      [2014/01/21 17:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyuhq
      [2014/01/21 17:04:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moorevdu
      [2014/01/21 17:03:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyimyc
      [2014/01/21 17:02:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etorex
      [2014/01/21 17:02:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wixyavi
      [2014/01/21 17:01:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecatut
      [2014/01/21 17:00:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soutpyab
      [2014/01/21 17:00:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lihugozy
      [2014/01/21 16:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noisediv
      [2014/01/21 16:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ariwkau
      [2014/01/21 16:58:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaaqroti
      [2014/01/21 16:57:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viefce
      [2014/01/21 16:56:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mibadya
      [2014/01/21 16:56:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riexzog
      [2014/01/21 16:55:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woxoyk
      [2014/01/21 16:55:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqpyop
      [2014/01/21 16:54:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toryke
      [2014/01/21 16:53:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cizyko
      [2014/01/21 16:52:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akipun
      [2014/01/21 16:52:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yruwoky
      [2014/01/21 16:51:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efcayzdo
      [2014/01/21 16:51:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uttoer
      [2014/01/21 16:50:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zualohyr
      [2014/01/21 16:49:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfeczy
      [2014/01/21 16:48:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arzuano
      [2014/01/21 16:48:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feygsan
      [2014/01/29 16:00:33 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3908755253.job
      [2014/01/29 07:19:48 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1722134904.job
      [2014/01/29 05:08:09 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2053395886.job
      [2014/01/29 04:42:19 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2164977508.job
      [2014/01/29 01:13:59 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3134106562.job
      [2014/01/28 23:16:52 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 760575922.job
      [2014/01/28 21:19:48 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3287703646.job
      [2014/01/28 20:40:57 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 985122024.job
      [2014/01/28 19:09:47 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4248253841.job
      [2014/01/28 17:13:05 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2271048042.job
      [2014/01/27 16:40:42 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3690677127.job
      [2014/01/27 13:17:41 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3046702210.job
      [2014/01/27 07:38:46 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4171909079.job
      [2014/01/26 03:18:18 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3288067138.job
      [2014/01/26 01:08:12 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1139419153.job
      [2014/01/26 00:42:08 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3717181098.job
      [2014/01/25 23:11:06 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 534460331.job
      [2014/01/25 20:47:55 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 197679845.job
      [2014/01/25 19:16:50 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1252562066.job
      [2014/01/25 17:19:45 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 583378015.job
      [2014/01/25 16:40:50 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 993838087.job
      
      
      :Services
      
      :Reg
      
      :Files
      ipconfig /flushdns /c
      
      
      :Commands
      [emptytemp]
      [start explorer]
      [Reboot]
    • Then click the Run Fix button at the top. <--Not run Scan
    • Let the program run unhindered, reboot when it is done
    • Then post the results of the log it produces


    Then run a new scan with OTL and post the new log please
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  8. #28
    Junior Member
    Join Date
    Jan 2014
    Posts
    27

    Default Post-fix run

    All processes killed
    ========== OTL ==========
    C:\Program Files (x86)\Common Files\Spigot\GC folder moved successfully.
    C:\Program Files (x86)\Common Files\Spigot folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Aguwvoqy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ugefuqb folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Faafulw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ergaawl folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Bozyadso folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hekeekse folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Awytylwe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yzihohf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Mecyuxs folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Firiec folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Cuceiffy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uvangy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ishiath folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xutuiqav folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vamumifa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yzaklie folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Sotyaf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Iwxiihxu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Erekty folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yluhaszu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Elqyerot folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Tuzylyn folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xyzagao folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Isacro folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zyzudos folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Worupyz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Siquez folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Pyrova folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xoiregeh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kouwolm folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yqyqyvyz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Vuiqenle folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Awhaefep folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Suvaeq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ubyxygke folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Okolaw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ulqyiq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Rudatoi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Deokiw folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Utoqzou folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ubzohaic folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Aciscy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Evusufu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Olehuh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Paevrep folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Dyqomez folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Obugego folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Meibway folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yloksa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Buefemob folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kovofeq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Poumuz folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ynlyradi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nyovfyas folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yrloifni folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ydkyla folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Exykku folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yvgesuqo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Usygyda folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ywvusoro folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Eqmiiv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Biowwam folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Weugho folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ugebaqp folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ybomvo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Hogoafh folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Owacbeab folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Voahrucy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Nalevo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Afmazo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Irtoyro folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ibinhe folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Octoqeog folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Danaker folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ynysxa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Xahuerpa folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Levabapi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Adtiybny folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Epguvyif folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yckabi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Igrysuf folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yqfuur folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Izvyuhq folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Moorevdu folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lyimyc folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Etorex folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Wixyavi folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ecatut folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Soutpyab folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Lihugozy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Noisediv folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Ariwkau folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Kaaqroti folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Viefce folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Mibadya folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Riexzog folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Woxoyk folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uqpyop folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Toryke folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Cizyko folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Akipun folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yruwoky folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Efcayzdo folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Uttoer folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Zualohyr folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Yfeczy folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Arzuano folder moved successfully.
    C:\Users\Greg\AppData\Roaming\Feygsan folder moved successfully.
    C:\Windows\Tasks\Security Center Update - 3908755253.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 1722134904.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 2053395886.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 2164977508.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 3134106562.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 760575922.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 3287703646.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 985122024.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 4248253841.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 2271048042.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 3690677127.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 3046702210.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 4171909079.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 3288067138.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 1139419153.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 3717181098.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 534460331.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 197679845.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 1252562066.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 583378015.job moved successfully.
    C:\Windows\Tasks\Security Center Update - 993838087.job moved successfully.
    ========== SERVICES/DRIVERS ==========
    ========== REGISTRY ==========
    ========== FILES ==========
    < ipconfig /flushdns /c >
    Windows IP Configuration
    Successfully flushed the DNS Resolver Cache.
    C:\Users\Greg\Desktop\cmd.bat deleted successfully.
    C:\Users\Greg\Desktop\cmd.txt deleted successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Greg
    ->Temp folder emptied: 86946173 bytes
    ->Temporary Internet Files folder emptied: 687456557 bytes
    ->Java cache emptied: 0 bytes
    ->Google Chrome cache emptied: 7041719 bytes
    ->Apple Safari cache emptied: 0 bytes
    ->Flash cache emptied: 85851 bytes

    User: LogMeInRemoteUser
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: LogMeInRemoteUser.GREG
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Public
    ->Temp folder emptied: 0 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 2557128 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
    RecycleBin emptied: 40888745 bytes

    Total Files Cleaned = 787.00 mb


    OTL by OldTimer - Version 3.2.69.0 log created on 02042014_094033

    Files\Folders moved on Reboot...
    C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\5TCLFI4R.htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\LHZJ63XN.htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\VDLFMH9M.htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\HL5A9JPM.htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\OBMKKMBP.htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\QNFGCLJK.htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZ8TU2N3\XUURJTL8.htm moved successfully.
    C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WQV7XI0\EJZCZI0V.htm moved successfully.
    File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
    File\Folder C:\Windows\temp\hsperfdata_GREG$\2156 not found!
    File\Folder C:\Windows\temp\jna6009933180953729174.dll not found!
    File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...

  9. #29
    Junior Member
    Join Date
    Jan 2014
    Posts
    27

    Default OTL scan report

    OTL logfile created on: 2/4/2014 9:55:00 AM - Run 5
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Greg\Desktop
    64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.11.9600.16428)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    7.94 Gb Total Physical Memory | 4.86 Gb Available Physical Memory | 61.24% Memory free
    8.94 Gb Paging File | 5.52 Gb Available in Paging File | 61.75% Paging File free
    Paging file location(s): c:\pagefile.sys 1024 2048 [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 931.41 Gb Total Space | 587.85 Gb Free Space | 63.11% Space Free | Partition Type: NTFS
    Drive E: | 298.09 Gb Total Space | 152.62 Gb Free Space | 51.20% Space Free | Partition Type: NTFS

    Computer Name: GREG | User Name: Greg | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
    PRC - C:\Users\Greg\Desktop\OTL.exe (OldTimer Tools)
    PRC - C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
    PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
    PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
    PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
    PRC - C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.)
    PRC - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
    PRC - C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
    PRC - C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
    PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
    PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
    PRC - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
    PRC - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
    PRC - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
    PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe (Adobe Systems Incorporated)
    PRC - C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
    PRC - C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
    PRC - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
    PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
    PRC - C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
    PRC - C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
    PRC - C:\Program Files (x86)\DynDNS Updater\DynTray.exe (Dyn, Inc.)
    PRC - C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
    PRC - C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
    PRC - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
    PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
    PRC - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)


    ========== Modules (No Company Name) ==========

    MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppgooglenaclpluginchrome.dll ()
    MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
    MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll ()
    MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll ()
    MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll ()
    MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
    MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
    MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\libcef.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\f4e49f5f51d2fa5e6190464468dff4d3\Microsoft.VisualBasic.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\c664f44617c6a89edcc171fa8596c89d\System.ServiceProcess.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
    MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
    MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\conduitscripting0.dll ()
    MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qjson0.dll ()
    MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qextserialport1.dll ()
    MOD - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
    MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madexcept_.bpl ()
    MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\maddisAsm_.bpl ()
    MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madbasic_.bpl ()
    MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll ()
    MOD - C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll ()
    MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPTools.dll ()
    MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPToolkit.dll ()
    MOD - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
    MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\libgcc_s_dw2-1.dll ()
    MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()
    MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\mingwm10.dll ()


    ========== Services (SafeList) ==========

    SRV:64bit: - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
    SRV:64bit: - (BcmBtRSupport) -- C:\Windows\SysNative\BtwRSupportService.exe (Broadcom Corporation.)
    SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
    SRV:64bit: - (CrashPlanService) -- C:\Program Files\CrashPlan\CrashPlanService.exe (CrashPlan)
    SRV:64bit: - (HPSIService) -- C:\Windows\SysNative\HPSIsvc.exe (HP)
    SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
    SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
    SRV:64bit: - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
    SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
    SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
    SRV:64bit: - (CISVC) -- C:\Windows\SysNative\CISVC.EXE (Microsoft Corporation)
    SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
    SRV - (LMIMaint) -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe (LogMeIn, Inc.)
    SRV - (LMIGuardianSvc) -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.)
    SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
    SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (AVG)
    SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
    SRV - (AdvancedSystemCareService7) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
    SRV - (LiveUpdateSvc) -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (IObit)
    SRV - (AVGIDSAgent) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
    SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
    SRV - (avgfws) -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
    SRV - (avgwd) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
    SRV - (BingDesktopUpdate) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
    SRV - (LogMeIn) -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.)
    SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
    SRV - (File Backup) -- C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
    SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
    SRV - (Dyn Updater) -- C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
    SRV - (DymoPnpService) -- C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Sanford, L.P.)
    SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
    SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
    SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
    SRV - (HP LaserJet Service) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
    SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - (LMIRfsClientNP) -- C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.)
    DRV:64bit: - (Avgdiska) -- C:\Windows\SysNative\drivers\avgdiska.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (AVGIDSDriver) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (Avgldx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (Avgloga) -- C:\Windows\SysNative\drivers\avgloga.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (AVGIDSHA) -- C:\Windows\SysNative\drivers\avgidsha.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (btwampfl) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
    DRV:64bit: - (bcbtums) -- C:\Windows\SysNative\drivers\bcbtums.sys (Broadcom Corporation.)
    DRV:64bit: - (Avgmfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (Avgfwfd) -- C:\Windows\SysNative\drivers\avgfwd6a.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (Avgrkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (Avgtdia) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
    DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
    DRV:64bit: - (LMIRfsDriver) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
    DRV:64bit: - (lmimirr) -- C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.)
    DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
    DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
    DRV:64bit: - (mvusbews) -- C:\Windows\SysNative\drivers\mvusbews.sys (Marvell Semiconductor, Inc.)
    DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
    DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
    DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
    DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
    DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
    DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
    DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
    DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
    DRV:64bit: - (SkyhawkeUSBLan) -- C:\Windows\SysNative\drivers\btblan.sys (Belcarra Technologies)
    DRV:64bit: - (PRESONUS_AUDIOBOX_USB) -- C:\Windows\SysNative\drivers\psabusbu.sys (Ploytec GmbH)
    DRV:64bit: - (PRESONUS_AUDIOBOX_WDM) -- C:\Windows\SysNative\drivers\psabusba.sys (Ploytec GmbH)
    DRV:64bit: - (PRESONUS_AUDIOBOX_MIDI) -- C:\Windows\SysNative\drivers\psabusbm.sys (Ploytec GmbH)
    DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
    DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
    DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
    DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
    DRV:64bit: - (VX3000) -- C:\Windows\SysNative\drivers\VX3000.sys (Microsoft Corporation)
    DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
    DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
    DRV:64bit: - (VST64_DPV) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
    DRV:64bit: - (winachsf) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
    DRV:64bit: - (VST64HWBS2) -- C:\Windows\SysNative\drivers\VSTBS26.SYS (Conexant Systems, Inc.)
    DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
    DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
    DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
    DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
    DRV:64bit: - (e1express) -- C:\Windows\SysNative\drivers\e1e6232e.sys (Intel Corporation)
    DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
    DRV:64bit: - (silabser) -- C:\Windows\SysNative\drivers\silabser.sys (Silicon Laboratories)
    DRV:64bit: - (silabenm) -- C:\Windows\SysNative\drivers\silabenm.sys (Silicon Laboratories, Inc.)
    DRV:64bit: - (preSonusUsb) -- C:\Windows\SysNative\drivers\preSonusUsb.sys (PreSonus Audio Electronics)
    DRV:64bit: - (ControlTransferDriver) -- C:\Windows\SysNative\drivers\PreSonusUSB_xfer.sys (PreSonus Audio Electronics)
    DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys (TuneUp Software)
    DRV - (LMIInfo) -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.)
    DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
    IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
    IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
    IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7


    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?type=198484&fr=spigot-yhp-ie
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4A 5C 73 60 1A 57 CA 01 [binary data]
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes,DefaultScope = {A8273032-2A44-4B51-9260-1E36A9BBC3B4}
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{678C32DE-279F-4E67-AFB8-37B78B72F5A5}: "URL" = https://www.google.com/search?q={searchTerms}
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{7A2F9203-01E3-4ED0-B627-F7BD85BE63E6}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000031&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=8140A633-0BA9-4F77-8487-8BF9C208F80A&apn_sauid=880C589A-978F-4EB4-9DB0-700BF77083E6&
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{90CAD367-7355-4EA0-88C5-EEB0659C7EC5}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8&rlz=1I7GGIE_en
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{A8273032-2A44-4B51-9260-1E36A9BBC3B4}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



    ========== FireFox ==========

    FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
    FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
    FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    FF - HKLM\Software\MozillaPlugins\@dymo.com/DymoLabelFramework: C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll ( Sanford L.P.)
    FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
    FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
    FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Greg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
    FF - HKCU\Software\MozillaPlugins\@starfield.com/off: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff.dll ( Starfield Technologies, LLC.)
    FF - HKCU\Software\MozillaPlugins\@starfield.com/off64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff64.dll ( Starfield Technologies, LLC.)
    FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe.dll (Starfield Technology, LLC)
    FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe64.dll (Starfield Technology, LLC)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/01/13 03:02:09 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quickprint@hp.com: C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011/01/26 14:27:28 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]

    [2010/08/12 14:06:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions
    [2010/03/16 18:23:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org

    ========== Chrome ==========

    CHR - default_search_provider: Google (Enabled)
    CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
    CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
    CHR - homepage: http://search.yahoo.com/?type=198484&fr=spigot-yhp-ch
    CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
    CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\gcswf32.dll
    CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
    CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
    CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
    CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
    CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
    CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
    CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
    CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
    CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
    CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
    CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
    CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
    CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
    CHR - plugin: Online Storage plug-in (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npoff.dll
    CHR - plugin: Workspace Webmail plug-in 1.0.20.42 (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npwbe.dll
    CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
    CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
    CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
    CHR - plugin: DYMO Label Framework (Enabled) = C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll
    CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
    CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
    CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll
    CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
    CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
    CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
    CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
    CHR - Extension: Angry Birds = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
    CHR - Extension: 1Password = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjjhallfgjeglblehebfpbcfeobpgk\4.0.1.99_0\
    CHR - Extension: ShopAtHome.com extension = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc\7.1.0.16_0\
    CHR - Extension: Google Wallet = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
    CHR - Extension: Google Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm\4.4_0\
    CHR - Extension: RSS Feed Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.2_0\

    O1 HOSTS File: ([2014/02/01 16:19:06 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
    O1 - Hosts: 127.0.0.1 localhost
    O2:64bit: - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
    O2:64bit: - BHO: (no name) - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - No CLSID value found.
    O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
    O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
    O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
    O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
    O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O4:64bit: - HKLM..\Run: [Bluetooth Connection Assistant] LBTWIZ.EXE -silent File not found
    O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
    O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
    O4:64bit: - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
    O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
    O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
    O4 - HKLM..\Run: [CaddieSyncConduit] C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
    O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
    O4 - HKLM..\Run: [DLSService] C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
    O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
    O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [Advanced SystemCare 7] C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
    O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
    O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeCT] C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
    O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeDesktopTimer] C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
    O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
    O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
    O4 - Startup: C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
    O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
    O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
    O9 - Extra 'Tools' menuitem : SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
    O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
    O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
    O13 - gopher Prefix: missing
    O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/_layouts.../ieawsdc32.cab (Microsoft Office Template and Media Control)
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/s...irector/sw.cab (Shockwave ActiveX Control)
    O16 - DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} http://h50203.www5.hp.com/HPISWeb/Cu...WebManager.CAB (Hewlett-Packard Printer Diagnostics)
    O16 - DPF: {627C5D14-CB66-493E-B0F3-589C7E2FA833} http://s118403992.hwddns.com/template/WebClient.cab (NxWebRemoteHH)
    O16 - DPF: {BC0AE9E6-E549-4554-A222-EA083A894683} http://a03-b03.mypicturetown.com/P2P.../x/Upld_47.CAB (QuickUpload)
    O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} http://tools.ebayimg.com/eps/wl/acti..._v1-0-29-0.cab (EPUImageControl Class)
    O16 - DPF: {C7DEDA04-2FFF-4B81-AE66-0A0E0EF4AD2F} http://www.ritzpix.com/net/Uploader/LPUploader57.cab (Image Uploader Control)
    O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://corecon.webex.com/client/T27...x/ieatgpc1.cab (GpcContainer Class)
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
    O16 - DPF: {FE92D9C3-4A69-4EC7-8651-1DC8531D0075} http://68.15.12.110:8012/user/TSBnwCam.CAB (TSBnwCam Control)
    O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/...Control_32.CAB (Reg Error: Key error.)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ECF2B04B-5FBD-4691-A868-5A94A86C6697}: NameServer = 8.8.8.8,8.8.4.4
    O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
    O18:64bit: - Protocol\Handler\livecall - No CLSID value found
    O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
    O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
    O18:64bit: - Protocol\Handler\msnim - No CLSID value found
    O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
    O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
    O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
    O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
    O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
    O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
    O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
    O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O27:64bit: - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
    O27 - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [2011/03/14 11:57:12 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
    O32 - AutoRun File - [2006/09/18 15:43:36 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
    O34 - HKLM BootExecute: (autocheck autochk *)
    O35:64bit: - HKLM\..comfile [open] -- "%1" %*
    O35:64bit: - HKLM\..exefile [open] -- "%1" %*
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
    O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
    O37 - HKLM\...com [@ = ComFile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
    O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
    O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
    O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

    ========== Files/Folders - Created Within 30 Days ==========

    [2014/02/03 15:49:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\Desktop\200 Northfield Road
    [2014/02/03 08:05:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\Desktop\McGovern
    [2014/02/02 12:57:04 | 000,000,000 | ---D | C] -- C:\_OTL
    [2014/02/01 16:19:12 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
    [2014/02/01 11:26:40 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
    [2014/02/01 11:26:40 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
    [2014/02/01 11:26:40 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
    [2014/02/01 11:24:17 | 000,000,000 | ---D | C] -- C:\Qoobox
    [2014/01/31 15:55:34 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Greg\Desktop\OTL.exe
    [2014/01/30 20:25:55 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
    [2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
    [2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
    [2014/01/27 14:07:57 | 000,040,248 | ---- | C] (AVG) -- C:\Windows\SysNative\TURegOpt.exe
    [2014/01/27 14:07:55 | 000,029,496 | ---- | C] (AVG) -- C:\Windows\SysNative\authuitu.dll
    [2014/01/27 14:07:54 | 000,025,400 | ---- | C] (AVG) -- C:\Windows\SysWow64\authuitu.dll
    [2014/01/27 14:07:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014
    [2014/01/27 14:06:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\AVG
    [2014/01/27 13:56:09 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG
    [2014/01/27 13:55:57 | 000,000,000 | -HSD | C] -- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
    [2014/01/22 10:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
    [2014/01/22 10:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData
    [2014/01/22 10:23:43 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
    [2014/01/22 10:23:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
    [2014/01/15 10:19:58 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
    [2014/01/15 10:19:58 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
    [2014/01/15 10:19:56 | 000,376,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
    [2014/01/14 09:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Countdown Timer
    [2014/01/14 09:36:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreeCountdownTimer
    [2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Desktop Timer
    [2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Desktop Timer

    ========== Files - Modified Within 30 Days ==========

    [2014/02/04 09:56:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
    [2014/02/04 09:55:32 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2014/02/04 09:55:32 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2014/02/04 09:47:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
    [2014/02/04 09:47:11 | 2095,452,159 | -HS- | M] () -- C:\hiberfil.sys
    [2014/02/04 09:26:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2014/02/03 15:51:30 | 000,734,906 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
    [2014/02/03 15:51:30 | 000,629,576 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
    [2014/02/03 15:51:30 | 000,108,652 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
    [2014/02/01 16:19:06 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
    [2014/01/31 15:55:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Greg\Desktop\OTL.exe
    [2014/01/23 15:53:31 | 000,000,512 | ---- | M] () -- C:\Users\Greg\Documents\MBR.dat
    [2014/01/21 16:32:39 | 000,107,368 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIRfsClientNP.dll
    [2014/01/21 16:32:39 | 000,092,488 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIinit.dll
    [2014/01/21 16:32:39 | 000,035,656 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIport.dll
    [2014/01/20 16:23:47 | 000,012,326 | ---- | M] () -- C:\Users\Greg\AppData\Local\lgawiqfw
    [2014/01/20 16:22:45 | 000,067,992 | ---- | M] () -- C:\Users\Greg\AppData\Local\idnlbohr
    [2014/01/20 16:21:43 | 000,000,000 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
    [2014/01/19 16:34:49 | 000,001,044 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
    [2014/01/16 03:25:47 | 000,500,856 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

    ========== Files Created - No Company Name ==========

    [2014/02/01 11:26:40 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
    [2014/02/01 11:26:40 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
    [2014/02/01 11:26:40 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
    [2014/02/01 11:26:40 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
    [2014/02/01 11:26:40 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
    [2014/01/27 14:07:29 | 000,002,243 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014.lnk
    [2014/01/23 15:53:31 | 000,000,512 | ---- | C] () -- C:\Users\Greg\Documents\MBR.dat
    [2014/01/21 16:33:18 | 000,001,004 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk
    [2014/01/21 16:33:16 | 000,001,020 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
    [2014/01/20 16:23:47 | 000,012,326 | ---- | C] () -- C:\Users\Greg\AppData\Local\lgawiqfw
    [2014/01/20 16:22:45 | 000,067,992 | ---- | C] () -- C:\Users\Greg\AppData\Local\idnlbohr
    [2014/01/20 16:21:43 | 000,000,000 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
    [2013/10/15 10:33:57 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll
    [2012/09/14 11:38:02 | 000,000,507 | ---- | C] () -- C:\Windows\hpntwksetup.ini
    [2010/11/12 06:21:00 | 000,038,435 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\Microsoft Excel 97-2003.ADR
    [2010/10/14 16:05:19 | 000,001,940 | ---- | C] () -- C:\Users\Greg\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
    [2010/03/23 09:58:24 | 000,007,606 | ---- | C] () -- C:\Users\Greg\AppData\Local\Resmon.ResmonCfg
    [2010/02/17 09:07:50 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
    [2009/11/13 12:03:35 | 000,000,000 | -H-- | C] () -- C:\ProgramData\PKP_DLdu.DAT

    ========== ZeroAccess Check ==========

    [2009/07/13 22:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

    [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

    [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

    [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

    [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
    "" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Apartment

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
    "" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Apartment

    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
    "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Free

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
    "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Free

    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
    "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Both

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

    ========== LOP Check ==========

    [2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
    [2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
    [2011/03/14 13:00:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Autodesk
    [2010/03/03 19:32:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avery
    [2014/01/27 14:06:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG
    [2013/10/28 21:37:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG2014
    [2011/02/09 07:56:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\com.kodakgallery.AirUploader
    [2013/10/28 11:48:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\CrashPlan
    [2014/02/04 09:51:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dropbox
    [2010/05/04 07:04:00 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\EBookSys
    [2010/05/31 08:05:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\FileZilla
    [2014/01/22 10:21:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\IObit
    [2009/10/27 15:12:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Leadertech
    [2009/11/22 12:50:54 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SkyGolf
    [2011/03/14 13:25:33 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SmartDraw
    [2013/10/15 10:49:38 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Spotify
    [2013/10/28 21:36:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\TuneUp Software
    [2010/06/11 12:16:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vu360
    [2010/01/08 09:58:50 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\webex
    [2013/10/15 06:59:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\YouSendIt

    ========== Purity Check ==========



    < End of report >

  10. #30
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Lets run these through OTL


    Open OTL.exe
    • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

      Code:
      :OTL
      [2014/01/20 16:23:47 | 000,012,326 | ---- | M] () -- C:\Users\Greg\AppData\Local\lgawiqfw
      [2014/01/20 16:22:45 | 000,067,992 | ---- | M] () -- C:\Users\Greg\AppData\Local\idnlbohr
      [2014/01/20 16:23:47 | 000,012,326 | ---- | C] () -- C:\Users\Greg\AppData\Local\lgawiqfw
      [2014/01/20 16:22:45 | 000,067,992 | ---- | C] () -- C:\Users\Greg\AppData\Local\idnlbohr
      
      
      :Services
      
      :Reg
      
      :Files
      
      
      
      :Commands
      [emptytemp]
      [start explorer]
      [Reboot]
    • Then click the Run Fix button at the top. <--Not run Scan
    • Let the program run unhindered, reboot when it is done
    • Then post the results of the log it produces






    Then lets run TDSSKiller

    Please download TDSSKiller.zip
    • Extract it to your desktop
    • Double click TDSSKiller.exe
    • Press Start Scan
      • Only if Malicious objects are found then ensure Cure is selected
      • Then click Continue > Reboot now
    • Copy and paste the log in your next reply
      • A copy of the log will be saved automatically to the root of the drive (typically C:\)
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •