Win 7 desktop - AVG keeps flagging trojan

[allank]

Post-fix OTL report

Once again, too big to paste. Attached.

 

[ken545]

When you say owner, how are you related to this computer ?

 

[allank]

Helping a fiend - I am a little more computer-savvy than he is.

 

[allank]

I meant friend, although he can be a fiend sometimes, too.

 

[ken545]

OK, listen, there is a lot to remove, and somewhat restricted on the forum as to how much I can add to the fix, if after the fix the log shows all removed than just let me know, no need right now for another OTL scan, we can do that when where at the very end


Open OTL.exe

• Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :OTL
  [2014/01/23 00:55:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoilall
  [2014/01/23 00:54:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dityucwa
  [2014/01/23 00:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sytoyq
  [2014/01/23 00:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saozqi
  [2014/01/23 00:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypuykyl
  [2014/01/23 00:51:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zetucyw
  [2014/01/23 00:51:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sywyqayz
  [2014/01/23 00:50:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zacaes
  [2014/01/23 00:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Expiytr
  [2014/01/23 00:49:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seedadvo
  [2014/01/23 00:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evagleu
  [2014/01/23 00:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahheav
  [2014/01/23 00:47:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuurpe
  [2014/01/23 00:46:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reevipp
  [2014/01/23 00:46:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waomxiw
  [2014/01/23 00:45:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyfaib
  [2014/01/23 00:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uglean
  [2014/01/23 00:44:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixqype
  [2014/01/23 00:43:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irzuze
  [2014/01/23 00:42:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wexoym
  [2014/01/23 00:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycacmu
  [2014/01/23 00:41:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igygalz
  [2014/01/23 00:40:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Horual
  [2014/01/23 00:01:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poagpi
  [2014/01/23 00:00:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evibol
  [2014/01/23 00:00:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nesyybq
  [2014/01/22 23:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixiqnix
  [2014/01/22 23:58:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kootkiiv
  [2014/01/22 23:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taogik
  [2014/01/22 23:57:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efagxui
  [2014/01/22 23:56:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opfage
  [2014/01/22 23:56:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ennaeg
  [2014/01/22 23:55:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cihozut
  [2014/01/22 23:54:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patoikp
  [2014/01/22 23:54:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyecynbo
  [2014/01/22 23:53:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozodip
  [2014/01/22 23:52:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atgaeqn
  [2014/01/22 23:52:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbaunze
  [2014/01/22 23:51:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cybourw
  [2014/01/22 23:50:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taicifa
  [2014/01/22 23:50:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuwocaw
  [2014/01/22 23:49:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuigsu
  [2014/01/22 23:48:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoyqyz
  [2014/01/22 23:48:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufnaam
  [2014/01/22 23:47:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyvenu
  [2014/01/22 23:46:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bymoem
  [2014/01/22 23:46:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ungazuoh
  [2014/01/22 23:45:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naxykure
  [2014/01/22 23:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Heodgaih
  [2014/01/22 23:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ercaewep
  [2014/01/22 23:43:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Niryez
  [2014/01/22 23:42:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzweoqza
  [2014/01/22 23:42:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymypigaz
  [2014/01/22 23:41:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gunyfy
  [2014/01/22 23:41:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypihpua
  [2014/01/22 23:40:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixufuwr
  [2014/01/22 23:39:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tulezy
  [2014/01/22 23:38:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giexfy
  [2014/01/22 23:38:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avzuob
  [2014/01/22 23:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agamte
  [2014/01/22 23:37:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofhegye
  [2014/01/22 23:36:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqeaspi
  [2014/01/22 23:35:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifynyn
  [2014/01/22 23:34:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxehifa
  [2014/01/22 23:34:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vikaqy
  [2014/01/22 23:33:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keovofte
  [2014/01/22 23:33:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyeqha
  [2014/01/22 23:32:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyybxy
  [2014/01/22 23:31:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydozulbi
  [2014/01/22 23:31:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lasyzalu
  [2014/01/22 23:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyhafoq
  [2014/01/22 23:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lybyid
  [2014/01/22 23:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usmoquod
  [2014/01/22 23:28:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzalynk
  [2014/01/22 23:27:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xesyot
  [2014/01/22 23:27:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulynos
  [2014/01/22 23:26:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaovykq
  [2014/01/22 23:25:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keyxeb
  [2014/01/22 23:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Finosy
  [2014/01/22 23:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alyvywb
  [2014/01/22 23:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihotyl
  [2014/01/22 23:23:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Puuwepeh
  [2014/01/22 23:22:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynacacag
  [2014/01/22 23:22:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwvoly
  [2014/01/22 23:21:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foipted
  [2014/01/22 23:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovezfiav
  [2014/01/22 23:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buoxyta
  [2014/01/22 23:19:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imxeax
  [2014/01/22 23:18:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyniot
  [2014/01/22 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acakcouv
  [2014/01/22 23:17:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawawy
  [2014/01/22 23:16:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abkoele
  [2014/01/22 23:16:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqykyfaq
  [2014/01/22 23:15:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qainsa
  [2014/01/22 23:14:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diziby
  [2014/01/22 23:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuvyakr
  [2014/01/22 23:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowyigq
  [2014/01/22 23:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofagni
  [2014/01/22 23:12:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apqeza
  [2014/01/22 23:11:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Anuxxad
  [2014/01/22 23:11:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bufuohoc
  [2014/01/22 23:10:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nihehoic
  [2014/01/22 23:09:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bofyqe
  [2014/01/22 22:05:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acebry
  [2014/01/22 22:04:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rakedy
  [2014/01/22 22:03:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucarolar
  [2014/01/22 22:03:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzinoqoz
  [2014/01/22 22:02:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymasyh
  [2014/01/22 22:01:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaykgode
  [2014/01/22 22:01:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buikmoa
  [2014/01/22 22:00:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sasuer
  [2014/01/22 21:59:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqpapif
  [2014/01/22 21:59:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikzysoo
  [2014/01/22 21:58:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azdahesa
  [2014/01/22 21:58:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saehykot
  [2014/01/22 21:57:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akesquup
  [2014/01/22 21:56:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upqyzea
  [2014/01/22 21:55:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pydyavx
  [2014/01/22 21:55:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edaglyv
  [2014/01/22 21:54:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytvieho
  [2014/01/22 21:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yquwyt
  [2014/01/22 21:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imosez
  [2014/01/22 21:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiumaxw
  [2014/01/22 21:51:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogitnyyz
  [2014/01/22 21:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suykihip
  [2014/01/22 21:50:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Garyqu
  [2014/01/22 21:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikdyiri
  [2014/01/22 21:49:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fetehe
  [2014/01/22 21:48:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koezwu
  [2014/01/22 21:47:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diakegem
  [2014/01/22 21:47:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuuzaget
  [2014/01/22 21:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibunvo
  [2014/01/22 21:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pilead
  [2014/01/22 21:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxapoza
  [2014/01/22 21:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erkysen
  [2014/01/22 21:43:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowacad
  [2014/01/22 21:43:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylceyged
  [2014/01/22 21:42:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwardu
  [2014/01/22 21:42:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edduro
  [2014/01/22 21:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaciloa
  [2014/01/22 21:40:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfleqoso
  [2014/01/22 21:39:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hahedum
  [2014/01/22 21:39:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysawmuc
  [2014/01/22 21:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Haivuwox
  [2014/01/22 21:39:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehedpifu
  [2014/01/22 21:38:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pexuawo
  [2014/01/22 21:38:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erlyne
  [2014/01/22 21:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduhwu
  [2014/01/22 21:38:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tivozuf
  [2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uknitiiz
  [2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saogutz
  [2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seviwe
  [2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fasaxyar
  [2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seufyp
  [2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ansyizuw
  [2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycozehez
  [2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exytzogu
  [2014/01/22 21:34:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elyvavg
  [2014/01/22 21:34:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yngibeq
  [2014/01/22 21:34:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypuxozaf
  [2014/01/22 21:34:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xayhluy
  [2014/01/22 21:33:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abgyuv
  [2014/01/22 21:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efhaabyf
  [2014/01/22 21:32:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exakuxa
  [2014/01/22 21:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezgyuh
  [2014/01/22 21:32:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvobdy
  [2014/01/22 21:32:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koarobz
  [2014/01/22 21:31:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vygokone
  [2014/01/22 21:31:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvyquzew
  [2014/01/22 21:30:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vawabya
  [2014/01/22 21:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patiuwo
  [2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lupyuxel
  [2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqzeyvvu
  [2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhewakb
  [2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udlyimig
  [2014/01/22 21:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okeniqfy
  [2014/01/22 21:28:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvuzwiq
  [2014/01/22 21:28:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kimayn
  [2014/01/22 21:27:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feibfa
  [2014/01/22 21:27:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esvyuz
  [2014/01/22 21:27:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daefodi
  [2014/01/22 21:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyheugfy
  [2014/01/22 21:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odarqexu
  [2014/01/22 21:26:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sedobet
  [2014/01/22 21:26:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qigypiy
  [2014/01/22 21:25:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxofodr
  [2014/01/22 21:25:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loiwfeky
  [2014/01/22 21:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cefeuket
  [2014/01/22 21:24:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bebazuu
  [2014/01/22 21:24:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awyvfy
  [2014/01/22 21:23:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azufsopi
  [2014/01/22 21:23:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idysaten
  [2014/01/22 21:23:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Subomin
  [2014/01/22 21:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qyogopo
  [2014/01/22 21:22:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zucowo
  [2014/01/22 21:22:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuzaitlo
  [2014/01/22 21:22:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Timoar
  [2014/01/22 21:21:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbeal
  [2014/01/22 21:21:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awefevre
  [2014/01/22 21:20:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qouronv
  [2014/01/22 21:20:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhukomco
  [2014/01/22 21:19:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaadfoi
  [2014/01/22 21:19:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuakceh
  [2014/01/22 21:19:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peusihgu
  [2014/01/22 21:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maitowow
  [2014/01/22 21:18:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riobsa
  [2014/01/22 21:18:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuapegd
  [2014/01/22 21:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sofifu
  [2014/01/22 21:18:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuenweuf
  [2014/01/22 21:17:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gidusy
  [2014/01/22 21:17:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyenukx
  [2014/01/22 21:16:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykeluhe
  [2014/01/22 21:16:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kocyciw
  [2014/01/22 21:15:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Baamkieg
  [2014/01/22 21:15:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epqyitku
  [2014/01/22 21:15:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qodaziop
  [2014/01/22 21:15:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tegiruim
  [2014/01/22 21:14:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igwuvo
  [2014/01/22 21:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ximigaep
  [2014/01/22 21:14:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozilyga
  [2014/01/22 21:13:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meuqce
  [2014/01/22 21:13:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqubek
  [2014/01/22 21:13:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebryag
  [2014/01/22 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rietku
  [2014/01/22 21:12:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iblowawi
  [2014/01/22 21:11:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyehny
  [2014/01/22 21:11:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kumaokp
  [2014/01/22 21:10:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elylebz
  [2014/01/22 21:10:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyisodof
  [2014/01/22 21:09:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obubbis
  [2014/01/22 21:08:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rinyci
  [2014/01/22 21:07:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etgirize
  [2014/01/22 21:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iriwgou
  [2014/01/22 21:06:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abtiva
  [2014/01/22 21:06:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Amnuny
  [2014/01/22 21:05:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gileheev
  [2014/01/22 21:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyguhi
  [2014/01/22 21:03:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mubaowqe
  [2014/01/22 21:03:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olraecix
  [2014/01/22 21:02:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deidgyyx
  [2014/01/22 21:02:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otxyuxd
  [2014/01/22 21:01:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Detywon
  [2014/01/22 21:00:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyvuko
  [2014/01/22 20:59:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebwiykon
  [2014/01/22 20:59:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pebyaly
  [2014/01/22 20:58:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebuxfut
  [2014/01/22 20:57:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rayxicu
  [2014/01/22 20:56:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udreto
  [2014/01/22 20:56:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Risuxyx
  [2014/01/22 20:55:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dolianyk
  [2014/01/22 20:54:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egabaxew
  [2014/01/22 20:54:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afukreha
  [2014/01/22 20:53:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixebegu
  [2014/01/22 20:52:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qibylan
  [2014/01/22 20:52:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahviqi
  [2014/01/22 20:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dywiycky
  [2014/01/22 20:50:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oritxy
  [2014/01/22 20:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aztoatyp
  [2014/01/22 20:49:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abguitc
  [2014/01/22 20:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifaxtawa
  [2014/01/22 20:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gibomi
  [2014/01/22 20:47:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeinre
  [2014/01/22 20:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woulxion
  [2014/01/22 20:08:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arerufxu
  [2014/01/22 20:08:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyyrru
  [2014/01/22 20:07:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layllezu
  [2014/01/22 20:06:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xozayke
  [2014/01/22 20:06:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhupumoq
  [2014/01/22 20:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fiahahm
  [2014/01/22 20:04:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byhige
  [2014/01/22 20:04:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoluoxcu
  [2014/01/22 20:03:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nybaloin
  [2014/01/22 20:02:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydurez
  [2014/01/22 20:02:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymytkoiw
  [2014/01/22 20:01:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posiuso
  [2014/01/22 20:00:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wehimew
  [2014/01/22 20:00:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxiwzy
  [2014/01/22 19:59:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muypzior
  [2014/01/22 19:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xegyit
  [2014/01/22 19:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eppigobu
  [2014/01/22 19:57:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wanywuu
  [2014/01/22 19:56:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icxyqig
  [2014/01/22 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Segera
  [2014/01/22 19:55:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toedbuwi
  [2014/01/22 19:54:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igzyaf
  [2014/01/22 19:54:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buezyqiw
  [2014/01/22 19:53:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hygiduno
  [2014/01/22 19:52:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhyqeho
  [2014/01/22 19:52:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuypavri
  [2014/01/22 19:51:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufysza
  [2014/01/22 19:50:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fifimaxi
  [2014/01/22 19:50:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akafmi
  [2014/01/22 19:49:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byeqamil
  [2014/01/22 19:48:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiofovy
  [2014/01/22 19:48:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piuszao
  [2014/01/22 19:47:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afkoub
  [2014/01/22 19:46:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irhituwa
  [2014/01/22 19:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewsypa
  [2014/01/22 19:45:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hagiti
  [2014/01/22 19:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bohaaqw
  [2014/01/22 19:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awnyeg
  [2014/01/22 19:43:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mabadua
  [2014/01/22 19:42:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reduytno
  [2014/01/22 19:42:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zixave
  [2014/01/22 19:41:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awunmeu
  [2014/01/22 19:40:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teezak
  [2014/01/22 19:40:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ilmuezo
  [2014/01/22 19:39:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Miategz
  [2014/01/22 19:38:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuquew
  [2014/01/22 19:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxepigy
  [2014/01/22 19:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyitwaos
  [2014/01/22 19:36:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydumyp
  [2014/01/22 19:36:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaumyvat
  [2014/01/22 19:35:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyasar
  [2014/01/22 19:34:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abonap
  [2014/01/22 19:33:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypwypi
  [2014/01/22 19:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agxusupo
  [2014/01/22 19:32:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezmyhie
  [2014/01/22 19:31:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqcayni
  [2014/01/22 19:31:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axydgyan
  [2014/01/22 19:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebolah
  [2014/01/22 19:29:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Algaqew
  [2014/01/22 19:29:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyaftyi
  [2014/01/22 19:28:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kemyexw
  [2014/01/22 19:27:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Angeanna
  [2014/01/22 19:27:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waleomwa
  [2014/01/22 19:26:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahgufi
  [2014/01/22 19:25:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lofyucg
  [2014/01/22 19:25:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paweepny
  [2014/01/22 19:24:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rytopaib
  [2014/01/22 19:23:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynohqeby
  [2014/01/22 19:22:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hecyufwi
  [2014/01/22 19:22:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceokycra
  [2014/01/22 19:21:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evotyspo
  [2014/01/22 19:21:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voefykug
  [2014/01/22 19:20:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dateip
  [2014/01/22 19:19:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feynuw
  [2014/01/22 19:18:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaokzu
  [2014/01/22 19:18:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efnaipk
  [2014/01/22 19:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otygta
  [2014/01/22 19:17:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kiozfi
  [2014/01/22 19:16:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efurobb
  [2014/01/22 19:15:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceaqafs
  [2014/01/22 17:14:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liyqmib
  [2014/01/22 17:13:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexpyzo
  [2014/01/22 17:12:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqceysa
  [2014/01/22 17:12:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sydocey
  [2014/01/22 17:11:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzfeypgu
  [2014/01/22 17:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyhxiqa
  [2014/01/22 17:10:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoevgiu
  [2014/01/22 17:09:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pufapizi
  [2014/01/22 17:08:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aspeel
  [2014/01/22 17:08:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyoluzq
  [2014/01/22 17:07:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Femahuw
  [2014/01/22 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gienwyh
  [2014/01/22 17:06:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xionvoru
  [2014/01/22 17:05:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nauliha
  [2014/01/22 17:04:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeevzyu
  [2014/01/22 17:04:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeebqii
  [2014/01/22 17:03:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuedzeu
  [2014/01/22 17:03:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfodaca
  [2014/01/22 17:02:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sikoyq
  [2014/01/22 17:01:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibhyhu
  [2014/01/22 17:00:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bezaad
  [2014/01/22 17:00:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwhysoo
  [2014/01/22 16:59:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhtyqua
  [2014/01/22 16:59:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaboqeas
  [2014/01/22 16:58:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piyxepo
  [2014/01/22 16:57:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egasawba
  [2014/01/22 16:57:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikizmuih
  [2014/01/22 16:56:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doowce
  [2014/01/22 16:55:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nabyocw
  [2014/01/22 16:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voodyrhi
  [2014/01/22 16:54:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qadoep
  [2014/01/22 16:53:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osowycz
  [2014/01/22 16:53:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icucuf
  [2014/01/22 16:52:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifwyduiz
  [2014/01/22 16:51:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nivivura
  [2014/01/22 16:51:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziqaopw
  [2014/01/22 16:50:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydvium
  [2014/01/22 16:49:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icawuq
  [2014/01/22 16:49:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biatxo
  [2014/01/22 16:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaewezf
  [2014/01/22 16:47:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Linake
  [2014/01/22 16:47:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeynaw
  [2014/01/22 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaakfyr
  [2014/01/22 16:45:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ririho
  [2014/01/22 16:45:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usohokes
  [2014/01/22 16:45:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okabybod
  [2014/01/22 16:44:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zozegyu
  [2014/01/22 16:44:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqohute
  [2014/01/22 16:43:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bodyucyp
  [2014/01/22 16:43:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inqoby
  [2014/01/22 16:43:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyzybuny
  [2014/01/22 16:43:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feguequg
  [2014/01/22 16:42:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ataqusi
  [2014/01/22 16:42:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Marauq
  [2014/01/22 16:42:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doedodv
  [2014/01/22 16:41:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoopisiw
  [2014/01/22 16:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyzu
  [2014/01/22 16:41:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tibebyyp
  [2014/01/22 16:40:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiulkuf
  [2014/01/22 16:40:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybgydi
  [2014/01/22 16:39:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubeproda
  [2014/01/22 16:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onuwodte
  [2014/01/22 16:38:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pudetud
  [2014/01/22 16:38:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qefepuf
  [2014/01/22 16:37:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qybyyco
  [2014/01/22 16:36:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocisyg
  [2014/01/22 16:35:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucpeceos
  [2014/01/22 16:35:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewuggyra
  [2014/01/22 16:34:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epcitiu
  [2014/01/22 16:33:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiugsy
  [2014/01/22 16:33:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiiqfi
  [2014/01/22 16:32:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igykevyg
  [2014/01/22 16:31:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rolyiqw
  [2014/01/22 16:31:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocraip
  [2014/01/22 16:30:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywnixe
  [2014/01/22 16:29:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caynsoxa
  [2014/01/22 16:29:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oscolip
  [2014/01/22 16:28:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uchiqo
  [2014/01/22 16:27:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idihymep
  [2014/01/22 16:27:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udaricap
  [2014/01/22 16:26:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaoqix
  [2014/01/22 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igpylu
  [2014/01/22 16:25:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edyqon
  [2014/01/22 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enbatu
  [2014/01/22 16:23:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ryynkyo
  [2014/01/22 16:23:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paxuicx
  [2014/01/22 16:22:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esawik
  [2014/01/22 16:21:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uncauhy
  [2014/01/22 16:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irezkoax
  [2014/01/22 16:20:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zerowosy
  [2014/01/22 16:19:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xenuguel
  [2014/01/22 16:19:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduniba
  [2014/01/22 16:18:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zifequ
  [2014/01/22 16:17:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epytedeh
  [2014/01/22 16:17:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syibutqo
  [2014/01/22 16:16:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yciqicmi
  [2014/01/22 16:15:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Texuhui
  [2014/01/22 16:15:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utbelyce
  [2014/01/22 16:14:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otydire
  [2014/01/22 16:13:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixugok
  [2014/01/22 16:13:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exocuw
  [2014/01/22 16:12:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibinal
  [2014/01/22 16:11:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liizovr
  [2014/01/22 16:11:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emohisot
  [2014/01/22 16:10:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iguvekq
  [2014/01/22 16:09:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hypaadt
  [2014/01/22 16:08:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gyobki
  [2014/01/22 16:08:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyikwady
  [2014/01/22 16:07:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukruqufi
  [2014/01/22 16:07:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qylara
  [2014/01/22 15:15:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuewukym
  [2014/01/22 15:14:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Invyyq
  [2014/01/22 15:14:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faloubd
  [2014/01/22 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azibcewo
  [2014/01/22 15:12:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Coavicag
  [2014/01/22 15:12:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhte
  [2014/01/22 15:11:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qufuva
  [2014/01/22 15:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owhoidcy
  [2014/01/22 15:10:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meodsai
  [2014/01/22 15:09:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pobuzu
  [2014/01/22 14:03:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofuqekyd
  [2014/01/22 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hueqwei
  [2014/01/22 14:02:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woacimr
  [2014/01/22 14:01:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexamt
  [2014/01/22 14:00:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vyinxa
  [2014/01/22 14:00:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hihiasca
  [2014/01/22 13:59:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nearavf
  [2014/01/22 13:59:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ettiupz
  [2014/01/22 13:58:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyzeml
  [2014/01/22 13:57:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Supeabu
  [2014/01/22 13:56:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diohulka
  [2014/01/22 13:56:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoodma
  [2014/01/22 13:55:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygekymip
  [2014/01/22 13:55:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urutuki
  [2014/01/22 13:54:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Huoxewi
  [2014/01/22 13:53:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyoxanuc
  [2014/01/22 13:53:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agwayfr
  [2014/01/22 13:52:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywceew
  [2014/01/22 13:51:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikliysup
  [2014/01/22 13:51:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foygisd
  [2014/01/22 13:50:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hemeycb
  [2014/01/22 13:49:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocuqvy
  [2014/01/22 13:49:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydniiw
  [2014/01/22 13:48:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyliwyq
  [2014/01/22 13:47:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sycogifo
  [2014/01/22 13:47:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuivozy
  [2014/01/22 13:46:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekxuigc
  [2014/01/22 13:46:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wutybi
  [2014/01/22 13:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elunzoo
  [2014/01/22 13:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Facyik
  [2014/01/22 13:43:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekmiceuk
  [2014/01/22 13:43:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypadun
  [2014/01/22 13:42:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oferguek
  [2014/01/22 13:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tobayd
  [2014/01/22 13:41:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agsexi
  [2014/01/22 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hasopo
  [2014/01/22 13:40:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Geoftiig
  [2014/01/22 13:39:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inegni
  [2014/01/22 13:38:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roacmoe
  [2014/01/22 13:38:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozxioxuk
  [2014/01/22 13:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sadohazi
  [2014/01/22 13:37:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaafinpe
  [2014/01/22 13:36:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibzayfer
  [2014/01/22 13:35:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubgyve
  [2014/01/22 13:34:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usidikg
  [2014/01/22 13:34:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utunixed
  [2014/01/22 13:33:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eciwiv
  [2014/01/22 13:33:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pitabyug
  [2014/01/22 13:32:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyypep
  [2014/01/22 13:31:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuagku
  [2014/01/22 13:31:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Boyqce
  [2014/01/22 13:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alosdi
  [2014/01/22 13:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fituidso
  [2014/01/22 13:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gipatayr
  [2014/01/22 13:28:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gixuirt
  [2014/01/22 13:27:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etwigoak
  [2014/01/22 13:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biibhyos
  [2014/01/22 13:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqroxe
  [2014/01/22 13:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqoreb
  [2014/01/22 13:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xawufi
  [2014/01/22 13:24:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hiqymola
  [2014/01/22 13:24:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edkyuvv
  [2014/01/22 13:23:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqapfoix
  [2014/01/22 13:22:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibiapgi
  [2014/01/22 13:22:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muisuha
  [2014/01/22 13:21:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meokxuar
  [2014/01/22 13:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypaza
  [2014/01/22 13:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etabniq
  [2014/01/22 13:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebohuq
  [2014/01/22 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Unziybah
  [2014/01/22 13:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydlaemo
  [2014/01/22 13:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylnyilo
  [2014/01/22 13:16:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuoqim
  [2014/01/22 13:16:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yginixy
  [2014/01/22 13:15:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biufkuow
  [2014/01/22 13:14:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulfuyte
  [2014/01/22 13:14:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owcagy
  [2014/01/22 13:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teryfy
  [2014/01/22 13:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewbiobf
  [2014/01/22 13:12:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oribew
  [2014/01/22 12:47:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezuqofo
  [2014/01/22 12:47:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyecpuel
  [2014/01/22 11:53:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Memyqy
  [2014/01/22 11:52:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liidle
  [2014/01/22 11:52:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykysusqa
  [2014/01/22 11:51:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohenuv
  [2014/01/22 11:50:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxuqy
  [2014/01/22 11:50:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akbiuc
  [2014/01/22 11:49:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apsouh
  [2014/01/22 11:48:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muepbuo
  [2014/01/22 11:48:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhkixayk
  [2014/01/22 11:47:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Penumu
  [2014/01/22 11:46:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teowxio
  [2014/01/22 11:46:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izpaaf
  [2014/01/22 11:45:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqveoguz
  [2014/01/22 11:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyrhiah
  [2014/01/22 11:44:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozuwal
  [2014/01/22 11:43:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebilanwa
  [2014/01/22 11:42:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noefohu
  [2014/01/22 11:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seehheko
  [2014/01/22 11:41:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuwiuby
  [2014/01/22 11:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utsoik
  [2014/01/22 11:40:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osyqny
  [2014/01/22 11:39:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaambibe
  [2014/01/22 11:38:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysnuso
  [2014/01/22 11:38:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxipaxl
  [2014/01/22 11:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usonipq
  [2014/01/22 11:36:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvehif
  [2014/01/22 11:36:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yswied
  [2014/01/22 11:35:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arehsoiw
  [2014/01/22 11:35:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyyqbel
  [2014/01/22 11:34:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysobuxqy
  [2014/01/22 11:33:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyyskeo
  [2014/01/22 11:33:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odovneuw
  [2014/01/22 11:32:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syifyneg
  [2014/01/22 11:31:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ascuiquv
  [2014/01/22 11:31:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fanipuaq
  [2014/01/22 11:30:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arfaysin
  [2014/01/22 11:29:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apfavoga
  [2014/01/22 11:29:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posyet
  [2014/01/22 11:28:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eglecacu
  [2014/01/22 11:27:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufpuutfa
  [2014/01/22 11:27:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obvelao
  [2014/01/22 11:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giulva
  [2014/01/22 11:26:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xasitan
  [2014/01/22 11:25:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyxyze
  [2014/01/22 11:24:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuulabi
  [2014/01/22 11:23:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iginiwud
  [2014/01/22 11:23:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evfaizo
  [2014/01/22 11:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Athian
  [2014/01/22 11:22:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mokyif
  [2014/01/22 11:21:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawyara
  [2014/01/22 11:20:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toremawa
  [2014/01/22 11:20:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kinolu
  [2014/01/22 11:19:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewolas
  [2014/01/22 11:18:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tedyyn
  [2014/01/22 11:18:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Operpaa
  [2014/01/22 11:17:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Verauki
  [2014/01/22 11:16:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubytyzr
  [2014/01/22 11:16:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etehvuro
  [2014/01/22 11:15:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siodqile
  [2014/01/22 11:14:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suwuiwa
  [2014/01/22 11:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhzaidqi
  [2014/01/22 11:13:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layppae
  [2014/01/22 11:12:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owqaocu
  
  
  :Services
  
  :Reg
  
  :Files
  
  
  
  :Commands
  
  [emptytemp]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top. <--Not run Scan
• Let the program run unhindered, reboot when it is done
• Then post the results of the log it produces

 

[allank]

Run Fix report

All processes killed
========== OTL ==========
C:\Users\Greg\AppData\Roaming\Hoilall folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dityucwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sytoyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saozqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nypuykyl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zetucyw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sywyqayz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zacaes folder moved successfully.
C:\Users\Greg\AppData\Roaming\Expiytr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seedadvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evagleu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahheav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuurpe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Reevipp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Waomxiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyfaib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uglean folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixqype folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irzuze folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wexoym folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycacmu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igygalz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Horual folder moved successfully.
C:\Users\Greg\AppData\Roaming\Poagpi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evibol folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nesyybq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixiqnix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kootkiiv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Taogik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efagxui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opfage folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ennaeg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cihozut folder moved successfully.
C:\Users\Greg\AppData\Roaming\Patoikp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyecynbo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozodip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Atgaeqn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahbaunze folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cybourw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Taicifa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuwocaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuigsu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zoyqyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufnaam folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyvenu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bymoem folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ungazuoh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naxykure folder moved successfully.
C:\Users\Greg\AppData\Roaming\Heodgaih folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ercaewep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Niryez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzweoqza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymypigaz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gunyfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypihpua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixufuwr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tulezy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Giexfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Avzuob folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agamte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ofhegye folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egqeaspi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifynyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yxehifa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vikaqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Keovofte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Izvyeqha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyybxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydozulbi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lasyzalu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ipyhafoq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lybyid folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usmoquod folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzalynk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xesyot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulynos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zaovykq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Keyxeb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Finosy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alyvywb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihotyl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Puuwepeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynacacag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwvoly folder moved successfully.
C:\Users\Greg\AppData\Roaming\Foipted folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ovezfiav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buoxyta folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imxeax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyniot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Acakcouv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tawawy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abkoele folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqykyfaq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qainsa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diziby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zuvyakr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xowyigq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ofagni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apqeza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Anuxxad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bufuohoc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nihehoic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bofyqe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Acebry folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rakedy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucarolar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzinoqoz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymasyh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gaykgode folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buikmoa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sasuer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqpapif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikzysoo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azdahesa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saehykot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akesquup folder moved successfully.
C:\Users\Greg\AppData\Roaming\Upqyzea folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pydyavx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edaglyv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ytvieho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yquwyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imosez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wiumaxw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogitnyyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suykihip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Garyqu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikdyiri folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fetehe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Koezwu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diakegem folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuuzaget folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibunvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pilead folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihxapoza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erkysen folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xowacad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ylceyged folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwardu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edduro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kaciloa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfleqoso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hahedum folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysawmuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Haivuwox folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ehedpifu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pexuawo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erlyne folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yduhwu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tivozuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uknitiiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saogutz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seviwe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fasaxyar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seufyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ansyizuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycozehez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exytzogu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elyvavg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yngibeq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypuxozaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xayhluy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abgyuv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efhaabyf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exakuxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezgyuh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvobdy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Koarobz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vygokone folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvyquzew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vawabya folder moved successfully.
C:\Users\Greg\AppData\Roaming\Patiuwo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lupyuxel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqzeyvvu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhewakb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Udlyimig folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okeniqfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvuzwiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kimayn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feibfa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Esvyuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Daefodi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kyheugfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odarqexu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sedobet folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qigypiy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uxofodr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Loiwfeky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cefeuket folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bebazuu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awyvfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azufsopi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Idysaten folder moved successfully.
C:\Users\Greg\AppData\Roaming\Subomin folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qyogopo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zucowo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kuzaitlo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Timoar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahbeal folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awefevre folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qouronv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhukomco folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qaadfoi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuakceh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Peusihgu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Maitowow folder moved successfully.
C:\Users\Greg\AppData\Roaming\Riobsa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wuapegd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sofifu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wuenweuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gidusy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dyenukx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykeluhe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kocyciw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Baamkieg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epqyitku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qodaziop folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tegiruim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igwuvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ximigaep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozilyga folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meuqce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqubek folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebryag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rietku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iblowawi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyehny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kumaokp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elylebz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyisodof folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obubbis folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rinyci folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etgirize folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iriwgou folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abtiva folder moved successfully.
C:\Users\Greg\AppData\Roaming\Amnuny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gileheev folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyguhi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mubaowqe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Olraecix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Deidgyyx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otxyuxd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Detywon folder moved successfully.
C:\Users\Greg\AppData\Roaming\Viyvuko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebwiykon folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pebyaly folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebuxfut folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rayxicu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Udreto folder moved successfully.
C:\Users\Greg\AppData\Roaming\Risuxyx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dolianyk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egabaxew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Afukreha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixebegu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qibylan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahviqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dywiycky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oritxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aztoatyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abguitc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifaxtawa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gibomi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zeinre folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woulxion folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arerufxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyyrru folder moved successfully.
C:\Users\Greg\AppData\Roaming\Layllezu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xozayke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uhupumoq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fiahahm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Byhige folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qoluoxcu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nybaloin folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydurez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymytkoiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Posiuso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wehimew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxiwzy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Muypzior folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xegyit folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eppigobu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wanywuu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icxyqig folder moved successfully.
C:\Users\Greg\AppData\Roaming\Segera folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toedbuwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igzyaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buezyqiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hygiduno folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhyqeho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wuypavri folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufysza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fifimaxi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akafmi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Byeqamil folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiofovy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Piuszao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Afkoub folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irhituwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewsypa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hagiti folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bohaaqw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awnyeg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mabadua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Reduytno folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zixave folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awunmeu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Teezak folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ilmuezo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Miategz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zuquew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxepigy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cyitwaos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydumyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vaumyvat folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyasar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abonap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypwypi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agxusupo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezmyhie folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oqcayni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Axydgyan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebolah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Algaqew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyaftyi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kemyexw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Angeanna folder moved successfully.
C:\Users\Greg\AppData\Roaming\Waleomwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahgufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lofyucg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Paweepny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rytopaib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynohqeby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hecyufwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ceokycra folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evotyspo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voefykug folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dateip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feynuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qaokzu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efnaipk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otygta folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kiozfi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efurobb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ceaqafs folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liyqmib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynexpyzo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqceysa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sydocey folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzfeypgu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Viyhxiqa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zoevgiu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pufapizi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aspeel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyoluzq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Femahuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gienwyh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xionvoru folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nauliha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zeevzyu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zeebqii folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuedzeu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfodaca folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sikoyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibhyhu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bezaad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uwhysoo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhtyqua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vaboqeas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Piyxepo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egasawba folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikizmuih folder moved successfully.
C:\Users\Greg\AppData\Roaming\Doowce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nabyocw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voodyrhi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qadoep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Osowycz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icucuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifwyduiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nivivura folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ziqaopw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydvium folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icawuq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biatxo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gaewezf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Linake folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xeynaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaakfyr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ririho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usohokes folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okabybod folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zozegyu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egqohute folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bodyucyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Inqoby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyzybuny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feguequg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ataqusi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Marauq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Doedodv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hoopisiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nicyzu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tibebyyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiulkuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ybgydi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubeproda folder moved successfully.
C:\Users\Greg\AppData\Roaming\Onuwodte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pudetud folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qefepuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qybyyco folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ocisyg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucpeceos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewuggyra folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epcitiu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wiugsy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiiqfi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igykevyg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rolyiqw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ocraip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywnixe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Caynsoxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oscolip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uchiqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Idihymep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Udaricap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zaoqix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igpylu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edyqon folder moved successfully.
C:\Users\Greg\AppData\Roaming\Enbatu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ryynkyo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Paxuicx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Esawik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uncauhy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irezkoax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zerowosy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xenuguel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yduniba folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zifequ folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epytedeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Syibutqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yciqicmi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Texuhui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utbelyce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otydire folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixugok folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exocuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vibinal folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liizovr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Emohisot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iguvekq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hypaadt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gyobki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zyikwady folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ukruqufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qylara folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuewukym folder moved successfully.
C:\Users\Greg\AppData\Roaming\Invyyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Faloubd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azibcewo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Coavicag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yluhte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qufuva folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owhoidcy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meodsai folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pobuzu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ofuqekyd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hueqwei folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woacimr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynexamt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vyinxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hihiasca folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nearavf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ettiupz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ipyzeml folder moved successfully.
C:\Users\Greg\AppData\Roaming\Supeabu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diohulka folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zoodma folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ygekymip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Urutuki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Huoxewi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fyoxanuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agwayfr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywceew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikliysup folder moved successfully.
C:\Users\Greg\AppData\Roaming\Foygisd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hemeycb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ocuqvy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydniiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyliwyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sycogifo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuivozy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ekxuigc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wutybi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elunzoo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Facyik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ekmiceuk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypadun folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oferguek folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tobayd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agsexi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hasopo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Geoftiig folder moved successfully.
C:\Users\Greg\AppData\Roaming\Inegni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Roacmoe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozxioxuk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sadohazi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaafinpe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibzayfer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubgyve folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usidikg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utunixed folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eciwiv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pitabyug folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyypep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuagku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Boyqce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alosdi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fituidso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gipatayr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gixuirt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etwigoak folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biibhyos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqroxe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqoreb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xawufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hiqymola folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edkyuvv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqapfoix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vibiapgi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Muisuha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meokxuar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nypaza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etabniq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebohuq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Unziybah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydlaemo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ylnyilo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuoqim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yginixy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biufkuow folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulfuyte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owcagy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Teryfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewbiobf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oribew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezuqofo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyecpuel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Memyqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liidle folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykysusqa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ohenuv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihxuqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akbiuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apsouh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Muepbuo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhkixayk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Penumu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Teowxio folder moved successfully.
C:\Users\Greg\AppData\Roaming\Izpaaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqveoguz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqyrhiah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozuwal folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebilanwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Noefohu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seehheko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kuwiuby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utsoik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Osyqny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vaambibe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysnuso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uxipaxl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usonipq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvehif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yswied folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arehsoiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyyqbel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysobuxqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyyskeo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odovneuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Syifyneg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ascuiquv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fanipuaq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arfaysin folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apfavoga folder moved successfully.
C:\Users\Greg\AppData\Roaming\Posyet folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eglecacu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufpuutfa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obvelao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Giulva folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xasitan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nicyxyze folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuulabi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iginiwud folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evfaizo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Athian folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mokyif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tawyara folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toremawa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kinolu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewolas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tedyyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Operpaa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Verauki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubytyzr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etehvuro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Siodqile folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suwuiwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uhzaidqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Layppae folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owqaocu folder moved successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Greg
->Temp folder emptied: 6109266 bytes
->Temporary Internet Files folder emptied: 556841686 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 7701348 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 12986 bytes

User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LogMeInRemoteUser.GREG
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 270667 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 11338735 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 753 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 555.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 02022014_161234

Files\Folders moved on Reboot...
File\Folder C:\Users\Greg\AppData\Local\Temp\fla7F27.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla7FE4.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla80EE.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla80EF.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla80FF.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla8258.tmp not found!
C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\0REoKIo0Pr_803142420[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[7].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[3].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[4].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\if[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\if[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLgB4LJGAN7.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLgSHET3FXE.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[10].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[6].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[7].gif not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\ttj[2].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\ttj[3].js moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatch09YODTJE.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchNH2ESNW4.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchNK9E1EYE.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchP8PRXUA2.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchQYHNI3W2.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchZCC54NKH.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchZP8WSPAQ.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatch[10].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\0RUSuwZ15J_622351915[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\120x600[1].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\160x600[1].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\4cbd1b0c9f6f42058c6bc64c7199a699[1].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\ab[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\ad[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[7].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[8].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\cs[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\html[2].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[9].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg0GBJI8IH.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg75XA2CIC.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLgOBMH534T.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLgZ2BSJS7E.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg[10].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg[8].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\pixel[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\RzoNiRR1p2Mqyyz2RwqSMw[1].woff moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\usermatchI4RTTC6K.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\yVHpdQrmTj9Kax1tmFSx2j8E0i7KZn-EPnyo3HZu7kw[1].woff moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\0Rg44tLOjg_1295652532[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\beacon[2].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\BY89I4PQ.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\if[5].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[2].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[3].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[4].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[5].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[6].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[7].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[8].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[3].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[4].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[7].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[8].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beaconAXSYYN8Y.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beaconGXL94CTA.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[10].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[3].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[8].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[9].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\if[3].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\if[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLg6PA9UHTU.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLgMWORQPW2.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLgU2EGJJLB.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\serv[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\serv[2].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\tt[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[4].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[5].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[7].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\vj[1].js not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS026C4T\p-01-0VIaSjnOLg[6].gif not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\beacon[2].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\beacon[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3W8ZAJ8QP.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[10].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[4].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[6].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[7].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[3].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[8].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[9].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgK95C4AYI.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgOR6D2AXI.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgVOQ2VJRR.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgW4G080A4.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[10].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[7].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[8].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[9].gif moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\pd[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIQS7DTC\handshake[4].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIQS7DTC\vpixel[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKIVQ94C\the-more-show[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\87Y3HPU0\vpixel[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31H33TJT\vpixel[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31H33TJT\vpixel[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2UM641HX\html[1].htm moved successfully.
File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File\Folder C:\Windows\temp\hsperfdata_GREG$\2168 not found!
File\Folder C:\Windows\temp\jna6499668670523374915.dll not found!
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

[ken545]

Now after this fix post the log from the fix and also run a new scan with OTL and post the log

Open OTL.exe

• Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :OTL
  [2014/01/22 10:23:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
  [2014/01/22 01:33:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aguwvoqy
  [2014/01/22 01:33:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugefuqb
  [2014/01/22 01:32:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faafulw
  [2014/01/22 01:32:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ergaawl
  [2014/01/22 01:31:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bozyadso
  [2014/01/22 01:30:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hekeekse
  [2014/01/22 01:30:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awytylwe
  [2014/01/22 01:29:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzihohf
  [2014/01/22 01:28:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mecyuxs
  [2014/01/22 01:28:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Firiec
  [2014/01/22 01:27:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuceiffy
  [2014/01/22 01:26:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvangy
  [2014/01/22 01:26:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ishiath
  [2014/01/22 01:25:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xutuiqav
  [2014/01/22 01:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vamumifa
  [2014/01/22 01:24:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzaklie
  [2014/01/22 01:23:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sotyaf
  [2014/01/22 01:22:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwxiihxu
  [2014/01/22 01:22:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erekty
  [2014/01/22 01:21:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhaszu
  [2014/01/22 01:20:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elqyerot
  [2014/01/22 01:20:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuzylyn
  [2014/01/22 01:19:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyzagao
  [2014/01/22 01:19:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isacro
  [2014/01/22 01:18:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyzudos
  [2014/01/22 01:17:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Worupyz
  [2014/01/22 01:16:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siquez
  [2014/01/22 01:16:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyrova
  [2014/01/21 17:39:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xoiregeh
  [2014/01/21 17:39:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kouwolm
  [2014/01/21 17:38:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyqyvyz
  [2014/01/21 17:38:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuiqenle
  [2014/01/21 17:37:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awhaefep
  [2014/01/21 17:36:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suvaeq
  [2014/01/21 17:35:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubyxygke
  [2014/01/21 17:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okolaw
  [2014/01/21 17:34:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulqyiq
  [2014/01/21 17:34:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rudatoi
  [2014/01/21 17:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deokiw
  [2014/01/21 17:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utoqzou
  [2014/01/21 17:31:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubzohaic
  [2014/01/21 17:31:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aciscy
  [2014/01/21 17:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evusufu
  [2014/01/21 17:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olehuh
  [2014/01/21 17:29:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paevrep
  [2014/01/21 17:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyqomez
  [2014/01/21 17:28:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obugego
  [2014/01/21 17:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meibway
  [2014/01/21 17:26:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yloksa
  [2014/01/21 17:26:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buefemob
  [2014/01/21 17:25:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kovofeq
  [2014/01/21 17:24:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poumuz
  [2014/01/21 17:24:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynlyradi
  [2014/01/21 17:23:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyovfyas
  [2014/01/21 17:22:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrloifni
  [2014/01/21 17:22:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydkyla
  [2014/01/21 17:21:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exykku
  [2014/01/21 17:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvgesuqo
  [2014/01/21 17:20:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usygyda
  [2014/01/21 17:19:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywvusoro
  [2014/01/21 17:18:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqmiiv
  [2014/01/21 17:18:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biowwam
  [2014/01/21 17:17:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weugho
  [2014/01/21 17:17:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugebaqp
  [2014/01/21 17:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybomvo
  [2014/01/21 17:15:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hogoafh
  [2014/01/21 17:15:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owacbeab
  [2014/01/21 17:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voahrucy
  [2014/01/21 17:13:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nalevo
  [2014/01/21 17:13:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afmazo
  [2014/01/21 17:12:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irtoyro
  [2014/01/21 17:11:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibinhe
  [2014/01/21 17:11:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Octoqeog
  [2014/01/21 17:10:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Danaker
  [2014/01/21 17:09:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynysxa
  [2014/01/21 17:09:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xahuerpa
  [2014/01/21 17:08:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Levabapi
  [2014/01/21 17:08:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adtiybny
  [2014/01/21 17:07:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epguvyif
  [2014/01/21 17:06:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yckabi
  [2014/01/21 17:05:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igrysuf
  [2014/01/21 17:05:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqfuur
  [2014/01/21 17:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyuhq
  [2014/01/21 17:04:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moorevdu
  [2014/01/21 17:03:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyimyc
  [2014/01/21 17:02:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etorex
  [2014/01/21 17:02:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wixyavi
  [2014/01/21 17:01:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecatut
  [2014/01/21 17:00:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soutpyab
  [2014/01/21 17:00:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lihugozy
  [2014/01/21 16:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noisediv
  [2014/01/21 16:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ariwkau
  [2014/01/21 16:58:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaaqroti
  [2014/01/21 16:57:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viefce
  [2014/01/21 16:56:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mibadya
  [2014/01/21 16:56:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riexzog
  [2014/01/21 16:55:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woxoyk
  [2014/01/21 16:55:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqpyop
  [2014/01/21 16:54:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toryke
  [2014/01/21 16:53:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cizyko
  [2014/01/21 16:52:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akipun
  [2014/01/21 16:52:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yruwoky
  [2014/01/21 16:51:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efcayzdo
  [2014/01/21 16:51:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uttoer
  [2014/01/21 16:50:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zualohyr
  [2014/01/21 16:49:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfeczy
  [2014/01/21 16:48:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arzuano
  [2014/01/21 16:48:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feygsan
  [2014/01/29 16:00:33 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3908755253.job
  [2014/01/29 07:19:48 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1722134904.job
  [2014/01/29 05:08:09 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2053395886.job
  [2014/01/29 04:42:19 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2164977508.job
  [2014/01/29 01:13:59 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3134106562.job
  [2014/01/28 23:16:52 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 760575922.job
  [2014/01/28 21:19:48 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3287703646.job
  [2014/01/28 20:40:57 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 985122024.job
  [2014/01/28 19:09:47 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4248253841.job
  [2014/01/28 17:13:05 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2271048042.job
  [2014/01/27 16:40:42 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3690677127.job
  [2014/01/27 13:17:41 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3046702210.job
  [2014/01/27 07:38:46 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4171909079.job
  [2014/01/26 03:18:18 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3288067138.job
  [2014/01/26 01:08:12 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1139419153.job
  [2014/01/26 00:42:08 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3717181098.job
  [2014/01/25 23:11:06 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 534460331.job
  [2014/01/25 20:47:55 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 197679845.job
  [2014/01/25 19:16:50 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1252562066.job
  [2014/01/25 17:19:45 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 583378015.job
  [2014/01/25 16:40:50 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 993838087.job
  
  
  :Services
  
  :Reg
  
  :Files
  ipconfig /flushdns /c
  
  
  :Commands
  [emptytemp]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top. <--Not run Scan
• Let the program run unhindered, reboot when it is done
• Then post the results of the log it produces

Then run a new scan with OTL and post the new log please

 

[allank]

Post-fix run

All processes killed
========== OTL ==========
C:\Program Files (x86)\Common Files\Spigot\GC folder moved successfully.
C:\Program Files (x86)\Common Files\Spigot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aguwvoqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ugefuqb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Faafulw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ergaawl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bozyadso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hekeekse folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awytylwe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzihohf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mecyuxs folder moved successfully.
C:\Users\Greg\AppData\Roaming\Firiec folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cuceiffy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvangy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ishiath folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xutuiqav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vamumifa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzaklie folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sotyaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwxiihxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erekty folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yluhaszu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elqyerot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuzylyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyzagao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Isacro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zyzudos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Worupyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Siquez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyrova folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xoiregeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kouwolm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqyqyvyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuiqenle folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awhaefep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suvaeq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubyxygke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okolaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulqyiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rudatoi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Deokiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utoqzou folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubzohaic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aciscy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evusufu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Olehuh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Paevrep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dyqomez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obugego folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meibway folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yloksa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buefemob folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kovofeq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Poumuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynlyradi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyovfyas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yrloifni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydkyla folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exykku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yvgesuqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usygyda folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywvusoro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqmiiv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biowwam folder moved successfully.
C:\Users\Greg\AppData\Roaming\Weugho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ugebaqp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ybomvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hogoafh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owacbeab folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voahrucy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nalevo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Afmazo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irtoyro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibinhe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Octoqeog folder moved successfully.
C:\Users\Greg\AppData\Roaming\Danaker folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynysxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xahuerpa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Levabapi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Adtiybny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epguvyif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yckabi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igrysuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqfuur folder moved successfully.
C:\Users\Greg\AppData\Roaming\Izvyuhq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Moorevdu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyimyc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etorex folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wixyavi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ecatut folder moved successfully.
C:\Users\Greg\AppData\Roaming\Soutpyab folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lihugozy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Noisediv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ariwkau folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kaaqroti folder moved successfully.
C:\Users\Greg\AppData\Roaming\Viefce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mibadya folder moved successfully.
C:\Users\Greg\AppData\Roaming\Riexzog folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woxoyk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uqpyop folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toryke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cizyko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akipun folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yruwoky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efcayzdo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uttoer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zualohyr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfeczy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arzuano folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feygsan folder moved successfully.
C:\Windows\Tasks\Security Center Update - 3908755253.job moved successfully.
C:\Windows\Tasks\Security Center Update - 1722134904.job moved successfully.
C:\Windows\Tasks\Security Center Update - 2053395886.job moved successfully.
C:\Windows\Tasks\Security Center Update - 2164977508.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3134106562.job moved successfully.
C:\Windows\Tasks\Security Center Update - 760575922.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3287703646.job moved successfully.
C:\Windows\Tasks\Security Center Update - 985122024.job moved successfully.
C:\Windows\Tasks\Security Center Update - 4248253841.job moved successfully.
C:\Windows\Tasks\Security Center Update - 2271048042.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3690677127.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3046702210.job moved successfully.
C:\Windows\Tasks\Security Center Update - 4171909079.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3288067138.job moved successfully.
C:\Windows\Tasks\Security Center Update - 1139419153.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3717181098.job moved successfully.
C:\Windows\Tasks\Security Center Update - 534460331.job moved successfully.
C:\Windows\Tasks\Security Center Update - 197679845.job moved successfully.
C:\Windows\Tasks\Security Center Update - 1252562066.job moved successfully.
C:\Windows\Tasks\Security Center Update - 583378015.job moved successfully.
C:\Windows\Tasks\Security Center Update - 993838087.job moved successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Greg\Desktop\cmd.bat deleted successfully.
C:\Users\Greg\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Greg
->Temp folder emptied: 86946173 bytes
->Temporary Internet Files folder emptied: 687456557 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 7041719 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 85851 bytes

User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LogMeInRemoteUser.GREG
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2557128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 40888745 bytes

Total Files Cleaned = 787.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 02042014_094033

Files\Folders moved on Reboot...
C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\5TCLFI4R.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\LHZJ63XN.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\VDLFMH9M.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\HL5A9JPM.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\OBMKKMBP.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\QNFGCLJK.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZ8TU2N3\XUURJTL8.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WQV7XI0\EJZCZI0V.htm moved successfully.
File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File\Folder C:\Windows\temp\hsperfdata_GREG$\2156 not found!
File\Folder C:\Windows\temp\jna6009933180953729174.dll not found!
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

[allank]

OTL scan report

OTL logfile created on: 2/4/2014 9:55:00 AM - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Greg\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

7.94 Gb Total Physical Memory | 4.86 Gb Available Physical Memory | 61.24% Memory free
8.94 Gb Paging File | 5.52 Gb Available in Paging File | 61.75% Paging File free
Paging file location(s): c:\pagefile.sys 1024 2048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 587.85 Gb Free Space | 63.11% Space Free | Partition Type: NTFS
Drive E: | 298.09 Gb Total Space | 152.62 Gb Free Space | 51.20% Space Free | Partition Type: NTFS

Computer Name: GREG | User Name: Greg | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Users\Greg\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
PRC - C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
PRC - C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
PRC - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
PRC - C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
PRC - C:\Program Files (x86)\DynDNS Updater\DynTray.exe (Dyn, Inc.)
PRC - C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
PRC - C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppgooglenaclpluginchrome.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll ()
MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\f4e49f5f51d2fa5e6190464468dff4d3\Microsoft.VisualBasic.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\c664f44617c6a89edcc171fa8596c89d\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\conduitscripting0.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qjson0.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qextserialport1.dll ()
MOD - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madexcept_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\maddisAsm_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madbasic_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll ()
MOD - C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll ()
MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPTools.dll ()
MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPToolkit.dll ()
MOD - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\libgcc_s_dw2-1.dll ()
MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\mingwm10.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (BcmBtRSupport) -- C:\Windows\SysNative\BtwRSupportService.exe (Broadcom Corporation.)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (CrashPlanService) -- C:\Program Files\CrashPlan\CrashPlanService.exe (CrashPlan)
SRV:64bit: - (HPSIService) -- C:\Windows\SysNative\HPSIsvc.exe (HP)
SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (CISVC) -- C:\Windows\SysNative\CISVC.EXE (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV - (LMIMaint) -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (AVG)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdvancedSystemCareService7) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
SRV - (LiveUpdateSvc) -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (IObit)
SRV - (AVGIDSAgent) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (avgfws) -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (BingDesktopUpdate) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
SRV - (LogMeIn) -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (File Backup) -- C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Dyn Updater) -- C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
SRV - (DymoPnpService) -- C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Sanford, L.P.)
SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (HP LaserJet Service) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (LMIRfsClientNP) -- C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV:64bit: - (Avgdiska) -- C:\Windows\SysNative\drivers\avgdiska.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSDriver) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgldx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgloga) -- C:\Windows\SysNative\drivers\avgloga.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSHA) -- C:\Windows\SysNative\drivers\avgidsha.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (btwampfl) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (bcbtums) -- C:\Windows\SysNative\drivers\bcbtums.sys (Broadcom Corporation.)
DRV:64bit: - (Avgmfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgfwfd) -- C:\Windows\SysNative\drivers\avgfwd6a.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgrkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgtdia) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (LMIRfsDriver) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV:64bit: - (lmimirr) -- C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.)
DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (mvusbews) -- C:\Windows\SysNative\drivers\mvusbews.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (SkyhawkeUSBLan) -- C:\Windows\SysNative\drivers\btblan.sys (Belcarra Technologies)
DRV:64bit: - (PRESONUS_AUDIOBOX_USB) -- C:\Windows\SysNative\drivers\psabusbu.sys (Ploytec GmbH)
DRV:64bit: - (PRESONUS_AUDIOBOX_WDM) -- C:\Windows\SysNative\drivers\psabusba.sys (Ploytec GmbH)
DRV:64bit: - (PRESONUS_AUDIOBOX_MIDI) -- C:\Windows\SysNative\drivers\psabusbm.sys (Ploytec GmbH)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (VX3000) -- C:\Windows\SysNative\drivers\VX3000.sys (Microsoft Corporation)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (VST64_DPV) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) -- C:\Windows\SysNative\drivers\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (e1express) -- C:\Windows\SysNative\drivers\e1e6232e.sys (Intel Corporation)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (silabser) -- C:\Windows\SysNative\drivers\silabser.sys (Silicon Laboratories)
DRV:64bit: - (silabenm) -- C:\Windows\SysNative\drivers\silabenm.sys (Silicon Laboratories, Inc.)
DRV:64bit: - (preSonusUsb) -- C:\Windows\SysNative\drivers\preSonusUsb.sys (PreSonus Audio Electronics)
DRV:64bit: - (ControlTransferDriver) -- C:\Windows\SysNative\drivers\PreSonusUSB_xfer.sys (PreSonus Audio Electronics)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (LMIInfo) -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?type=198484&fr=spigot-yhp-ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4A 5C 73 60 1A 57 CA 01 [binary data]
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes,DefaultScope = {A8273032-2A44-4B51-9260-1E36A9BBC3B4}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{678C32DE-279F-4E67-AFB8-37B78B72F5A5}: "URL" = https://www.google.com/search?q={searchTerms}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{7A2F9203-01E3-4ED0-B627-F7BD85BE63E6}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000031&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=8140A633-0BA9-4F77-8487-8BF9C208F80A&apn_sauid=880C589A-978F-4EB4-9DB0-700BF77083E6&
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{90CAD367-7355-4EA0-88C5-EEB0659C7EC5}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8&rlz=1I7GGIE_en
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{A8273032-2A44-4B51-9260-1E36A9BBC3B4}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@dymo.com/DymoLabelFramework: C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll ( Sanford L.P.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Greg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@starfield.com/off: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff.dll ( Starfield Technologies, LLC.)
FF - HKCU\Software\MozillaPlugins\@starfield.com/off64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff64.dll ( Starfield Technologies, LLC.)
FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe.dll (Starfield Technology, LLC)
FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe64.dll (Starfield Technology, LLC)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/01/13 03:02:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quickprint@hp.com: C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011/01/26 14:27:28 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]

[2010/08/12 14:06:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions
[2010/03/16 18:23:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{googlemniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{googleageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://search.yahoo.com/?type=198484&fr=spigot-yhp-ch
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Online Storage plug-in (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npoff.dll
CHR - plugin: Workspace Webmail plug-in 1.0.20.42 (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npwbe.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: DYMO Label Framework (Enabled) = C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: Angry Birds = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: 1Password = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjjhallfgjeglblehebfpbcfeobpgk\4.0.1.99_0\
CHR - Extension: ShopAtHome.com extension = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc\7.1.0.16_0\
CHR - Extension: Google Wallet = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Google Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm\4.4_0\
CHR - Extension: RSS Feed Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.2_0\

O1 HOSTS File: ([2014/02/01 16:19:06 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
O2:64bit: - BHO: (no name) - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - No CLSID value found.
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Bluetooth Connection Assistant] LBTWIZ.EXE -silent File not found
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CaddieSyncConduit] C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DLSService] C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [Advanced SystemCare 7] C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeCT] C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeDesktopTimer] C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB (Hewlett-Packard Printer Diagnostics)
O16 - DPF: {627C5D14-CB66-493E-B0F3-589C7E2FA833} http://s118403992.hwddns.com/template/WebClient.cab (NxWebRemoteHH)
O16 - DPF: {BC0AE9E6-E549-4554-A222-EA083A894683} http://a03-b03.mypicturetown.com/P2PwebCmdController/x/Upld_47.CAB (QuickUpload)
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-29-0.cab (EPUImageControl Class)
O16 - DPF: {C7DEDA04-2FFF-4B81-AE66-0A0E0EF4AD2F} http://www.ritzpix.com/net/Uploader/LPUploader57.cab (Image Uploader Control)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://corecon.webex.com/client/T27L/webex/ieatgpc1.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
O16 - DPF: {FE92D9C3-4A69-4EC7-8651-1DC8531D0075} http://68.15.12.110:8012/user/TSBnwCam.CAB (TSBnwCam Control)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ECF2B04B-5FBD-4691-A868-5A94A86C6697}: NameServer = 8.8.8.8,8.8.4.4
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O27 - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/03/14 11:57:12 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2006/09/18 15:43:36 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/02/03 15:49:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\Desktop\200 Northfield Road
[2014/02/03 08:05:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\Desktop\McGovern
[2014/02/02 12:57:04 | 000,000,000 | ---D | C] -- C:\_OTL
[2014/02/01 16:19:12 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2014/02/01 11:26:40 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/02/01 11:26:40 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/02/01 11:26:40 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/02/01 11:24:17 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/01/31 15:55:34 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Greg\Desktop\OTL.exe
[2014/01/30 20:25:55 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2014/01/27 14:07:57 | 000,040,248 | ---- | C] (AVG) -- C:\Windows\SysNative\TURegOpt.exe
[2014/01/27 14:07:55 | 000,029,496 | ---- | C] (AVG) -- C:\Windows\SysNative\authuitu.dll
[2014/01/27 14:07:54 | 000,025,400 | ---- | C] (AVG) -- C:\Windows\SysWow64\authuitu.dll
[2014/01/27 14:07:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014
[2014/01/27 14:06:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\AVG
[2014/01/27 13:56:09 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG
[2014/01/27 13:55:57 | 000,000,000 | -HSD | C] -- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
[2014/01/22 10:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
[2014/01/22 10:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData
[2014/01/22 10:23:43 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
[2014/01/22 10:23:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
[2014/01/15 10:19:58 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2014/01/15 10:19:58 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2014/01/15 10:19:56 | 000,376,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2014/01/14 09:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Countdown Timer
[2014/01/14 09:36:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreeCountdownTimer
[2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Desktop Timer
[2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Desktop Timer

========== Files - Modified Within 30 Days ==========

[2014/02/04 09:56:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/02/04 09:55:32 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/02/04 09:55:32 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/02/04 09:47:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/02/04 09:47:11 | 2095,452,159 | -HS- | M] () -- C:\hiberfil.sys
[2014/02/04 09:26:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/02/03 15:51:30 | 000,734,906 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/02/03 15:51:30 | 000,629,576 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/02/03 15:51:30 | 000,108,652 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/02/01 16:19:06 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2014/01/31 15:55:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Greg\Desktop\OTL.exe
[2014/01/23 15:53:31 | 000,000,512 | ---- | M] () -- C:\Users\Greg\Documents\MBR.dat
[2014/01/21 16:32:39 | 000,107,368 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIRfsClientNP.dll
[2014/01/21 16:32:39 | 000,092,488 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIinit.dll
[2014/01/21 16:32:39 | 000,035,656 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIport.dll
[2014/01/20 16:23:47 | 000,012,326 | ---- | M] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | M] () -- C:\Users\Greg\AppData\Local\idnlbohr
[2014/01/20 16:21:43 | 000,000,000 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
[2014/01/19 16:34:49 | 000,001,044 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014/01/16 03:25:47 | 000,500,856 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

========== Files Created - No Company Name ==========

[2014/02/01 11:26:40 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014/02/01 11:26:40 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014/02/01 11:26:40 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014/02/01 11:26:40 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014/02/01 11:26:40 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014/01/27 14:07:29 | 000,002,243 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014.lnk
[2014/01/23 15:53:31 | 000,000,512 | ---- | C] () -- C:\Users\Greg\Documents\MBR.dat
[2014/01/21 16:33:18 | 000,001,004 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk
[2014/01/21 16:33:16 | 000,001,020 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
[2014/01/20 16:23:47 | 000,012,326 | ---- | C] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | C] () -- C:\Users\Greg\AppData\Local\idnlbohr
[2014/01/20 16:21:43 | 000,000,000 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
[2013/10/15 10:33:57 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll
[2012/09/14 11:38:02 | 000,000,507 | ---- | C] () -- C:\Windows\hpntwksetup.ini
[2010/11/12 06:21:00 | 000,038,435 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\Microsoft Excel 97-2003.ADR
[2010/10/14 16:05:19 | 000,001,940 | ---- | C] () -- C:\Users\Greg\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/03/23 09:58:24 | 000,007,606 | ---- | C] () -- C:\Users\Greg\AppData\Local\Resmon.ResmonCfg
[2010/02/17 09:07:50 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/11/13 12:03:35 | 000,000,000 | -H-- | C] () -- C:\ProgramData\PKP_DLdu.DAT

========== ZeroAccess Check ==========

[2009/07/13 22:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2011/03/14 13:00:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Autodesk
[2010/03/03 19:32:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avery
[2014/01/27 14:06:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG
[2013/10/28 21:37:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG2014
[2011/02/09 07:56:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\com.kodakgallery.AirUploader
[2013/10/28 11:48:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\CrashPlan
[2014/02/04 09:51:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dropbox
[2010/05/04 07:04:00 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\EBookSys
[2010/05/31 08:05:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\FileZilla
[2014/01/22 10:21:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\IObit
[2009/10/27 15:12:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Leadertech
[2009/11/22 12:50:54 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SkyGolf
[2011/03/14 13:25:33 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SmartDraw
[2013/10/15 10:49:38 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Spotify
[2013/10/28 21:36:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\TuneUp Software
[2010/06/11 12:16:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vu360
[2010/01/08 09:58:50 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\webex
[2013/10/15 06:59:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\YouSendIt

========== Purity Check ==========



< End of report >

 

[ken545]

Lets run these through OTL


Open OTL.exe

• Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :OTL
  [2014/01/20 16:23:47 | 000,012,326 | ---- | M] () -- C:\Users\Greg\AppData\Local\lgawiqfw
  [2014/01/20 16:22:45 | 000,067,992 | ---- | M] () -- C:\Users\Greg\AppData\Local\idnlbohr
  [2014/01/20 16:23:47 | 000,012,326 | ---- | C] () -- C:\Users\Greg\AppData\Local\lgawiqfw
  [2014/01/20 16:22:45 | 000,067,992 | ---- | C] () -- C:\Users\Greg\AppData\Local\idnlbohr
  
  
  :Services
  
  :Reg
  
  :Files
  
  
  
  :Commands
  [emptytemp]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top. <--Not run Scan
• Let the program run unhindered, reboot when it is done
• Then post the results of the log it produces

Then lets run TDSSKiller

Please download TDSSKiller.zip

• Extract it to your desktop
• Double click TDSSKiller.exe
• Press Start Scan
  • Only if Malicious objects are found then ensure Cure is selected
  • Then click Continue > Reboot now
• Copy and paste the log in your next reply
  • A copy of the log will be saved automatically to the root of the drive (typically C:\)

 

[allank]

OTL report - tdsskiller to come.

All processes killed
========== OTL ==========
C:\Users\Greg\AppData\Local\lgawiqfw moved successfully.
C:\Users\Greg\AppData\Local\idnlbohr moved successfully.
File C:\Users\Greg\AppData\Local\lgawiqfw not found.
File C:\Users\Greg\AppData\Local\idnlbohr not found.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Greg
->Temp folder emptied: 13195168 bytes
->Temporary Internet Files folder emptied: 594661231 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 7058266 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 52155 bytes

User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LogMeInRemoteUser.GREG
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1076091 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 588.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 02052014_084140

Files\Folders moved on Reboot...
File\Folder C:\Users\Greg\AppData\Local\Temp\fla14BB.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla1BAE.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla2940.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla3350.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla3E11.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla44A9.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla530.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla7653.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla861A.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla92D2.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaA0C4.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaA10E.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaC405.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaC8E6.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaEFE7.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaF141.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaF692.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaFB4F.tmp not found!
C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beacon0UHBAL9N.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beaconJKMK26SD.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beaconL2H3MO9D.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beaconQMNX3HVS.htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\cl[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\DBDMYVE1.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\display[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ev[1] not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\if4L2KLFJE.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\if51P30CP5.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifHFLQHR0U.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifS7OQR6IK.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifX85848MS.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifZKQU7B4R.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\pd[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\tt[7].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\tt[8].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatch3D1B2R9N.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchCLGW4GXM.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchCPUYNUO3.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchITDJDCI0.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchYA2M2KGT.htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\0Rq5jTMHpL_1022753169[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\0Rq5jTMHpL_1022753169[2].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\1JBFR9KR.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beacon54D33BMO.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconA6O7J8IJ.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconCDCVJ42R.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconG2FYBTSF.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconGFZREQNF.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconJ8R9MSIS.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconNR7ZSIKI.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconUNB6KQJ1.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\if3DM6GYWP.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\view[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\MZBLRB7I.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\pubmatic_160_600[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\pubmatic_300_250[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\pubmatic_728_90[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\sb[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\AdDisplayTrackerServlet[5].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\shutterstock_165325028[1].jpg moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\zone1_iframe[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\zone2_iframe[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6QMEEDA\87MV9VM4.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6QMEEDA\iframe[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6QMEEDA\vpixel[2].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62CEGA1S\11229[1].js not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62CEGA1S\83328d2d[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5BZLI3EZ\TRK8LVR8.htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KNJFPRQ\cafemom-mad-life-branded-154552[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2HSNPOE5\adsMainLeft[1].htm moved successfully.
File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File\Folder C:\Windows\temp\hsperfdata_GREG$\2320 not found!
File\Folder C:\Windows\temp\jna5191002122651123577.dll not found!
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

[allank]

First TDSSKILLER report

Too big again, attached zip. First scan found malicious item, then ran it again after reboot - 2nd log.

 

[ken545]

Good,

Please download Malwarebytes Anti-Rootkit from Here

1. Unzip the contents to a folder in a convenient location.
2. Open the folder where the contents were unzipped and run mbar.exe
3. Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
4. Click on the Cleanup button to remove any threats and reboot if prompted to do so.
5. Wait while the system shuts down and the cleanup process is performed.
6. Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
7. When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt

 

[allank]

MBAR didn't find anything

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16476

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
CPU speed: 2.394000 GHz
Memory total: 8520667136, free: 5828567040

Downloaded database version: v2014.02.05.08
Downloaded database version: v2013.12.18.01
=======================================
Initializing...
------------ Kernel report ------------
02/05/2014 12:06:32
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\vmbus.sys
\SystemRoot\system32\drivers\winhv.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\vmstorfl.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\System32\Drivers\nvBridge.kmd
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\e1e6232e.sys
\SystemRoot\system32\DRIVERS\usbuhci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\VSTBS26.SYS
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\VSTDPV6.SYS
\SystemRoot\system32\DRIVERS\VSTCNXT6.SYS
\SystemRoot\system32\drivers\modem.sys
\SystemRoot\system32\drivers\1394ohci.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\lmimirr.sys
\SystemRoot\system32\drivers\serscan.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\rdpbus.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\HdAudio.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_atapi.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\usbprint.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\System32\TSDDD.dll
\SystemRoot\system32\drivers\hidusb.sys
\SystemRoot\system32\drivers\HIDCLASS.SYS
\SystemRoot\system32\drivers\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\dc3d.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\DRIVERS\point64.sys
\SystemRoot\system32\DRIVERS\VX3000.sys
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\drivers\usbaudio.sys
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\udfs.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\bcbtums.sys
\SystemRoot\System32\Drivers\BTHUSB.sys
\SystemRoot\System32\Drivers\bthport.sys
\SystemRoot\system32\DRIVERS\rfcomm.sys
\SystemRoot\system32\drivers\BthEnum.sys
\SystemRoot\system32\DRIVERS\bthpan.sys
\??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys
\??\C:\Windows\system32\drivers\LMIRfsDriver.sys
\SystemRoot\System32\Drivers\mvusbews.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys
\SystemRoot\system32\drivers\WudfPf.sys
\SystemRoot\system32\DRIVERS\WinUsb.sys
\SystemRoot\system32\DRIVERS\WUDFRd.sys
\SystemRoot\System32\drivers\rdpdr.sys
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\System32\Drivers\pmhdglbm.SYS
\SystemRoot\System32\Drivers\aswVmm.SYS
\??\C:\Windows\system32\drivers\aswRdr2.sys
\??\C:\Windows\system32\drivers\aswMonFlt.sys
\??\C:\Windows\system32\drivers\aswSnx.sys
\??\C:\Windows\system32\drivers\aswStm.sys
\SystemRoot\system32\drivers\tdtcp.sys
\SystemRoot\System32\DRIVERS\tssecsrv.sys
\SystemRoot\System32\Drivers\RDPWD.SYS
\SystemRoot\System32\lmimirr.dll
\SystemRoot\System32\lmimirr2.dll
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\advapi32.dll
\Windows\System32\imagehlp.dll
\Windows\System32\kernel32.dll
\Windows\System32\msctf.dll
\Windows\System32\nsi.dll
\Windows\System32\usp10.dll
\Windows\System32\shell32.dll
\Windows\System32\imm32.dll
\Windows\System32\clbcatq.dll
\Windows\System32\normaliz.dll
\Windows\System32\rpcrt4.dll
\Windows\System32\difxapi.dll
\Windows\System32\setupapi.dll
\Windows\System32\lpk.dll
\Windows\System32\msvcrt.dll
\Windows\System32\shlwapi.dll
\Windows\System32\ole32.dll
\Windows\System32\comdlg32.dll
\Windows\System32\sechost.dll
\Windows\System32\oleaut32.dll
\Windows\System32\Wldap32.dll
\Windows\System32\ws2_32.dll
\Windows\System32\psapi.dll
\Windows\System32\user32.dll
\Windows\System32\gdi32.dll
\Windows\System32\urlmon.dll
\Windows\System32\iertutil.dll
\Windows\System32\wininet.dll
\Windows\System32\KernelBase.dll
\Windows\System32\wintrust.dll
\Windows\System32\devobj.dll
\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
\Windows\System32\crypt32.dll
\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
\Windows\System32\comctl32.dll
\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
\Windows\System32\cfgmgr32.dll
\Windows\System32\msasn1.dll
\Windows\SysWOW64\normaliz.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk5\DR5
Upper Device Object: 0xfffffa8009630790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000076\
Lower Device Object: 0xfffffa8009492750
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk4\DR4
Upper Device Object: 0xfffffa800959b790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000075\
Lower Device Object: 0xfffffa8008d0c660
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk3\DR3
Upper Device Object: 0xfffffa80094e6790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000074\
Lower Device Object: 0xfffffa8008d0d750
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk2\DR2
Upper Device Object: 0xfffffa8009497790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000073\
Lower Device Object: 0xfffffa80094bcb60
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xfffffa8007d07060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T1L0-2\
Lower Device Object: 0xfffffa8007782060
Lower Device Driver Name: \Driver\atapi\
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8007d06060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xfffffa8007778680
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8007d06060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007b489c0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007d06060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8007778680, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 3285CFC5

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 204800
Partition file system is NTFS
Partition is bootable

Partition 1 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 206848 Numsec = 1953314816

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 1000204886016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-1953505168-1953525168)...
Done!
Physical Sector Size: 512
Drive: 1, DevicePointer: 0xfffffa8007d07060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007d069a0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007d07060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8007782060, DeviceName: \Device\Ide\IdeDeviceP0T1L0-2\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 730AE6F8

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 625138352
Partition file system is NTFS
Partition is bootable

Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 320072933376 bytes
Sector size: 512 bytes

Done!
Physical Sector Size: 0
Drive: 2, DevicePointer: 0xfffffa8009497790, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80094b1b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8009497790, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80094bcb60, DeviceName: \Device\00000073\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 3, DevicePointer: 0xfffffa80094e6790, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80094b16e0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa80094e6790, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8008d0d750, DeviceName: \Device\00000074\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 4, DevicePointer: 0xfffffa800959b790, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80095f2b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa800959b790, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8008d0c660, DeviceName: \Device\00000075\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 5, DevicePointer: 0xfffffa8009630790, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80095f26e0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8009630790, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8009492750, DeviceName: \Device\00000076\, DriverName: \Driver\USBSTOR\
------------ End ----------
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
Removal finished

 

[allank]

Second MBAR report

Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.02.05.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Greg :: GREG [administrator]

2/5/2014 12:06:37 PM
mbar-log-2014-02-05 (12-06-37).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 319332
Time elapsed: 15 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

 

[ken545]

ok, go ahead and run a new scan with aswMBR, it was in your first or second post, it should still be on your desktop unless you removed it, I just want to see the new report...DONT FIX ANYTHING

 

[allank]

aswMBR

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-02-05 12:54:54
-----------------------------
12:54:54.262 OS Version: Windows x64 6.1.7601 Service Pack 1
12:54:54.262 Number of processors: 4 586 0xF0B
12:54:54.263 ComputerName: GREG UserName: Greg
12:54:58.511 Initialize success
12:55:02.823 AVAST engine defs: 14020500
12:55:16.943 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
12:55:16.948 Disk 0 Vendor: ST31000528AS CC34 Size: 953869MB BusType: 3
12:55:16.953 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-2
12:55:16.957 Disk 1 Vendor: WDC_WD3200AAKS-75VYA0 12.01B02 Size: 305245MB BusType: 3
12:55:17.057 Disk 0 MBR read successfully
12:55:17.064 Disk 0 MBR scan
12:55:17.070 Disk 0 Windows 7 default MBR code
12:55:17.079 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
12:55:17.092 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953767 MB offset 206848
12:55:17.136 Disk 0 scanning C:\Windows\system32\drivers
12:55:28.349 Service scanning
12:55:49.158 Modules scanning
12:55:49.159 Disk 0 trace - called modules:
12:55:49.172 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
12:55:49.173 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007d06060]
12:55:49.174 3 CLASSPNP.SYS[fffff880018fa43f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8007778680]
12:55:50.523 AVAST engine scan C:\Windows
12:55:54.101 AVAST engine scan C:\Windows\system32
12:59:20.013 AVAST engine scan C:\Windows\system32\drivers
13:00:03.003 AVAST engine scan C:\Users\Greg
13:41:14.759 AVAST engine scan C:\ProgramData
13:46:20.463 Scan finished successfully
13:59:10.827 Disk 0 MBR has been saved successfully to "C:\Users\Greg\Desktop\MBR.dat"
13:59:10.837 The log file has been saved successfully to "C:\Users\Greg\Desktop\aswMBR.txt"

 

[ken545]

Looking good :bigthumb:

How are things running now ?

 

[allank]

Whoopee!

Looks good, thanks very much! I'll monitor behavior over the next couple of days.

Cheers!

 

[ken545]

Great, sometimes this garbage has a way of reappearing, why dont you wait a couple of days and then run a new Scan with OTL and post the log and let me take a final look.

One of the reasons your friend got this computer so infected is that he appears to be installing anything he can get for free, not all but a lot of free apps like timers , free smileys and the like most often come bundled with other garbage.