OTL logfile created on: 2012-11-29 20:02:47 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Shawn Carter\Downloads 64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,08 Gb Available Physical Memory | 52,04% Memory free 8,19 Gb Paging File | 5,85 Gb Available in Paging File | 71,43% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 803,18 Gb Total Space | 428,64 Gb Free Space | 53,37% Space Free | Partition Type: NTFS Computer Name: DOMOWY | User Name: Shawn Carter | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-11-29 20:00:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Shawn Carter\Downloads\OTL.exe PRC - [2012-11-29 19:53:30 | 000,059,964 | ---- | M] (Macrovision Europe Ltd.) -- C:\Users\SHAWNC~1\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001 PRC - [2012-11-03 19:04:15 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe PRC - [2012-10-30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012-08-04 08:13:44 | 001,353,080 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\steam.exe PRC - [2011-02-18 21:55:39 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2009-07-20 03:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe PRC - [2008-12-21 14:30:20 | 000,079,360 | ---- | M] (Creative Labs) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe PRC - [2008-04-17 14:04:22 | 001,233,196 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\InstallShield Installation Information\{3A94E148-9C8B-4FE9-99DD-93072F99BE20}\AMBSPISyncService.exe PRC - [2008-04-15 17:54:42 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe PRC - [2008-04-15 17:54:40 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2008-03-13 04:13:00 | 000,417,792 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe PRC - [2007-06-01 10:21:30 | 001,209,904 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe PRC - [2007-06-01 10:21:08 | 000,153,136 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-11-29 19:53:35 | 000,592,896 | ---- | M] () -- C:\Users\SHAWNC~1\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0410\~de6248.tmp MOD - [2012-11-29 19:53:30 | 000,697,884 | ---- | M] () -- C:\Users\SHAWNC~1\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0410\~df394b.tmp MOD - [2012-11-14 03:10:59 | 000,460,904 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\ppGoogleNaClPluginChrome.dll MOD - [2012-11-14 03:10:58 | 012,456,040 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\PepperFlash\pepflashplayer.dll MOD - [2012-11-14 03:10:57 | 004,008,040 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\pdf.dll MOD - [2012-11-14 03:10:12 | 000,587,880 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\libglesv2.dll MOD - [2012-11-14 03:10:11 | 000,124,520 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\libegl.dll MOD - [2012-11-14 03:10:04 | 000,157,304 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\avutil-51.dll MOD - [2012-11-14 03:10:03 | 000,275,576 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\avformat-54.dll MOD - [2012-11-14 03:10:02 | 002,168,952 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\avcodec-54.dll MOD - [2012-10-24 16:02:12 | 020,317,008 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll MOD - [2012-10-24 16:02:11 | 001,099,616 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll MOD - [2012-10-24 16:02:11 | 000,902,480 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.dll MOD - [2012-10-24 16:02:11 | 000,190,816 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll MOD - [2012-10-24 16:02:11 | 000,123,232 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll MOD - [2009-07-20 03:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe MOD - [2007-02-16 17:40:42 | 005,521,408 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2007-02-16 17:40:40 | 001,466,368 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - File not found [Disabled | Unknown] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV:[b]64bit:[/b] - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2011-10-12 21:09:44 | 000,204,288 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-07-20 11:36:14 | 000,160,784 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe -- (LBTServ) SRV:[b]64bit:[/b] - [2008-01-21 03:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2007-10-19 03:10:30 | 000,089,600 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\AEADISRV.EXE -- (AEADIFilters) SRV:[b]64bit:[/b] - [2007-07-09 18:21:57 | 000,754,024 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysNative\pr2ah4nb.exe -- (pr2ah4nb) SRV - [2012-11-27 14:54:19 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-07-13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-06-14 23:17:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2011-02-18 21:55:39 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2009-08-17 07:04:59 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2008-12-21 14:30:20 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe -- (Sound Blaster X-Fi MB Licensing Service) SRV - [2008-07-27 19:03:13 | 000,069,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008-04-15 17:54:42 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) SRV - [2008-03-13 04:13:00 | 000,417,792 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2008-01-21 03:47:00 | 000,428,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2008-01-21 03:47:00 | 000,211,968 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2003-09-14 21:08:14 | 002,928,700 | ---- | M] () [Auto | Stopped] -- c:\usr/MYSQL/bin/mysqld.exe -- (MySql) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-11-29 19:49:37 | 000,564,824 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2012-10-30 23:51:56 | 000,059,728 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,984,144 | ---- | M] () [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,370,288 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,071,600 | ---- | M] () [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,044,272 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,021,136 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd) DRV:[b]64bit:[/b] - [2012-10-30 23:51:53 | 000,025,232 | ---- | M] () [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:[b]64bit:[/b] - [2011-10-12 21:56:18 | 010,207,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2011-10-12 21:56:18 | 010,207,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-10-12 20:30:42 | 000,317,952 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-06-06 23:06:48 | 000,090,128 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdLH6.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2009-10-22 12:54:24 | 000,040,464 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\73565642.sys -- (73565642) DRV:[b]64bit:[/b] - [2009-09-25 16:59:46 | 000,157,712 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\73565641.sys -- (73565641) DRV:[b]64bit:[/b] - [2009-07-24 07:47:00 | 000,117,264 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009-06-17 17:54:46 | 000,040,976 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\LUsbFilt.Sys -- (LUsbFilt) DRV:[b]64bit:[/b] - [2009-06-17 17:54:30 | 000,057,872 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2009-06-17 17:54:22 | 000,055,312 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2008-06-27 06:51:10 | 000,088,632 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs) DRV:[b]64bit:[/b] - [2008-04-15 17:54:16 | 000,388,120 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2008-03-20 00:44:34 | 000,467,456 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ADIHdAud.sys -- (ADIHdAudAddService) DRV:[b]64bit:[/b] - [2008-03-17 10:06:14 | 000,115,328 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2008-01-21 03:51:07 | 000,016,384 | ---- | M] () [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2008-01-21 03:47:28 | 000,046,080 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:[b]64bit:[/b] - [2008-01-21 03:46:52 | 000,019,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2007-08-15 09:22:00 | 000,369,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64) DRV:[b]64bit:[/b] - [2007-07-09 18:21:07 | 000,076,912 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ps6ah4nb.sys -- (ps6ah4nb) DRV:[b]64bit:[/b] - [2006-12-22 19:05:52 | 000,559,104 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\athrxusb.sys -- (athrusb) DRV:[b]64bit:[/b] - [2006-10-31 16:23:42 | 000,015,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ASACPI.sys -- (MTsensor) DRV - [2002-09-16 17:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Stopped] -- C:\Windows\SysWow64\drivers\PQNTDRV.sys -- (PQNTDrv) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://tanielatanie.ws/ IE - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7IRFA_en IE - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Web Search..." FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=" FF - prefs.js..browser.search.update: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.tanielatanie.ws" FF - prefs.js..extensions.enabledAddons: firebug@software.joehewitt.com:1.9.2 FF - prefs.js..extensions.enabledAddons: tabscope@xuldev.org:1.1.6 FF - prefs.js..extensions.enabledAddons: {6236BA26-C117-4007-928C-DE0716C7FA96}:1.0.12 FF - prefs.js..extensions.enabledAddons: {8675f4b3-2f19-11ed-2d6b-0800600c0a16}:1.0 FF - prefs.js..extensions.enabledAddons: {8675f4b3-2f19-11ed-2d6b-0800600c0a17}:1.0 FF - prefs.js..extensions.enabledAddons: {8675f4b3-2f19-11ed-2d6b-0800600c0a18}:1.0 FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.9 FF - prefs.js..extensions.enabledAddons: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.12.9 FF - prefs.js..extensions.enabledAddons: {6236BA26-C117-4007-928C-DE0716C7FA80}:1.0.30 FF - prefs.js..extensions.enabledAddons: IplextoALL@ALLPlayer.org:0.7.0 FF - prefs.js..extensions.enabledAddons: {8675f4b3-2f19-11ed-2d6b-1823600c0a19}:1.0.2 FF - prefs.js..extensions.enabledAddons: {0153E448-190B-4987-BDE1-F256CADA672F}:15.0.6 FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.5.4 FF - prefs.js..extensions.enabledItems: {eaf8a4ef-d221-45ca-9deb-d0934b45fa34}:1.3.0.3 FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102 FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1 FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA80}:1.0.23 FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA96}:1.0.5 FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA99}:1.0.1 FF - prefs.js..extensions.enabledItems: {63414328-3ab4-2c84-6c41-5a473c4b2ff7}:1.0 FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0 FF - prefs.js..extensions.enabledItems: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.9.2 FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.25 FF - prefs.js..extensions.enabledItems: {8675f4b3-2f19-11ed-2d6b-0800600c0a16}:1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( ) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll () FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Shawn Carter\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( ) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Shawn Carter\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Shawn Carter\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-11-13 17:34:15 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-11-03 19:04:34 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-07-12 17:45:12 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-11-03 19:04:53 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012-05-11 04:53:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2010-12-21 11:52:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Extensions [2010-12-21 11:52:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Extensions\pencil@evolus.vn [2012-11-28 09:03:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions [2010-09-21 15:20:35 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2010-09-21 15:20:35 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-06-01 07:32:20 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2012-11-28 09:03:42 | 000,000,000 | ---D | M] ("Usage Stat") -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96} [2010-04-06 08:45:55 | 000,000,000 | ---D | M] (FBFan) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA99} [2010-06-30 18:15:18 | 000,000,000 | ---D | M] (QAssistant) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{63414328-3ab4-2c84-6c41-5a473c4b2ff7} [2011-03-29 09:26:56 | 000,000,000 | ---D | M] (KFD Flv) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{8675f4b3-2f19-11ed-2d6b-0800600c0a16} [2011-06-13 18:44:42 | 000,000,000 | ---D | M] (VFD Flv) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{8675f4b3-2f19-11ed-2d6b-0800600c0a17} [2011-11-04 22:31:18 | 000,000,000 | ---D | M] (VFD Flv) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{8675f4b3-2f19-11ed-2d6b-0800600c0a18} [2012-11-28 09:03:42 | 000,000,000 | ---D | M] ("VFT Flv") -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{8675f4b3-2f19-11ed-2d6b-1823600c0a19} [2012-07-09 19:24:15 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2012-05-23 05:30:16 | 000,000,000 | ---D | M] (Page Speed) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97} [2009-06-19 21:59:34 | 000,000,000 | ---D | M] (OggX (powered by TIME S.A.)) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\Firefox\Profiles\wdc1qc2x.default\extensions\{eaf8a4ef-d221-45ca-9deb-d0934b45fa34} [2012-05-17 18:27:07 | 001,335,949 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\firebug@software.joehewitt.com.xpi [2012-07-12 17:49:38 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\IplextoALL@ALLPlayer.org.xpi [2012-07-17 04:43:03 | 000,521,783 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2012-06-06 07:02:48 | 000,057,439 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\tabscope@xuldev.org.xpi [2012-07-12 17:49:38 | 000,023,298 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA80}.xpi [2012-07-01 19:10:42 | 000,004,230 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96}.xpi [2012-07-12 17:49:39 | 000,004,144 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\{8675f4b3-2f19-11ed-2d6b-1823600c0a19}.xpi [2012-03-09 18:22:49 | 000,634,964 | ---- | M] () (No name found) -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-04-10 12:02:08 | 000,002,059 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\searchplugins\daemon-search.xml [2011-03-29 09:26:56 | 000,001,196 | ---- | M] () -- C:\Users\Shawn Carter\AppData\Roaming\mozilla\firefox\profiles\wdc1qc2x.default\searchplugins\winamp-search.xml [2012-09-06 04:17:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012-11-03 19:04:34 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT [2012-06-14 23:19:07 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011-04-15 13:20:18 | 001,034,544 | ---- | M] (BitComet) -- C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll [2009-04-01 16:15:06 | 000,120,296 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll [2009-01-28 19:46:54 | 000,307,200 | ---- | M] (ESKA) -- C:\Program Files (x86)\mozilla firefox\plugins\npOggX.dll [2012-11-03 19:04:21 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2011-10-03 10:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll [2012-06-28 16:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2012-06-15 00:13:23 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-06-15 00:13:23 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012-06-15 00:13:23 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012-06-15 00:13:23 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-06-15 00:13:23 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-06-15 00:13:23 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://vshare.toolbarhome.com/?hp=df CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter} CHR - homepage: http://vshare.toolbarhome.com/?hp=df CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\Application\23.0.1271.91\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Vividas Player Plugin (Enabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\choofoanehnlponopnapopbnkeldllka\4.0_0\npVividasPlayer.dll CHR - plugin: Webpage Screenshot Chrome Plugin (Enabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoobijidemjaoohgggnlhkodhgnnlpob\8.8_0\plugin/np.dll CHR - plugin: Screen Capture Plugin (Enabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoobijidemjaoohgggnlhkodhgnnlpob\8.8_0\plugin/npcapture.dll CHR - plugin: vShare.tv plug-in (Enabled) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\chvsharetvplg.dll CHR - plugin: vShare.tv plug-in (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np32dsw.dll CHR - plugin: BitCometAgent (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npBitCometAgent.dll CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npganymedenet.dll CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL CHR - plugin: Ogg Player Gecko Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npOggX.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U4 (Enabled) = C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 7.0.40.255 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL CHR - plugin: WPI Detector 1.4 (Enabled) = C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll CHR - plugin: Facebook Plugin (Enabled) = C:\Users\Shawn Carter\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - Extension: Aviary Audio Editor = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajiijeebjcmkhdplmollbjpljcnelfhn\0.0.0.6_0\ CHR - Extension: Angry Birds = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\ CHR - Extension: Awesome Screenshot: Capture & Annotate = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.4.2_0\ CHR - Extension: Dysk Google = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: HIFANA X W+K TOKYO LAB = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmhjjmolopikkbigemoocmebohfpnmkj\2_0\ CHR - Extension: Facebook = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm\1.0.3_0\ CHR - Extension: Vividas Player Plugin = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\choofoanehnlponopnapopbnkeldllka\4.0_0\ CHR - Extension: Screenshot stron www - Webpage Screenshot = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki\5.7.2_0\ CHR - Extension: Szalony rollercoaster = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\eafhgomkapdagnpmmgilphbolnejepoc\1.3_0\ CHR - Extension: Search All = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\eekjldapjblgadclklmgolijbagmdnfk\2.1.2_0\ CHR - Extension: Kalendarz Google = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0\ CHR - Extension: Fast YouTube Search = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggkljdkflooidjlkahdnfgodflkelkai\1.2\ CHR - Extension: AdBlock = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.47_0\ CHR - Extension: Axure RP Extension for Chrome = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcfobacccijciaonebckaocpohceccd\0.5_1\ CHR - Extension: PageRank Status = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdkkfheckcdppiaiabobmennhijkknn\6.0.2_0\ CHR - Extension: Strzelanie do rzutk\u00F3w (Full Version) = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdeehmfjhbhcdeeacddmbfedacepfgbe\1.3_0\ CHR - Extension: Plugin helper for chrome = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoobijidemjaoohgggnlhkodhgnnlpob\8.8_0\ CHR - Extension: avast! WebRep = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ CHR - Extension: vshare plugin = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\ CHR - Extension: Gra WGT Golf = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpedbpkelbhcbkdaglillalioeeekbpb\32.1.0_0\ CHR - Extension: 365Scores - Wyniki na \u017Cywo ,Wiadomo\u015Bci sportowe & Powiadomienia = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpppefjehmjbiplimkfjeamnohldmko\1.7.5_0\ CHR - Extension: Google Chrome to Phone Extension = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco\2.3.1_0\ CHR - Extension: SEO for Chrome = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\oangcciaeihlfmhppegpdceadpfaoclj\0.9.5_0\ CHR - Extension: Gmail = C:\Users\Shawn Carter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009-06-09 07:18:24 | 000,000,794 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg64.dll (Google Inc.) O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll (Google Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O3:[b]64bit:[/b] - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:[b]64bit:[/b] - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3 - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [RunDLLEntry] C:\Windows\SysNative\AmbRunE.DLL () O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [CTSyncService] C:\Program Files (x86)\InstallShield Installation Information\{3A94E148-9C8B-4FE9-99DD-93072F99BE20}\AMBSPISyncService.exe (Creative Technology Ltd) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI\1\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.) O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Creative Technology Ltd) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-1364300604-786911588-4143486605-1000..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKU\S-1-5-21-1364300604-786911588-4143486605-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKU\S-1-5-21-1364300604-786911588-4143486605-1000..\Run: [Steam] c:\program files (x86)\steam\steam.exe (Valve Corporation) O4 - HKU\S-1-5-21-1364300604-786911588-4143486605-1000..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O8:[b]64bit:[/b] - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O9 - Extra Button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Get Styles\ct.htm File not found O9 - Extra 'Tools' menuitem : GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Get Styles\ct.htm File not found O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1364300604-786911588-4143486605-1000\..Trusted Ranges: GD ([http] in Local intranet) O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.9.2) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.9.2) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 95.160.170.92 88.156.222.92 82.139.8.40 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{895C6A05-7AA2-44C8-96AA-25AD0F2436B6}: DhcpNameServer = 192.168.1.1 0.0.0.0 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BE01B0D5-88FB-4253-A195-C0FF43B7F0E2}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F11FA9F7-199E-42C4-8124-DCEEB00AF260}: DhcpNameServer = 95.160.170.92 88.156.222.92 82.139.8.40 O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18:[b]64bit:[/b] - Protocol\Filter\text/html - No CLSID value found O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found O18 - Protocol\Filter\text/html {574940E0-1B7A-4881-8FA3-1E809714B156} - C:\Users\Shawn Carter\AppData\LocalLow\Microñoft\redir.dll File not found O20 - AppInit_DLLs: (C:\PROGRA~2\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Shawn Carter\Pictures\carisma.jpg O24 - Desktop BackupWallPaper: C:\Users\Shawn Carter\Pictures\carisma.jpg O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{0b97e156-a074-11e0-9746-0022153fe52c}\Shell\AutoRun\command - "" = F:\Setup.exe O33 - MountPoints2\{0b97e156-a074-11e0-9746-0022153fe52c}\Shell\Install\command - "" = F:\Setup.exe O33 - MountPoints2\{3fedbe6e-8a99-11e1-9801-0022153fe52c}\Shell - "" = AutoRun O33 - MountPoints2\{3fedbe6e-8a99-11e1-9801-0022153fe52c}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{3fedbe82-8a99-11e1-9801-0022153fe52c}\Shell - "" = AutoRun O33 - MountPoints2\{3fedbe82-8a99-11e1-9801-0022153fe52c}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{3fedbe9d-8a99-11e1-9801-0022153fe52c}\Shell - "" = AutoRun O33 - MountPoints2\{3fedbe9d-8a99-11e1-9801-0022153fe52c}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{facc8b12-8a9e-11e1-8b67-0022153fe52c}\Shell - "" = AutoRun O33 - MountPoints2\{facc8b12-8a9e-11e1-8b67-0022153fe52c}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{fc1e22c0-dd15-11e0-a533-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{fc1e22c0-dd15-11e0-a533-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-11-29 19:52:04 | 000,000,000 | ---D | C] -- C:\Users\Shawn Carter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD [2012-11-13 18:53:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus [2012-11-03 19:04:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared [2012-11-03 19:04:26 | 000,198,864 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll [2012-11-03 19:04:19 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll [2012-11-03 19:04:19 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll [2012-11-03 19:04:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks [2012-11-03 19:04:17 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll [2012-11-03 19:04:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Real [2012-11-03 19:04:07 | 000,000,000 | ---D | C] -- C:\Users\Shawn Carter\AppData\Roaming\Real [2012-11-03 19:03:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Real [2011-07-18 19:11:46 | 007,760,687 | ---- | C] (Boraxsoft) -- C:\Users\Shawn Carter\AppData\Roaming\SetupGFD.exe [2011-07-18 19:11:30 | 004,284,535 | ---- | C] (ffdshow ) -- C:\Users\Shawn Carter\AppData\Roaming\ffdshow.exe [2011-07-18 19:11:27 | 000,642,685 | ---- | C] (Xvid team ) -- C:\Users\Shawn Carter\AppData\Roaming\xvid.exe [2011-07-18 19:11:21 | 004,182,178 | ---- | C] (The Public) -- C:\Users\Shawn Carter\AppData\Roaming\Avisynth.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-11-29 20:09:59 | 000,000,432 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{C6E16DD6-026F-4ECA-8540-15A47941D075}.job [2012-11-29 19:59:05 | 001,477,588 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-11-29 19:59:05 | 000,665,090 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-11-29 19:59:05 | 000,589,884 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-11-29 19:59:05 | 000,127,958 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-11-29 19:59:05 | 000,101,896 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-11-29 19:51:40 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-11-29 19:51:34 | 000,002,592 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-11-29 19:51:34 | 000,002,592 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-11-29 19:51:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-11-29 19:49:37 | 000,564,824 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2012-11-29 19:34:01 | 000,001,086 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1364300604-786911588-4143486605-1000UA.job [2012-11-29 19:11:05 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-11-29 18:55:26 | 000,002,120 | ---- | M] () -- C:\scu.dat [2012-11-29 18:40:07 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-11-29 06:32:30 | 000,002,653 | ---- | M] () -- C:\Users\Shawn Carter\Desktop\Microsoft Office Word 2003.lnk [2012-11-28 15:34:00 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1364300604-786911588-4143486605-1000Core.job [2012-11-27 14:54:19 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012-11-27 14:54:19 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012-11-13 18:54:17 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2012-11-13 18:53:44 | 000,001,785 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2012-11-03 19:04:46 | 000,001,059 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk [2012-11-03 19:04:26 | 000,198,864 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll [2012-11-03 19:04:19 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll [2012-11-03 19:04:19 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll [2012-11-03 19:04:18 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll [2012-10-30 23:51:56 | 000,059,728 | ---- | M] () -- C:\Windows\SysNative\drivers\aswTdi.sys [2012-10-30 23:51:55 | 000,984,144 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSnx.sys [2012-10-30 23:51:55 | 000,370,288 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSP.sys [2012-10-30 23:51:55 | 000,071,600 | ---- | M] () -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2012-10-30 23:51:55 | 000,044,272 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRdr.sys [2012-10-30 23:51:55 | 000,021,136 | ---- | M] () -- C:\Windows\SysNative\drivers\aswKbd.sys [2012-10-30 23:51:53 | 000,025,232 | ---- | M] () -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2012-10-30 23:51:07 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr [2012-10-30 23:50:59 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2012-10-30 23:50:30 | 000,285,328 | ---- | M] () -- C:\Windows\SysNative\aswBoot.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-11-29 17:45:34 | 000,002,120 | ---- | C] () -- C:\scu.dat [2012-11-29 06:32:30 | 000,002,653 | ---- | C] () -- C:\Users\Shawn Carter\Desktop\Microsoft Office Word 2003.lnk [2012-11-13 18:53:43 | 000,001,785 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2012-11-03 19:04:46 | 000,001,059 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk [2012-07-09 19:38:17 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2012-05-06 12:58:04 | 000,084,967 | ---- | C] () -- C:\Users\Shawn Carter\.TransferManager.db [2012-02-14 18:27:36 | 000,000,600 | ---- | C] () -- C:\Users\Shawn Carter\AppData\Roaming\winscp.rnd [2011-10-19 22:14:52 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-07-18 19:11:37 | 005,243,208 | ---- | C] ( ) -- C:\Users\Shawn Carter\AppData\Roaming\AvsP.exe [2011-03-17 18:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2011-02-26 18:38:21 | 000,001,356 | ---- | C] () -- C:\Users\Shawn Carter\AppData\Local\d3d9caps.dat [2011-02-24 15:50:47 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2011-02-18 21:55:39 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011-02-14 08:59:55 | 000,294,912 | ---- | C] () -- C:\Users\Shawn Carter\AppData\Roaming\chrtmp [2010-05-28 09:36:00 | 000,000,005 | ---- | C] () -- C:\Program Files (x86)\is.dat [2009-08-03 06:29:02 | 000,000,760 | ---- | C] () -- C:\Users\Shawn Carter\AppData\Roaming\setup_ldm.iss [2008-12-21 16:05:27 | 000,055,808 | ---- | C] () -- C:\Users\Shawn Carter\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-12-21 14:08:41 | 000,000,732 | ---- | C] () -- C:\Users\Shawn Carter\AppData\Local\d3d9caps64.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2006-11-02 16:30:40 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2010-07-26 16:31:05 | 012,898,304 | ---- | M] () "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010-07-26 17:55:26 | 011,581,440 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-03-03 05:53:36 | 000,891,392 | ---- | M] () "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-03-03 05:36:24 | 000,615,424 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2008-01-21 03:50:58 | 000,513,024 | ---- | M] () "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2012-05-25 16:58:35 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\1&1 [2011-10-14 11:29:30 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\2K Sports [2012-07-09 19:36:07 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\BESTplayer [2011-02-15 08:05:03 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\BitComet [2010-10-21 18:13:02 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\BlackBean [2012-09-20 20:02:58 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Canon [2011-08-08 20:05:22 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2011-09-03 14:22:57 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Cream Software [2010-10-21 17:45:06 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\DAEMON Tools Lite [2012-09-20 14:54:15 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\EurekaLog [2010-03-10 09:18:18 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Facebook [2009-01-02 16:59:39 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Gadu-Gadu [2010-11-30 08:26:24 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Gadu-Gadu 10 [2012-02-22 08:46:07 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\GanymedeNet [2010-05-06 12:20:28 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\GetRightToGo [2009-01-08 12:50:35 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\GHISLER [2009-04-05 07:53:53 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Inspyder Sitemap Creator [2011-12-10 22:21:29 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\ipla [2010-03-05 23:23:20 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\IrfanView [2010-03-05 23:29:13 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Jasc [2011-01-20 12:09:08 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Kristanix Software [2009-03-28 15:32:29 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Leadertech [2009-04-05 07:43:06 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Likno [2011-02-03 23:32:07 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Likno Software [2009-09-30 08:40:35 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\LogoMaker [2009-01-08 17:24:28 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Micro-Sys [2012-10-18 18:07:01 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Octoshape [2010-11-16 19:46:47 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\OpenFM [2010-12-21 11:51:59 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Pencil [2010-12-08 19:08:18 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\RDRM [2011-06-30 18:15:53 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Sports Interactive [2011-08-08 19:25:52 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\SWiSH Max4 [2012-05-11 04:53:47 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\Thunderbird [2008-12-21 14:49:00 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\TMP [2009-06-16 10:23:13 | 000,000,000 | ---D | M] -- C:\Users\Shawn Carter\AppData\Roaming\WebEx [color=#E56717]========== Purity Check ==========[/color] < End of report >