Spambot uses my email address to spam others

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31
Run by [username] at 23:30:48 on 2012-06-16
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.7786.5981 [GMT -5:00]
.
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Windows\SysWOW64\svchost.exe -k Akamai
C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
c:\xampp\apache\bin\httpd.exe
C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\MySQL\MySQL Server 5.5\bin\mysqld.exe
C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
C:\Windows\SysWOW64\NLSSRV32.EXE
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files\Motorola\Bluetooth\obexsrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\xampp\apache\bin\httpd.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\atieclxx.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\IDT\WDM\sttray64.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Users\[username]\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\zumodrive.exe
C:\Users\[username]\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Motorola\Bluetooth\audiosrv.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
C:\Program Files (x86)\BOINC\boincmgr.exe
C:\Program Files (x86)\BOINC\boinctray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\BOINC\boinc.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Common Files\Steam\SteamService.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\DllHost.exe
C:\ProgramData\BOINC\projects\setiathome.berkeley.edu\astropulse_6.01_windows_intelx86.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\ProgramData\BOINC\projects\setiathome.berkeley.edu\setiathome_6.03_windows_intelx86.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Windows\system32\taskhost.exe
C:\ProgramData\BOINC\projects\www.worldcommunitygrid.org\wcg_hcc1_img_6.42_windows_intelx86
C:\Windows\system32\conhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uSearch Bar = Preserve
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>
mWinlogon: Userinit=userinit.exe,
BHO: Disabled:{A26B0C12-DFF0-465F-BECB-E4F2FD732BDB} - No File
BHO: Disabled:{B4F3A835-0E21-4959-BA22-42B3008E02FF} - No File
BHO: Disabled:{DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: WebNotes Toolbar: {a26b0c12-dff0-465f-becb-e4f2fd732bdb} - C:\Program Files (x86)\WebNotes\WebNotesToolbar.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: {98279C38-DE4B-4BCF-93C9-8EC26069D6F4} - No File
EB: WebNotes Organizer: {bb601149-29bf-4af5-97c8-55230b7d126a} - C:\Program Files (x86)\WebNotes\Hosted.dll
uRun: [ZumoDrive] C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk
uRun: [Akamai NetSession Interface] "C:\Users\[username]\AppData\Local\Akamai\netsession_win.exe"
uRun: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [boincmgr] "C:\Program Files (x86)\BOINC\boincmgr.exe" /a /s
mRun: [boinctray] "C:\Program Files (x86)\BOINC\boinctray.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {A3D93B25-4601-49D2-B3AF-F447C73D561F} - hxxp://12.71.199.22/program/SonySncRz25View.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: Interfaces\{475FE1B0-7556-40D8-B6AA-8AAA2916D76C} : DhcpNameServer = 192.168.1.1 68.238.96.12
TCP: Interfaces\{475FE1B0-7556-40D8-B6AA-8AAA2916D76C}\54C6679656 : DhcpNameServer = 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
BHO-X64: Disabled:{A26B0C12-DFF0-465F-BECB-E4F2FD732BDB} - No File
BHO-X64: WebNotesToolbar - No File
BHO-X64: Disabled:{B4F3A835-0E21-4959-BA22-42B3008E02FF} - No File
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Disabled:{DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB-X64: WebNotes Toolbar: {A26B0C12-DFF0-465F-BECB-E4F2FD732BDB} - C:\Program Files (x86)\WebNotes\WebNotesToolbar.dll
TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
TB-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB-X64: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB-X64: {98279C38-DE4B-4BCF-93C9-8EC26069D6F4} - No File
EB-X64: {bb601149-29bf-4af5-97c8-55230b7d126a} - No File
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [boincmgr] "C:\Program Files (x86)\BOINC\boincmgr.exe" /a /s
mRun-x64: [boinctray] "C:\Program Files (x86)\BOINC\boinctray.exe"
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun-x64: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
IE-X64: {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\[username]\AppData\Roaming\Mozilla\Firefox\Profiles\f1asp8u5.default\
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\BYOND\bin\npbyond.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npbyond.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Nitro PDF\Professional 7\npdf.dll
FF - plugin: C:\Program Files (x86)\Nitro PDF\Professional 7\npnitroie.dll
FF - plugin: C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
.
============= SERVICES / DRIVERS ===============
.
R1 aswSnx;aswSnx;C:\Windows\system32\drivers\aswSnx.sys --> C:\Windows\system32\drivers\aswSnx.sys [?]
R1 aswSP;aswSP;C:\Windows\system32\drivers\aswSP.sys --> C:\Windows\system32\drivers\aswSP.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys --> C:\Windows\system32\DRIVERS\dtsoftbus01.sys [?]
R1 DVMIO;DeviceVM IO Service;C:\Windows\system32\DRIVERS\dvmio.sys --> C:\Windows\system32\DRIVERS\dvmio.sys [?]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-8-11 140672]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-4-21 89600]
R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-13 20992]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2010-11-10 354304]
R2 AMD Reservation Manager;AMD Reservation Manager;C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-6-17 194496]
R2 Apache2.2;Apache2.2;C:\xampp\apache\bin\httpd.exe [2010-10-17 20549]
R2 aswFsBlk;aswFsBlk;C:\Windows\system32\drivers\aswFsBlk.sys --> C:\Windows\system32\drivers\aswFsBlk.sys [?]
R2 aswMonFlt;aswMonFlt;\??\C:\Windows\system32\drivers\aswMonFlt.sys --> C:\Windows\system32\drivers\aswMonFlt.sys [?]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-2-4 44768]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2011-4-21 679176]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
R2 DvmMDES;DeviceVM Meta Data Export Service;C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe [2010-11-18 338208]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-2-28 2343816]
R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-9-9 86072]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service;C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-7-21 103992]
R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-8-5 291896]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-9-1 227896]
R2 hpsrv;HP Service;C:\Windows\system32\Hpservice.exe --> C:\Windows\system32\Hpservice.exe [?]
R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-9 26680]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-6-9 654408]
R2 NitroDriverReadSpool2;NitroPDFDriverCreatorReadSpool2;C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [2012-5-16 216072]
R2 nlsX86cc;Nalpeiron Licensing Service;C:\Windows\SysWOW64\NLSSRV32.EXE [2012-5-16 69640]
R2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-6-1 2804568]
R2 RoxioNow Service;RoxioNow Service;C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-9-11 399344]
R3 amdiox64;AMD IO Driver;C:\Windows\system32\DRIVERS\amdiox64.sys --> C:\Windows\system32\DRIVERS\amdiox64.sys [?]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]
R3 Bluetooth Device Manager;Bluetooth Device Manager;C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2011-4-21 4150864]
R3 Bluetooth Media Service;Bluetooth Media Service;C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2011-4-21 1188616]
R3 BTMUSB;Motorola Bluetooth Radio Service;C:\Windows\system32\Drivers\btmusb.sys --> C:\Windows\system32\Drivers\btmusb.sys [?]
R3 clwvd;HP Webcam Splitter;C:\Windows\system32\DRIVERS\clwvd.sys --> C:\Windows\system32\DRIVERS\clwvd.sys [?]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-4-21 1028096]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;C:\Windows\system32\DRIVERS\netr28x.sys --> C:\Windows\system32\DRIVERS\netr28x.sys [?]
R3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
S2 CLKMSVC10_C6F09094;CyberLink Product - 2011/04/21 01:17:33;C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\HDDVD\NavFilter\kmsvc.exe [2011-4-21 245232]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-3-7 136176]
S2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1;system32\libusbd-nt.exe --> system32\libusbd-nt.exe [?]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-2-29 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-5-11 257696]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-5-6 191752]
S3 BTMCOM;Bluetooth Serial Port;C:\Windows\system32\Drivers\btmcom.sys --> C:\Windows\system32\Drivers\btmcom.sys [?]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-3-7 136176]
S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-6-17 237008]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-5-7 113120]
S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys --> C:\Windows\system32\DRIVERS\netw5v64.sys [?]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS --> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS --> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS --> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys --> C:\Windows\system32\DRIVERS\yk62x64.sys [?]
.
=============== Created Last 30 ================
.
2012-06-15 15:53:35 8955792 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D194A864-7D90-430D-B51E-75E0C63F182E}\mpengine.dll
2012-06-12 21:45:43 3146752 ----a-w- C:\Windows\System32\win32k.sys
2012-06-12 21:45:41 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-06-12 21:45:40 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-06-12 21:45:40 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-06-12 21:45:20 209920 ----a-w- C:\Windows\System32\profsvc.dll
2012-06-12 21:45:09 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-06-12 21:45:00 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-06-12 21:44:58 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-06-12 21:44:54 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-06-12 21:44:48 3216384 ----a-w- C:\Windows\System32\msi.dll
2012-06-12 21:44:46 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2012-06-12 21:44:28 1462272 ----a-w- C:\Windows\System32\crypt32.dll
2012-06-12 21:44:22 1158656 ----a-w- C:\Windows\SysWow64\crypt32.dll
2012-06-12 21:44:21 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2012-06-12 21:44:21 140288 ----a-w- C:\Windows\System32\cryptnet.dll
2012-06-12 21:44:20 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2012-06-12 21:44:18 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2012-06-09 11:44:37 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-06-09 07:35:29 -------- d-----w- C:\Users\[username]\AppData\Roaming\SUPERAntiSpyware.com
2012-06-09 07:33:24 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2012-06-09 07:33:24 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2012-06-06 23:42:50 770384 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-06 23:42:50 421200 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-03 18:38:38 -------- d-----w- C:\Users\[username]\AppData\Roaming\FileOpen
2012-06-03 18:38:38 -------- d-----w- C:\ProgramData\FileOpen
2012-06-03 18:37:15 29704 ----a-w- C:\Windows\System32\nitrolocalmon2.dll
2012-06-03 18:37:15 17928 ----a-w- C:\Windows\System32\nitrolocalui2.dll
2012-06-03 18:36:39 -------- d-----w- C:\Program Files\Common Files\Nitro PDF
2012-06-03 18:36:34 -------- d-----w- C:\Program Files (x86)\Common Files\Nitro PDF
2012-06-03 18:36:33 -------- d-----w- C:\Program Files (x86)\Nitro PDF
2012-06-03 18:34:19 -------- d-----w- C:\Users\[username]\AppData\Roaming\Downloaded Installations
2012-06-01 06:58:18 -------- d-----w- C:\Users\[username]\AppData\Local\2DBoy
2012-06-01 06:58:18 -------- d-----w- C:\ProgramData\2DBoy
2012-05-30 22:44:17 -------- d-----w- C:\Users\[username]\AppData\Roaming\Golly
2012-05-29 16:25:06 -------- d-----w- C:\Users\[username]\AppData\Local\{9A5D93C7-192A-4434-8EE6-65F9E23673EF}
2012-05-25 11:44:45 -------- d-----w- C:\Program Files (x86)\Katawa Shoujo
2012-05-25 11:39:41 441375029 ----a-w- C:\Users\[username]\[4ls]_katawa_shoujo_[windows][C3798628].exe
2012-05-23 07:02:47 -------- d-----w- C:\Users\[username]\The Salvation War Armageddon & Pantheocide
2012-05-20 23:00:33 -------- d-----w- C:\Users\[username]\AppData\Local\{ED4BBF7B-2A4C-49E5-9F85-4F0B4C531867}
.
==================== Find3M ====================
.
2012-05-18 02:06:48 2311680 ----a-w- C:\Windows\System32\jscript9.dll
2012-05-18 01:59:14 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-05-18 01:58:39 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-05-18 01:55:22 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-05-18 01:51:30 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-05-17 22:45:37 1800192 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-05-17 22:35:47 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-05-17 22:35:39 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-05-17 22:29:45 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-05-17 22:24:45 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-05-16 20:33:14 69640 ----a-w- C:\Windows\SysWow64\NLSSRV32.EXE
2012-05-12 02:15:35 70304 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-12 02:15:35 419488 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-05-12 02:15:11 8769696 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
2012-04-27 02:19:33 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-03-30 11:35:47 1918320 ----a-w- C:\Windows\System32\drivers\tcpip.sys
.
============= FINISH: 23:33:17.96 ===============

Scan result of Farbar Recovery Scan Tool Version: 21-06-2012 02
Ran by SYSTEM at 22-06-2012 01:27:17
Running from G:\
Windows 7 Home Premium (X64) OS Language: English(US)
The current controlset is ControlSet001

========================== Registry (Whitelisted) =============

HKLM\...\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe [489472 2010-09-29] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2538280 2011-07-01] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] rundll32.exe "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp [21705296 2010-10-25] ()
HKLM\...\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background [611896 2010-08-31] ()
HKLM\...\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden [363064 2010-07-21] (Hewlett-Packard Company)
HKLM\...\Run: [Logitech Download Assistant] C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [1580368 2010-11-03] (Logitech, Inc.)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2010-11-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [boincmgr] "C:\Program Files (x86)\BOINC\boincmgr.exe" /a /s [4543232 2010-09-23] (World Community Grid)
HKLM-x32\...\Run: [boinctray] "C:\Program Files (x86)\BOINC\boinctray.exe" [58112 2010-09-23] (Space Sciences Laboratory)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [37296 2012-03-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [3744552 2011-11-28] (AVAST Software)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [1987976 2012-02-28] (LogMeIn Inc.)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254696 2012-01-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray [462408 2012-04-04] (Malwarebytes Corporation)
HKLM-x32\...\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKU\[username]\...\Run: [ZumoDrive] C:\Program Files (x86)\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk [2080 2011-04-21] ()
HKU\[username]\...\Run: [Akamai NetSession Interface] "C:\Users\[username]\AppData\Local\Akamai\netsession_win.exe" [4327744 2012-05-26] (Akamai Technologies, Inc)
HKU\[username]\...\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent [1242448 2012-02-23] (Valve Corporation)
HKU\[username]\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [17148552 2012-02-29] (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 68.238.96.12
Startup: C:\Users\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe (McAfee, Inc.)

==================== Services (Whitelisted) ======

2 !SASCORE; "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE" [140672 2011-08-11] (SUPERAntiSpyware.com)
2 Akamai; C:\program files (x86)\common files\akamai/netsession_win_80c2ffa.dll [3417376 2012-05-29] ()
2 AMD Reservation Manager; "C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe" [194496 2010-06-17] (Advanced Micro Devices)
2 Apache2.2; "C:\xampp\apache\bin\httpd.exe" -k runservice [20549 2010-10-17] (Apache Software Foundation)
2 avast! Antivirus; "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" [44768 2011-11-28] (AVAST Software)
3 Bluetooth Device Manager; "C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe" [4150864 2010-10-25] (Motorola, Inc.)
3 Bluetooth Media Service; "C:\Program Files\Motorola\Bluetooth\audiosrv.exe" [1188616 2010-07-15] (Motorola, Inc.)
2 Bluetooth OBEX Service; "C:\Program Files\Motorola\Bluetooth\obexsrv.exe" [679176 2010-07-16] (Motorola, Inc.)
2 CLKMSVC10_C6F09094; "C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\HDDVD\NavFilter\kmsvc.exe" /svc [245232 2010-10-25] (CyberLink)
2 DvmMDES; "C:\SwSetup\HPQWMM\QuickWeb\QW.SYS\config\DVMExportService.exe" [338208 2010-11-18] (DeviceVM, Inc.)
3 FLEXnet Licensing Service; "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" [647680 2011-04-21] (Macrovision Europe Ltd.)
3 FLEXnet Licensing Service 64; "C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe" [1028096 2011-04-21] (Macrovision Europe Ltd.)
2 Hamachi2Svc; "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [2343816 2012-02-28] (LogMeIn Inc.)
2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [35200 2012-03-05] (Hewlett-Packard Development Company, L.P.)
2 libusbd; C:\Windows\SysWow64\libusbd-nt.exe [18944 2005-03-09] (http://libusb-win32.sourceforge.net)
2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [654408 2012-04-04] (Malwarebytes Corporation)
3 McComponentHostService; "C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe" [237008 2011-06-17] (McAfee, Inc.)
2 NitroDriverReadSpool2; "C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe" [216072 2012-05-16] (Nitro PDF Software)
2 nlsX86cc; C:\Windows\SysWOW64\NLSSRV32.EXE [69640 2012-05-16] (Nalpeiron Ltd.)
2 NOBU; "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE [2804568 2010-06-01] (Symantec Corporation)

========================== Drivers (Whitelisted) =============

2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [24408 2011-11-28] (AVAST Software)
2 aswMonFlt; C:\Windows\System32\Drivers\aswMonFlt.sys [66904 2011-11-28] (AVAST Software)
1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [42328 2011-11-28] (AVAST Software)
1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [591192 2011-11-28] (AVAST Software)
1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [304472 2011-11-28] (AVAST Software)
1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [58712 2011-11-28] (AVAST Software)
3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [116752 2010-09-24] (ATI Technologies, Inc.)
3 BTMCOM; C:\Windows\System32\Drivers\BTMCOM.sys [52736 2010-06-30] (Motorola, Inc.)
3 BTMUSB; C:\Windows\System32\Drivers\BTMUSB.sys [484096 2010-10-26] (Motorola, Inc.)
3 clwvd; C:\Windows\System32\Drivers\clwvd.sys [31088 2010-09-03] (CyberLink Corporation)
1 dtsoftbus01; C:\Windows\System32\Drivers\dtsoftbus01.sys [254528 2011-07-19] (DT Soft Ltd)
1 DVMIO; C:\Windows\System32\Drivers\DVMIO.sys [20056 2009-11-11] (DeviceVM, Inc.)
3 hamachi; C:\Windows\System32\Drivers\hamachi.sys [33856 2009-03-18] (LogMeIn, Inc.)
3 libusb0; C:\Windows\SysWow64\Drivers\libusb0.sys [33792 2005-03-09] ()
3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [24904 2012-04-04] (Malwarebytes Corporation)
2 MySQL; "C:\Program Files (x86)\MySQL\MySQL Server 5.5\bin\mysqld" --defaults-file="C:\Program Files (x86)\MySQL\MySQL Server 5.5\my.ini" MySQL [8924 2011-05-24] ()
3 RSUSBSTOR; C:\Windows\System32\Drivers\RtsUStor.sys [247400 2010-07-20] (Realtek Semiconductor Corp.)
1 SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
1 SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

========================== NetSvcs (Whitelisted) ===========


============ One Month Created Files and Folders ==============

2012-06-21 11:22 - 2012-06-21 11:22 - 00262144 ____A C:\Windows\Minidump\062112-44226-01.dmp
2012-06-21 10:09 - 2012-06-02 14:19 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2012-06-21 10:09 - 2012-06-02 14:19 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2012-06-21 10:09 - 2012-06-02 14:19 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll
2012-06-21 10:09 - 2012-06-02 14:15 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2012-06-21 10:08 - 2012-06-02 12:19 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2012-06-21 10:08 - 2012-06-02 12:15 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2012-06-21 10:03 - 2012-06-21 10:03 - 04731392 ____A (AVAST Software) C:\Users\[username]\Downloads\aswMBR.exe
2012-06-17 15:36 - 2012-06-17 17:36 - 00014689 ____A C:\Users\[username]\Documents\Joseph Tares.WoD
2012-06-17 03:07 - 2012-06-17 03:07 - 00001417 ____A C:\Users\[username]\Documents\fountain.txt
2012-06-16 20:38 - 2012-06-16 20:38 - 00028532 ____A C:\Users\[username]\Documents\DDS (again).txt
2012-06-16 20:37 - 2012-06-16 20:37 - 00013879 ____A C:\Users\[username]\Documents\Attach (again).txt
2012-06-13 09:14 - 2012-05-17 18:47 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-06-13 09:14 - 2012-05-17 18:16 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-06-13 09:14 - 2012-05-17 18:06 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-06-13 09:14 - 2012-05-17 17:59 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-06-13 09:14 - 2012-05-17 17:59 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-06-13 09:14 - 2012-05-17 17:58 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-06-13 09:14 - 2012-05-17 17:58 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-06-13 09:14 - 2012-05-17 17:56 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-06-13 09:14 - 2012-05-17 17:55 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-06-13 09:14 - 2012-05-17 17:55 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2012-06-13 09:14 - 2012-05-17 17:54 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-06-13 09:14 - 2012-05-17 17:51 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-06-13 09:14 - 2012-05-17 17:51 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-06-13 09:14 - 2012-05-17 17:47 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-06-13 09:14 - 2012-05-17 15:11 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-06-13 09:14 - 2012-05-17 14:48 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-06-13 09:14 - 2012-05-17 14:45 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-06-13 09:14 - 2012-05-17 14:36 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-06-13 09:14 - 2012-05-17 14:35 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-06-13 09:14 - 2012-05-17 14:35 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-06-13 09:14 - 2012-05-17 14:33 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-06-13 09:14 - 2012-05-17 14:31 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-06-13 09:14 - 2012-05-17 14:29 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-06-13 09:14 - 2012-05-17 14:29 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2012-06-13 09:14 - 2012-05-17 14:27 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-06-13 09:14 - 2012-05-17 14:25 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-06-13 09:14 - 2012-05-17 14:24 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-06-13 09:14 - 2012-05-17 14:20 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-06-12 13:45 - 2012-05-14 17:32 - 03146752 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-06-12 13:45 - 2012-05-04 03:06 - 05559664 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2012-06-12 13:45 - 2012-05-04 02:03 - 03913072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2012-06-12 13:45 - 2012-04-30 21:40 - 00209920 ____A (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2012-06-12 13:45 - 2012-04-25 21:41 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-06-12 13:45 - 2012-04-25 21:41 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-06-12 13:45 - 2012-04-25 21:34 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-06-12 13:44 - 2012-05-04 02:03 - 03968368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2012-06-12 13:44 - 2012-04-27 19:55 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-06-12 13:44 - 2012-04-23 21:37 - 01462272 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2012-06-12 13:44 - 2012-04-23 21:37 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2012-06-12 13:44 - 2012-04-23 21:37 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2012-06-12 13:44 - 2012-04-23 20:36 - 01158656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2012-06-12 13:44 - 2012-04-23 20:36 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2012-06-12 13:44 - 2012-04-23 20:36 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2012-06-12 13:44 - 2012-04-07 04:31 - 03216384 ____A (Microsoft Corporation) C:\Windows\System32\msi.dll
2012-06-12 13:44 - 2012-04-07 03:26 - 02342400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2012-06-11 19:32 - 2012-06-11 19:32 - 00004316 ____A C:\Users\[username]\Desktop\Attach.zip
2012-06-11 19:31 - 2012-06-11 19:31 - 00012257 ____A C:\Users\[username]\Desktop\Attach - original.txt
2012-06-11 19:03 - 2012-06-11 19:32 - 00012108 ____A C:\Users\[username]\Desktop\Attach.txt
2012-06-11 19:03 - 2012-06-11 19:03 - 00027377 ____A C:\Users\[username]\Desktop\DDS.txt
2012-06-11 18:52 - 2012-06-11 18:52 - 00607260 ____R (Swearware) C:\Users\[username]\Desktop\dds.scr
2012-06-11 18:51 - 2012-06-11 18:51 - 00000558 ____A C:\Users\[username]\Desktop\defogger_disable.log
2012-06-11 18:51 - 2012-06-11 18:51 - 00000168 ____A C:\Users\[username]\defogger_reenable
2012-06-11 18:49 - 2012-06-11 18:49 - 00050477 ____A C:\Users\[username]\Desktop\Defogger.exe
2012-06-09 23:00 - 2012-06-09 23:00 - 00000402 ____A C:\Users\[username]\Documents\randomyszzg.txt
2012-06-09 08:36 - 2012-06-09 08:36 - 00000411 ____A C:\Users\[username]\Documents\gmer.log
2012-06-09 04:05 - 2012-06-09 04:05 - 00302592 ____A C:\Users\[username]\Downloads\wf53e7c4.exe
2012-06-09 03:44 - 2012-06-09 03:44 - 00001073 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2012-06-09 03:44 - 2012-04-04 12:56 - 00024904 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2012-06-09 03:42 - 2012-06-09 03:42 - 10063000 ____A (Malwarebytes Corporation ) C:\Users\[username]\Downloads\yabbadabado.exe
2012-06-08 23:35 - 2012-06-08 23:35 - 00000000 ____D C:\Users\[username]\AppData\Roaming\SUPERAntiSpyware.com
2012-06-08 23:33 - 2012-06-08 23:35 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2012-06-08 23:33 - 2012-06-08 23:33 - 00001808 ____A C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2012-06-08 23:33 - 2012-06-08 23:33 - 00000000 ____D C:\Users\All Users\SUPERAntiSpyware.com
2012-06-08 23:19 - 2012-06-08 23:19 - 00000992 ____A C:\Users\[username]\Documents\checkup.txt
2012-06-08 23:18 - 2012-06-08 23:18 - 17578952 ____A (SUPERAntiSpyware.com) C:\Users\[username]\Downloads\SUPERAntiSpyware.exe
2012-06-08 22:55 - 2012-06-08 22:56 - 00853862 ____A C:\Users\[username]\Desktop\SecurityCheck.exe
2012-06-08 15:41 - 2012-06-08 15:41 - 00024923 ____A C:\Users\[username]\Documents\rep.png
2012-06-05 13:02 - 2012-06-05 13:02 - 02153416 ____A C:\Users\[username]\Documents\sidesmoines.png
2012-06-04 23:58 - 2012-06-04 23:58 - 00003369 ____A C:\Users\[username]\.recently-used.xbel
2012-06-04 15:33 - 2012-06-04 15:33 - 00000220 ____A C:\Users\[username]\Desktop\Garry's Mod.url
2012-06-04 14:05 - 2012-06-04 14:05 - 00750827 ____A C:\Users\[username]\Downloads\1521.png
2012-06-03 17:09 - 2012-06-03 17:10 - 00480088 ____A C:\Users\[username]\Downloads\4ch5.png
2012-06-03 10:45 - 2012-06-03 10:45 - 00035637 ____A C:\Users\[username]\Documents\Suzu - Act 2.7 - Fill Your Eyes.txt
2012-06-03 10:44 - 2012-06-03 10:44 - 00044436 ____A C:\Users\[username]\Documents\Suzu - Act 2.6 - Look Both Ways - Gold Coast Hustle.txt
2012-06-03 10:43 - 2012-06-03 10:43 - 00029284 ____A C:\Users\[username]\Documents\Suzu - Act 2.4 - I Can See It In Your Face.txt
2012-06-03 10:43 - 2012-06-03 10:43 - 00022367 ____A C:\Users\[username]\Documents\Suzu - Act 2.5 - Dark As The Sky.txt
2012-06-03 10:42 - 2012-06-03 10:42 - 00017525 ____A C:\Users\[username]\Documents\Suzu - Act 2.3 - Someday Is Everyday.txt
2012-06-03 10:42 - 2012-06-03 10:42 - 00011390 ____A C:\Users\[username]\Documents\Suzu - Act 2.2 - Maybe Tomorrow.txt
2012-06-03 10:40 - 2012-06-03 10:40 - 00016445 ____A C:\Users\[username]\Documents\Suzu - Act 2.1 - Pop Quiz - Gazing At The Glare.txt
2012-06-03 10:39 - 2012-06-03 10:39 - 00022897 ____A C:\Users\[username]\Documents\Suzu - Act 1.1 - Who Loves Me.txt
2012-06-03 10:38 - 2012-06-03 10:49 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Nitro PDF
2012-06-03 10:38 - 2012-06-03 10:38 - 00000000 ____D C:\Users\[username]\AppData\Roaming\FileOpen
2012-06-03 10:38 - 2012-06-03 10:38 - 00000000 ____D C:\Users\All Users\FileOpen
2012-06-03 10:37 - 2012-06-03 10:37 - 00002019 ____A C:\Users\Public\Desktop\Nitro Pro 7.lnk
2012-06-03 10:37 - 2012-05-16 12:32 - 00029704 ____A (Nitro PDF Software) C:\Windows\System32\nitrolocalmon2.dll
2012-06-03 10:37 - 2012-05-16 12:32 - 00017928 ____A (Nitro PDF Software) C:\Windows\System32\nitrolocalui2.dll
2012-06-03 10:36 - 2012-06-03 10:36 - 00000000 ____D C:\Users\All Users\Nitro PDF
2012-06-03 10:36 - 2012-06-03 10:36 - 00000000 ____D C:\Program Files\Common Files\Nitro PDF
2012-06-03 10:36 - 2012-06-03 10:36 - 00000000 ____D C:\Program Files (x86)\Nitro PDF
2012-06-03 10:34 - 2012-06-03 10:34 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Downloaded Installations
2012-06-03 10:32 - 2012-06-03 10:32 - 58803048 ____A (Nitro PDF Software) C:\Users\[username]\Downloads\nitro_pdf_professional7_x64.exe
2012-06-01 23:13 - 2012-06-01 23:13 - 00001859 ____A C:\Users\[username]\Downloads\rin test.png
2012-06-01 23:02 - 2012-06-01 23:02 - 00000000 ____D C:\Users\[username]\Documents\rinbin
2012-05-31 22:58 - 2012-05-31 22:58 - 00000000 ____D C:\Users\[username]\AppData\Local\2DBoy
2012-05-31 22:58 - 2012-05-31 22:58 - 00000000 ____D C:\Users\All Users\2DBoy
2012-05-31 22:55 - 2012-05-31 22:55 - 00000221 ____A C:\Users\[username]\Desktop\World of Goo.url
2012-05-30 14:44 - 2012-05-30 15:15 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Golly
2012-05-30 14:43 - 2012-05-30 14:43 - 00000000 ____D C:\Users\[username]\Documents\Golly
2012-05-29 08:25 - 2012-05-29 08:25 - 00000000 ____D C:\Users\[username]\AppData\Local\{9A5D93C7-192A-4434-8EE6-65F9E23673EF}
2012-05-27 20:36 - 2012-05-27 20:36 - 00012027 ____A C:\Users\[username]\Documents\Asher.WoD
2012-05-25 03:44 - 2012-05-25 03:46 - 00000000 ____D C:\Program Files (x86)\Katawa Shoujo
2012-05-25 03:39 - 2012-05-25 03:43 - 441375029 ____A C:\Users\[username]\[4ls]_katawa_shoujo_[windows][C3798628].exe


============ 3 Months Modified Files and Folders =============

2012-06-22 01:27 - 2012-06-22 01:27 - 00000000 ____D C:\FRST
2012-06-21 22:20 - 2009-07-13 20:51 - 00054388 ____A C:\Windows\setupact.log
2012-06-21 22:15 - 2011-05-12 23:39 - 00000000 ____D C:\Users\[username]\AppData\Roaming\ZumoDrive
2012-06-21 22:15 - 2011-04-20 23:58 - 01747345 ____A C:\Windows\WindowsUpdate.log
2012-06-21 22:11 - 2009-07-13 21:13 - 00791694 ____A C:\Windows\System32\PerfStringBackup.INI
2012-06-21 21:33 - 2012-05-11 14:01 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2012-06-21 21:19 - 2012-03-06 21:07 - 00000912 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2012-06-21 19:19 - 2012-03-06 21:07 - 00000908 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2012-06-21 18:01 - 2012-02-23 19:17 - 00000000 ____D C:\Program Files (x86)\Steam
2012-06-21 17:55 - 2011-11-09 18:12 - 00000000 ____D C:\Users\[username]\AppData\Local\Akamai
2012-06-21 14:22 - 2011-09-24 18:17 - 00000000 ____D C:\Users\All Users\BOINC
2012-06-21 12:56 - 2011-05-23 15:37 - 00000000 ____D C:\Users\[username]\AppData\Local\CrashDumps
2012-06-21 12:37 - 2012-03-11 12:38 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Skype
2012-06-21 11:34 - 2009-07-13 20:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-06-21 11:34 - 2009-07-13 20:45 - 00023248 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-06-21 11:31 - 2011-09-24 17:48 - 00000364 ____A C:\Windows\Tasks\HPCeeScheduleFor[username].job
2012-06-21 11:31 - 2011-05-04 15:15 - 00000052 ____A C:\Windows\SysWOW64\DOErrors.log
2012-06-21 11:25 - 2012-01-07 12:47 - 00000000 ____D C:\Users\[username]\AppData\Local\LogMeIn Hamachi
2012-06-21 11:23 - 2011-05-02 18:36 - 00000314 ____A C:\Users\[username]\AppData\Local\mv_Photo.xml
2012-06-21 11:23 - 2011-05-02 18:36 - 00000155 ____A C:\Users\[username]\AppData\Local\mv_music.xml
2012-06-21 11:23 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2012-06-21 11:22 - 2012-06-21 11:22 - 00262144 ____A C:\Windows\Minidump\062112-44226-01.dmp
2012-06-21 11:22 - 2012-05-07 18:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2012-06-21 11:22 - 2011-08-09 13:56 - 831496460 ____A C:\Windows\MEMORY.DMP
2012-06-21 11:22 - 2011-08-09 13:56 - 00000000 ____D C:\Windows\Minidump
2012-06-21 10:03 - 2012-06-21 10:03 - 04731392 ____A (AVAST Software) C:\Users\[username]\Downloads\aswMBR.exe
2012-06-20 14:45 - 2011-05-02 18:23 - 00000000 ____D C:\users\[username]
2012-06-20 14:45 - 2010-12-13 16:21 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2012-06-20 14:42 - 2009-09-06 16:40 - 00000000 ____D C:\SwSetup
2012-06-19 06:42 - 2011-05-16 18:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2012-06-17 17:36 - 2012-06-17 15:36 - 00014689 ____A C:\Users\[username]\Documents\Joseph Tares.WoD
2012-06-17 03:07 - 2012-06-17 03:07 - 00001417 ____A C:\Users\[username]\Documents\fountain.txt
2012-06-16 20:38 - 2012-06-16 20:38 - 00028532 ____A C:\Users\[username]\Documents\DDS (again).txt
2012-06-16 20:37 - 2012-06-16 20:37 - 00013879 ____A C:\Users\[username]\Documents\Attach (again).txt
2012-06-13 12:11 - 2009-07-13 20:45 - 00528896 ____A C:\Windows\System32\FNTCACHE.DAT
2012-06-13 09:52 - 2011-05-09 15:27 - 00000000 ____D C:\Users\All Users\Microsoft Help
2012-06-13 09:33 - 2012-02-04 10:56 - 58957832 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2012-06-11 19:32 - 2012-06-11 19:32 - 00004316 ____A C:\Users\[username]\Desktop\Attach.zip
2012-06-11 19:32 - 2012-06-11 19:03 - 00012108 ____A C:\Users\[username]\Desktop\Attach.txt
2012-06-11 19:31 - 2012-06-11 19:31 - 00012257 ____A C:\Users\[username]\Desktop\Attach - original.txt
2012-06-11 19:03 - 2012-06-11 19:03 - 00027377 ____A C:\Users\[username]\Desktop\DDS.txt
2012-06-11 18:52 - 2012-06-11 18:52 - 00607260 ____R (Swearware) C:\Users\[username]\Desktop\dds.scr
2012-06-11 18:51 - 2012-06-11 18:51 - 00000558 ____A C:\Users\[username]\Desktop\defogger_disable.log
2012-06-11 18:51 - 2012-06-11 18:51 - 00000168 ____A C:\Users\[username]\defogger_reenable
2012-06-11 18:49 - 2012-06-11 18:49 - 00050477 ____A C:\Users\[username]\Desktop\Defogger.exe
2012-06-09 23:00 - 2012-06-09 23:00 - 00000402 ____A C:\Users\[username]\Documents\randomyszzg.txt
2012-06-09 08:36 - 2012-06-09 08:36 - 00000411 ____A C:\Users\[username]\Documents\gmer.log
2012-06-09 04:05 - 2012-06-09 04:05 - 00302592 ____A C:\Users\[username]\Downloads\wf53e7c4.exe
2012-06-09 03:45 - 2011-05-23 16:53 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-06-09 03:44 - 2012-06-09 03:44 - 00001073 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2012-06-09 03:42 - 2012-06-09 03:42 - 10063000 ____A (Malwarebytes Corporation ) C:\Users\[username]\Downloads\yabbadabado.exe
2012-06-09 03:33 - 2011-04-21 00:13 - 00334588 ____A C:\Windows\PFRO.log
2012-06-09 03:31 - 2011-05-05 14:32 - 00000000 ____D C:\Users\[username]\AppData\Roaming\BitTorrent
2012-06-08 23:35 - 2012-06-08 23:35 - 00000000 ____D C:\Users\[username]\AppData\Roaming\SUPERAntiSpyware.com
2012-06-08 23:35 - 2012-06-08 23:33 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2012-06-08 23:33 - 2012-06-08 23:33 - 00001808 ____A C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2012-06-08 23:33 - 2012-06-08 23:33 - 00000000 ____D C:\Users\All Users\SUPERAntiSpyware.com
2012-06-08 23:19 - 2012-06-08 23:19 - 00000992 ____A C:\Users\[username]\Documents\checkup.txt
2012-06-08 23:18 - 2012-06-08 23:18 - 17578952 ____A (SUPERAntiSpyware.com) C:\Users\[username]\Downloads\SUPERAntiSpyware.exe
2012-06-08 22:56 - 2012-06-08 22:55 - 00853862 ____A C:\Users\[username]\Desktop\SecurityCheck.exe
2012-06-08 15:41 - 2012-06-08 15:41 - 00024923 ____A C:\Users\[username]\Documents\rep.png
2012-06-05 13:02 - 2012-06-05 13:02 - 02153416 ____A C:\Users\[username]\Documents\sidesmoines.png
2012-06-04 23:58 - 2012-06-04 23:58 - 00003369 ____A C:\Users\[username]\.recently-used.xbel
2012-06-04 23:58 - 2011-05-25 19:07 - 00000000 ____D C:\Users\[username]\AppData\Roaming\gtk-2.0
2012-06-04 23:58 - 2011-05-25 18:58 - 00000000 ____D C:\Users\[username]\.gimp-2.6
2012-06-04 15:33 - 2012-06-04 15:33 - 00000220 ____A C:\Users\[username]\Desktop\Garry's Mod.url
2012-06-04 14:05 - 2012-06-04 14:05 - 00750827 ____A C:\Users\[username]\Downloads\1521.png
2012-06-03 21:03 - 2011-05-23 17:05 - 00000348 ____A C:\Windows\Tasks\HPCeeScheduleFor[name]_LAPTOP$.job
2012-06-03 17:10 - 2012-06-03 17:09 - 00480088 ____A C:\Users\[username]\Downloads\4ch5.png
2012-06-03 10:49 - 2012-06-03 10:38 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Nitro PDF
2012-06-03 10:45 - 2012-06-03 10:45 - 00035637 ____A C:\Users\[username]\Documents\Suzu - Act 2.7 - Fill Your Eyes.txt
2012-06-03 10:44 - 2012-06-03 10:44 - 00044436 ____A C:\Users\[username]\Documents\Suzu - Act 2.6 - Look Both Ways - Gold Coast Hustle.txt
2012-06-03 10:43 - 2012-06-03 10:43 - 00029284 ____A C:\Users\[username]\Documents\Suzu - Act 2.4 - I Can See It In Your Face.txt
2012-06-03 10:43 - 2012-06-03 10:43 - 00022367 ____A C:\Users\[username]\Documents\Suzu - Act 2.5 - Dark As The Sky.txt
2012-06-03 10:42 - 2012-06-03 10:42 - 00017525 ____A C:\Users\[username]\Documents\Suzu - Act 2.3 - Someday Is Everyday.txt
2012-06-03 10:42 - 2012-06-03 10:42 - 00011390 ____A C:\Users\[username]\Documents\Suzu - Act 2.2 - Maybe Tomorrow.txt
2012-06-03 10:40 - 2012-06-03 10:40 - 00016445 ____A C:\Users\[username]\Documents\Suzu - Act 2.1 - Pop Quiz - Gazing At The Glare.txt
2012-06-03 10:39 - 2012-06-03 10:39 - 00022897 ____A C:\Users\[username]\Documents\Suzu - Act 1.1 - Who Loves Me.txt
2012-06-03 10:38 - 2012-06-03 10:38 - 00000000 ____D C:\Users\[username]\AppData\Roaming\FileOpen
2012-06-03 10:38 - 2012-06-03 10:38 - 00000000 ____D C:\Users\All Users\FileOpen
2012-06-03 10:37 - 2012-06-03 10:37 - 00002019 ____A C:\Users\Public\Desktop\Nitro Pro 7.lnk
2012-06-03 10:36 - 2012-06-03 10:36 - 00000000 ____D C:\Users\All Users\Nitro PDF
2012-06-03 10:36 - 2012-06-03 10:36 - 00000000 ____D C:\Program Files\Common Files\Nitro PDF
2012-06-03 10:36 - 2012-06-03 10:36 - 00000000 ____D C:\Program Files (x86)\Nitro PDF
2012-06-03 10:34 - 2012-06-03 10:34 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Downloaded Installations
2012-06-03 10:32 - 2012-06-03 10:32 - 58803048 ____A (Nitro PDF Software) C:\Users\[username]\Downloads\nitro_pdf_professional7_x64.exe
2012-06-02 14:19 - 2012-06-21 10:09 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2012-06-02 14:19 - 2012-06-21 10:09 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2012-06-02 14:19 - 2012-06-21 10:09 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll
2012-06-02 14:15 - 2012-06-21 10:09 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2012-06-02 12:19 - 2012-06-21 10:08 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2012-06-02 12:15 - 2012-06-21 10:08 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2012-06-01 23:13 - 2012-06-01 23:13 - 00001859 ____A C:\Users\[username]\Downloads\rin test.png
2012-06-01 23:02 - 2012-06-01 23:02 - 00000000 ____D C:\Users\[username]\Documents\rinbin
2012-05-31 22:58 - 2012-05-31 22:58 - 00000000 ____D C:\Users\[username]\AppData\Local\2DBoy
2012-05-31 22:58 - 2012-05-31 22:58 - 00000000 ____D C:\Users\All Users\2DBoy
2012-05-31 22:55 - 2012-05-31 22:55 - 00000221 ____A C:\Users\[username]\Desktop\World of Goo.url
2012-05-31 11:45 - 2011-12-23 22:32 - 00000000 ____D C:\Users\[username]\AppData\Roaming\fotw
2012-05-30 15:15 - 2012-05-30 14:44 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Golly
2012-05-30 14:43 - 2012-05-30 14:43 - 00000000 ____D C:\Users\[username]\Documents\Golly
2012-05-30 13:26 - 2011-10-26 15:20 - 00000000 ____A C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2012-05-29 18:50 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF
2012-05-29 08:25 - 2012-05-29 08:25 - 00000000 ____D C:\Users\[username]\AppData\Local\{9A5D93C7-192A-4434-8EE6-65F9E23673EF}
2012-05-27 21:01 - 2009-07-13 19:20 - 00000000 __RHD C:\Users\Public\Libraries
2012-05-27 20:36 - 2012-05-27 20:36 - 00012027 ____A C:\Users\[username]\Documents\Asher.WoD
2012-05-25 12:17 - 2011-07-28 15:25 - 00000000 ____D C:\Users\[username]\AppData\Roaming\RenPy
2012-05-25 03:46 - 2012-05-25 03:44 - 00000000 ____D C:\Program Files (x86)\Katawa Shoujo
2012-05-25 03:43 - 2012-05-25 03:39 - 441375029 ____A C:\Users\[username]\[4ls]_katawa_shoujo_[windows][C3798628].exe
2012-05-22 23:04 - 2012-05-22 23:02 - 00000000 ____D C:\Users\[username]\The Salvation War Armageddon & Pantheocide
2012-05-20 15:00 - 2012-05-20 15:00 - 00000000 ____D C:\Users\[username]\AppData\Local\{ED4BBF7B-2A4C-49E5-9F85-4F0B4C531867}
2012-05-18 00:22 - 2012-03-04 12:55 - 00000000 ____D C:\Users\[username]\Documents\DriveThruRPG
2012-05-17 18:47 - 2012-06-13 09:14 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-05-17 18:16 - 2012-06-13 09:14 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-05-17 18:06 - 2012-06-13 09:14 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-05-17 17:59 - 2012-06-13 09:14 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-05-17 17:59 - 2012-06-13 09:14 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-05-17 17:58 - 2012-06-13 09:14 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-05-17 17:58 - 2012-06-13 09:14 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-05-17 17:56 - 2012-06-13 09:14 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-05-17 17:55 - 2012-06-13 09:14 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-05-17 17:55 - 2012-06-13 09:14 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2012-05-17 17:54 - 2012-06-13 09:14 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-05-17 17:51 - 2012-06-13 09:14 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-05-17 17:51 - 2012-06-13 09:14 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-05-17 17:47 - 2012-06-13 09:14 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-05-17 17:34 - 2012-05-17 16:28 - 02066077 ____A C:\Users\[username]\Documents\Untitled.png
2012-05-17 15:11 - 2012-06-13 09:14 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-05-17 14:48 - 2012-06-13 09:14 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-05-17 14:45 - 2012-06-13 09:14 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-05-17 14:36 - 2012-06-13 09:14 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-05-17 14:35 - 2012-06-13 09:14 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-05-17 14:35 - 2012-06-13 09:14 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-05-17 14:33 - 2012-06-13 09:14 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-05-17 14:31 - 2012-06-13 09:14 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-05-17 14:29 - 2012-06-13 09:14 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-05-17 14:29 - 2012-06-13 09:14 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2012-05-17 14:27 - 2012-06-13 09:14 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-05-17 14:25 - 2012-06-13 09:14 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-05-17 14:24 - 2012-06-13 09:14 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-05-17 14:20 - 2012-06-13 09:14 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-05-16 12:33 - 2012-05-16 12:33 - 00069640 ____A (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
2012-05-16 12:32 - 2012-06-03 10:37 - 00029704 ____A (Nitro PDF Software) C:\Windows\System32\nitrolocalmon2.dll
2012-05-16 12:32 - 2012-06-03 10:37 - 00017928 ____A (Nitro PDF Software) C:\Windows\System32\nitrolocalui2.dll
2012-05-15 14:01 - 2012-05-11 14:01 - 00002054 ____A C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2012-05-15 14:01 - 2012-05-11 14:01 - 00000000 ____D C:\Program Files (x86)\McAfee Security Scan
2012-05-14 17:32 - 2012-06-12 13:45 - 03146752 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-05-11 18:15 - 2012-05-11 18:15 - 08769696 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2012-05-11 18:15 - 2012-05-11 14:01 - 00419488 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2012-05-11 18:15 - 2011-05-12 22:33 - 00070304 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2012-05-11 14:01 - 2012-05-11 14:01 - 00000000 ____D C:\Windows\System32\Macromed
2012-05-11 14:01 - 2012-05-11 14:01 - 00000000 ____D C:\Users\All Users\McAfee Security Scan
2012-05-11 14:01 - 2012-05-11 14:01 - 00000000 ____D C:\Users\All Users\McAfee
2012-05-10 12:54 - 2010-12-13 16:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2012-05-08 19:05 - 2012-05-08 19:05 - 00000000 ____D C:\Users\[username]\AppData\Local\{532D9B8B-1BD0-47C6-83BB-36721FCD265D}
2012-05-07 19:10 - 2011-06-11 20:51 - 00000000 ____D C:\Users\[username]\.cream
2012-05-07 18:18 - 2012-05-07 18:18 - 00000000 ____D C:\Users\All Users\Mozilla
2012-05-07 18:16 - 2012-05-07 18:16 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Apple Computer
2012-05-05 12:25 - 2012-05-05 12:23 - 169487783 ____A (Acresso Software Inc.) C:\Users\[username]\Downloads\worldtool.exe
2012-05-04 03:06 - 2012-06-12 13:45 - 05559664 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2012-05-04 02:03 - 2012-06-12 13:45 - 03913072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2012-05-04 02:03 - 2012-06-12 13:44 - 03968368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2012-05-02 22:19 - 2012-05-02 22:13 - 00000132 ____A C:\Users\[username]\Documents\ifglitchthenremove.txt
2012-04-30 21:40 - 2012-06-12 13:45 - 00209920 ____A (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2012-04-27 19:55 - 2012-06-12 13:44 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-04-27 13:33 - 2012-04-27 13:33 - 02238732 ____A C:\Users\[username]\Downloads\nWoD Framework - Jamz.cmpgn
2012-04-27 13:29 - 2012-04-27 13:29 - 03636877 ____A C:\Users\[username]\Downloads\nWoD Framework 0_4_1(1).cmpgn
2012-04-27 13:17 - 2012-01-05 23:02 - 00000000 ____D C:\Users\[username]\AppData\Local\Deployment
2012-04-27 13:15 - 2011-07-29 12:25 - 00000000 ____D C:\Users\[username]\Desktop\New Folder
2012-04-26 19:02 - 2012-04-26 18:41 - 03643742 ____A C:\Users\[username]\Downloads\nWoD Framework 0_4_1.cmpgn
2012-04-26 18:42 - 2012-04-26 18:22 - 00000000 ____D C:\Users\[username]\.maptool
2012-04-26 18:22 - 2012-04-26 18:22 - 00002037 ____A C:\Users\[username]\Desktop\RPTools MapTool.lnk
2012-04-26 18:21 - 2012-04-26 18:21 - 00003365 ____A C:\Users\[username]\Downloads\MapTool-13b84-512m-2m(1).jnlp
2012-04-26 18:19 - 2012-04-26 18:19 - 00157472 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe
2012-04-26 18:19 - 2012-04-26 18:19 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe
2012-04-26 18:19 - 2012-04-26 18:19 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe
2012-04-26 18:19 - 2010-12-13 17:01 - 00472808 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll
2012-04-26 18:15 - 2012-04-26 18:15 - 00908576 ____A (Sun Microsystems, Inc.) C:\Users\[username]\Downloads\jxpiinstall.exe
2012-04-26 18:12 - 2012-04-26 18:12 - 00003365 ____A C:\Users\[username]\Downloads\MapTool-13b84-512m-2m.jnlp
2012-04-26 15:49 - 2012-04-20 23:35 - 00000000 ____D C:\Python26
2012-04-26 15:43 - 2012-04-26 15:43 - 03649536 ____A C:\Users\[username]\Downloads\osu-gt-2.0-RC9.msi
2012-04-25 21:41 - 2012-06-12 13:45 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-04-25 21:41 - 2012-06-12 13:45 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-04-25 21:34 - 2012-06-12 13:45 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-04-23 21:37 - 2012-06-12 13:44 - 01462272 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2012-04-23 21:37 - 2012-06-12 13:44 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2012-04-23 21:37 - 2012-06-12 13:44 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2012-04-23 20:36 - 2012-06-12 13:44 - 01158656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2012-04-23 20:36 - 2012-06-12 13:44 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2012-04-23 20:36 - 2012-06-12 13:44 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2012-04-23 16:46 - 2012-04-23 16:46 - 00001805 ____A C:\Users\Public\Desktop\QuickTime Player.lnk
2012-04-23 16:46 - 2012-04-23 16:45 - 00000000 ____D C:\Program Files (x86)\QuickTime
2012-04-23 16:45 - 2012-04-23 16:45 - 00000000 ____D C:\Users\All Users\Apple Computer
2012-04-23 16:42 - 2012-04-23 16:42 - 00000000 ____D C:\Users\[username]\AppData\Local\Apple
2012-04-23 16:42 - 2012-04-23 16:42 - 00000000 ____D C:\Users\All Users\Apple
2012-04-23 16:42 - 2012-04-23 16:42 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2012-04-23 16:40 - 2012-04-23 16:33 - 39401336 ____A (Apple Inc.) C:\Users\[username]\Downloads\QuickTimeInstaller.exe
2012-04-21 12:19 - 2012-04-20 23:41 - 00000000 ____D C:\Users\Public\OpenRPG
2012-04-21 11:04 - 2012-04-21 11:04 - 00002142 ____A C:\Users\Public\Desktop\Adobe Digital Editions.lnk
2012-04-21 11:04 - 2012-04-21 11:04 - 00000000 ____D C:\Users\[username]\Documents\My Digital Editions
2012-04-21 11:04 - 2010-12-13 16:40 - 00000000 ____D C:\Program Files (x86)\Adobe
2012-04-20 23:41 - 2012-04-20 23:41 - 00001091 ____A C:\Users\[username]\Desktop\OpenRPG.lnk
2012-04-20 23:06 - 2011-12-03 14:27 - 00000000 ____D C:\Program Files (x86)\FlexHEX
2012-04-20 22:57 - 2012-04-20 22:57 - 01531697 ____A C:\Users\[username]\Downloads\OpenRPG1.8.0Vista.exe
2012-04-20 22:54 - 2012-01-06 01:17 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Notepad++
2012-04-20 22:54 - 2012-01-06 01:17 - 00000000 ____D C:\Program Files (x86)\Notepad++
2012-04-20 22:52 - 2011-08-22 13:25 - 00000000 ____D C:\Program Files (x86)\DNA2.0
2012-04-20 21:38 - 2011-06-18 16:16 - 00000000 ____D C:\AeriaGames
2012-04-20 21:30 - 2011-05-19 14:31 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Blender Foundation
2012-04-20 21:30 - 2011-05-19 14:31 - 00000000 ____D C:\Program Files (x86)\Blender Foundation
2012-04-20 21:28 - 2012-03-08 20:24 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Google
2012-04-20 21:27 - 2012-03-08 20:06 - 00000000 ____D C:\Program Files (x86)\Pidgin
2012-04-20 19:21 - 2012-04-13 15:03 - 00000000 ____D C:\Users\[username]\Documents\Scores
2012-04-15 16:11 - 2011-05-02 18:32 - 00121552 ____A C:\Users\[username]\AppData\Local\GDIPFONTCACHEV1.DAT
2012-04-15 16:09 - 2012-04-15 16:09 - 00262144 ____A C:\Windows\Minidump\041512-48141-01.dmp
2012-04-13 15:27 - 2012-04-13 15:27 - 00000604 ___AH C:\Program Files (x86)\_Z2
2012-04-13 15:27 - 2012-04-13 14:59 - 00000000 ____D C:\Users\[username]\AppData\Roaming\Avid
2012-04-13 15:25 - 2012-04-13 14:59 - 00000000 ____D C:\Users\All Users\Avid
2012-04-13 15:04 - 2012-04-13 14:59 - 00000000 ____D C:\Program Files (x86)\Avid
2012-04-13 15:03 - 2012-04-13 15:03 - 00000925 ____A C:\Users\Public\Desktop\Sibelius 7.lnk
2012-04-13 15:03 - 2012-04-13 15:03 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2012-04-13 15:00 - 2012-04-13 14:59 - 00000000 ____D C:\Users\Public\Documents\Sibelius Example Scores
2012-04-13 14:59 - 2012-04-13 14:59 - 00000000 ____D C:\Program Files\Avid
2012-04-13 14:55 - 2012-04-13 14:41 - 545700520 ____A (Avid ) C:\Users\[username]\Downloads\Sibelius712b46.exe
2012-04-11 14:48 - 2009-07-13 18:34 - 00000478 ____A C:\Windows\win.ini
2012-04-07 04:31 - 2012-06-12 13:44 - 03216384 ____A (Microsoft Corporation) C:\Windows\System32\msi.dll
2012-04-07 03:26 - 2012-06-12 13:44 - 02342400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2012-04-06 18:57 - 2012-04-06 18:57 - 00705038 ____A C:\Users\[username]\Downloads\background.xcf
2012-04-06 18:01 - 2012-04-06 18:01 - 00000000 ____D C:\Program Files (x86)\MediaFire
2012-04-06 18:01 - 2012-04-06 18:00 - 04353512 ____A C:\Users\[username]\Downloads\MediaFireToolbar-1.0.2.3-setup.exe
2012-04-04 12:56 - 2012-06-09 03:44 - 00024904 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2012-04-01 15:51 - 2012-04-01 12:12 - 00000000 ____D C:\Program Files (x86)\The Elder Scrolls V Skyrim
2012-04-01 15:20 - 2012-04-01 15:20 - 06709514 ____A C:\Users\[username]\The.Elder.Scrolls.V.Skyrim-Razor1911-[BTARENA.org]-CrackOnly.rar
2012-04-01 13:13 - 2012-04-01 13:13 - 00002058 ____A C:\Users\Public\Desktop\FXAA Tool.lnk
2012-04-01 13:12 - 2012-04-01 13:11 - 00295316 ____A () C:\Users\[username]\Downloads\Post_Process_Injector_2_1_Installer-131-2-1.exe
2012-04-01 12:58 - 2012-04-01 12:58 - 00000000 ____D C:\Users\[username]\AppData\Local\Skyrim
2012-04-01 12:58 - 2011-07-30 09:21 - 00000000 ____D C:\Users\[username]\Documents\My Games
2012-04-01 12:23 - 2010-12-13 16:38 - 00198102 ____A C:\Windows\DirectX.log
2012-04-01 12:05 - 2012-04-01 10:18 - 00000000 ____D C:\Users\[username]\The_Elder_Scrolls_V_Skyrim-Razor1911
2012-03-31 19:01 - 2011-08-13 19:47 - 00000000 ____D C:\Program Files\Construct 2
2012-03-31 18:59 - 2012-03-06 21:06 - 00000000 ____D C:\Program Files (x86)\Google
2012-03-31 18:55 - 2010-12-13 17:01 - 00000000 ____D C:\Program Files (x86)\Java
2012-03-30 03:35 - 2012-05-08 12:21 - 01918320 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2012-03-29 12:24 - 2011-10-12 15:59 - 00785910 ____A C:\Windows\SysWOW64\PerfStringBackup.INI

========================= Known DLLs (Whitelisted) ============


========================= Bamital & volsnap Check ============

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

========================= Memory info ======================

Percentage of memory in use: 11%
Total physical RAM: 7785.9 MB
Available physical RAM: 6893.55 MB
Total Pagefile: 7784.05 MB
Available Pagefile: 6887.82 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB

======================= Partitions =========================

1 Drive c: () (Fixed) (Total:446.3 GB) (Free:227.85 GB) NTFS ==>[System with boot components (obtained from reading drive)]
2 Drive e: (RECOVERY) (Fixed) (Total:19.16 GB) (Free:2.42 GB) NTFS
3 Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
4 Drive g: () (Removable) (Total:3.74 GB) (Free:3.18 GB) FAT32
5 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
6 Drive y: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.16 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 465 GB 0 B
Disk 1 Online 3827 MB 0 B

Partitions of Disk 0:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 199 MB 1024 KB
Partition 2 Primary 446 GB 200 MB
Partition 3 Primary 19 GB 446 GB
Partition 4 Primary 103 MB 465 GB

======================================================================================================

Disk: 0
Partition 1
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 0 Y SYSTEM NTFS Partition 199 MB Healthy

======================================================================================================

Disk: 0
Partition 2
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 C NTFS Partition 446 GB Healthy

======================================================================================================

Disk: 0
Partition 3
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 E RECOVERY NTFS Partition 19 GB Healthy

======================================================================================================

Disk: 0
Partition 4
Type : 0C
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 F HP_TOOLS FAT32 Partition 103 MB Healthy

======================================================================================================

Partitions of Disk 1:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 3826 MB 16 KB

======================================================================================================

Disk: 1
Partition 1
Type : 0B
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 4 G FAT32 Removable 3826 MB Healthy

======================================================================================================

==========================================================

Last Boot: 2012-04-20 11:50

======================= End Of Log ==========================