Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unisales infection


  • This topic is locked This topic is locked
4 replies to this topic

#1 shoreboy31

shoreboy31

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:24 AM

Posted 26 January 2015 - 06:35 PM

I have somehow gotten hold of a bad case of Unsales ads.

 

I have tried to remedy via uninstallation of all shopping helper/coupon programs in my add/remove programs list, but the chrome browser extension keeps coming back no matter how often i delete it.

 

Pasted below are the FRST logs as requested in the Preparation Guide thread.

 

Thanks in advance.

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2015 01
Ran by David (administrator) on BEAST on 26-01-2015 18:22:16
Running from C:\Users\David\Desktop
Loaded Profiles: David (Available profiles: David)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
() C:\Program Files (x86)\AFLICS\AfterFLICS.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor) C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
() C:\Users\David\Desktop\CoreTemp64\Core Temp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Windows\System32\AtwtusbIcon.exe
(LucidLogix Technologies) C:\Program Files\Lucidlogix Technologies\HYDRALogix\HydraControlPanel.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks\sldworks_fs.exe
() C:\ProgramData\{8737b8ee-33f6-b08b-8737-7b8ee33fe3b8}\as-speedway_ufonts.com.exe
(Dropbox, Inc.) C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\DCPFLICS\DCPFLICS.exe
(Trace Software International) C:\Program Files\SolidWorks Corp\SolidWorks Electrical\server\EwServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
() C:\Program Files (x86)\cebas\ip-clamp\ipclamp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
() C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
() C:\Program Files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_64server.exe
() C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe
(Mentor Graphics Corporation) C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\remotesolverdispatcherservice.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Mentor Graphics Corporation) C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\dispatcher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvW32.exe
() C:\Windows\System32\atwtusb.exe
() C:\Windows\System32\atwtusb.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(BitTorrent Inc.) C:\Users\David\AppData\Roaming\uTorrent\uTorrent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10806816 2010-04-30] (Realtek Semiconductor)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM\...\Run: [THXCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [AtwtusbIcon] => C:\Windows\system32\AtwtusbIcon.exe [3593728 2012-09-10] ()
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.)
HKLM\...\Run: [HYDRALogix] => C:\Program Files\Lucidlogix Technologies\HYDRALogix\HydraControlPanel.exe [1018976 2010-10-24] (LucidLogix Technologies)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [241789 2009-07-07] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-12-15] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl9] => C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-08-02] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2010-08-26] (cyberlink)
HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2009-02-17] (CyberLink Corp.)
HKLM-x32\...\Run: [LGODDFU] =>  blrun
HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe [222504 2010-09-27] (CyberLink Corp.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [307200 2011-06-15] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1517056 2011-08-29] (Creative Technology Ltd)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.0\bin\EpmNews.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [CTxfiHlp] => C:\Windows\SysWOW64\CTXFIHLP.EXE [24576 2010-07-07] (Creative Technology Ltd)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039240 2013-05-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Run: [GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [843592 2015-01-20] (Google Inc.)
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\MountPoints2: L - L:\Setup.exe
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\MountPoints2: {87e7b242-d610-11e3-a3fc-806e6f6e6963} - D:\setup.exe
AppInit_DLLs-x32: c:\progra~1\lucidl~1\hydral~1\x86\appini~1.dll => c:\Program Files\Lucidlogix Technologies\HYDRALogix\x86\appinit_dll.dll [116320 2010-10-24] (Lucidlogix Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Network Server.lnk
ShortcutTarget: Network Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks 2014 Fast Start.lnk
ShortcutTarget: SolidWorks 2014 Fast Start.lnk -> C:\Windows\Installer\{4FFA60C4-9A8B-4C9E-8265-2241B266304C}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks Background Downloader.lnk
ShortcutTarget: SolidWorks Background Downloader.lnk -> C:\Program Files (x86)\Common Files\SolidWorks Installation Manager\BackgroundDownloading\sldBgDwld.exe (Dassault Systèmes SolidWorks Corp.)
Startup: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\as-speedway_ufonts.com.lnk
ShortcutTarget: as-speedway_ufonts.com.lnk -> C:\ProgramData\{8737b8ee-33f6-b08b-8737-7b8ee33fe3b8}\as-speedway_ufonts.com.exe ()
Startup: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1936681689-1213862276-560942907-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-1936681689-1213862276-560942907-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1936681689-1213862276-560942907-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1936681689-1213862276-560942907-1000 -> {665AA840-9F9D-43E6-AF11-B6F76FCBC312} URL = http://us.yhs4.search.yahoo.com/yhs/search?p={searchTerms}&ei=UTF-8&hspart=w3i&hsimp=yhs-synd1&type=W3i_DS,221,0_0,Search,20140104,19669,0,GC32,7853
SearchScopes: HKU\S-1-5-21-1936681689-1213862276-560942907-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} ->  No File
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1936681689-1213862276-560942907-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-1936681689-1213862276-560942907-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
 
FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\7eg48qq1.default
FF SearchEngineOrder.1: Google (avast)
FF DefaultSearchEngine: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF SearchEngineOrder.1,S: WebSearch
FF DefaultSearchEngine,S: WebSearch
FF SelectedSearchEngine,S: WebSearch
FF NewTab: about:newtab
FF Plugin: @3ds.com/3dxml -> C:\Program Files\Dassault Systemes\3D XML Player\win_b64\code\bin\NP3DXMLPlugin.dll ()
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @3ds.com/3dxml -> C:\Program Files\Dassault Systemes\3D XML Player\win_b64\code\bin32\NP3DXMLPlugin.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension -> C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @virtools.com/3DviaPlayer -> C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll No File
FF Plugin HKU\S-1-5-21-1936681689-1213862276-560942907-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\David\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1936681689-1213862276-560942907-1000: redgiant.com/RGMediaPlayer -> C:\Program Files (x86)\Red Giant\BulletProof\npRGMediaPlayer.dll (Red Giant)
FF SearchPlugin: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\7eg48qq1.default\searchplugins\google-avast.xml
FF Extension: Unnisales - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\7eg48qq1.default\Extensions\l@gtob2.org [2015-01-26]
FF Extension: No Name - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\7eg48qq1.default\Extensions\trash [2015-01-26]
FF Extension: Greasemonkey - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\7eg48qq1.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-12-16]
FF HKLM-x32\...\Firefox\Extensions: [firefox@gingersoftware.com] - C:\Program Files (x86)\Ginger\Mozilla\firefox@gingersoftware.com
FF Extension: Ginger - Grammar and Spell Checker - C:\Program Files (x86)\Ginger\Mozilla\firefox@gingersoftware.com [2013-12-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-22]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-01-11]
FF HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Firefox\Extensions: [{31C8B8A4-6712-4A47-B378-2BE78B8EE9E1}] - C:\Program Files (x86)\Bigasoft\Video Downloader Pro\extensions\3.8.5.5422\BVDFirefoxExt
FF Extension: Bigasoft Video Downloader Firefox Extension - C:\Program Files (x86)\Bigasoft\Video Downloader Pro\extensions\3.8.5.5422\BVDFirefoxExt [2014-12-04]
FF HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 
Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> hxxp://us.yhs4.search.yahoo.com/web/partner?&hspart=w3i&hsimp=yhs-synd1&type=W3i_SP,221,0_0,StartPage,20140104,19670,0,GC32,7853
CHR StartupUrls: Default -> ""
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-21]
CHR Extension: (Sothink Flash Downloader for Chrome) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\biceobciobbhhkplgocbaigojbnepcoi [2014-06-09]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-09]
CHR Extension: (Google Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-09]
CHR Extension: (Tampermonkey) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-01-20]
CHR Extension: (VisualizeUs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\engcgfkpphndmbjmondiodpoeegkemgh [2013-10-29]
CHR Extension: (Pandora) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbangkleohkafngihneedemihgfeikcl [2012-11-10]
CHR Extension: (PhotoLive - Download Facebook Photos!) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpjnpabklnaaifclgealaepelncljadk [2014-01-10]
CHR Extension: (Flash Video Downloader) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggkfikfcbnpfoicfjammigpnakpogebh [2013-01-22]
CHR Extension: (AdBlock) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-05]
CHR Extension: (Avast Online Security) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-10-22]
CHR Extension: (Bigasoft Video Downloader Pro) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpnkpjikgipojkofgjjkfgdhfanggcdm [2014-12-07]
CHR Extension: (Gamers Unite! Snag Bar) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgjdgpblkmmekbpdolbhlljkdhkplnkf [2012-11-24]
CHR Extension: (TidyNetwork.com) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lohbokilnjgcncldhpdkmiiocblgpccm [2013-04-24]
CHR Extension: (Gamers Unite! Snag Bar) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncmdmcjifbkefpaijakdbgfjbpaonjhg [2014-01-08]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-09]
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2013-01-29]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-01-29]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-29]
CHR Extension: (Google Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-29]
CHR Extension: (IB Updater) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd [2013-01-29]
CHR Extension: (Podio Notifications) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaafmmmpabgogfimjhfakfcemahdbaf [2015-01-24]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-01-29]
CHR Extension: (Gmail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-01-29]
CHR HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Chrome\Extension: [ncmdmcjifbkefpaijakdbgfjbpaonjhg] - No Path
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-26]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [jpnkpjikgipojkofgjjkfgdhfanggcdm] - C:\Program Files (x86)\Bigasoft\Video Downloader Pro\extensions\3.8.5.5422\BVDChromeExt.crx [2014-12-04]
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [Not Found]
 
Opera: 
=======
OPR Extension: (Violent monkey) - C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Extensions\niofholngoecgnpgamgbiiijcjlllpge [2014-12-17]
OPR Extension: (Sothink Flash Downloader for Chrome) - C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Extensions\oeiadippkbacigpadnembcfclhmmbifb [2014-06-09]
StartMenuInternet: Opera - C:\Program Files (x86)\Opera\Opera.exe
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AfterFLICS v3; C:\Program Files (x86)\AFLICS\AfterFLICS.exe [68098 2014-05-15] () [File not signed]
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-26] (AVAST Software)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [246256 2010-08-26] (CyberLink)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-04-23] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-11-09] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed]
R2 DCPFLICS; C:\Program Files (x86)\DCPFLICS\DCPFLICS.exe [139268 2007-10-24] () [File not signed] <==== ATTENTION
R2 ewserver; C:\Program Files\SolidWorks Corp\SolidWorks Electrical\server\EwServer.exe [193024 2014-01-11] (Trace Software International) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-16] (NVIDIA Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
R2 IPClampService; C:\Program Files (x86)\cebas\ip-clamp\ipclamp.exe [45700 2007-11-20] () [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-03-04] (Hewlett-Packard Company) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 mi-raysat_3dsmax2011_64; C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [86016 2010-03-10] () [File not signed]
R2 mi-raysat_3dsmax2013_64; C:\Program Files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_64server.exe [86016 2011-09-14] () [File not signed]
R2 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-14] () [File not signed]
S2 MSSQL$TEW_SQLEXPRESS; c:\ProgramData\SolidWorks Electrical\MSSQL11.TEW_SQLEXPRESS\MSSQL\Binn\sqlservr.exe [191064 2012-02-11] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 nTuneService; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [276584 2010-03-22] (NVIDIA)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-16] (NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RemoteSolverDispatcher; C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\remotesolverdispatcherservice.exe [235656 2014-01-11] (Mentor Graphics Corporation) [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-07-02] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-09-11] ()
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2014-11-23] (SolidWorks) [File not signed]
S4 SQLAgent$TEW_SQLEXPRESS; c:\ProgramData\SolidWorks Electrical\MSSQL11.TEW_SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [597080 2012-02-11] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5419792 2014-11-28] (TeamViewer GmbH)
R2 UpdateCenterService; C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe [282728 2009-11-06] (NVIDIA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-02-04] (Microsoft Corporation)
R2 WkSvw32.exe; C:\Program Files (x86)\WIBUKEY\Server\WkSvw32.exe [587264 2009-12-03] (WIBU-SYSTEMS AG) [File not signed]
R2 WTService; C:\Windows\system32\atwtusb.exe [581632 2012-11-22] () [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2015-01-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-26] ()
R3 HydraPGU_EEP; C:\Windows\System32\DRIVERS\HydraPGU_EEP.sys [24160 2010-10-05] (Lucidlogix Inc.)
R3 HydraWDDM; C:\Windows\System32\DRIVERS\HydraWDDM.sys [62560 2010-10-24] (Lucidlogix Inc.)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-26] (Malwarebytes Corporation)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2011-04-29] (Windows ® Codename Longhorn DDK provider)
R3 nvoclk64; C:\Windows\System32\DRIVERS\nvoclk64.sys [42088 2009-09-15] (NVIDIA Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S1 PQNTDrv; No ImagePath
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S4 RsFx0200; C:\Windows\System32\DRIVERS\RsFx0200.sys [334936 2012-02-11] (Microsoft Corporation)
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-05-21] ()
R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows ® Win 7 DDK provider)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [103224 2009-12-03] (WIBU-SYSTEMS AG)
R3 ALSysIO; \??\C:\Users\David\AppData\Local\Temp\ALSysIO64.sys [X]
S3 MREMP50; \??\C:\PROGRA~2\COMMON~1\Motive\MREMP50.SYS [X]
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
S3 MRESP50; \??\C:\PROGRA~2\COMMON~1\Motive\MRESP50.SYS [X]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
S3 MSI_MSIBIOS_010507; \??\C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys [X]
S3 NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\C:\MSI\MSI SUITE\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_D; \??\C:\MSI\MSI SUITE\ControlCenter\NTIOLib_X64.sys [X]
S3 NTIOLib_1_1_S; \??\C:\MSI\MSI SUITE\Super-Charger\NTIOLib_X64.sys [X]
S3 NTIOLib_MSISMB_CC; \??\C:\Program Files (x86)\MSI\ControlCenter\Sleep\NTIOLib_X64.sys [X]
S3 sxuptp; system32\DRIVERS\sxuptp.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-01-26 18:11 - 2015-01-26 18:22 - 00041578 _____ () C:\Users\David\Desktop\FRST.txt
2015-01-26 18:11 - 2015-01-26 18:11 - 00001297 _____ () C:\Users\David\Desktop\Revo Uninstaller.lnk
2015-01-26 18:11 - 2015-01-26 18:11 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-01-26 18:10 - 2015-01-26 18:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\David\Desktop\revosetup.exe
2015-01-26 18:08 - 2015-01-26 18:22 - 00000000 ____D () C:\FRST
2015-01-26 18:08 - 2015-01-26 18:08 - 02129920 _____ (Farbar) C:\Users\David\Desktop\FRST64.exe
2015-01-26 17:42 - 2015-01-26 17:42 - 00000000 ____D () C:\Users\David\Desktop\hls
2015-01-26 17:40 - 2015-01-26 17:40 - 00000000 ____D () C:\Users\David\Desktop\wild_mi
2015-01-26 17:39 - 2015-01-26 17:39 - 00003183 _____ () C:\Users\David\Desktop\hls.zip
2015-01-26 17:39 - 2015-01-26 17:39 - 00002129 _____ () C:\Users\David\Desktop\wild_mi.zip
2015-01-26 14:05 - 2015-01-26 14:05 - 00000000 ____D () C:\Users\David\Desktop\Apollo_15_Hadley_Jan_2007
2015-01-26 13:42 - 2015-01-26 13:42 - 00000000 ____D () C:\Users\David\Desktop\img2png
2015-01-26 13:41 - 2015-01-26 13:41 - 05456073 _____ () C:\Users\David\Desktop\img2png.zip
2015-01-26 13:41 - 2015-01-26 13:41 - 00001247 _____ () C:\Users\Public\Desktop\OSGeo4W Shell.lnk
2015-01-26 13:41 - 2015-01-26 13:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OSGeo4W
2015-01-26 13:38 - 2015-01-26 13:41 - 00000000 ____D () C:\OSGeo4W64
2015-01-26 13:38 - 2015-01-26 13:38 - 00899584 _____ () C:\Users\David\Desktop\osgeo4w-setup-x86_64.exe
2015-01-26 13:38 - 2015-01-26 13:38 - 00000000 ____D () C:\Users\David\Desktop\http%3a%2f%2fdownload.osgeo.org%2fosgeo4w%2f
2015-01-26 13:33 - 2015-01-26 13:33 - 00000295 _____ () C:\Users\David\.openev
2015-01-26 13:13 - 2015-01-26 13:13 - 28652149 _____ () C:\Users\David\Downloads\f-14_rigged.rar
2015-01-26 13:04 - 2015-01-26 13:04 - 00001951 _____ () C:\Users\Public\Desktop\OpenEV 1.80.lnk
2015-01-26 13:04 - 2015-01-26 13:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atlantis
2015-01-26 13:03 - 2015-01-26 13:03 - 00000000 ____D () C:\Users\David\Desktop\OpenEV1.80
2015-01-26 13:03 - 2015-01-26 13:03 - 00000000 ____D () C:\Program Files (x86)\Atlantis
2015-01-26 13:03 - 1997-11-19 15:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2015-01-26 13:01 - 2015-01-26 13:58 - 1937759410 _____ () C:\Users\David\Desktop\Apollo_15_Hadley_Jan_2007.zip
2015-01-26 13:01 - 2015-01-26 13:01 - 14160050 _____ () C:\Users\David\Desktop\openev-win-180.exe
2015-01-26 12:34 - 2015-01-26 12:34 - 00000000 ____D () C:\Users\David\Desktop\LTVT_v0_21_4_full_version
2015-01-26 12:32 - 2015-01-26 12:32 - 06635643 _____ () C:\Users\David\Desktop\LTVT_v0_21_4_full_version.zip
2015-01-26 12:28 - 2015-01-26 12:29 - 00004084 _____ () C:\Users\David\Desktop\ldem_1024_15n_30n_000_030_lbl.tar.gz
2015-01-26 09:05 - 2015-01-26 09:05 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-01-26 09:05 - 2015-01-26 09:05 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-01-26 09:05 - 2015-01-26 09:05 - 00001957 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-01-26 00:23 - 2015-01-26 00:23 - 00001135 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-01-26 00:02 - 2015-01-26 00:40 - 00000000 ____D () C:\ProgramData\b6ea4fa900006bd7
2015-01-25 23:44 - 2015-01-25 23:44 - 00000083 _____ () C:\Users\David\AppData\Roaming\vtp.xml
2015-01-25 23:34 - 2015-01-25 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VTP
2015-01-25 23:34 - 2015-01-25 23:34 - 00000000 ____D () C:\Program Files (x86)\VTP
2015-01-25 23:19 - 2015-01-25 23:26 - 21741133 _____ (Virtual Terrain Project ) C:\Users\David\Desktop\setup_vtp.exe
2015-01-25 23:17 - 2015-01-25 23:17 - 00000000 ____D () C:\Users\David\Desktop\release-1400-x64-gdal-1-11-1-mapserver-6-4-1
2015-01-25 23:11 - 2015-01-25 23:15 - 28813788 _____ () C:\Users\David\Desktop\release-1400-x64-gdal-1-11-1-mapserver-6-4-1.zip
2015-01-25 22:17 - 2015-01-25 22:17 - 00002611 _____ () C:\Users\Public\Desktop\Terragen 3 (64 bit).lnk
2015-01-25 22:17 - 2015-01-25 22:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Planetside Software
2015-01-25 19:24 - 2015-01-25 19:28 - 357875696 _____ () C:\Users\David\Downloads\WAC_GLD100_E000N1800_064P.PYR.TIF
2015-01-25 19:24 - 2015-01-25 19:27 - 265514441 _____ () C:\Users\David\Downloads\WAC_GLD100_E000N1800_064P.TIF
2015-01-25 19:09 - 2015-01-25 19:09 - 99737545 ____N () C:\Users\David\Desktop\LROLOL_0XXX_part_0002.zip
2015-01-25 19:09 - 2015-01-25 19:09 - 00000473 ____N () C:\Users\David\Desktop\LROLOL_0XXX_part_0002_manifest.txt
2015-01-25 19:09 - 2015-01-25 19:09 - 00000354 ____N () C:\Users\David\Desktop\LROLOL_0XXX_manifest.txt
2015-01-25 19:07 - 2015-01-25 19:07 - 420648011 ____N () C:\Users\David\Desktop\LROLOL_0XXX.zip
2015-01-25 18:59 - 2015-01-25 22:16 - 00000000 ____D () C:\Users\David\Downloads\Planetside TerraGen Pro Animation 3.1.02.0 WIN
2015-01-25 18:59 - 2015-01-25 18:59 - 00015066 _____ () C:\Users\David\Downloads\Planetside TerraGen Pro Animation 3.1.02.0 x32 x64 (1).torrent
2015-01-25 13:36 - 2015-01-25 13:36 - 00000000 ____D () C:\Users\David\Downloads\ENVY – C4D V-Ray Interiors – From the Ground Up
2015-01-25 13:13 - 2015-01-25 13:13 - 00027788 _____ () C:\Users\David\Downloads\Envy C4D Vray Interiors - From the Ground Up.torrent
2015-01-25 00:09 - 2015-01-25 00:09 - 00000000 ____D () C:\Users\David\Downloads\lunar_rover_scene__amp__textures_by_hameed-d79nerf
2015-01-24 23:55 - 2015-01-24 23:55 - 33850940 _____ () C:\Users\David\Downloads\lunar_rover_scene__amp__textures_by_hameed-d79nerf.rar
2015-01-24 19:48 - 2015-01-24 19:48 - 00011830 _____ () C:\Users\David\Downloads\Signmaker - Bundle Vectormania 24.torrent
2015-01-24 19:48 - 2015-01-24 19:48 - 00000000 ____D () C:\Users\David\Downloads\Schneidmeister Vectors 24 Collections
2015-01-24 19:21 - 2015-01-24 19:21 - 00000000 ____D () C:\Program Files (x86)\Podio Notifications
2015-01-24 19:20 - 2015-01-24 19:20 - 00000000 ____D () C:\ProgramData\nohhpigmeeanmigenolignldmpmldeid
2015-01-24 19:20 - 2015-01-24 19:20 - 00000000 ____D () C:\ProgramData\17962694343393331577
2015-01-24 19:20 - 2015-01-24 19:20 - 00000000 ____D () C:\Program Files (x86)\Unnisales
2015-01-24 19:19 - 2015-01-25 23:40 - 00000000 ____D () C:\ProgramData\{8737b8ee-33f6-b08b-8737-7b8ee33fe3b8}
2015-01-24 19:18 - 2015-01-24 19:18 - 01372672 _____ () C:\Users\David\Desktop\as-speedway_ufonts.com.exe
2015-01-24 19:07 - 2015-01-24 19:07 - 00022539 _____ () C:\Users\David\Downloads\Letterhead Fonts Foundry Bundle.torrent
2015-01-23 11:34 - 2015-01-23 11:35 - 58500243 _____ () C:\Users\David\Downloads\Emergency-Ambulance-Truck-2in1.rar
2015-01-23 11:34 - 2015-01-23 11:34 - 00018140 _____ () C:\Users\David\Downloads\Turbosquid 3D Model Emergency Ambulance Truck 2in1.torrent
2015-01-23 11:22 - 2015-01-23 11:46 - 00001133 _____ () C:\Users\David\AppData\Local\Temp启䝍潥䍭敨正琮瑸
2015-01-23 11:16 - 2015-01-23 11:16 - 00213121 _____ () C:\Users\David\Downloads\InfiniteSkills – Learning Adobe After Effects CC 2014.torrent
2015-01-23 11:16 - 2015-01-23 11:16 - 00000000 ____D () C:\Users\David\Downloads\InfiniteSkills - Learning Adobe After Effects CC 2014
2015-01-23 11:04 - 2015-01-23 11:04 - 00002248 _____ () C:\Users\Public\Desktop\TransMagic R10 sp1.0.lnk
2015-01-23 11:04 - 2015-01-23 11:04 - 00002237 _____ () C:\Users\Public\Desktop\TM EXPRESS R10 sp1.0.lnk
2015-01-23 11:04 - 2015-01-23 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TransMagic R10
2015-01-23 11:02 - 2015-01-23 11:06 - 00000000 ____D () C:\Users\Public\Documents\TransMagic
2015-01-23 11:02 - 2015-01-23 11:02 - 00000000 ____D () C:\Program Files (x86)\TransMagic Inc
2015-01-21 20:45 - 2015-01-21 20:45 - 00000000 ____D () C:\Users\David\Desktop\DownloadedArticleParts
2015-01-21 20:45 - 2015-01-21 20:45 - 00000000 ____D () C:\Users\David\Desktop\ArticleHeaders
2015-01-21 20:43 - 2015-01-21 20:43 - 00221184 _____ (Lebtimum) C:\Users\David\Desktop\News.exe
2015-01-21 20:35 - 2015-01-26 17:44 - 00000000 ____D () C:\Program Files (x86)\SABnzbd
2015-01-21 20:09 - 2015-01-26 00:35 - 00000000 ____D () C:\Users\David\AppData\Roaming\Urbeav
2015-01-21 20:09 - 2015-01-26 00:34 - 00000000 ____D () C:\Users\David\AppData\Roaming\tor
2015-01-21 20:09 - 2015-01-22 01:15 - 00000000 ____D () C:\Users\David\AppData\Roaming\Izpiqo
2015-01-21 19:59 - 2015-01-21 20:35 - 00000000 ____D () C:\Users\David\AppData\Local\GetNZB
2015-01-21 18:57 - 2015-01-21 18:57 - 00000000 ____D () C:\Users\David\Downloads\NVG
2015-01-21 18:56 - 2015-01-21 18:56 - 00000000 ____D () C:\Users\David\Downloads\Banned You-Tube Video Collection-
2015-01-19 12:27 - 2015-01-19 12:27 - 00012830 _____ () C:\Users\David\Downloads\Cinema4dtutorial.net Vray C4d Professional Light Kit.torrent
2015-01-19 12:27 - 2015-01-19 12:27 - 00000000 ____D () C:\Users\David\Downloads\Vray C4d Professional Lighting Kit
2015-01-19 12:08 - 2015-01-19 12:08 - 00019840 _____ () C:\Users\David\Downloads\RenderKing - Vray Texture Pack v2 (for C4D) (--- - ---).torrent
2015-01-19 12:08 - 2015-01-19 12:08 - 00000000 ____D () C:\Users\David\Downloads\RenderKing - Vray Texture Pack v2
2015-01-19 12:04 - 2015-01-19 12:21 - 00000000 ____D () C:\Users\David\Downloads\VRay C4D 1.9
2015-01-19 12:04 - 2015-01-19 12:04 - 00025706 _____ () C:\Users\David\Downloads\VRay for C4D 1.9 R12 R16 WIN MAC.torrent
2015-01-19 12:00 - 2015-01-19 12:00 - 00000000 ____D () C:\Users\David\Downloads\10 SAMPLE INTERIOR FROM 3DARCSHOP VOL 02
2015-01-19 11:58 - 2015-01-19 11:58 - 00018525 _____ () C:\Users\David\Downloads\10 Sample interior from 3darcshop vol 02.torrent
2015-01-19 00:56 - 2015-01-19 00:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyShot 5 plugin for 3D Studio Max 1.2.2
2015-01-19 00:53 - 2015-01-19 00:54 - 00001164 _____ () C:\Users\David\Desktop\keyshot5.lic
2015-01-19 00:50 - 2015-01-19 00:50 - 00001105 _____ () C:\Users\Public\Desktop\KeyShot 5 Resources.lnk
2015-01-19 00:50 - 2015-01-19 00:50 - 00000000 ____D () C:\Users\David\AppData\Local\Luxion
2015-01-19 00:49 - 2015-01-19 13:57 - 00000000 ____D () C:\Users\Public\Documents\KeyShot 5
2015-01-19 00:49 - 2015-01-19 00:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyShot 5 64
2015-01-19 00:49 - 2015-01-19 00:49 - 00000895 _____ () C:\Users\Public\Desktop\KeyShot 5 64.lnk
2015-01-19 00:47 - 2015-01-19 00:56 - 00000000 ____D () C:\Program Files\KeyShot5
2015-01-17 16:30 - 2015-01-17 16:30 - 00000000 ____D () C:\Users\David\Downloads\Reallusion iClone 6 Pro 6.0.1218 x64 Chmdream
2015-01-17 16:29 - 2015-01-17 16:30 - 00022430 _____ () C:\Users\David\Downloads\Reallusion iClone 6 Pro 6.0.1218 x64 Chmdream.torrent
2015-01-15 10:37 - 2015-01-19 00:44 - 00000000 ____D () C:\Users\David\Downloads\Luxion Keyshot Pro Animation Vr 5.1.66 Win32-64Bit
2015-01-15 10:37 - 2015-01-15 10:37 - 00014959 _____ () C:\Users\David\Downloads\Luxion Keyshot Pro  Animation  KeyShotVR 5.1.66 (x86x64).torrent
2015-01-14 20:00 - 2015-01-15 00:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-12 14:24 - 2015-01-21 20:45 - 00000000 ____D () C:\Users\David\Desktop\New folder
2015-01-11 22:36 - 2015-01-11 22:36 - 00013463 _____ () C:\Users\David\Downloads\Zodiac_Signs_of_the_Apocalypse_2014_1080p_1080p.torrent
2015-01-11 22:36 - 2015-01-11 22:36 - 00000000 ____D () C:\Users\David\Downloads\Zodiac Signs of the Apocalypse (2014) [1080p]
2015-01-11 17:18 - 2015-01-11 17:18 - 00000000 ____D () C:\Users\David\Downloads\Left Behind (2014) [1080p]
2015-01-11 17:16 - 2015-01-11 17:16 - 00017463 _____ () C:\Users\David\Downloads\[kickass.so]left.behind.2014.1080p.brrip.x264.yify.torrent
2015-01-11 12:38 - 2015-01-11 12:38 - 00001194 _____ () C:\Users\Public\Desktop\Shop for HP Supplies.lnk
2015-01-11 12:38 - 2015-01-11 12:38 - 00001130 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk
2015-01-11 12:38 - 2015-01-11 12:38 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2015-01-11 12:38 - 2015-01-11 12:38 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2015-01-11 12:37 - 2015-01-11 12:37 - 00001348 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk
2015-01-11 12:37 - 2015-01-11 12:37 - 00000000 ____D () C:\ProgramData\HP Product Assistant
2015-01-11 12:32 - 2015-01-11 12:20 - 00201757 ____N () C:\Windows\hpoins43.dat.temp
2015-01-11 12:30 - 2015-01-11 12:30 - 00000000 ____D () C:\Users\David\AppData\Local\Hewlett-Packard
2015-01-11 12:30 - 2015-01-11 12:30 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-01-11 12:29 - 2015-01-11 12:29 - 05197824 _____ () C:\Users\David\Desktop\HPSupportSolutionsFramework-en-11.51.0048.msi
2015-01-11 12:13 - 2009-06-11 05:34 - 00000675 ____N () C:\Windows\hpomdl43.dat.temp
2015-01-10 15:07 - 2015-01-10 15:07 - 00002992 _____ () C:\Windows\System32\Tasks\{4C0CEC73-57D4-435C-93F0-2B358FD50C33}
2015-01-10 13:56 - 2015-01-10 13:56 - 00000000 ____D () C:\ProgramData\InstallShield
2015-01-10 13:43 - 2015-01-10 13:43 - 00000000 ____D () C:\Users\David\Downloads\Oki_pt_V4.3.8_With_Plugins
2015-01-10 13:27 - 2015-01-23 10:58 - 00000000 ____D () C:\Users\David\Downloads\Transmagic R10 SP10 x32
2015-01-10 13:27 - 2015-01-10 13:27 - 00016857 _____ () C:\Users\David\Downloads\Transmagic R10 SP10 x32.torrent
2015-01-10 13:25 - 2015-01-10 13:40 - 90508709 ____R () C:\Users\David\Downloads\Oki_pt_V4.3.8_With_Plugins.rar
2015-01-10 13:25 - 2015-01-10 13:25 - 00014094 _____ () C:\Users\David\Downloads\Okino PolyTrans v4.3.8 (with plugins) (1).torrent
2015-01-10 12:37 - 2015-01-10 12:37 - 00000000 ____D () C:\Users\David\AppData\Roaming\SAP
2015-01-10 12:35 - 2015-01-10 12:35 - 00000000 ____D () C:\Users\Public\Documents\My 3D Models
2015-01-10 12:35 - 2015-01-10 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAP Visual Enterprise
2015-01-10 12:33 - 2015-01-10 12:33 - 00000000 ____D () C:\Program Files\SAP
2015-01-10 12:32 - 2015-01-10 12:32 - 00000000 ____D () C:\Program Files (x86)\SAP
2015-01-09 10:40 - 2015-01-09 10:40 - 00000000 ____D () C:\Users\David\Downloads\interior_scene
2015-01-08 19:58 - 2015-01-08 19:58 - 00014554 _____ () C:\Users\David\Downloads\Motion Capture Libraries.torrent
2015-01-08 19:58 - 2015-01-08 19:58 - 00000000 ____D () C:\Users\David\Downloads\Motion Capture Libraries
2015-01-08 19:56 - 2015-01-08 19:56 - 00022846 _____ () C:\Users\David\Downloads\Carnegie Mellon Graphics Lab Motion Capture Database v2010 3DMax Daz3D MotionBuilder.torrent
2015-01-08 19:56 - 2015-01-08 19:56 - 00000000 ____D () C:\Users\David\Downloads\Carnegie-Mellon Graphics Lab Motion Capture Database v2010 3DMax Daz3D MotionBuilder
2015-01-08 16:08 - 2015-01-08 16:08 - 00010062 _____ () C:\Users\David\Downloads\Max Grass 103.torrent
2015-01-08 16:08 - 2015-01-08 16:08 - 00000000 ____D () C:\Users\David\Downloads\MaxGrass-103
2015-01-08 12:44 - 2015-01-08 13:17 - 00000000 ____D () C:\Users\David\Downloads\Evermotion Archinteriors Vol. 22
2015-01-08 12:44 - 2015-01-08 12:44 - 00020606 _____ () C:\Users\David\Downloads\Evermotion - Archinteriors Vol. 22.torrent
2015-01-08 12:39 - 2015-01-08 12:39 - 00078579 _____ () C:\Users\David\Downloads\Evermotion - Archinteriors Vol. 29.torrent
2015-01-08 12:39 - 2015-01-08 12:39 - 00000000 ____D () C:\Users\David\Downloads\AI_29
2015-01-08 12:36 - 2015-01-09 10:31 - 00000000 ____D () C:\Users\David\Downloads\Evermotion_Archinteriors_27_CGP
2015-01-08 12:36 - 2015-01-08 12:36 - 00013247 _____ () C:\Users\David\Downloads\Evermotion - Archinteriors vol 27.torrent
2015-01-07 09:18 - 2015-01-07 09:18 - 00065457 _____ () C:\Users\David\Downloads\Character Biped Motion Capture Library.torrent
2015-01-07 09:18 - 2015-01-07 09:18 - 00000000 ____D () C:\Users\David\Downloads\600 Motions For Character Studio & 3DS Max
2015-01-07 00:53 - 2015-01-07 00:53 - 00131099 _____ () C:\Users\David\Downloads\AXYZ Metropoly HD EVO 2 (22 models) FULL PACK.torrent
2015-01-07 00:53 - 2015-01-07 00:53 - 00000000 ____D () C:\Users\David\Downloads\AXYZ Metropoly HD EVO 2 (22 models)
2015-01-07 00:50 - 2015-01-07 00:50 - 00042372 _____ () C:\Users\David\Downloads\AXYZ evo2 HD.torrent
2015-01-06 15:08 - 2015-01-06 15:08 - 00025161 _____ () C:\Users\David\Downloads\SmithMicro Poser Pro 2014 v10.0.3 - Win - Content Addon.torrent
2015-01-06 15:08 - 2015-01-06 15:08 - 00011819 _____ () C:\Users\David\Downloads\SmithMicro Poser Pro 2014 v10.0.3 - Win.torrent
2015-01-06 15:08 - 2015-01-06 15:08 - 00000000 ____D () C:\Users\David\Downloads\SmithMicro Poser Pro 2014 v10.0.3 Incl. Keymaker CORE
2015-01-06 15:08 - 2015-01-06 15:08 - 00000000 ____D () C:\Users\David\Downloads\SmithMicro Poser Pro 2014 v10.0.3 Content Addon CORE
2015-01-06 14:37 - 2015-01-06 14:44 - 34188750 ____R () C:\Users\David\Downloads\interior_scene.zip
2015-01-06 14:37 - 2015-01-06 14:37 - 00010701 _____ () C:\Users\David\Downloads\vray interior scene.torrent
2015-01-06 14:33 - 2015-01-08 12:15 - 00000000 ____D () C:\Users\David\Downloads\10 SAMPLE INTERIOR FROM 3DARCSHOP VOL 01
2015-01-06 14:33 - 2015-01-06 14:33 - 00016191 _____ () C:\Users\David\Downloads\Scene Interior 01 for 3ds Max.torrent
2015-01-06 14:33 - 2015-01-06 14:33 - 00011331 _____ () C:\Users\David\Downloads\10 Sample interior from 3darcshop vol 01.torrent
2015-01-06 14:33 - 2015-01-06 14:33 - 00000000 ____D () C:\Users\David\Downloads\Scene Interior 01 for 3ds Max
2015-01-05 18:33 - 2015-01-05 19:12 - 620925850 ____R () C:\Users\David\Downloads\Triplegangers-angel&starlet.rar
2015-01-05 18:33 - 2015-01-05 18:33 - 00012150 _____ () C:\Users\David\Downloads\Triplegangers - Angel & Starlet.torrent
2015-01-05 18:21 - 2015-01-05 18:21 - 00000000 ____D () C:\Users\David\Downloads\HQ Details - Vol.4 Blankets & Pillows
2015-01-05 18:20 - 2015-01-05 18:20 - 00030656 _____ () C:\Users\David\Downloads\HQ Details - Vol.4 Blankets & Pillows (--- - ---).torrent
2015-01-05 18:14 - 2015-01-05 18:14 - 00049079 _____ () C:\Users\David\Downloads\aXYX Design Rigged 3D Woman 3DS Max.torrent
2015-01-05 18:14 - 2015-01-05 18:14 - 00000000 ____D () C:\Users\David\Downloads\LikeLifeContest_CWom0019-HD2-CS
2015-01-05 18:05 - 2015-01-05 18:05 - 00014888 _____ () C:\Users\David\Downloads\Lifetime Light Awesomizers ( Effects Collection ).torrent
2015-01-05 18:05 - 2015-01-05 18:05 - 00000000 ____D () C:\Users\David\Downloads\Lifetime Light Awesomizers
2015-01-05 17:42 - 2015-01-05 17:42 - 00016346 _____ () C:\Users\David\Downloads\Turbosquid - Bresser R-80.torrent
2015-01-05 17:42 - 2015-01-05 17:42 - 00000000 ____D () C:\Users\David\Downloads\Turbosquid - Bresser R-80
2015-01-05 17:37 - 2015-01-05 17:37 - 00025218 _____ () C:\Users\David\Downloads\The Pixel Lab - Events and Exhibitions Pack.torrent
2015-01-05 17:37 - 2015-01-05 17:37 - 00000000 ____D () C:\Users\David\Downloads\The Pixel Lab - Events and Exhibitions Pack
2015-01-05 17:17 - 2015-01-05 17:17 - 00035510 _____ () C:\Users\David\Downloads\Lightstar models.torrent
2015-01-05 17:17 - 2015-01-05 17:17 - 00000000 ____D () C:\Users\David\Downloads\Lightstar, Osgona
2015-01-05 17:10 - 2015-01-05 17:12 - 190187522 ____R () C:\Users\David\Downloads\Human fetus.zip
2015-01-05 17:10 - 2015-01-05 17:10 - 00014780 _____ () C:\Users\David\Downloads\Turbosquid - Human Fetus for 3DS Max.torrent
2015-01-05 17:08 - 2015-01-05 17:08 - 01951089 _____ () C:\Users\David\Downloads\3DDD PRO 3D Models 2013.torrent
2015-01-05 17:08 - 2015-01-05 17:08 - 00000000 ____D () C:\Users\David\Downloads\3DDD Prof Models
2015-01-05 16:58 - 2015-01-05 16:58 - 00101230 _____ () C:\Users\David\Downloads\AXYZ Design – Ready-Posed 3D Humans.torrent
2015-01-05 16:58 - 2015-01-05 16:58 - 00000000 ____D () C:\Users\David\Downloads\BP4U Ultimate Editing Pack
2015-01-05 16:58 - 2015-01-05 16:58 - 00000000 ____D () C:\Users\David\Downloads\AXYZ Design – Ready-Posed 3D Humans
2015-01-05 16:36 - 2015-01-05 16:36 - 00023033 _____ () C:\Users\David\Downloads\BP4U - Ultimate Editing Combo Pack Photoshop and Lightroom.torrent
2015-01-04 12:38 - 2015-01-04 12:38 - 00227087 _____ () C:\Users\David\Downloads\SIGERSHADERS MR Material Presets Pro v2.5.0.1 For 3ds Max (--- - ---) (1).torrent
2015-01-02 10:28 - 2015-01-02 10:28 - 00002123 _____ () C:\Users\Public\Desktop\Barcode Studio 15.2.lnk
2015-01-02 10:28 - 2015-01-02 10:28 - 00000000 ____D () C:\ProgramData\TEC-IT
2015-01-02 10:28 - 2015-01-02 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TEC-IT Barcode Studio 15.2
2015-01-02 10:28 - 2015-01-02 10:28 - 00000000 ____D () C:\Program Files (x86)\TEC-IT
2015-01-02 10:23 - 2015-01-02 10:23 - 12394496 _____ () C:\Users\David\Desktop\BarCode_Studio.msi
2014-12-29 01:20 - 2014-12-29 01:20 - 00019443 _____ () C:\Users\David\Downloads\Next Limit RealFlow 2014 Build 8.1.2.0192 x86&64.torrent
2014-12-29 01:20 - 2014-12-29 01:20 - 00000000 ____D () C:\Users\David\Downloads\NextLimit RealFlow 2014.1.2.0192 x86 64
2014-12-29 01:14 - 2014-12-29 01:14 - 00017315 _____ () C:\Users\David\Downloads\GraphicRiver 100 Layer Styles Bundle - Text Effects Set.torrent
2014-12-29 01:14 - 2014-12-29 01:14 - 00000000 ____D () C:\Users\David\Downloads\graphicriver - 3116716 - 100 Layer Styles Bundle - Text Effects Set
2014-12-29 01:01 - 2014-12-29 01:01 - 00434766 _____ () C:\Users\David\Downloads\Design Commercial Fonts for Windows & MacOS (1).torrent
2014-12-29 01:01 - 2014-12-29 01:01 - 00000000 ____D () C:\Users\David\Downloads\scene_commercial_fonts_PC-MAC
2014-12-29 00:30 - 2014-12-29 00:30 - 00434766 _____ () C:\Users\David\Downloads\Design Commercial Fonts for Windows & MacOS.torrent
2014-12-29 00:23 - 2014-12-29 00:23 - 00025920 _____ () C:\Users\David\Downloads\SideFX Houdini FX v13.0.419 VC9 Win64 – XFORCE.torrent
2014-12-29 00:23 - 2014-12-29 00:23 - 00000000 ____D () C:\Users\David\Downloads\SIDEFX_HOUDINI_FX_V13.0.419_WIN64_VC9-XFORCE
2014-12-28 00:44 - 2014-12-28 00:44 - 00050408 _____ () C:\Users\David\Downloads\Digital Tutors - Making Presentation-Ready Graphics from Simple Images in 3ds Max.torrent
2014-12-27 23:48 - 2015-01-26 16:13 - 00000132 _____ () C:\Users\David\AppData\Roaming\Adobe PNG Format CC Prefs
2014-12-27 15:45 - 2014-12-27 15:46 - 00392868 _____ () C:\Users\David\Downloads\Gnomon Workshop - Creating Terrains with Satellite Data Volume 2.torrent
2014-12-27 15:43 - 2014-12-27 15:44 - 00456993 _____ () C:\Users\David\Downloads\Gnomon Workshop - Creating Terrains with Satellite Data Volume 1.torrent
2014-12-27 15:35 - 2014-12-27 15:35 - 00159878 _____ () C:\Users\David\Downloads\Eat3D - V-Ray Masterclass - Unleashing the Power of V-Ray with Erasmus Brosdau.torrent
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-01-26 18:19 - 2012-11-09 19:40 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-26 18:19 - 2012-11-09 19:33 - 00000000 ____D () C:\Users\David\AppData\Roaming\uTorrent
2015-01-26 18:09 - 2012-11-09 19:40 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-26 18:06 - 2014-05-21 06:58 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-26 17:45 - 2014-09-15 01:19 - 00001168 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-26 17:45 - 2014-09-15 01:19 - 00001168 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-26 17:44 - 2012-12-28 16:18 - 00000000 ____D () C:\Program Files (x86)\Yahoo!
2015-01-26 17:41 - 2013-03-28 15:17 - 48757760 _____ () C:\Users\David\AppData\Local\SageThumbs.db3
2015-01-26 16:27 - 2014-12-24 20:49 - 113222433 _____ () C:\Users\David\Downloads\SLR_Complete.rar
2015-01-26 13:33 - 2012-11-09 18:18 - 00000000 ____D () C:\Users\David
2015-01-26 11:39 - 2013-04-16 10:57 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2015-01-26 10:09 - 2012-11-09 19:40 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-26 09:18 - 2009-07-13 23:45 - 00032000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-26 09:18 - 2009-07-13 23:45 - 00032000 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-26 09:14 - 2012-11-09 18:19 - 01525396 _____ () C:\Windows\WindowsUpdate.log
2015-01-26 09:12 - 2013-04-12 11:19 - 00000000 ___RD () C:\Users\David\Dropbox
2015-01-26 09:11 - 2013-04-12 11:11 - 00000000 ____D () C:\Users\David\AppData\Roaming\Dropbox
2015-01-26 09:10 - 2014-05-10 16:40 - 00029879 _____ () C:\Windows\setupact.log
2015-01-26 09:10 - 2009-07-13 21:34 - 00000528 _____ () C:\Windows\win.ini
2015-01-26 09:08 - 2014-05-20 20:04 - 00000278 _____ () C:\Windows\Tasks\RtlNetworkGenieVistaStart.job
2015-01-26 09:08 - 2014-01-20 18:05 - 00008957 _____ () C:\AFlics.log
2015-01-26 09:08 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-26 09:07 - 2014-02-04 11:54 - 00349740 _____ () C:\Windows\PFRO.log
2015-01-26 09:07 - 2012-11-09 18:28 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-26 09:05 - 2014-05-21 00:26 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-01-26 09:05 - 2014-01-21 03:46 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2015-01-26 09:05 - 2013-11-12 15:43 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-01-26 09:05 - 2013-10-22 12:54 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-01-26 09:05 - 2013-10-22 12:54 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-01-26 09:05 - 2013-10-22 12:54 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-01-26 09:05 - 2013-10-22 12:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-01-26 09:05 - 2013-10-22 12:54 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-01-26 09:05 - 2013-10-22 12:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-01-26 02:01 - 2014-08-22 01:00 - 00000000 ____D () C:\Users\David\AppData\Local\Adobe
2015-01-26 00:37 - 2013-09-24 10:02 - 00000000 ____D () C:\Windows\vhid
2015-01-26 00:35 - 2014-06-11 18:36 - 00000000 ____D () C:\ProgramData\YTD Video Downloader
2015-01-26 00:35 - 2014-06-08 20:35 - 00000000 ____D () C:\Program Files\CamStudio 2.7
2015-01-26 00:23 - 2014-05-21 06:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-01-26 00:23 - 2014-05-21 06:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-01-25 23:43 - 2009-07-13 23:45 - 05555000 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-25 15:20 - 2012-11-09 19:40 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-25 15:20 - 2012-11-09 19:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-25 15:20 - 2012-11-09 19:40 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-24 19:27 - 2012-11-09 19:36 - 00231216 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-23 11:00 - 2014-08-29 10:53 - 00000000 ____D () C:\Users\David\AppData\Local\Downloaded Installations
2015-01-21 19:01 - 2012-12-08 14:07 - 00000000 ____D () C:\Users\David\AppData\Roaming\vlc
2015-01-21 16:33 - 2012-11-14 22:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-19 00:59 - 2014-05-17 08:02 - 00000000 ____D () C:\ProgramData\Reprise
2015-01-19 00:48 - 2014-08-13 16:43 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-17 21:47 - 2012-11-10 22:50 - 00000000 ____D () C:\VMPP
2015-01-17 20:44 - 2013-04-23 11:46 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3DZverTools
2015-01-17 20:44 - 2013-04-23 11:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3DZverTools
2015-01-17 20:27 - 2014-12-24 18:28 - 00109628 _____ () C:\dbg_randomcontrol_Af3.log
2015-01-12 21:43 - 2013-04-14 09:48 - 00000000 ____D () C:\Users\David\AppData\Roaming\HpUpdate
2015-01-11 12:48 - 2012-12-28 16:02 - 00208641 _____ () C:\Windows\hpoins43.dat
2015-01-11 12:48 - 2012-12-28 16:02 - 00003536 _____ () C:\ProgramData\hpzinstall.log
2015-01-11 12:48 - 2012-11-09 18:44 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2015-01-11 12:46 - 2009-07-14 00:13 - 00905372 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-11 12:38 - 2012-12-28 16:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-01-11 12:38 - 2012-12-28 16:13 - 00000000 ____D () C:\Program Files (x86)\HP
2015-01-11 12:37 - 2012-12-28 16:16 - 00001354 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2015-01-11 12:37 - 2012-12-28 16:01 - 00000000 ____D () C:\ProgramData\HP
2015-01-11 12:33 - 2012-12-28 16:03 - 00000000 ____D () C:\Program Files\HP
2015-01-10 15:12 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\registration
2015-01-10 12:29 - 2014-09-11 15:29 - 00003672 _____ () C:\Windows\System32\Tasks\klcp_update
2015-01-10 12:29 - 2014-09-11 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2015-01-10 12:29 - 2014-09-11 15:28 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2015-01-10 12:27 - 2014-09-28 00:53 - 00000000 ____D () C:\Program Files (x86)\Morgan
2015-01-09 18:37 - 2014-07-05 20:23 - 00000000 ____D () C:\Users\David\Desktop\BBCast
2015-01-04 12:49 - 2013-11-25 22:22 - 00000000 ____D () C:\MMPP
2014-12-28 21:03 - 2014-12-04 16:07 - 00000000 ____D () C:\Users\David\AppData\Roaming\Bigasoft Video Downloader Pro
2014-12-27 23:03 - 2012-11-12 23:38 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-12-27 14:15 - 2012-11-10 20:27 - 00000000 ____D () C:\Users\David\Documents\3dsMax
 
==================== Files in the root of some directories =======
 
2013-05-28 17:54 - 2013-05-28 17:54 - 0002094 _____ () C:\Program Files\unins000.dat
2013-05-28 17:54 - 2013-05-28 17:54 - 0735905 _____ () C:\Program Files\unins000.exe
2013-04-25 13:29 - 2013-04-25 13:30 - 0101163 _____ () C:\Program Files\unins002.dat
2013-04-25 13:29 - 2013-04-25 13:29 - 0736929 _____ () C:\Program Files\unins002.exe
2013-04-02 11:23 - 2013-04-02 11:23 - 0002106 _____ () C:\Program Files (x86)\unins000.dat
2013-04-02 11:23 - 2013-04-02 11:22 - 0735905 _____ () C:\Program Files (x86)\unins000.exe
2013-05-28 17:57 - 2013-05-28 17:57 - 0074519 _____ () C:\Program Files (x86)\unins001.dat
2013-05-28 17:57 - 2013-05-28 17:56 - 0735905 _____ () C:\Program Files (x86)\unins001.exe
2013-03-12 11:20 - 2013-05-22 17:17 - 0000132 _____ () C:\Users\David\AppData\Roaming\Adobe BMP Format CS6 Prefs
2014-09-24 17:22 - 2014-09-24 17:22 - 0000132 _____ () C:\Users\David\AppData\Roaming\Adobe GIF Format CS6 Prefs
2013-04-07 07:05 - 2014-04-21 14:30 - 0000132 _____ () C:\Users\David\AppData\Roaming\Adobe OpenEXR Format CS6 Prefs
2014-12-27 23:48 - 2015-01-26 16:13 - 0000132 _____ () C:\Users\David\AppData\Roaming\Adobe PNG Format CC Prefs
2012-11-29 14:14 - 2014-12-07 17:11 - 0000132 _____ () C:\Users\David\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-04-18 14:41 - 2014-08-27 09:42 - 0000132 _____ () C:\Users\David\AppData\Roaming\Adobe Targa Format CS6 Prefs
2014-05-21 00:23 - 2014-12-23 16:48 - 0001843 _____ () C:\Users\David\AppData\Roaming\BEAST.MTBF.txt
2014-06-08 21:25 - 2014-09-25 14:56 - 0065609 _____ () C:\Users\David\AppData\Roaming\Camdata.ini
2014-06-08 21:25 - 2014-09-25 14:56 - 0000408 _____ () C:\Users\David\AppData\Roaming\CamLayout.ini
2014-06-08 21:25 - 2014-09-25 14:56 - 0000408 _____ () C:\Users\David\AppData\Roaming\CamShapes.ini
2014-06-08 21:25 - 2014-09-25 14:56 - 0004569 _____ () C:\Users\David\AppData\Roaming\CamStudio.cfg
2005-04-07 21:16 - 2013-10-17 09:12 - 0420338 ____H () C:\Users\David\AppData\Roaming\Davidlog.dat
2013-02-22 13:52 - 2013-02-22 13:52 - 0099384 _____ () C:\Users\David\AppData\Roaming\inst.exe
2013-02-22 13:52 - 2013-02-22 13:52 - 0007859 _____ () C:\Users\David\AppData\Roaming\pcouffin.cat
2013-02-22 13:52 - 2013-02-22 13:52 - 0001167 _____ () C:\Users\David\AppData\Roaming\pcouffin.inf
2013-02-22 13:52 - 2013-02-22 13:52 - 0000055 _____ () C:\Users\David\AppData\Roaming\pcouffin.log
2013-02-22 13:52 - 2013-02-22 13:52 - 0082816 _____ (VSO Software) C:\Users\David\AppData\Roaming\pcouffin.sys
2014-06-19 02:06 - 2014-06-19 02:06 - 0000024 _____ () C:\Users\David\AppData\Roaming\temp.ini
2014-06-08 21:18 - 2014-09-25 14:41 - 0000096 _____ () C:\Users\David\AppData\Roaming\version2.xml
2015-01-25 23:44 - 2015-01-25 23:44 - 0000083 _____ () C:\Users\David\AppData\Roaming\vtp.xml
2014-05-21 00:23 - 2014-12-23 22:52 - 0001050 _____ () C:\Users\David\AppData\Roaming\__AvidCloudManager.log
2014-05-21 00:23 - 2014-12-23 20:29 - 0000676 _____ () C:\Users\David\AppData\Roaming\__AvidCloudManagerPrevious.log
2013-04-23 10:42 - 2013-04-23 10:42 - 0000036 _____ () C:\Users\David\AppData\Local\housecall.guid.cache
2014-05-06 19:23 - 2014-05-06 19:23 - 0000001 _____ () C:\Users\David\AppData\Local\llftool.4.40.agreement
2013-01-04 22:45 - 2014-12-20 19:46 - 0007604 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg
2013-03-28 15:17 - 2015-01-26 17:41 - 48757760 _____ () C:\Users\David\AppData\Local\SageThumbs.db3
2015-01-23 11:22 - 2015-01-23 11:46 - 0001133 _____ () C:\Users\David\AppData\Local\Temp启䝍潥䍭敨正琮瑸
2012-12-28 16:02 - 2015-01-11 12:48 - 0003536 _____ () C:\ProgramData\hpzinstall.log
2014-03-21 15:34 - 2014-03-21 15:34 - 0001534 _____ () C:\ProgramData\ss.ini
2012-11-12 21:23 - 2012-11-12 21:23 - 0000208 _____ () C:\ProgramData\{6BC52438-5DE4-4102-846E-64C225A0A04E}_WiseFW.ini
2012-11-12 21:36 - 2012-11-12 21:36 - 0000110 _____ () C:\ProgramData\{B688D716-6A1A-47F7-9734-11A24071909A}_WiseFW.ini
 
Files to move or delete:
====================
C:\Users\David\remoteclient.exe
 
 
Some content of TEMP:
====================
C:\Users\David\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaa0ci_.dll
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-01-24 01:48
 
==================== End Of Log ============================
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-01-2015 01
Ran by David at 2015-01-26 18:22:40
Running from C:\Users\David\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)
3D XML Player (HKLM\...\{52FDBE6F-53FE-47C5-8D49-6366555D7056}) (Version: 12.36.12304 - Dassault Systemes)
3DVIA player 5.0.0.20 (HKLM-x32\...\{F06365EC-061E-48C3-B761-E1816658D618}) (Version: 5.0.20 - 3DVIA)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
abcAVI (HKLM-x32\...\abcavi_tag_editor_is1) (Version:  - Alexander Sorkin aka Kibi)
Adobe After Effects CC (HKLM-x32\...\{317243C1-6580-4F43-AED7-37D4438C3DD5}) (Version: 12 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.3.0.3670 - Adobe Systems Incorporated)
Adobe Audition CC (HKLM-x32\...\{DE1E055B-679C-42F8-B114-7B6ED0B8ED95}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Dreamweaver CC (HKLM-x32\...\{00E094E1-A852-11E2-803D-ACEA632352B4}) (Version: 13 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Professional CC (HKLM-x32\...\{B56B95BF-7161-4166-8288-DB1BA9F6C9B8}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CC (HKLM-x32\...\{F2321021-08A2-44D6-B1DF-BDB415F23EC3}) (Version: 17.0 - Adobe Systems Incorporated)
Adobe InCopy CC (HKLM-x32\...\{2606D96F-C1A3-1014-9A8F-E3561A1AC78D}) (Version: 9.0 - Adobe Systems Incorporated)
Adobe InDesign CC (HKLM-x32\...\{BC448016-6F11-1014-B0EA-97CEE6E26CB6}) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.4 64-bit (HKLM\...\{558B5965-CC1B-4AF1-BA07-5D6832404050}) (Version: 5.4.0 - Adobe Systems Incorporated)
Adobe Prelude CC (HKLM-x32\...\{5D73C19B-BE10-44A6-96B2-A516756ED29F}) (Version: 2.0.0 - Adobe Systems Incorporated)
Adobe Premiere Pro CC (HKLM-x32\...\{505FF1AC-E7F5-4462-BBA7-08900E7E9EEF}) (Version: 7.0.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.2 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.2 - Adobe Systems Incorporated)
Adobe SpeedGrade CC (HKLM-x32\...\{29AA12E9-934C-485E-A9A1-D823FEB29880}) (Version: 7.0.0 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 2.9.0 - Adobe Systems Incorporated)
AMP Font Viewer (HKLM-x32\...\AMP Font Viewer) (Version:  - )
AMT - Auto-Movie-Thumbnailer (HKLM-x32\...\AMT) (Version: 4.0 - Karsten Funk)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.10 - Michael Tippach)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1996569838.48.56.12391666 - Audible, Inc.)
AutoCAD 2013 - English (HKLM\...\AutoCAD 2013 - English) (Version: 19.0.55.0 - Autodesk)
AutoCAD 2013 - English (Version: 19.0.55.0 - Autodesk) Hidden
AutoCAD 2013 Language Pack - English (Version: 19.0.55.0 - Autodesk) Hidden
Autodesk 3ds Max 2011 64-bit (HKLM\...\{39BFB02A-9692-0409-A808-3F5C7B1F8953}) (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2011 64-bit Components (HKLM\...\{7563F495-80F5-0409-A514-747C66C22449}) (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2013 64-bit (HKLM\...\Autodesk 3ds Max 2013 64-bit) (Version: 15.6.164.0 - Autodesk)
Autodesk 3ds Max 2013 64-bit (Version: 15.6.164.0 - Autodesk) Hidden
Autodesk 3ds Max 2013 64-bit Product Update 6 (HKLM\...\Autodesk 3ds Max 2013 64-bit SP6) (Version: 15.6.164.0 - Autodesk)
Autodesk 3ds Max 2014 (HKLM\...\Autodesk 3ds Max 2014) (Version: 16.0.420.0 - Autodesk)
Autodesk 3ds Max 2014 (Version: 16.0.420.0 - Autodesk) Hidden
Autodesk 3ds Max 2014 64-bit Populate Data (HKLM\...\{7491836B-659E-47DD-ABBF-F875AD48FD10}) (Version: 1.0.0.1 - Autodesk)
Autodesk Backburner 2014 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 14.0.0.0 - Autodesk, Inc.)
Autodesk Composite 2014 (HKLM\...\Autodesk Composite 2014) (Version: 9.0.0.0 - Autodesk)
Autodesk Composite 2014 (Version: 9.0.0.0 - Autodesk) Hidden
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.0.84.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.0.84.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.0.84.0 - Autodesk) Hidden
Autodesk DirectConnect 2013 64-bit (HKLM\...\Autodesk DirectConnect 2013 64-bit) (Version: 7.0.28.0 - Autodesk)
Autodesk DirectConnect 2013 64-bit (Version: 7.0.28.0 - Autodesk) Hidden
Autodesk DirectConnect 2014 64-bit (HKLM\...\Autodesk DirectConnect 2014 64-bit) (Version: 8.0.56.1 - Autodesk)
Autodesk DirectConnect 2014 64-bit (Version: 8.0.56.1 - Autodesk) Hidden
Autodesk Essential Skills Movies for 3ds Max 2013 64-bit (HKLM\...\{7EDE5B68-1FB0-405D-88F0-A34236002DA8}) (Version: 1.0.0.1 - Autodesk)
Autodesk Essential Skills Movies for 3ds Max 2014 64-bit (HKLM\...\{E8814D63-BB76-4C89-A25E-264ECF11D00D}) (Version: 1.2.0.0 - Autodesk)
Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit (HKLM\...\Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit) (Version:  - Autodesk)
Autodesk FBX Plug-in 2013.1 - 3ds Max 2013 64-bit (HKLM\...\Autodesk FBX Plug-in 2013.1 - 3ds Max 2013 64-bit) (Version:  - Autodesk)
Autodesk Inventor Fusion 2013 (HKLM\...\Autodesk Inventor Fusion 2013) (Version: 2.0.0.206 - Autodesk, Inc.)
Autodesk Inventor Fusion 2013 (Version: 2.0.0.206 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion plug-in for AutoCAD 2013 (HKLM\...\Autodesk Inventor Fusion plug-in for AutoCAD 2013) (Version: 0.2.0.230 - Autodesk)
Autodesk Inventor Fusion plug-in for AutoCAD 2013 (Version: 0.2.0.230 - Autodesk) Hidden
Autodesk Inventor Fusion plug-in language pack for AutoCAD 2013 (Version: 0.2.0.230 - Autodesk) Hidden
Autodesk Inventor Server Engine for 3ds Max 2013 64-bit (HKLM\...\{696BB53C-28E6-1664-974E-D42FFF5B8E04}) (Version: 15.0 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2014 64-bit (HKLM\...\{009751C6-22D7-4548-A313-AD48FA57076F}) (Version: 16.0 - Autodesk)
Autodesk Material Library 2011 (HKLM-x32\...\{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}) (Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2011 Base Image library (HKLM-x32\...\{CD1E078C-A6B9-47DA-B035-6365C85C7832}) (Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2011 Medium Image library (HKLM-x32\...\{975951E7-14D0-49AF-A630-89680D12D7F6}) (Version: 2.0.0.49 - Autodesk)
Autodesk Material Library 2013 (HKLM-x32\...\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.32.600 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2013 (HKLM-x32\...\{606E12B9-641F-4644-A22A-FF38AE980AFD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.32.600 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2013 (HKLM-x32\...\{58760EEC-8B6A-43F4-81AA-696E381DFADD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2014 (HKLM-x32\...\{A0633D4E-5AF2-4E3E-A70A-FE9C2BD8A958}) (Version: 4.0.32.600 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2014 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2014) (Version: 13.02.15161 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2014 (Version: 13.02.15161 - Autodesk) Hidden
Autodesk Revit Interoperability for 3ds Max and 3ds Max Design 2013 64-bit (HKLM\...\{06E18300-BB64-1664-8E6A-2593FC67BB74}) (Version: 1.0.0.1 - Autodesk)
Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Batzal Roof Designer Pluign for 3DS Max 2013 64Bit (HKLM-x32\...\RoofDesigner) (Version:  - )
BDE Information Utility (HKLM-x32\...\BDE Information Utility) (Version:  - InterBase Installation Info (and BDE Information Utility))
Bigasoft Video Downloader Pro 3.8.5.5422 (HKLM-x32\...\{C7056BA6-D954-42A2-ABBA-AB2E8E777730}_is1) (Version:  - Bigasoft Corporation)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
C4700 (x32 Version: 140.0.690.000 - Hewlett-Packard) Hidden
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CINEMA 4D 15.064 (HKLM\...\MAXON12664043) (Version: 15.064 - MAXON Computer GmbH)
CleanUp! (HKLM-x32\...\CleanUp!) (Version:  - )
COLLADAMax (1.3.1) (HKLM\...\{BF1BDC10-4366-4222-0103-000101000000}) (Version: 1.3.1.847 - NetAllied Systems GmbH)
Color Suite v11.1.2 (HKLM-x32\...\{99487911-8011-42BC-B594-8B02BFD32B1D}_is1) (Version: 11.1.2 - Red Giant, LLC)
ColorCorrect v3.4.105.13_x64 (HKLM-x32\...\ColorCorrect_max13_x64) (Version: v3.4.105.13_x64 - Cuneyt Ozdas)
ColorCorrect v3.4.125.15_x64 (HKLM-x32\...\ColorCorrect_max15_x64) (Version: v3.4.125.15_x64 - Cuneyt Ozdas)
Composite 2011 (64-bit) (HKLM\...\{DBF6B4E9-CD43-476A-895D-4D688D41CE63}) (Version: 6.0.0 - Autodesk)
Composite 2013 64-bit (HKLM\...\{2F808931-D235-4FC7-90CD-F8A890C97B2F}) (Version: 8.0.0 - Autodesk)
Convert MOV to AVI 1.0 (HKLM-x32\...\{A39EA3C8-7BF3-4FA7-9A67-3D3611BAE59E}_is1) (Version:  - convertmovtoavi.com)
Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Creative 3DMIDI Player (HKLM-x32\...\3DMIDI) (Version: 1.11 - Creative Technology Limited)
Creative ALchemy (HKLM-x32\...\ALchemy) (Version: 1.43 - Creative Technology Limited)
Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
Creative Diagnostics (HKLM-x32\...\Diagnostics 4_5) (Version: 5.11 - Creative Technology Limited)
Creative MediaSource 5 (HKLM-x32\...\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.26 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: 1.02 - Creative Technology Limited)
Creative System Information (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.14 - Creative Technology Limited)
CyberLink BD Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version:  - )
CyberLink Blu-ray Disc Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3226 - CyberLink Corp.)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.)
CyberLink LG Burning Tool (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.2.4619 - CyberLink Corp.)
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.3402 - CyberLink Corp.)
CyberLink PowerBackup (HKLM-x32\...\{ADD5DB49-72CF-11D8-9D75-000129760D75}) (Version: 2.5.6023 - CyberLink Corp.)
CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.2321 - CyberLink Corp.)
CyberLink PowerDirector 11 (Version: 11.0.0.2321 - CyberLink Corp.) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3414.52 - CyberLink Corp.)
CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.2512 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.3530 - CyberLink Corp.)
Dassault Systemes 3DVIA Printscreen (HKLM-x32\...\Dassault Systemes 3D PrintScreen) (Version: 2.3.R17 - )
Dazzle Video Capture DVC100 X64 Driver 1.06 (HKLM-x32\...\{BFF23267-1D19-444E-93E2-E5059BE805EA}) (Version: 1.06.0000 - Pinnacle)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.00 - Creative Technology Limited)
DreamScape 2.5f R2011 64-bit (HKLM-x32\...\{6B39725E-2782-432D-B72A-10C53231538A}) (Version:  - )
DreamScape 2.5f R2013 64-bit (HKLM-x32\...\{AB0E707E-5BE7-438B-8782-97DEA9DAB172}) (Version:  - )
Dropbox (HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
Effects Suite 64-bit (HKLM-x32\...\InstallShield_{F8BE1C39-4702-492A-9C7F-349E3A4FD324}) (Version: 11.1.0 - Red Giant)
Effects Suite 64-bit (Version: 11.1.0 - Red Giant) Hidden
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FFmpeg for Audacity on Windows (HKLM-x32\...\FFmpeg for Audacity on Windows_is1) (Version:  - )
FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
FL Studio 10 (HKLM-x32\...\FL Studio 10) (Version:  - Image-Line)
Forest Pack Pro 4.0.2.352 (HKLM\...\Forest Pack Pro 4.0.2_is1) (Version:  - Itoo Software)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
FreeRIP MP3 Converter 4.5.1 (HKLM-x32\...\{501451DE-5808-4599-B544-8BD0915B6B24}_is1) (Version: 4.5.1 - GreenTree Applications SRL)
FumeFX 2.1 R2011 (HKLM-x32\...\{EF95F85D-979D-49F2-A9A9-2300A22DBEC2}) (Version:  - )
FumeFX 3.5.1 R2013 64-bit (HKLM-x32\...\{4C70E8D3-78D4-493E-A4CF-1BE881E2DA99}) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.91 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
HDR Light Studio v4.0 (remove only) (HKLM-x32\...\HDR Light Studio v4.0) (Version:  - )
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Photosmart C4700 All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{68550918-63B5-4762-85CB-3C160AA4B213}) (Version: 14.0 - HP)
HP Print Projects 1.0 (HKLM\...\HP Print Projects) (Version: 1.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
hpPrintProjects (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
hpWLPGInstaller (x32 Version: 130.0.303.000 - Hewlett-Packard) Hidden
HYDRALogix 1.7.1 (HKLM\...\HYDRA_is1) (Version: 1.7.1 - Lucidlogix Technologies LTD)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel® C++ Redistributables on Intel® 64 (HKLM-x32\...\{AA67D612-0BE5-44D6-9A91-592958F754A1}) (Version: 13.0.198 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.1.52.1176 - Intel Corporation)
Intel® Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.400.5 - Intel)
IP-Clamp Service (HKLM-x32\...\{6BC52438-5DE4-4102-846E-64C225A0A04E}) (Version: 1.2.0 - cebas VISUAL TECHNOLOGY Inc.)
iTunes (HKLM\...\{427174C0-096E-40D9-9684-9C109BEE2CBF}) (Version: 11.0.5.5 - Apple Inc.)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.650 - Oracle)
JFK Reloaded 1.1 (HKLM-x32\...\JFK Reloaded) (Version: 1.1 - JFK Reloaded)
Keying Suite v11.0.4 (HKLM-x32\...\{21AD9423-3C17-43E2-AFD7-8305C965500F}_is1) (Version: 11.0.4 - Red Giant, LLC)
KeyShot 5 64 bit (HKLM-x32\...\KeyShot 5_64) (Version: 5.1 64 bit - Luxion ApS)
KeyShot 5 plugin for 3D Studio Max 1.2.2 (HKLM\...\KeyShot 5 plugin for 3D Studio Max 1.2.2) (Version: 1.2.2 - Luxion ApS)
K-Lite Mega Codec Pack 10.9.2 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.2 - )
KriStaL Deuces Wild (HKLM-x32\...\{1BEC6FC6-818A-43D1-A0ED-CB9E4140A0E2}) (Version: 1.0.0.0 - d'eXclusiv LLP)
KriStaL Double Double Bonus (HKLM-x32\...\{28F2ABB1-7F00-4D1D-B917-5B3F03637EDD}) (Version: 1.2.8.0 - d'eXclusiv LLP)
KriStaL Jacks or Better (HKLM-x32\...\{EEF566C7-99BB-4DB0-BC8E-454DEABE9D50}) (Version: 1.1.0.6 - d'eXclusiv LLP)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
LG Tool Kit (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
LightScribe System Software (HKLM-x32\...\{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}) (Version: 1.18.22.2 - LightScribe)
LightWave 11.6 64-bit (HKLM-x32\...\LightWave 11.6 64-bit 11.6) (Version: 11.6 - NewTek, Inc.)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1051 - Marvell)
Max's Laser Pack (HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\Max's Laser Pack) (Version:  - )
Maxwell 3 (HKLM-x32\...\Maxwell 3) (Version:  - )
Maxwell Plugin for 3D Studio Max (HKLM-x32\...\MaxwellMax) (Version: 3.0.30 - Next Limit)
Maxwell Shell Extension (x64) (HKLM\...\{7636B8E9-4F52-41F7-A3B2-526E97F2879F}) (Version: 3.0.0 - Next Limit Technologies)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM-x32\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft redistributable runtime DLLs VS2005 SP1(x86_x64) (HKLM-x32\...\{6486675D-3774-4E28-B8F2-4220F76FE46A}) (Version: 8.0.50727.4053 - SAP)
Microsoft redistributable runtime DLLs VS2010 SP1 (x86) (HKLM-x32\...\{2385C070-EC26-4AB9-8718-E605C977C0ED}) (Version: 10.0.40219.1 - SAP)
Microsoft redistributable runtime DLLs VS2010 SP1 (x86_x64) (HKLM\...\{0CA550DE-10F6-45F8-AB0A-25DBDDE37671}) (Version: 10.0.40219.1 - SAP)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20125.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{C79A7EAB-9D6F-4072-8A6D-F8F54957CD93}) (Version: 10.0.1600.22 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2012) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Setup (English) (HKLM\...\{5DDC2234-4B37-45BC-AD33-41F1469B4D83}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version:  - Microsoft Corporation)
Microsoft VSS Writer for SQL Server 2012 (HKLM\...\{3E0DD83F-BE4C-4478-86A0-AD0D79D1353E}) (Version: 11.0.2100.60 - Microsoft Corporation)
MiPony 2.2.1 (HKLM-x32\...\MiPony) (Version: 2.2.1 - )
Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
Mozilla Thunderbird 31.4.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 31.4.0 (x86 en-US)) (Version: 31.4.0 - Mozilla)
MP3 Audio Editor v9.6.2 (HKLM-x32\...\MP3 Audio Editor_is1) (Version:  - Copyright© 2005-2014 MAESystems, Inc.)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NBFree MP3 to WMA Converter v2 (HKLM-x32\...\NBFree MP3 to WMA Converter v2_is1) (Version: 3.0 - NBXAudio Inc.)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
NetworkGenie (HKLM-x32\...\{B416A23D-C2BD-4956-8BAE-5C3BAFF1AC1E}) (Version: 1.00.0000 - MSI)
Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue)
NexusFont 2.5 (ver 2.5.8.1582) (HKLM-x32\...\{EFEDD205-43FE-4208-B682-0937E803E19E}_is1) (Version:  - xiles)
NVIDIA 3D Vision Controller Driver 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.75 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.75 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5922 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Graphics Driver 344.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.75 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA Performance (HKLM-x32\...\InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}) (Version: 6.5 - NVIDIA Corporation)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX For Autodesk 3ds Max 2011 64bit (HKLM\...\{785622BD-5935-4B72-9BA0-032FD0F3B58E}) (Version: 2.86.00812.02362 - NVIDIA Corporation)
NVIDIA PhysX For Autodesk 3ds Max 2013 64bit (HKLM\...\{5219BFBE-4CDC-40E8-814B-B615630C6427}) (Version: 2.85.00427.10552 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA System Monitor (HKLM-x32\...\InstallShield_{E9CFBE78-ED91-4FCF-9E6F-210E477E527D}) (Version: 6.5 - NVIDIA Corporation)
NVIDIA System Update (HKLM-x32\...\InstallShield_{65A92AAA-3D05-4C94-9F70-731C05E60C16}) (Version: 3.00 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenEV 1.80 (HKLM-x32\...\OpenEV 1.80) (Version:  - )
Opera 11.64 (HKLM-x32\...\Opera 11.64.1403) (Version: 11.64.1403 - Opera Software ASA)
Opera Stable 25.0.1614.50 (HKLM-x32\...\Opera 25.0.1614.50) (Version: 25.0.1614.50 - Opera Software ASA)
Opera Stable 26.0.1656.60 (HKLM-x32\...\Opera 26.0.1656.60) (Version: 26.0.1656.60 - Opera Software ASA)
Oracle VM VirtualBox 4.2.16 (HKLM\...\{4CC3444D-7279-4E83-984F-18E9A7B2E803}) (Version: 4.2.16 - Oracle Corporation)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.3 - Frank Heindörfer, Philip Chinery)
PE Explorer 1.99 (HKLM-x32\...\PE Explorer_is1) (Version: 1.99.1 - Heaventools Software)
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Phoenix FD for 3ds Max 2013 for x64 (HKLM\...\Phoenix FD for 3ds Max 2013 for x64) (Version: 2.10.10 - Chaos Software Ltd)
Pinnacle Studio 17 (HKLM-x32\...\{3DA8F808-72E2-4361-82EC-433081D23005}) (Version: 17.4.0.309 - Corel Corporation)
Pinnale Systems Software Keys (HKLM-x32\...\{616CD10B-1EC7-41D2-8C14-3ECE93E7AEE9}_is1) (Version:  - VPP TEAM)
Podio Notifications (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version:  - ) <==== ATTENTION
Polygon Cruncher 10.1 (HKLM\...\Polygon Cruncher (x64 bits)) (Version: 10.1 - Mootools)
PolyTrans (HKLM-x32\...\InstallShield_{D86BD140-E0A5-470D-BEE9-42C9D2CC1012}) (Version: 4.3.8 - Okino Computer Graphics)
PolyTrans (x32 Version: 4.3.8 - Okino Computer Graphics) Hidden
PowerDirector (Version: 11.0 - CyberLink Corp.) Hidden
PowerISO (HKLM-x32\...\PowerISO) (Version: 4.8 - PowerISO Computing, Inc.)
proDAD Mercalli 2.0 (HKLM-x32\...\proDAD-Mercalli-2.0) (Version: 2.0.112.2 - proDAD GmbH)
proDAD ProDRENALIN 1.0 (64bit) (HKLM\...\proDAD-ProDRENALIN-1.0) (Version: 1.0.66.1 - proDAD GmbH)
proDAD Vitascene 2.0 (HKLM-x32\...\proDAD-Vitascene-2.0) (Version: 2.0.219 - proDAD GmbH)
PS_AIO_06_C4700_SW_Min (x32 Version: 140.0.690.000 - Hewlett-Packard) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden
Rail Clone 1.4.3.220 (HKLM\...\Rail Clone 1.4.3 2013x64_is1) (Version:  - Itoo Software)
Rail Clone 1.4.3.220 Library (HKLM\...\Rail Clone 1.4.3 Library_is1) (Version:  - Itoo Software)
RayFire 1.61 - 3ds Max 2011 - 64 bit - Demo (HKLM-x32\...\RayFire) (Version: 1.61 - 3ds Max 2011 - 64 bit - Demo - Mir Vadim)
RealFlow 2013 (HKLM-x32\...\RealFlow 2013) (Version:  - )
RealFlow Plugin for 3D Studio Max (HKLM-x32\...\RealFlowMax) (Version: 5.0.12 - Next Limit)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6101 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.8.100.4 - Red Giant, LLC)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SageThumbs 64-bit 2.0.0.2 (HKLM\...\SageThumbs 64-bit) (Version: 2.0.0.2 - Cherubic Software)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.14.0 - SAMSUNG Electronics Co., Ltd.)
SAP Visual Enterprise Author 7.1 (64 Bit) (HKLM\...\Visual Enterprise Author71 x64) (Version: 7.1.10.1 - SAP AG)
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
Shooter Suite v12.4.1 (HKLM-x32\...\{7DFC5E36-8CC9-4EC5-9C24-A3770A669E3F}_is1) (Version: 12.4.1 - Red Giant, LLC)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Siger Shaders V-Ray Material Presets Pro 2.5.16 (HKLM-x32\...\Siger Shaders V-Ray Material Presets Pro 2.5.16) (Version: 2.5.16 - GFXdomain.com)
Siger Studio MR Material Presets Pro 2.5.0.1 (HKLM-x32\...\Siger Studio MR Material Presets Pro 2.5.0.1) (Version: 2.5.0.1 - GFXDomain.net)
SimLab SolidWorks Importer 3.0 for 3DS Max x64 (HKLM\...\{3F4F2F50-EB48-4F46-BCE2-4BA9D5F20A61}) (Version: 3.0 - SimLab Soft)
SketchUp 2014 (HKLM-x32\...\{F246092E-FA0B-47C8-9D3E-CF8C210293C8}) (Version: 14.1.1282 - Trimble Navigation Limited)
SmartSound Common Data (HKLM-x32\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.)
SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden
SmartSound Sonicfire Pro 5 (HKLM-x32\...\InstallShield_{1D273D91-D7D5-4036-8B84-EB4615FF5F81}) (Version: 5.6.0 - SmartSound Software Inc.)
SmartSound Sonicfire Pro 5 (x32 Version: 5.6.0 - SmartSound Software Inc.) Hidden
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolidRocks 0.99.8 (HKLM-x32\...\SolidRocks) (Version: 0.99.8 - E.I Subburb)
SolidRocks for max 2013 V1.2.1 (HKLM-x32\...\SolidRocks for max 2013) (Version: V1.2.1 - E.I Subburb)
SolidWorks 2014 x64 Edition SP02 (HKLM-x32\...\SolidWorks Installation Manager 20140-40200-1100-100) (Version: 22.2.0.40 - SolidWorks Corporation)
SolidWorks 2014 x64 Edition SP02 (Version: 22.120.40 - SolidWorks) Hidden
SolidWorks Composer 2014 SP02 x64 Edition (Version: 22.20.40 - Dassault Systemes SolidWorks) Hidden
SolidWorks eDrawings 2014 x64 Edition SP02 (Version: 14.2.116 - Dassault Systèmes SolidWorks Corp) Hidden
SolidWorks Electrical 2014 SP02 x64 Edition (Version: 22.20.40 - DS SolidWorks) Hidden
SolidWorks Explorer 2014 SP02 x64 Edition (Version: 22.20.40 - SolidWorks Corporation) Hidden
SolidWorks Flow Simulation 2014 SP02 x64 Edition  (Version: 22.20.41 - SolidWorks Corporation) Hidden
SolidWorks Plastics 2014 SP02 x64 Edition (Version: 22.20.40 - SolidWorks Corporation) Hidden
SolutionCenter (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Sound Blaster X-Fi (HKLM-x32\...\{20288888-A7AF-4B24-8AEB-398D20CD563C}) (Version: 1.0 - Creative Technology Limited)
SQL Server 2012 Common Files (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Shared (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
SQL Server Browser for SQL Server 2012 (HKLM-x32\...\{4B9E6EB0-0EED-4E74-9479-F982C3254F71}) (Version: 11.0.2100.60 - Microsoft Corporation)
Sql Server Customer Experience Improvement Program (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
Status (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Super nude patch 3 1.3.1 (HKLM-x32\...\Super_nude_patch_II_1.0) (Version: 1.3.1 - Pandora sims)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36244 - TeamViewer)
TEC-IT Barcode Studio 15.2 (HKLM-x32\...\{5405E928-1D1A-4D62-ACE9-20F61FAD3A94}) (Version: 15.2.0.20607 - TEC-IT Datenverarbeitung GmbH)
Terragen 3 (HKLM\...\{7548F59C-9448-4B2C-B001-BD23DFD7E71C}) (Version: 3.1.02 - Planetside Software)
ThinkingParticles 4.0 for 2011 (HKLM\...\{B688D716-6A1A-47F7-9734-11A24071909A}) (Version: 4.0.14 - cebas VISUAL TECHNOLOGY Inc.)
THX TruStudio Pro (HKLM-x32\...\{4FA6CB9A-2972-4AAF-A36E-3C40FCC22395}) (Version: 1.04.03 - Creative Technology Limited)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TOOYA PRO (HKLM\...\RmTablet) (Version: 5.02 - )
TopStyle Lite (Version 3) (HKLM-x32\...\TopStyle Lite (Version 3.0)) (Version:  - )
TopStyle Lite (Version 3) (HKLM-x32\...\TSLite3_is1) (Version:  - )
TransMagic R10 sp1 (HKLM-x32\...\{C642EB55-792F-4E94-89DA-43761DE6EC30}) (Version: 10.10.0000 - TransMagic, Inc.)
Trapcode Suite v12.1.5 (HKLM-x32\...\{DFD2DC6B-C634-4C1C-81CC-5EF852E71CEE}_is1) (Version: 12.1.5 - Red Giant, LLC)
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Unity Web Player (HKU\S-1-5-21-1936681689-1213862276-560942907-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Universal Extractor 1.6.1 (HKLM-x32\...\Universal Extractor_is1) (Version: 1.6.1 - Jared Breland)
Universe (HKLM\...\Universe_is1) (Version: 1.2.0 CE - Red Giant, LLC)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VRay Architectural Materials Volume 1 (HKLM-x32\...\{CC0318CA-3A90-48F7-9CF3-063B4A679C82}) (Version: 1.00.0000 - )
V-Ray for 3dsmax 2013 for x64 (HKLM\...\V-Ray for 3dsmax 2013 for x64) (Version: 2.30.01 - Chaos Software Ltd)
V-Ray for 3dsmax 2014 for x64 (HKLM\...\V-Ray for 3dsmax 2014 for x64) (Version: 2.40.04 - Chaos Software Ltd)
VRay Material Presets Pro GFXdomain (HKLM\...\{A2EB212D-3A81-48F0-94DF-E4B391A305D2}) (Version: 2.5.10 - SIGER STUDIO)
V-Ray Presets Pro GFXDomain.net 2.6.3 (HKLM-x32\...\V-Ray Presets Pro GFXDomain.net 2.6.3) (Version: 2.6.3 - Siger Studio)
V-Ray Studio Setup Pro 2.01 (HKLM-x32\...\V-Ray Studio Setup Pro 2.01) (Version: 2.01 - GFXdomain.net)
VRayMtl Converter v2.5 (HKLM-x32\...\VRayMtl Converter) (Version: v2.5 - 3DZver)
VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.0.0.43 - VSO-Software SARL)
VTP Software 1.52 (2013.06.14) (HKLM-x32\...\VTP Software_is1) (Version:  - Virtual Terrain Project)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.00a of 2009-Dec-03 (Build 129) (Setup) - WIBU-SYSTEMS AG)
Windows Driver Package - Realtek (RTL8167) Net  (11/11/2010 7.032.1111.2010) (HKLM\...\9C03382DA88E74C8AA1D507ED3CCDC1B9A6C22E1) (Version: 11/11/2010 7.032.1111.2010 - Realtek)
Wings 3D 1.5.3 (HKLM-x32\...\Wings 3D 1.5.3) (Version:  - )
WinRAR 4.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
YTD Video Downloader 4.8.3 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.3 - GreenTree Applications SRL) <==== ATTENTION
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2013\addflow4.ocx (Lassalle Technologies)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{9CF1512B-6019-4573-9466-57AA61960209}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2013\en-US\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1936681689-1213862276-560942907-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\David\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
 
==================== Restore Points  =========================
 
23-01-2015 11:01:23 Installed TransMagic R10 sp1.
25-01-2015 22:16:37 Installed Terragen 3
26-01-2015 09:03:47 avast! antivirus system restore point
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:34 - 2014-12-20 21:07 - 00002310 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1                  activate.adobe.com
127.0.0.1                   practivate.adobe.com
127.0.0.1                   lmlicenses.wip4.adobe.com
127.0.0.1                   lm.licenses.adobe.com
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 t3dns.adobe.com
127.0.0.1 3dns-1.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-4.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 activate.wip.adobe.com
127.0.0.1 activate.wip1.adobe.com
127.0.0.1 activate.wip2.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 activate.wip4.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-1.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 adobe-dns-4.adobe.com
127.0.0.1 ood.opsource.net
127.0.0.1 practivate.adobe
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 ereg.wip.adobe.com
127.0.0.1 ereg.wip1.adobe.com
 
There are 14 more lines.
 
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {02CFF3A9-BC70-47B2-8817-4C1E06C6172E} - System32\Tasks\{4BF06E47-B39A-429C-B0D1-0B6CBD664A67} => C:\Program Files (x86)\Symantec\Norton PartitionMagic 8.0\PMagic.exe
Task: {0441BC26-F174-479C-97AB-75B0B8067775} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-10] (Google Inc.)
Task: {0520F74A-E900-41FE-83F1-DAAF9CBCBC15} - System32\Tasks\{A7F6B0E3-CD9F-4765-9D2E-28C010730FB5} => C:\Users\David\Desktop\PDFCrack\pdfcrack.exe
Task: {0B8F4F0B-65CE-4769-8DCD-8D6873B228FF} - System32\Tasks\Core Temp Autostart David => C:\Users\David\Desktop\CoreTemp64\Core Temp.exe [2013-10-08] ()
Task: {0EDA9C01-F4D3-42F8-83EA-00EF92CE0E89} - System32\Tasks\IHUninstallTrackingTASK => CMD
Task: {12C8E5BC-4B2E-4309-95F2-8E1CFDC30B3D} - System32\Tasks\{1BBD983B-2BA1-49A3-B1B6-E4D2C69E4B68} => C:\Users\David\Desktop\BBCast\cp32d45.exe
Task: {16E44841-8A6F-4C31-9BFA-4F61DCB75B33} - System32\Tasks\{A1EAAB9A-CF8B-40CD-90B6-3208E2B08051} => C:\Users\David\Desktop\RCT fireworks\RCT3 Options Editor &amp; Peep Factory\RCT3 Options Editor\setup.exe
Task: {1C2AFACF-79E9-4B5A-A80B-32AE0809396E} - System32\Tasks\AdobeAAMUpdater-1.0-BEAST-David => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21] (Adobe Systems Incorporated)
Task: {1D3C50C2-09CD-4ACF-B9B2-8E01FEB0E539} - System32\Tasks\{B05FF0CD-FA53-4EAD-B340-783CD8CB3A31} => C:\Program Files\WinRAR\WinRAR.exe [2011-03-02] ()
Task: {1D803C16-688A-45F5-A319-3341DB62D00A} - System32\Tasks\{473F63A6-C08A-427A-959C-18D98185B3BF} => C:\Users\David\Desktop\BBCast\cp32d45.exe
Task: {2B122CF9-AA03-47AD-890B-AAD607BE5909} - System32\Tasks\{853A73FD-B694-47E2-BC1F-8A6A622FC69D} => C:\Program Files (x86)\Clean Ram\cleanram.exe
Task: {2C5BC25A-6480-4A95-AC64-693715C08A5F} - System32\Tasks\{C4D0E07F-8008-4539-ACD2-E53A02860434} => C:\Users\David\AppData\Roaming\uTorrent\uTorrent.exe [2015-01-21] (BitTorrent Inc.)
Task: {39E01866-12A1-4586-97D7-D4E668806744} - System32\Tasks\{ADC69AE6-6FDA-49C5-A00F-65F57273D4DD} => C:\Program Files\Next Limit\RealFlow 2013\RealFlow.exe [2013-10-15] ()
Task: {4326CF53-E6FF-4C65-8579-56239A767070} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-13] (Microsoft Corporation)
Task: {443E472C-C7BB-4B48-9D5E-6852B5A93794} - System32\Tasks\{20706411-66A4-4D78-8C8D-416FF200F138} => pcalua.exe -a C:\Users\David\Downloads\SITNI_SATI_FUMEFX_V2.1A_FOR_3DS_MAX_2011-XFORCE\ffx21ar2011\FumeFX21R2011\Disk1\Setup.exe -d C:\Users\David\Downloads\SITNI_SATI_FUMEFX_V2.1A_FOR_3DS_MAX_2011-XFORCE\ffx21ar2011\FumeFX21R2011\Disk1
Task: {4C01D9DF-F650-4949-AF7F-F7410CE56E0C} - System32\Tasks\{4C0CEC73-57D4-435C-93F0-2B358FD50C33} => C:\Program Files\SAP\SAP Visual Enterprise Author 7.1\VEAuthor.exe [2014-05-21] (SAP AG)
Task: {4EF7455C-24E7-4955-A1E8-632531FA7739} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {4F8D0C94-2A91-49DD-8173-147DDED150D1} - System32\Tasks\{05E20C34-BE84-44A3-8981-938DE0FABA6F} => C:\Program Files (x86)\VSO\ConvertX\5\ConvertXtoDvd.exe [2013-02-22] (VSO Software SARL)
Task: {4FE94309-5039-4A7B-817C-26DF217B8903} - System32\Tasks\{B5B4C8BF-96FA-478F-8102-A728D5384288} => pcalua.exe -a "C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3\Style\Themed\Uninstal.exe"
Task: {5003D92B-8328-4502-BF25-94ECEFADFF1C} - System32\Tasks\{DE431024-8D16-4977-A8B9-D694A8BE467A} => C:\Program Files (x86)\VSO\ConvertX\5\ConvertXtoDvd.exe [2013-02-22] (VSO Software SARL)
Task: {53201164-CF43-438B-A705-DD07BC539B06} - System32\Tasks\Red Giant Link => C:\Program Files (x86)\Red Giant Link\Red Giant Link.exe [2014-09-04] ()
Task: {731046B5-14CF-41A3-B6AA-77933A212923} - System32\Tasks\Opera scheduled Autoupdate 1401996322 => C:\Program Files (x86)\Opera\launcher.exe [2014-12-17] (Opera Software)
Task: {7425E328-4E55-4593-A1CC-C6F52A20A8CF} - System32\Tasks\{CC8761E8-FFF0-45B7-813F-74A0EF73952A} => C:\Program Files (x86)\MasqueGames\lobby.exe
Task: {74752E99-77DD-49C8-AA30-1CE397D73D16} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-10] (Google Inc.)
Task: {7A7E33F6-95FD-43B4-88AA-429147A16FCC} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1936681689-1213862276-560942907-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {88A95171-F624-4F43-A0DA-4060141F327C} - System32\Tasks\{F8F6B434-BAC3-4774-908B-86EAA92E9999} => C:\Program Files (x86)\Logitech\Video\Launcher.exe
Task: {88C98370-74E5-4547-AAAC-69245B712033} - System32\Tasks\{A11717EF-72A5-46FD-B7AF-3B8950BAC7C7} => C:\Users\David\Desktop\RCT fireworks\RCT3 Options Editor &amp; Peep Factory\RCT3 Options Editor\setup.exe
Task: {9173135D-1874-47F3-9DC1-7373D5C868A0} - System32\Tasks\{7593CD6A-1CFE-4230-8879-0D80B4AE5C49} => C:\Users\David\Desktop\BBCast\cp32d45.exe
Task: {9F7BA524-E3EB-46CF-87B7-CED5648B3EB9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-25] (Adobe Systems Incorporated)
Task: {A8EBB1D0-557A-49EB-A146-7B6DA34DF365} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AA34373C-A3BA-46DE-8CCA-E9C549ED8B96} - System32\Tasks\RunAsStdUser Task => C:\Users\David\AppData\Local\Oxy\Application\oxy.exe <==== ATTENTION
Task: {AFF5F1AF-DF38-47C9-869F-889E4278298F} - System32\Tasks\IHSelfDeleteTASK => CMD
Task: {B847F8B8-D1B5-45D3-90A8-725C16EF1A15} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1936681689-1213862276-560942907-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {C8D66D3B-65EC-4B08-B892-F85BE8074C6D} - System32\Tasks\{FFBFBDF4-DFF6-45BD-BFDD-13E6FD94AE74} => pcalua.exe -a "C:\Windows\Super nude patch 3\uninstall.exe" -c "/U:C:\Users\David\Documents\Electronic Arts\The Sims 3\irunin.xml"
Task: {C977B3DC-600E-4B7B-ADB8-7823AC635025} - System32\Tasks\{A9122519-D9A3-4261-B347-BFCB9CEDFBB4} => C:\Users\David\Desktop\BBCast\cp32d45.exe
Task: {D12172BC-60DD-404D-9154-B8E99B28F785} - System32\Tasks\RtlNetworkGenieVistaStart => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe [2012-01-05] (Realtek Semiconductor)
Task: {D19B7EC1-3155-44AC-BBE0-D4E9B69D6304} - \AutoKMS No Task File <==== ATTENTION
Task: {D1A16D60-CBC2-409D-B7E4-3EC4AD1DF08B} - System32\Tasks\{836724F0-69AE-43F8-B63F-84843975FE0A} => C:\Users\David\Desktop\BBCast\cp32d45.exe
Task: {DDA84969-654F-4719-8765-A4FF78C6341B} - System32\Tasks\{1037D1ED-06F9-4DB2-8766-956CEB499397} => C:\Users\David\Desktop\PDFCrack\pdfcrack.exe
Task: {EBBAEFDD-3D72-4744-9625-D09004C4AB59} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-01-26] (AVAST Software)
Task: {EF06C497-C8A5-4DB3-B46C-916A2D3BA2D1} - System32\Tasks\{E37035DD-80F0-4D5A-BAB9-05963B8864A4} => pcalua.exe -a C:\Users\David\Downloads\Privacy_Safeguard-BitTorrent-b\Privacy_Safeguard.exe -d C:\Users\David\Downloads\Privacy_Safeguard-BitTorrent-b
Task: {F0C9111D-B1F5-4D3D-95BE-0E40070FE9D7} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2014-12-12] ()
Task: {F488B540-F031-4BE1-ABC5-80119B59A1C3} - System32\Tasks\{FE72E56E-228B-4EE2-8E1B-906D2AAC6435} => C:\Users\David\Desktop\PDFCrack\pdfcrack.exe
Task: {FB91C1C0-1E54-4979-8EF7-DCF251DF84AD} - \EPUpdater No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
 
==================== Loaded Modules (whitelisted) =============
 
2012-11-09 20:04 - 2014-11-12 16:56 - 00118080 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-01-30 01:40 - 2010-01-30 01:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-03-24 20:38 - 2010-03-24 20:38 - 08794976 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2010-01-02 09:42 - 2010-01-02 09:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-11-09 22:20 - 2011-03-02 11:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2014-11-23 01:24 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2013-04-02 10:53 - 2014-05-15 11:20 - 00068098 ____R () C:\Program Files (x86)\AFLICS\AfterFLICS.exe
2014-05-07 14:42 - 2013-10-08 12:23 - 00890016 _____ () C:\Users\David\Desktop\CoreTemp64\Core Temp.exe
2012-11-09 18:52 - 2010-05-04 10:00 - 00237056 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-09-24 10:02 - 2012-09-10 12:54 - 03593728 _____ () C:\Windows\System32\AtwtusbIcon.exe
2014-05-07 14:45 - 2014-05-07 14:45 - 00006144 _____ () C:\Users\David\AppData\Local\Microsoft\Windows Sidebar\Gadgets\CoreTempGadget2.7.gadget\CoreTempReader.dll
2014-05-07 14:45 - 2014-05-07 14:45 - 00008704 _____ () C:\Users\David\AppData\Local\Microsoft\Windows Sidebar\Gadgets\CoreTempGadget2.7.gadget\GetCoreTempInfoNET.dll
2014-05-07 14:45 - 2014-05-07 14:45 - 00007680 _____ () C:\Users\David\AppData\Local\Microsoft\Windows Sidebar\Gadgets\CoreTempGadget2.7.gadget\SystemInfo.dll
2014-01-11 20:06 - 2014-01-11 20:06 - 00276008 _____ () C:\Program Files\SolidWorks Corp\SolidWorks\sldBodyDiffu.dll
2015-01-24 19:19 - 2015-01-24 19:19 - 01372672 _____ () C:\ProgramData\{8737b8ee-33f6-b08b-8737-7b8ee33fe3b8}\as-speedway_ufonts.com.exe
2012-11-12 22:52 - 2007-10-24 15:43 - 00139268 _____ () C:\Program Files (x86)\DCPFLICS\DCPFLICS.exe
2007-11-20 11:52 - 2007-11-20 11:52 - 00045700 _____ () C:\Program Files (x86)\cebas\ip-clamp\ipclamp.exe
2010-03-10 01:38 - 2010-03-10 01:38 - 00086016 _____ () C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
2011-09-14 17:19 - 2011-09-14 17:19 - 00086016 _____ () C:\Program Files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_64server.exe
2011-09-14 23:19 - 2011-09-14 23:19 - 00086016 _____ () C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
2012-11-09 19:10 - 2009-07-02 09:02 - 00244904 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2012-12-18 14:25 - 2012-09-11 23:14 - 00390672 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2013-09-24 10:02 - 2012-11-22 13:59 - 00581632 _____ () C:\Windows\system32\atwtusb.exe
2015-01-26 08:46 - 2015-01-26 08:46 - 02913280 _____ () C:\Program Files\AVAST Software\Avast\defs\15012600\algo.dll
2015-01-26 12:05 - 2015-01-26 12:05 - 02913280 _____ () C:\Program Files\AVAST Software\Avast\defs\15012601\algo.dll
2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-20 20:04 - 2012-12-05 12:36 - 00148992 _____ () C:\Program Files (x86)\MSI\NetworkGenie\gep.dll
2014-10-21 19:22 - 2014-10-21 19:22 - 00750080 _____ () C:\Users\David\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-01-26 09:10 - 2015-01-26 09:10 - 00043008 _____ () c:\users\david\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaa0ci_.dll
2014-10-21 19:22 - 2014-10-21 19:22 - 00047616 _____ () C:\Users\David\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-21 19:22 - 2014-10-21 19:22 - 00863744 _____ () C:\Users\David\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-21 19:22 - 2014-10-21 19:22 - 00200704 _____ () C:\Users\David\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2012-11-09 18:52 - 2009-12-29 15:50 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2012-11-09 18:52 - 2010-05-04 09:59 - 00182272 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2009-12-15 13:46 - 2009-12-15 13:46 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-12-15 13:49 - 2009-12-15 13:49 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2015-01-26 09:05 - 2015-01-26 09:05 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-07-07 19:33 - 2010-07-07 19:33 - 00002560 _____ () C:\Windows\SysWOW64\CTXFIRES.DLL
2010-01-30 01:41 - 2010-01-30 01:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-03-24 20:17 - 2010-03-24 20:17 - 08794464 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2014-12-04 16:07 - 2014-11-06 10:39 - 00054784 _____ () C:\Program Files (x86)\Bigasoft\Video Downloader Pro\record\screen-capture-recorder.dll
2013-08-07 14:25 - 2013-08-07 14:25 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-01-22 15:14 - 2015-01-20 22:50 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.91\pdf.dll
2015-01-22 15:14 - 2015-01-20 22:50 - 14913352 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.91\PepperFlash\pepflashplayer.dll
2014-04-28 23:05 - 2014-02-10 12:44 - 04592128 _____ () C:\Users\David\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2014-04-28 23:05 - 2014-02-10 12:44 - 00112128 _____ () C:\Users\David\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
AlternateDataStreams: C:\ProgramData\Temp:A1EDB939
AlternateDataStreams: C:\Users\David\Local Settings:VICWiQJgbE78FYWv7fK5aVY6zufhs
AlternateDataStreams: C:\Users\David\AppData\Local:VICWiQJgbE78FYWv7fK5aVY6zufhs
AlternateDataStreams: C:\Users\David\AppData\Local\Application Data:VICWiQJgbE78FYWv7fK5aVY6zufhs
AlternateDataStreams: C:\Users\David\AppData\Local\Temp:FkAWWf5UuH6RD1AyAN0yY
AlternateDataStreams: C:\Users\David\AppData\Local\Temp:U57zu6hoVlbUoaeEuHgsYvzIFh2Zu
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
 
========================= Accounts: ==========================
 
Administrator (S-1-5-21-1936681689-1213862276-560942907-500 - Administrator - Disabled)
David (S-1-5-21-1936681689-1213862276-560942907-1000 - Administrator - Enabled) => C:\Users\David
Guest (S-1-5-21-1936681689-1213862276-560942907-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1936681689-1213862276-560942907-1002 - Limited - Enabled)
 
==================== Faulty Device Manager Devices =============
 
Name: Photosmart C4700 series
Description: Photosmart C4700 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
Name: Sentinel64
Description: Sentinel64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: Sentinel64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (01/26/2015 05:00:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: tgd.exe, version: 3.1.2.0, time stamp: 0x5302b9ae
Faulting module name: MSVCR100.dll, version: 10.0.40219.332, time stamp: 0x4e1a9633
Exception code: 0x40000015
Fault offset: 0x00000000000761c9
Faulting process id: 0x1dc4
Faulting application start time: 0xtgd.exe0
Faulting application path: tgd.exe1
Faulting module path: tgd.exe2
Report Id: tgd.exe3
 
Error: (01/26/2015 03:02:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program 3dsmax.exe version 16.0.420.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 1878
 
Start Time: 01d039a142b91b6c
 
Termination Time: 108
 
Application Path: C:\Program Files\Autodesk\3ds Max 2014\3dsmax.exe
 
Report Id: 3c74e9ba-a596-11e4-9583-1078d2d41118
 
Error: (01/26/2015 02:50:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WSCommCntr4.exe, version: 4.0.3.0, time stamp: 0x50dcb523
Faulting module name: WSCommCntr4.exe, version: 4.0.3.0, time stamp: 0x50dcb523
Exception code: 0xc0000005
Fault offset: 0x0000000000016490
Faulting process id: 0x13dc
Faulting application start time: 0xWSCommCntr4.exe0
Faulting application path: WSCommCntr4.exe1
Faulting module path: WSCommCntr4.exe2
Report Id: WSCommCntr4.exe3
 
Error: (01/26/2015 02:49:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program 3dsmax.exe version 16.0.420.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 1ab4
 
Start Time: 01d0399aeb490b14
 
Termination Time: 81
 
Application Path: C:\Program Files\Autodesk\3ds Max 2014\3dsmax.exe
 
Report Id: 741c2cc2-a594-11e4-9583-1078d2d41118
 
Error: (01/26/2015 02:09:49 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 2620.  Message ID: [0x2509].
 
Error: (01/26/2015 02:03:35 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 7668.  Message ID: [0x2509].
 
Error: (01/26/2015 01:58:27 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 7320.  Message ID: [0x2509].
 
Error: (01/26/2015 01:52:33 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 8028.  Message ID: [0x2509].
 
Error: (01/26/2015 09:10:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (01/26/2015 00:38:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
System errors:
=============
Error: (01/26/2015 09:11:54 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 107.
 
Error: (01/26/2015 09:11:54 AM) (Source: Schannel) (EventID: 4106) (User: NT AUTHORITY)
Description: An SSL 3.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.
 
Error: (01/26/2015 09:11:54 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 107.
 
Error: (01/26/2015 09:11:54 AM) (Source: Schannel) (EventID: 4106) (User: NT AUTHORITY)
Description: An SSL 3.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.
 
Error: (01/26/2015 09:11:45 AM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unexpected failure. Error code: D@01010004
 
Error: (01/26/2015 09:11:44 AM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unexpected failure. Error code: D@01010004
 
Error: (01/26/2015 09:11:44 AM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unexpected failure. Error code: D@01010004
 
Error: (01/26/2015 09:11:43 AM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unexpected failure. Error code: D@01010004
 
Error: (01/26/2015 09:11:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The HP Network Devices Support service failed to start due to the following error: 
%%1053
 
Error: (01/26/2015 09:11:28 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the HP Network Devices Support service to connect.
 
 
Microsoft Office Sessions:
=========================
Error: (01/26/2015 05:00:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: tgd.exe3.1.2.05302b9aeMSVCR100.dll10.0.40219.3324e1a96334000001500000000000761c91dc401d039aee8e6f671C:\Program Files\Planetside Software\Terragen 3\tgd.exeC:\Windows\system32\MSVCR100.dllca371b64-a5a6-11e4-9583-1078d2d41118
 
Error: (01/26/2015 03:02:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: 3dsmax.exe16.0.420.0187801d039a142b91b6c108C:\Program Files\Autodesk\3ds Max 2014\3dsmax.exe3c74e9ba-a596-11e4-9583-1078d2d41118
 
Error: (01/26/2015 02:50:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WSCommCntr4.exe4.0.3.050dcb523WSCommCntr4.exe4.0.3.050dcb523c0000005000000000001649013dc01d0399ba22a33edC:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exeC:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe882c8c67-a594-11e4-9583-1078d2d41118
 
Error: (01/26/2015 02:49:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: 3dsmax.exe16.0.420.01ab401d0399aeb490b1481C:\Program Files\Autodesk\3ds Max 2014\3dsmax.exe741c2cc2-a594-11e4-9583-1078d2d41118
 
Error: (01/26/2015 02:09:49 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 2620.  Message ID: [0x2509].
 
Error: (01/26/2015 02:03:35 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 7668.  Message ID: [0x2509].
 
Error: (01/26/2015 01:58:27 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 7320.  Message ID: [0x2509].
 
Error: (01/26/2015 01:52:33 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.17929 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 8028.  Message ID: [0x2509].
 
Error: (01/26/2015 09:10:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (01/26/2015 00:38:59 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i7-2600K CPU @ 3.40GHz
Percentage of memory in use: 29%
Total physical RAM: 16339.27 MB
Available physical RAM: 11481.59 MB
Total Pagefile: 32676.72 MB
Available Pagefile: 28417 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:1397.17 GB) (Free:130.31 GB) NTFS
Drive f: () (Fixed) (Total:74.44 GB) (Free:8.87 GB) NTFS
Drive j: (Elements) (Fixed) (Total:465.76 GB) (Free:49.6 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 74.5 GB) (Disk ID: 5EB5CEDE)
 
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: BC85B3E3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1397.2 GB) - (Type=07 NTFS)
 
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: 41AB2316)
Partition 1: (Active) - (Size=74.4 GB) - (Type=07 NTFS)
 
========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 0002A769)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================

 



BC AdBot (Login to Remove)

 


m

#2 Rootk

Rootk

  • Malware Response Team
  • 234 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Easter Island, Chile.
  • Local time:07:24 AM

Posted 27 January 2015 - 01:38 PM

Hi. I'm checking your log now and will reply with instructions soon.

#3 shoreboy31

shoreboy31
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:05:24 AM

Posted 28 January 2015 - 10:40 AM

thanks :)



#4 Rootk

Rootk

  • Malware Response Team
  • 234 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Easter Island, Chile.
  • Local time:07:24 AM

Posted 29 January 2015 - 10:53 AM

There is evidence of cracked/pirated software on your computer. If you still need help, you will have to remove all traces of pirated software.

#5 Rootk

Rootk

  • Malware Response Team
  • 234 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Easter Island, Chile.
  • Local time:07:24 AM

Posted 06 April 2015 - 07:05 PM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users